Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#274293 by Tim Atem Tue Nov 10, 2015 7:51 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.86.234.165
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.37.203.13 with SMTP id b13csp1454326ybg;
Mon, 9 Nov 2015 17:04:58 -0800 (PST)
X-Received: by 10.31.49.8 with SMTP id x8mr530588vkx.146.1447117498265;
Mon, 09 Nov 2015 17:04:58 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id 200si513397vki.146.2015.11.09.17.04.45
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 09 Nov 2015 17:04:58 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-02.datacenter.cha.cantv.net (webmail-02.datacenter.cha.cantv.net [200.11.153.85])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tAA14etu020784;
Mon, 9 Nov 2015 20:34:40 -0430
X-Matched-Lists: []
Received: from 41.86.234.165 ([41.86.234.165]) by webmail-02.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Mon, 9 Nov 2015 20:34:40 -0430 (VET)
Date: Mon, 9 Nov 2015 20:34:40 -0430 (VET)
From: i Am Mr Robert Brown <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <439373780.2488251.1447117480582.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>
Subject: HELLO
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [41.86.234.165]


i Am Mr Robert Brown The White House Delivery Agent and I am written to inform you about your Bank Cheque Draft brought by the United Embassy from the government of Benin Republic in the white house Washington DC

The Check Have Been Mandated to be deliver to your address as soon as you get back to me with The Following Details

Home address_____________
Cell phone number_______

Call Or Message Me Once You Read Off My Email +12532154326+12532154326

Thanks For Your Understanding
CallSend SMSCall from mobileAdd to SkypeYou'll need Skype CreditFree via Skype

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
Advertisement

#275974 by Tim Atem Mon Nov 23, 2015 8:37 am
Using the same email address [email protected] and phone number 253-215-4326

ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.86.234.165
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.37.203.13 with SMTP id b13csp1116449ybg;
Sun, 22 Nov 2015 14:45:00 -0800 (PST)
X-Received: by 10.129.53.148 with SMTP id c142mr21290091ywa.138.1448232300785;
Sun, 22 Nov 2015 14:45:00 -0800 (PST)
Return-Path: <[email protected]>
Received: from 10ibl21ser04.datacenter.cha.cantv.net (10ibl21ser04.datacenter.cha.cantv.net. [200.11.173.10])
by mx.google.com with ESMTPS id w200si5839614ywa.159.2015.11.22.14.44.50
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sun, 22 Nov 2015 14:45:00 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) client-ip=200.11.173.10;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.10 as permitted sender) [email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-04 (webmail-04.datacenter.cha.cantv.net [200.11.153.87])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id tAMMijCc021130;
Sun, 22 Nov 2015 18:14:45 -0430
X-Matched-Lists: []
Received: from 41.86.234.165 ([41.86.234.165]) by webmail-04.mgmt.cantv.net (Cantv Webmail) with HTTP; Sun, 22 Nov 2015 18:14:45 -0430 (VET)
Date: Sun, 22 Nov 2015 18:14:45 -0430 (VET)
From: "Mrs. Mary Judith" <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <722155556.1417685.1448232285141.JavaMail.nitido@webmail-04.mgmt.cantv.net>
Subject: Attention Dear customer!!
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.86.234.165]


Attention Dear customer!!

I have registered your ATM CARD of $4.8with DHL Express Courier Company with
registration code of ( DCJKT00678G).
please
Contact with your delivery information such as, Your Name, Your Address ID
CARD COPY and Your Telephone Number DHL Office:
Contact person: Mr. Divine Eze
Email: [email protected]
Phone Number: +12532154326
I have paid for their Security fee & Delivery fee.The only fee you have to
pay is the Insurance of $105 dollars only.
Please
indicate the registration Number and ask Him how much is their Insurance fee
so that you can pay it.
Best Regards,
Mrs. Mary Judith

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5

Who is online

Users browsing this forum: Majestic-12 [Bot] and 189 guests