by Faizan Docherty
Wed Mar 13, 2013 1:39 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 189.125.202.200<br>Originating ISP: Global Crossing ComunicaÇÕes Do Brasil Ltda.<br> City: São Paulo<br>Country of Origin: Brazil<br>* For a complete report on this email header goto ipTRACKERonline
From Felicia Luna Tue Mar 12 04:28:05 2013
X-Apparently-To: <snipped> via 98.139.210.164; Tue, 12 Mar 2013 04:29:07 -0700
Return-Path: <[email protected]>
X-YahooFilteredBulk: 200.147.97.219
Received-SPF: pass (domain of zipmail.com.br designates 200.147.97.219 as permitted sender)
X-YMailISG: pkISXTIWLDtEJKkATrTdBGcXWLogUZEfvE_TCQKOnfUP4pYk
i7otIagfHqg27QX_MdIMVa9KCmoZK4eaun3ttCDW3_8e7OiZtO2u3Mi6XUh9
3KlVgmppNgAL21JtLMMh06qD5LGE15RbrLZw8PyAhQnPiGCcnyZuJ6Lcu69m
akfD8TdRGh1DB3GAoTEpONEIaZAZ1tjIdoYcJofGEnBhK0g5S1sSFxrtsbsH
rcwo667bsvXLjgw9pRVaLYLqeGiD3MXsW1AloljW_Sk2ioVZOlQGZrXTlQt6
MrvE0QjtICh5pKe4ML8QI2crGMhoBnBk0ooY2rLKxnmx5LG9EA.zwParmeVv
T1O6NwKysdLaSMF87dOhSK4KkWXJ.AwRcP_GTdnsEU3rlHxG8vKSRv24vlt9
MgF0rUHcTo8MAxDw5azikiIkVZTLsKrMruqWWMXCLYGXsla_o7VhaznOvArz
4T0qJkcoCH0tKivzOYFrS2M4yh0lTaEMLSiejrbaKVkEjfn09nphLjuBbVXU
59qeuKLLdj2NADtcys.mXIOD3M24IR7F6hua6txjES3ZujBCR5q88wl7lec0
TOSOI4VzdeDPQLPxbikw7vLcBNqQppH6lCV8J7V0PoLnmJ5Jav7x5vr6NpM0
2wy8Tm7fWbzbNTKCZ5Q.WYi8tTXKNrqYqaLUXPoBKtWY9um.mzHErhskuscg
4C4ZgDBRA1pEapDP.zdDWUKZ9Ku8gVB2qrxQXcbVq8N3Spu8so3UUFer3bwO
Nd.RH.3Tl65oTyLBgJbnFFQpHHgkOMwQ8C2upGW0mSmMMEH4Na2._BcXqf1L
KxAe5qseJtSEyViEONpEA1WTzkP53bHuLFC33aHdTE3_byJp5F03nwr5hMnk
fpwgh9xgZRaLh5vYU1kKKuijU1EXdF9Ogh5m18fQ5mNHVACGzS_z4CHClYue
iPnPNso3kpna_ovn3Qt5QJinC6D4ZUgCArZHmuQY9gPoykmuHLwYpKwWJy__
ucQB6uA8lEJg4zrKEaGPOrgDnT7mdcS1DD8GbkIgUdyOu0jFo9vlUXxFDhQ1
wbGe5hc7yOIpSgDdI6TWPQXIdML5X.7kkyFlOP0LtxjtWhyAP.b.nxLjRVSE
RZHmmLkalfY4muPW9nGfYOaHSIU5dPIDR1KYCyfCGK3moXrbWwv6BdeazbNo
TJZdL1OWUxxNBF5ciCxHDRXaXVAWpgy4DZiItIy_7XOVcCdVkcZFsuhwnP72
PJH_3RYSJkeDsy.y33aKBXlbIg2r8IxEQel681Z4BPw_XI4tzK3llx5zPB_v
zx2XRUKHRZCTvIRzhcie9_QC.E1DwxATIAX9D7IGEM0VuPqwSRD0qvhkf1ds
HpfkOnfKzj.CeNko6zWclz4.n4Jh8qz8LC1fUF_ltCrjmK9vHLWURdYqc_3V
clfwsJs4BqaYyHjlzZJE9G.e2xDZlbgUrct66QVBdq87jKb263.9LVt3FeGa
XjPMle5gw4W_vLEJ90p3zh99CkHEzU8YM_k.dZFXcOlfEJxbhW6hB.SvBo7Y
34JujeeoJY21H3Jv_C5ixwM9d5ikAeWX.TQ7DemKvUv5GhspQmJOqI.dl41T
K91lTOOnCaX7Nlcxwf7wxhCIjsSHf.pijFEy5.knIsiO7Zl1SMo6ZAZZODTT
FUl..X.8.teS.R12KfsMuVgSJhd6ozdTTsYept_ovSIlv6XMgn8LltTm6_0-
X-Originating-IP: [200.147.97.219]
Authentication-Results: mta1271.mail.mud.yahoo.com from=zipmail.com.br; domainkeys=neutral (no sig); from=zipmail.com.br; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO a4-salsa4.bol.com.br) (200.147.97.219)
by mta1271.mail.mud.yahoo.com with SMTP; Tue, 12 Mar 2013 04:29:03 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by a4-salsa4.bol.com.br (Postfix) with ESMTP id 82D2B3800091;
Tue, 12 Mar 2013 08:29:02 -0300 (BRT)
Received: from a4-salsa4.host.intranet (localhost.localdomain [127.0.0.1])
by a4-salsa4.bol.com.br (Postfix) with ESMTP id E5DBE3800081;
Tue, 12 Mar 2013 08:28:05 -0300 (BRT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=zipmail.com.br;
s=afl; t=1363087742;
bh=hb2BxgXtJQmFI+KcJthFVWxPmlTC0ObNUkHEoYjyZBc=;
h=Date:From:Subject:To;
b=PtaMgHEJ/Ef2Bj0JoBjP5G+sd7KFkNEH+oV9p1GyEzrjZQ5o9+2/pFi1mwL71PFxl
zd3gUNTctLm5TlznpXcxtRTe9F7/OSMc15rp9RcocpXc67TsYZmTj75bNS83Q9pf0C
zT6HL83VZUUs6ccPTt7wF70qf4eKVnR+mreUCjDU=
Received: from zipmail.com.br (a4-winter7.host.intranet [10.131.133.133])
by a4-salsa4.host.intranet (Postfix) with ESMTP id C2DBE3800090;
Tue, 12 Mar 2013 08:28:05 -0300 (BRT)
Date: Tue, 12 Mar 2013 08:28:05 -0300
From: Felicia Luna <[email protected]>
Message-Id: <[email protected]>
Subject: VERY URGENT FROM THE HOSPITAL
Mime-Version: 1.0
Content-Type: text/html; charset=utf-8
X-SenderIP: 189.125.202.200
To: undisclosed-recipients:;
X-SIG5: ef6bba86271584e9e696682c651727b3
Content-Length: 2237
VERY URGENT FROM THE HOSPITAL
This is Miss Felicia Luna from Trinidad &Tobago.I am writing from the hospital in Cote D'Ivoire, therefore this mail is very urgent, as you can see that I am dying in the hospital. I was told by the doctor that i was poisoned and has got my liver damaged and can only live for some months.
I inherited some money ($3.5 Million) from my late father and i cannot think of anybody trying to kill me apart from my step mother in order to inherit the money, she is an Ivorian by nationality.
I want you to contact my servant with this information below:
Servant Martins Henry.
Address: Rue De La Princess L/G 152 Cocody
Abidjan, Cote D'Ivoire.
Tel +225-67495207
Email : [email protected]
He will give you the documents of the money and will direct you to a well known lawyer that i have appointed, the lawyer will assist you to change the documents of the money to your name to enable the bank transfer the money to you.
This is the favour i need when you have gotten the money :-
(1) Give 20% of the money to my servant Martins as he has been there for me throughout my illness and i have promised to support him in life. I want you to take him along with you to your country and establish him as your son.
(2) Give 30% of the money to handicap people and charity organisation.
Note; This should be a code between you and my Servant Martins in this transaction "Hospital" any mail from him, the barrister he will direct you to, without this code "Hospital" is not from the barrister, Martins, the bank or myself as I don't know what will happen to me in the next few hours.
(3) the lawyer's name is Mc Lambert Adams. And Let Martins send you his International Passport as he has no passport to be sure of who you are dealing with. Martins is so little, therefore guide him.
And if I don't hear from you, I will look for another perso n or an organisation.
May God bless you and use you to accomplish my wish.
Pray for me always.
Miss Felicia Luna.
Like i said, don’t forget to contact Martins Henry with this Email: [email protected]
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.