by Faizan Docherty
Thu Feb 06, 2014 10:25 am
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 185.19.85.134<br>Originating ISP: Datawire Ag<br> City: n/a<br>Country of Origin: Switzerland<br>* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp351061vcj;
Thu, 6 Feb 2014 05:39:02 -0800 (PST)
X-Received: by 10.181.12.16 with SMTP id em16mr2275198wid.3.1391693942097;
Thu, 06 Feb 2014 05:39:02 -0800 (PST)
Return-Path: <[email protected]>
Received: from osprey.ipchina163.com (osprey12.ipchina163.com. [5.39.220.85])
by mx.google.com with ESMTPS id j20si11396957wiw.85.2014.02.06.05.39.01
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 06 Feb 2014 05:39:02 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 5.39.220.85 as permitted sender) client-ip=5.39.220.85;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 5.39.220.85 as permitted sender) [email protected]
Received: from bayviewm by osprey.ipchina163.com with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1WBPAU-0025ML-9V
for <snipped>; Thu, 06 Feb 2014 21:39:02 +0800
To: <snipped>
Subject: Shipment Notification(Delivery Suspended)
X-PHP-Script: bvicm.com/aZulLoDge/MailerScript.php for 185.19.85.134
Date: Thu, 6 Feb 2014 13:39:02 +0000
From: =?UTF-8?Q?DHL?= <[email protected]>
Message-ID: <[email protected]>
X-Priority: 3
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - osprey.ipchina163.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [1025 500] / [47 12]
X-AntiAbuse: Sender Address Domain - osprey.ipchina163.com
X-Get-Message-Sender-Via: osprey.ipchina163.com: authenticated_id: bayviewm/only user confirmed/virtual account not confirmed
X-Source:
X-Source-Args: /usr/sbin/proxyexec -q -d -s /var/run/proxyexec/cagefs.sock/socket /bin/cagefs.server
X-Source-Dir: bvicm.com:/public_html/aZulLoDge
DHL Notification
Dear Customer,
We regret to inform you that the delivery of your shipment has been suspended for the following reason. :
1.It has been ascertained that adequate duties were not paid on the package.:
Under new laws full duties are to be paid before delivery. The sender:
did pay the appropriate courier fee but did not pay adequate duties on the package .We are:
therefore requesting you pay full duty for the coverage of the package.:
As your name and email address were on the package for contact details you are obligated to:
pay the duties on the contents of the package:
You should therefore contact your assigned claims Officer, Diane to assist with the duty:
Below is the contact details of your assigned claims Officer.:
Email address:[email protected] ::
Tel:+ 1 (646) 374-8832:
When making contact with your assigned claims officer via email or phone please quote reference REF- 878382FGL:
Duty coverage fees are payable to authorities through your assigned claims Officer..
DHL® does not accept fees directly.
Disclaimer:
This message was created by DHL System.
No authentication of email address has been performed.
Deutsche Post DHL 2014 © DHL International GmbH.All rights reserved.
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.