Susquehanna.jpeg

[size="3"]Susquehanna limited your account
show details 4:52 PM (26 minutes ago)
Header Analysis

Welcome, traveller! You appear to be from United States.

The following IP addresses were extracted from your headers:
IP Address Probable Country Additional Info
66.115.129.70 United States* Whois Google
66.115.129.70 United States* Whois Google
66.115.129.70 United States* Whois Google
66.115.129.70 United States* Whois Google
62.160.98.166 France* Whois Google
71.180.29.57 United States* Whois Google
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Delivered-To: scamfraudalert@gmail.com
Received: by 10.143.159.19 with SMTP id l19cs336295wfo;
Wed, 30 Jan :52: (PST)
Received: by 10.100.251.5 with SMTP id y5mr2961627anh.75.;
Wed, 30 Jan :52: (PST)
Return-Path:
Received: from mail4.national-net.com (mail4.national-net.com [66.115.129.70])
by mx.google.com with ESMTP id a44si2658651rne.12.2008.01.30.16.52.54;
Wed, 30 Jan :52: (PST)
Received-SPF: fail (google.com: domain of accounts@susquehanna.net does not designate 66.115.129.70 as permitted sender) client-ip=66.115.129.70;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of accounts@susquehanna.net does not designate 66.115.129.70 as permitted sender) smtp.mail=accounts@susquehanna.net
Received: from tub-bourg.fr (unknown [62.160.98.166])
by mail4.national-net.com (Postfix) with ESMTP id ABC07ECD3
for ; Wed, 30 Jan :52: (EST)
Received: from User ([71.180.29.57]) by tub-bourg.fr with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 31 Jan :50:03 +0100
Reply-To:
From: "Susquehanna"
Subject: Susquehanna limited your account.
Date: Wed, 30 Jan :52:
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID:
X-OriginalArrivalTime: 31 Jan :50:04.0093 (UTC) FILETIME=[376F76D0:01C863A3]
To: undisclosed-recipients:;

Submit Another Set of Headers or list of IPs

Dear Customer,

Susquehanna has temporarily suspended your account.
Reason: Billing failure.
You are required to complete an account update form so we can unlock your account.

To start the update process click here.

Once you have completed the process, we will send you an email notifying that your
account is available again.
Please allow us 2-3 business days to process your request.
After that you can access your account at any time.

NOTE: If you fail to provide the required information your account will be automatically deleted from the Susquehanna database.
Copyright © 2008 Susquehanna Bancshares, Inc. | Susquehanna Bancshares, Inc. 26 N. Cedar Street Lititz, PA

Susquehanna2.jpeg

Susquehanna Header.jpeg

Header Analysis

Welcome, traveller! You appear to be from United States.

The following IP addresses were extracted from your headers:
IP Address Probable Country Additional Info
69.227.105.253 United States* Whois Google DNSStuff Urgentmessage.org
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:
Delivered-To: scamfraudalert@gmail.com
Received: by 10.150.150.4 with SMTP id x4cs15397ybd;
Sun, 15 Jun 2008 05:13:59 -0700 (PDT)
Received: by 10.151.44.15 with SMTP id w15mr8654656ybj.209.1213532039604;
Sun, 15 Jun 2008 05:13:59 -0700 (PDT)
Return-Path:
Received: from mail.com (adsl-69-227-105-253.dsl.irvnca.pacbell.net [69.227.105.253])
by mx.google.com with SMTP id r28si9721149ele.4.2008.06.15.05.13.46;
Sun, 15 Jun 2008 05:13:59 -0700 (PDT)
Received-SPF: fail (google.com: domain of msgs@susquehanna.net does not designate 69.227.105.253 as permitted sender) client-ip=69.227.105.253;
Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of msgs@susquehanna.net does not designate 69.227.105.253 as permitted sender) smtp.mail=msgs@susquehanna.net
Message-Id: <48550787.1ca97e0a.0a49.ffffdcfaSMTPIN_ADDED@mx.google.com>
From: "Susquehanna Bank"
Subject: one new message
Date: Sun, 15 Jun 2008 05:13:59 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

WhoIs Lookup performed by Karen's WhoIs
KarenWare - Home of Karen's Power Tools

.be Whois Server 4.0

(c) dns.be 2001-2004 http://www.dns.be

The WHOIS service offered by DNS and the access to the records in the DNS

% WHOIS www.arts-antiques.be
Domain: arts-antiques
Status: REGISTERED
Registered: Mon Oct 6 2003

Licensee:
Not shown, please visit www.dns.be for webbased whois.

Agent Technical Contacts:
First Name: Ronny
Last Name: Verley
Company Name: EVONET Belgium nv
Language: nl
Street: Burgemeester Maenhautstraat 44 B
Location: 9820 Merelbeke
Country: BE
Phone: +32.92690451
Fax: +32.92690452
Email: domain-admin@evonet.be

Agent:
Name: EVONET Belgium N.V.
Website: http://www.evonet.be

Nameservers:
ns1.evonet.be
ns2.evonet.be

WhoIs Lookup performed by Karen's WhoIs
KarenWare - Home of Karen's Power Tools

be Whois Server 4.0

(c) dns.be 2001-2004 (http://www.dns.be)

WHOIS evonet
Domain: evonet
Status: REGISTERED
Registered: Fri Jul 30 2004

Licensee:
Not shown, please visit www.dns.be for webbased whois.

Agent Technical Contacts:
First Name: Ronny
Last Name: Verley
Company Name: EVONET Belgium nv
Language: nl
Street: Burgemeester Maenhautstraat 44 B
Location: 9820 Merelbeke
Country: BE
Phone: +32.92690451
Fax: +32.92690452
Email: domain-admin@evonet.be

Agent:
Name: EVONET Belgium N.V.
Website: http://www.evonet.be

Nameservers:
ns1.evonet.be (195.144.64.170)
ns2.evonet.be (195.144.64.171)