Did you get my previous email of your Thirty million dollars inheritance funds

Email analysis :

NOTE : barr.chambers@yahoo.ie
NOTE : ychreim@ul.edu.lb

NOTE : Received : from MBOX2.ul.edu.lb ([fe80::c9fd:276c:6116:a018])
NOTE : by MBOX2.ul.edu.lb ([fe80::c9fd:276c:6116:a018%21]) with mapi id 15.00.1210.000;
NOTE : Received : from MBOX2.ul.edu.lb (192.168.1.214)
NOTE : by mbox1.ul.edu.lb (192.168.1.213) with Microsoft SMTP Server (TLS) id 15.0.1210.3;
NOTE : Received : from smg1.ul.edu.lb (smg1.ul.edu.lb. [77.42.251.25])

NOTE : X-Originating-Ip : [41.56.106.125]

Conclusion

The ul.edu.lb server was used to relay this scam. Account : ychreim

http://ift.tt/2jU8EBe

Advertisements