by Faizan Docherty
Wed Jan 08, 2014 3:00 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 14.3.158.1<br>Originating ISP: Asahi Net,inc.<br> City: Asahi<br>Country of Origin: Japan<br>* For a complete report on this email header goto ipTRACKERonline
X-Apparently-To: <snipped> via 98.139.211.136; Fri, 03 Jan 2014 09:18:03 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 207.46.108.104
Received-SPF: pass (domain of outlook.com designates 207.46.108.104 as permitted sender)
X-YMailISG: <snipped>
X-Originating-IP: [207.46.108.104]
Authentication-Results: mta1512.mail.ne1.yahoo.com from=outlook.com; domainkeys=neutral (no sig); from=outlook.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO na01-by2-obe.outbound.protection.outlook.com) (207.46.108.104)
by mta1512.mail.ne1.yahoo.com with SMTP; Fri, 03 Jan 2014 09:17:52 +0000
Received: from CO2PR07CA007.namprd07.prod.outlook.com (10.141.194.175) by
CO2PR07MB572.namprd07.prod.outlook.com (10.141.230.28) with Microsoft SMTP
Server (TLS) id 15.0.842.7; Fri, 3 Jan 2014 09:17:49 +0000
Received: from BL2FFO11FD015.protection.gbl (2a01:111:f400:7c09::186) by
CO2PR07CA007.outlook.office365.com (2a01:111:e400:1414::47) with Microsoft
SMTP Server (TLS) id 15.0.842.7 via Frontend Transport; Fri, 3 Jan 2014
09:17:49 +0000
Received: from COSEXCH10.lsi.com (192.19.220.100) by
BL2FFO11FD015.mail.protection.outlook.com (10.173.160.223) with Microsoft
SMTP Server (TLS) id 15.0.837.10 via Frontend Transport; Fri, 3 Jan 2014
09:17:47 +0000
Received: from User (175.100.0.32) by COSEXCH10.lsi.com (135.142.2.75) with
Microsoft SMTP Server id 14.3.158.1; Fri, 3 Jan 2014 02:17:24 -0700
Reply-To: <[email protected]>
From: "Mr. Tom Hook" <[email protected]>
Subject: Good day
Date: Fri, 3 Jan 2014 16:17:18 +0700
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
Return-Path: [email protected]
X-EOPAttributedMessage: 0
X-Matching-Connectors: 130332142686085106;(f081dce6-2920-4dfc-23e8-08d07091c5e3);()
X-Forefront-Antispam-Report:
CIP:192.19.220.100;CTRY:US;IPV:CAL;IPV:NLI;EFV:NLI;SFV:SPM;SFS:(10019001)(199002)(189002)(89996001)(83322001)(44976005)(50986001)(19580395003)(54316002)(88136002)(62966002)(56776001)(20776003)(56816005)(59766001)(881003)(83072002)(47776003)(44716002)(50226001)(62236002)(74876001)(63696002)(77982001)(61296002)(87936001)(563864002)(555904002)(77096001)(77156001)(87266001)(87286001)(31686002)(551934002)(85306002)(76482001)(81542001)(65816001)(74706001)(76176001)(47976001)(47446002)(74662001)(85852003)(1671002)(74366001)(221733001)(51856001)(76796001)(76786001)(33646001)(80022001)(50466002)(79102001)(90146001)(6806004)(47736001)(49866001)(23686002)(69226001)(46102001)(74502001)(43066001)(81342001)(4396001)(80976001)(175304002);DIR:OUT;SFP:1501;SCL:6;SRVR:CO2PR07MB572;H:COSEXCH10.lsi.com;CLIP:192.19.220.100;FPR:;RD:cosexch10.lsi.com;A:1;MX:1;LANG:en;
X-OriginatorOrg: lsicorp.onmicrosoft.com
X-Forefront-PRVS: 00808B16F3
Content-Length: 333
Can we invest in your country.My name is Mr.Tom Hook a banker here; there is an unfinished business transaction in my branch. This is a business that will profit both of us, if you are interested get back to me for more details please because the money needs to invest outside my country. I wait for your quick response
Mr. Tom Hook
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.