by Faizan Docherty
Fri Jul 26, 2013 1:26 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 185.20.226.168<br>Originating ISP: United Network Llc<br> City: n/a<br>Country of Origin: Russian Federation<br>* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.70.71.162 with SMTP id w2csp47217pdu;
Mon, 22 Jul 2013 04:34:35 -0700 (PDT)
X-Received: by 10.50.118.74 with SMTP id kk10mr9730921igb.2.1374492875249;
Mon, 22 Jul 2013 04:34:35 -0700 (PDT)
Return-Path: <[email protected]>
Received: from r5-chicago.webserversystems.com (r5-chicago.webserversystems.com. [184.154.136.42])
by mx.google.com with ESMTPS id os8si18472282icb.84.2013.07.22.04.34.34
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 22 Jul 2013 04:34:34 -0700 (PDT)
Received-SPF: neutral (google.com: 184.154.136.42 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=184.154.136.42;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 184.154.136.42 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from perelub.ru ([185.20.226.168]:36419)
by r5-chicago.webserversystems.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1V1ENu-000Dhe-1S
for <snipped>; Mon, 22 Jul 2013 06:34:34 -0500
Received: from aid72 by perelub.ru with local (Exim 4.72)
(envelope-from <[email protected]>)
id 1V1ENr-0000uI-6Q
for <snipped>; Mon, 22 Jul 2013 15:34:31 +0400
Date: Mon, 22 Jul 2013 15:34:31 +0400
Message-Id: <[email protected]>
To: <snipped>
Subject: YOU HAVE BEEN AWARDED $2.8MILLION BEST REGARDS
From: [email protected], [email protected], Joy Koffi <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r5-chicago.webserversystems.com
X-AntiAbuse: Original Domain - scamwarners.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - cheesland.com
X-Get-Message-Sender-Via: r5-chicago.webserversystems.com: none
Dear Lucky Winner,
YOUR AMOUNT CREDITED IN THE CARD IS $2.8MILLION BEST REGARDS,
THE (UN)/(ECONOMIC) WELFARE COMMITTEE, BE INFORMED THAT YOU HAVE BEEN AWARDED A COMPENSATION. A WORLDWIDE COMPENSATION FOR THE CURRENT ECONOMIC MELTDOWN.CONGRATULATION ; I HAVE FINALLY REGISTERED YOUR ATM MASTER CARD WITH DHL COURIER COMPANY THIS MORNING AFTER THE AGREEMENT TO PAY YOU VIA DEBIT CARD WHICH WILL ALLOW YOU WITHDRAWAL FROM ANY AUTOMATED TELLER MACHINE AROUND YOU. AS WE AGREED, AND THE DELIVERY WILL TAKE OFF IMMEDIATELY YOU MADE CONTACT WITH THEM BASED ON MY AGREEMENT WITH DHL DIRECTOR REV. HENRY DAVID
CONTACT THEM WITH YOUR DELIVERY INFORMATION AS FOLLOW
YOUR NAME_______________
YOUR HOME ADDRESS_______
YOUR ID COPY____________
YOUR COUNTY___________
YOUR AGE/SEX_____________
DIRECT PHONE NUMBER____
YOUR OCCUPATION______
DHL OFFICE IN BENIN REPUBLIC:
CONTACT PERSON: mr Henry David
E-MAIL:[email protected]
PHONE NO +22-968808891
YOU HAVE BEEN AWARDED $2.8MILLION BEST REGARDS,
Rev, Dr, Joy Koffi.
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.