Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Thu Feb 06, 2014 10:25 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 185.19.85.134<br>Originating ISP: Datawire Ag<br> City: n/a<br>Country of Origin: Switzerland<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp351061vcj;
Thu, 6 Feb 2014 05:39:02 -0800 (PST)
X-Received: by 10.181.12.16 with SMTP id em16mr2275198wid.3.1391693942097;
Thu, 06 Feb 2014 05:39:02 -0800 (PST)
Return-Path: <[email protected]>
Received: from osprey.ipchina163.com (osprey12.ipchina163.com. [5.39.220.85])
by mx.google.com with ESMTPS id j20si11396957wiw.85.2014.02.06.05.39.01
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 06 Feb 2014 05:39:02 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 5.39.220.85 as permitted sender) client-ip=5.39.220.85;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 5.39.220.85 as permitted sender) [email protected]
Received: from bayviewm by osprey.ipchina163.com with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1WBPAU-0025ML-9V
for <snipped>; Thu, 06 Feb 2014 21:39:02 +0800
To: <snipped>
Subject: Shipment Notification(Delivery Suspended)
X-PHP-Script: bvicm.com/aZulLoDge/MailerScript.php for 185.19.85.134
Date: Thu, 6 Feb 2014 13:39:02 +0000
From: =?UTF-8?Q?DHL?= <[email protected]>
Message-ID: <[email protected]>
X-Priority: 3
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - osprey.ipchina163.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [1025 500] / [47 12]
X-AntiAbuse: Sender Address Domain - osprey.ipchina163.com
X-Get-Message-Sender-Via: osprey.ipchina163.com: authenticated_id: bayviewm/only user confirmed/virtual account not confirmed
X-Source:
X-Source-Args: /usr/sbin/proxyexec -q -d -s /var/run/proxyexec/cagefs.sock/socket /bin/cagefs.server
X-Source-Dir: bvicm.com:/public_html/aZulLoDge


DHL Notification

Dear Customer,

We regret to inform you that the delivery of your shipment has been suspended for the following reason. :

1.It has been ascertained that adequate duties were not paid on the package.:

Under new laws full duties are to be paid before delivery. The sender:
did pay the appropriate courier fee but did not pay adequate duties on the package .We are:
therefore requesting you pay full duty for the coverage of the package.:
As your name and email address were on the package for contact details you are obligated to:
pay the duties on the contents of the package:
You should therefore contact your assigned claims Officer, Diane to assist with the duty:
Below is the contact details of your assigned claims Officer.:

Email address:[email protected] ::

Tel:+ 1 (646) 374-8832:

When making contact with your assigned claims officer via email or phone please quote reference REF- 878382FGL:

Duty coverage fees are payable to authorities through your assigned claims Officer..
DHL® does not accept fees directly.

Disclaimer:
This message was created by DHL System.
No authentication of email address has been performed.


Deutsche Post DHL 2014 © DHL International GmbH.All rights reserved.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 26 guests