Sent: Monday, October 27, 2014 at 9:12 AM
From: "JEFFREY WILLIAMS" <[email protected]>
To: No recipient address
Subject: PICK UP YOUR PAYMENT $5000.00 USD AT WESTERN UNION...
ATTENTION:
THIS OFFICE HAVE BEEN WAITING TO HEAR FROM YOU REGARDING YOUR COMPENSATION PAYMENT OF $2,500.000.00 MILLION US DOLLARS FROM MINISTRY OF FINANCE BENIN. WE HAVE WAITED FOR YOUR TELEPHONE CALL OR E-MAIL FOR THE PAYMENT, SO WE DECIDED TO CONTACT YOU ABOUT THIS GOOD NEWS. WE ALSO FIND OUT THAT THE $290.00 BEING THE TRANSFER CLEARANCE CHARGES OF THE FIRST PAYMENT OF $10,000.00 USD IS TOO HIGH FOR YOU TO AFFORD WE DECIDED TO SPLIT THE FIRST PAYMENT INTO TWO {2} WHICH IS $5,000.00 DAILY SO THAT THE TRANSFER CLEARANCE CHARGES WILL BE LESSER FOR YOU TO PAY WHICH IS $145.00 INSTEAD OF $290.00 US DOLLARS.
YOU ARE REQUIRED TO SEND US THE HALF FEE $145.00 TO ENABLE US RELEASE THE FIRST PAYMENT OF $5,000 TO YOU IMMEDIATELY AS WE HAVE ALREADY PROGRAMMED THE FIRST PAYMENT TODAY AND HERE IS THE (MONEY TRANSFER CONTROL NUMBER MTCN#: 6368406063) BUT IT WILL REMAIN ON HOLD UNTIL YOU SEND US THE TRANSFER CLEARANCE CHARGES $145.00 BEFORE WE CAN RELEASE IT TO YOU.PLEASE CHECK THE WESTERN UNION WEBSITE: WWW.WESTERNUNION.COM AND CALL MY DIRECT PHONE NUMBER: +229-9790-8629, OR E-MAIL:( [email protected] ) FOR MORE INFORMATION AND YOU SHOULD TO STOP ANY FURTHER COMMUNICATION WITH ANY OTHER PERSON (S) OR OFFICE (S) TO AVOID ANY HITCHES IN RECEIVING YOUR PAYMENT.KINDLY,E-MAIL US YOUR DIRECT CONTACT TELEPHONE NUMBER FOR EASY COMMUNICATION.
FOR YOUR CONVENIENCE CHECK YOUR FIRST TRANSFER ONLINE AT WWW.WESTERNUNION.COM CLICKS TRACKING AND FILL THE BELOW INFORMATION ON THE SPACE PROVIDED AT WESTERN UNION WEBSITE.
www.westernunion.com
Sender's First Name: DALE
Sender's Last Name: BUGGINS
Tracking number (MTCN: 6368406063)
AMOUNT SENT $5000.00 USD
KINDLY, RECONFIRM THE FOLLOWING DATA BELOW FOR YOUR PAYMENT FILE AND CONTACT US THROUGH THIS PHONE NUMBER (+229-9790-8629) OR EMAIL: { [email protected] } FOR ANY ASSISTANCE.
YOUR FULL NAME:_________________
YOUR HOME ADDRESS:_______________
YOUR HOME /OFFICE PHONE#:____________
YOUR CELL PHONE#:_______________
YOUR COUNTRY_________________
ATTACH COPY OF YOUR ID.
UPON YOUR RESPOND WE WILL GIVE YOU INFORMATION WHERE TO SEND THE TRANSFER CLEARANCE CHARGES WHICH IS $145.00 USD.
WE ARE LOOKING FORWARD TO HEARING BACK FROM YOU SOONEST.
REGARDS,
MR.JEFFREY WILLIAMS
WESTERN UNION COORDINATOR
TELEPHONE NUMBER: +229-9790-8629
Know more. Do more. Get IPInsights
Subscribe to our newsletter and boost your IT I.Q. with
IP news, hot tips, updates and more.
Get yours today!
We'll never share your address. You can opt out any time.
This is a free publication. Please review our Privacy Policy.
Trace EmailTrace Email
Find Email Address Source
In the following steps you'll learn how to find and copy an email header and paste it into the Trace Email Analyzer to get the sender's IP address and track the source.
Would you like to track down (or trace) where an email that you received came from?
This Trace Email tool can help you do precisely that. It works by examining the header that is a part of the emails you receive to find the IP address. If you read the IP Lookup page, you'll get a clear idea of what information an IP address can reveal.
(A header is the unseen part of every sent and received email. To learn a little bit more on headers, click here. You can see an example of a header at the end of this article.)
What email provider do you use?
To find the IP address of a received email you're curious about, open the email and look for the header details. How you find that email's header depends on the email program you use. Do you use Gmail or Yahoo? Hotmail or Outlook?
For example, if you're a Gmail user, here are the steps you'd take:
Open the message you want to view
Click the down arrow next to the "Reply" link
Select "Show Original" to open a new window with the full headers
Note: We are in the process of compiling instructions from a variety of popular webmail services and email applications. In the meantime, if you have a question about your email provider, please post it in the Email Tracing Forum.
STEPS TO TRACING AN EMAIL:
Get instructions for locating a header for your email provider here
Open the email you want to trace and find its header
Copy the header, then paste it into the Trace Email Analyzer below
Press the "Get Source" button
Scroll down below the box for the Trace Email results!
You should know that in some instances people send emails with false or "forged" headers, which are common in spam and unwanted or even malicious e-mail. Our Trace Email tool does not and cannot detect forged e-mail. That's why that person forged the header to begin with!
Trace Email Analyzer
Paste the header you've copied in the box.
Return-Path: [email protected] Received: from nm16-vm9.bullet.mail.sg3.yahoo.com ([106.10.149.72]) by mx-ha.gmx.net (mxgmxus001) with ESMTPS (Nemesis) id 0LonQz-1YK2TU1yqR-00gt9F for <[email protected]>; Mon, 27 Oct 2014 18:12:59 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s2048; t=1414429963; bh=+BOXSkE791XdjgrGGEjRYZyIlHk95mU7jINXexRG200=; h=Date:From:Reply-To:Subject:From:Subject; b=ioLx4ANb5XkOq5WkSqbliu18F+2OFMUEijagHkhmVSTuVcPZY8eysDz+LQoHcYPzGhQrryEnP11xWZIc9P7gentx2Kv5r8kLfONHqdVyppVm4koMWuCqVUDdniUa71CGbsJ1zbyd3QTQDgBFQ4paJCv0/JHfdFiHWG2amSWIQH/LmJGZb6xFevr5DH+UWv3miUfww5fRtlC12JEFmJkty3lGSb1ENi6lArXMB/mQzKs428Ok7ZLzCIQFSW+gyohvwvuMI1hoKnq8b2buLYtIu/hK0CC4z2CuR7VueuqgpuYsGFwjrN4nkqKHkY6NSN2OEGGyj8J1EfsIJO92XQILnA== DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s2048; d=yahoo.dk; b=O6LU/X7DvAzSQ9IxpvVfvmF5v+FdxrLNXJ79f867zf/JuLEs3SLDRA+QTz1a6OJIEledzdRSN9HJF9CQC7umh/i7djB0cei8kVrAx52iRooIh1u4cNLASBU/DFP8emA1J7S/9kxYSTH3lVPxPCV0AkJ1jq8CjTMLxWYpSYTF+PuAW4eFkGSA8JLdr3x69+UpQ/hC7tjqM0HkwQX9e0CJwJX7gAEg03D4+UV7S6PAFOdEZAsMzHvOMfr3BAo9H/axwQIwNJRzBwyBjAOZcb5nurEoGqOQ/NTy0oR+OGoAqZnL3TSa3L4SkEaAa63F8ZmSvZKZ03gzWBxRfzqF6EO+Tw==; Received: from [106.10.166.120] by nm16.bullet.mail.sg3.yahoo.com with NNFMP; 27 Oct 2014 17:12:43 -0000 Received: from [106.10.150.24] by tm9.bullet.mail.sg3.yahoo.com with NNFMP; 27 Oct 2014 17:12:43 -0000 Received: from [127.0.0.1] by omp1025.mail.sg3.yahoo.com with NNFMP; 27 Oct 2014 17:12:43 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: [email protected] X-YMail-OSG: VSJqFfIVM1nuIki_oaQBMgirlJmgsJjmvnQoQJ3MsmR9ItEZLNs78ixwEq8FyER Sgd85HwnMqa0PUrJFjL9zhtj3icoTSqBxasRQiLkURGj_7BF5WYpEWuBlGiSq3kPzw2dMA.lE_AW uv6Ffuoyrjb23D4XKXJDm.GaqUilc5.Z2RijhzGvO0lie92zTlo.L.gqWIF_6.rP6qR8WdhsjJAR W7uQz3uMGglMMKLQ3PNq11Tb9DgJhsVO.3QyIbzx9T3e7pVknvxgktv5rS0ASu382IFKGzc1xpzY jTILe9EGiuR0SlgE.7_hZoQqMSm8kvOdncAy1IV0eQcpRUguRmpnSjE5Zkc1BduDh8R8xOq8deUl wiwl0.hsSSINOKORcrnca0gUeqDJh7b8Ev1ugShB3BL18Jbeg4wr4NcgvOaR_yZjfnrlu6QLrLKJ J_VzN5XkZqz.rWIap7MxmLIT6rpeJPKITeEK9gc3FP5BPTT2oGfh9D9h6d.6VQeDUagTCuAx_.2J PvC1iQI7LDH_LupWiZu.Mjdqo_nkI5b_V8V4FLL163IRT.yGfGk_eZfCQLgZzNwvtkzHpIA-- Received: by 106.10.196.177; Mon, 27 Oct 2014 17:12:42 +0000 Date: Mon, 27 Oct 2014 17:12:41 +0000 (UTC) From: JEFFREY WILLIAMS <[email protected]> Reply-To: JEFFREY WILLIAMS <[email protected]> Message-ID: <74786166.399352.1414429961327.JavaMail.yahoo@jws10955.mail.sg3.yahoo.com> Subject: PICK UP YOUR PAYMENT $5000.00 USD AT WESTERN UNION... MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_399351_2038717052.1414429961320" Content-Length: 8253 Envelope-To: <[email protected]> X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3; X-GMX-Antivirus:
Example of an email header
Return-path: <[email protected]>
Received: from mac.com ([10.13.11.252])
by ms031.mac.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28
2007)) with ESMTP id <[email protected]> for [email protected]; Thu,
09 Aug 2007 04:24:50 -0700 (PDT)
Received: from mail.dsis.net (mail.dsis.net [70.183.59.5])
by mac.com (Xserve/smtpin22/MantshX 4.0) with ESMTP id l79BOnNS000101
for <[email protected]>; Thu, 09 Aug 2007 04:24:49 -0700 (PDT)
Received: from [192.168.2.77] (70.183.59.6) by mail.dsis.net with ESMTP
(EIMS X 3.3.2) for <[email protected]>; Thu, 09 Aug 2007 04:24:49 -0700
Date: Thu, 09 Aug 2007 04:24:57 -0700
From: Frank Sender <[email protected]>
Subject: Test
To: Joe User <[email protected]>
Message-id: <[email protected]>
MIME-version: 1.0 (Apple Message framework v752.2)
X-Mailer: Apple Mail (2.752.2)
Content-type: text/plain; charset=US-ASCII; format=flowed
Content-transfer-encoding: 7bit
Analysis:
Return-Path: [email protected]
Received: from nm16-vm9.bullet.mail.sg3.yahoo.com ([106.10.149.72]) by mx-ha.gmx.net (mxgmxus001) with ESMTPS (Nemesis) id 0LonQz-1YK2TU1yqR-00gt9F for <[email protected]>; Mon, 27 Oct 2014 18:12:59 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.dk; s=s2048; t=1414429963; bh=+BOXSkE791XdjgrGGEjRYZyIlHk95mU7jINXexRG200=; h=Date:From:Reply-To:Subject:From:Subject; b=ioLx4ANb5XkOq5WkSqbliu18F+2OFMUEijagHkhmVSTuVcPZY8eysDz+LQoHcYPzGhQrryEnP11xWZIc9P7gentx2Kv5r8kLfONHqdVyppVm4koMWuCqVUDdniUa71CGbsJ1zbyd3QTQDgBFQ4paJCv0/JHfdFiHWG2amSWIQH/LmJGZb6xFevr5DH+UWv3miUfww5fRtlC12JEFmJkty3lGSb1ENi6lArXMB/mQzKs428Ok7ZLzCIQFSW+gyohvwvuMI1hoKnq8b2buLYtIu/hK0CC4z2CuR7VueuqgpuYsGFwjrN4nkqKHkY6NSN2OEGGyj8J1EfsIJO92XQILnA==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s2048; d=yahoo.dk; b=O6LU/X7DvAzSQ9IxpvVfvmF5v+FdxrLNXJ79f867zf/JuLEs3SLDRA+QTz1a6OJIEledzdRSN9HJF9CQC7umh/i7djB0cei8kVrAx52iRooIh1u4cNLASBU/DFP8emA1J7S/9kxYSTH3lVPxPCV0AkJ1jq8CjTMLxWYpSYTF+PuAW4eFkGSA8JLdr3x69+UpQ/hC7tjqM0HkwQX9e0CJwJX7gAEg03D4+UV7S6PAFOdEZAsMzHvOMfr3BAo9H/axwQIwNJRzBwyBjAOZcb5nurEoGqOQ/NTy0oR+OGoAqZnL3TSa3L4SkEaAa63F8ZmSvZKZ03gzWBxRfzqF6EO+Tw==;
Received: from [106.10.166.120] by nm16.bullet.mail.sg3.yahoo.com with NNFMP; 27 Oct 2014 17:12:43 -0000
Received: from [106.10.150.24] by tm9.bullet.mail.sg3.yahoo.com with NNFMP; 27 Oct 2014 17:12:43 -0000
Received: from [127.0.0.1] by omp1025.mail.sg3.yahoo.com with NNFMP; 27 Oct 2014 17:12:43 -0000
IP address 127.0.0.1 was ignored because it is a Loopback address.
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: VSJqFfIVM1nuIki_oaQBMgirlJmgsJjmvnQoQJ3MsmR9ItEZLNs78ixwEq8FyER Sgd85HwnMqa0PUrJFjL9zhtj3icoTSqBxasRQiLkURGj_7BF5WYpEWuBlGiSq3kPzw2dMA.lE_AW uv6Ffuoyrjb23D4XKXJDm.GaqUilc5.Z2RijhzGvO0lie92zTlo.L.gqWIF_6.rP6qR8WdhsjJAR W7uQz3uMGglMMKLQ3PNq11Tb9DgJhsVO.3QyIbzx9T3e7pVknvxgktv5rS0ASu382IFKGzc1xpzY jTILe9EGiuR0SlgE.7_hZoQqMSm8kvOdncAy1IV0eQcpRUguRmpnSjE5Zkc1BduDh8R8xOq8deUl wiwl0.hsSSINOKORcrnca0gUeqDJh7b8Ev1ugShB3BL18Jbeg4wr4NcgvOaR_yZjfnrlu6QLrLKJ J_VzN5XkZqz.rWIap7MxmLIT6rpeJPKITeEK9gc3FP5BPTT2oGfh9D9h6d.6VQeDUagTCuAx_.2J PvC1iQI7LDH_LupWiZu.Mjdqo_nkI5b_V8V4FLL163IRT.yGfGk_eZfCQLgZzNwvtkzHpIA--
Received: by 106.10.196.177; Mon, 27 Oct 2014 17:12:42 +0000
Date: Mon, 27 Oct 2014 17:12:41 +0000 (UTC)
From: JEFFREY WILLIAMS <[email protected]>
Reply-To: JEFFREY WILLIAMS <[email protected]>
Message-ID: <74786166.399352.1414429961327.JavaMail.yahoo@jws10955.mail.sg3.yahoo.com>
Subject: PICK UP YOUR PAYMENT $5000.00 USD AT WESTERN UNION...
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_399351_2038717052.1414429961320"
Content-Length: 8253
Envelope-To: <[email protected]>
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus:
Source:
The source host name is "omp1025.mail.sg3.yahoo.com" and the source IP address is 106.10.150.24.
Geo-Location Information
Country Singapore
State/Region
City
Latitude 1.3667
Longitude 103.8
