Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#272212 by Tim Atem Fri Oct 23, 2015 6:55 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 154.120.100.185
Originating ISP: Spectranet Ltd
City: Lagos
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.107.39.129 with SMTP id n123csp1180157ion;
Fri, 23 Oct 2015 03:14:20 -0700 (PDT)
X-Received: by 10.112.132.74 with SMTP id os10mr10976599lbb.40.1445595260791;
Fri, 23 Oct 2015 03:14:20 -0700 (PDT)
Return-Path: <[email protected]>
Received: from srv001.stelmax.net (zaharchenko.tsua.net. [212.40.39.94])
by mx.google.com with ESMTPS id o124si12242668lfe.94.2015.10.23.03.14.20
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Fri, 23 Oct 2015 03:14:20 -0700 (PDT)
Received-SPF: neutral (google.com: 212.40.39.94 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=212.40.39.94;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 212.40.39.94 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=yahoo.ca
Received: from movielin by srv001.stelmax.net with local (Exim 4.84)
(envelope-from <[email protected]>)
id 1ZpZMX-00064X-SM
for <snipped>; Fri, 23 Oct 2015 13:14:18 +0300
To: <snipped>
Subject: The first $5000.00 was sent today Mtcn# 0716797753
X-PHP-Script: movielink.ml/templates/beez3/mailerxd.php for 154.120.100.185
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: Mr Anna Simth (IMF) <[email protected]>
Message-Id: <[email protected]>
Date: Fri, 23 Oct 2015 13:14:17 +0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - srv001.stelmax.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [585 32007] / [47 12]
X-AntiAbuse: Sender Address Domain - srv001.stelmax.net
X-Get-Message-Sender-Via: srv001.stelmax.net: authenticated_id: movielin/only user confirmed/virtual account not confirmed
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/movielin/public_html/templates/beez3/mailerxd.php
X-Source-Dir: movielink.tk:/public_html/templates/beez3


Attention: Dear Beneficiary,

We have deposited the
check of your fund ($1.500,000,00 USD) through Western
Union department after
our finally meeting regarding your fund, All you will do
is to contact Western
Union director Mr Collins Umah, He will give you direction on
how you will be
receiving the funds daily.Remember to send him your Full
information to avoid
wrong transfer such as,

Receiver's Name____
Address: ___
Country:
______
Phone Number: ____

Contact him with this information below:
E-mail
address: [email protected]
Telephone Number: +2348184148468

Though, Mr
Collins Umah has sent $5000 today for you below is the Mtcn, you can also
track
it on-line
Website;
https://wumt.westernunion.com/asp/order ... country=NG
Sender's name:
Clarence Corass
Amount Sent $5,000
Mtcn# 0716797753

Re-confirm your
information's to enable us activate the $5,000 MTCN in your name
call him as
soon as you receive this email and forward your information
immediately,to
enable us activate the payment in your name and send the
question/answer to
pick the $5000 Please let us know as soon as you received all
your fund

you
are to pay activation fee $75 dollar only ask Mr Collins how to make the
payment.

Best Regards.
Mr Anna Simth (IMF)
International Monetary Fund

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

Who is online

Users browsing this forum: Google Adsense [Bot] and 191 guests