Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Phil Franks Mon Jun 20, 2011 9:31 am
Reply to: [email protected]

plus - hilarious name :lol:


Authentication-Results: hotmail.com; sender-id=temperror (sender IP is 203.10.1.245) [email protected]; dkim=none header.d=westnet.com.au; x-hmca=none
X-Message-Status: n:0:n
X-SID-PRA: Chevron Texaco Oil <[email protected]>
X-DKIM-Result: None
X-AUTH-Result: NONE
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==
X-Message-Info: Qcg05BREWSElh/KgOmLqQMtKjuilS3E3KiYLD6P5lPvfmi/FoABcg4yDdnNbG8K3IDYRJNx7UyXMjTBKl4UzVVj
MciMkEhH2o+SNWBsyHF4h1YjG9A3EIhAwRRUxbj8022KFR2NOEkk=
Received: from outbound-mail04.westnet.com.au ([203.10.1.245]) by col0-mc1-f13.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 19 Jun 2011 00:43:57 -0700
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AtkQAGGo/U3AqCcp/2dsb2JhbABRglEpAYFOkw2MZIE+YneGVAGCGAiTM4omjkiPWIUggQoEhx4LAo8wixE
X-IronPort-AV: E=Sophos;i="4.65,388,1304265600";
d="scan'208,217";a="721540057"
Received: from unknown (HELO webmail01.westnet.com.au) ([192.168.39.41])
by outbound-mail04.westnet.com.au with ESMTP; 19 Jun 2011 15:42:58 +0800
Date: Sun, 19 Jun 2011 15:42:58 +0800 (WST)
From: Chevron Texaco Oil <[email protected]>
Reply-To: Chevron Texaco Oil <[email protected]>
Message-ID: <1447483598.2141921308469378799.JavaMail.root@zim-store01.web.westnet.com.au>
Subject: Chin Wool (Mrs).
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_86105_259368461.1308469378796"
X-Originating-IP: [188.180.98.87]
X-Mailer: Zimbra 5.0.18_GA_3011.RHEL4_64 (zclient/5.0.18_GA_3011.RHEL4_64)
Bcc:
Return-Path: [email protected]
X-OriginalArrivalTime: 19 Jun 2011 07:43:58.0099 (UTC) FILETIME=[A5D14E30:01CC2E54]

------=_Part_86105_259368461.1308469378796
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit



Attn: Dear Email Owner. I am Chin Wool (Mrs), the Company's Secretary to
Chevron Texaco Oil and Gas Company In Singapore (ASIA DISTRICT). If
this e-mail is yours, congrats as we have a life transforming news for you.
Contact our Zone F Branch for more details. Mr John Harry. E-mail:
[email protected]

Yours Faithfully,
Chin Wool (Mrs).
------=_Part_86105_259368461.1308469378796
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<html><head><style> body {height: 100%; color:#000000; font-size:10pt; font-family:Verdana;}</style></head><body><br><br><em><span style="font-size: 9px; color: #0000bf;">
<span style="font-size: 12px;">Attn: Dear Email Owner. I am Chin Wool (Mrs), the Company's Secretary to<br>
Chevron Texaco Oil and Gas Company In Singapore (ASIA DISTRICT). If <br>this e-mail is yours, congrats as we have a life transforming news for you. <br>Contact our Zone F Branch for more details. Mr John Harry. E-
mail: <br>[email protected]</span><br><br><span style="font-size: 12px;">Yours
Faithfully,</span><br><span style="font-size: 12px;">Chin Wool (Mrs).</span></span></em></body></html>
------=_Part_86105_259368461.1308469378796--

Here to help in any way I can
Advertisement

by jolly_roger Mon Jun 20, 2011 10:22 am
This is interesting GreyAmadeus. From the email header comes

Ip Address Originating IP * 188.180.98.87
Provider Ultisat Europ A-S
City Apo
Country United States?
and
Ip Address 203.10.1.245
Provider WestNet Pty Ltd
City Osborne Park (a suburb of Perth, I'm led to believe?)
Country Australia

However the locality of Apo in the header seems strange? Is Apo in the Philippines?
by Phil Franks Mon Jun 27, 2011 4:51 am
@jolly_rojer Sorry for the late reply. To be honest, every now and then I come across headers that I struggle to unpick (such as this one). I couldn't say for sure where this this one truly resolves to but there is an 'Apo' in the Phillippines

Here to help in any way I can
by jolly_roger Mon Jun 27, 2011 8:16 am
I cannot find a location of Apo in the United States. Except for Honuā€˜apo Bay which is Kau Hawaii, but I don't think that's the one.
Apparently Ultisat Europ A-S being a broadband satellite provider headquartered in the USA and an office in Denmark.

Who is online

Users browsing this forum: ClaudeBot, Majestic-12 [Bot] and 24 guests