by Faizan Docherty
Thu Oct 23, 2014 7:32 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 200.42.138.254
Originating ISP: Cablevision
City: Buenos Aires
Country of Origin: Argentina
* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.220.78.147 with SMTP id l19csp224208vck;
Thu, 23 Oct 2014 01:46:06 -0700 (PDT)
X-Received: by 10.224.51.65 with SMTP id c1mr5486966qag.32.1414053966260;
Thu, 23 Oct 2014 01:46:06 -0700 (PDT)
Return-Path: <[email protected]>
Received: from v461uprod.int.cmd.com.ar (relay18.ciudad.com.ar. [200.42.138.254])
by mx.google.com with ESMTP id u6si1897377qap.12.2014.10.23.01.45.54
for <multiple recipients>;
Thu, 23 Oct 2014 01:46:06 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.42.138.254 as permitted sender) client-ip=200.42.138.254;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.42.138.254 as permitted sender) [email protected];
dmarc=pass (p=QUARANTINE dis=NONE) header.from=ciudad.com.ar
Received: from zap1.int.cmd.com.ar (s077uprod.int.cmd.com.ar [10.4.0.42])
by v461uprod.int.cmd.com.ar (Postfix) with ESMTP id A71431F3477;
Thu, 23 Oct 2014 05:26:01 -0300 (ART)
Received: from localhost (localhost [127.0.0.1])
by zap1.int.cmd.com.ar (Postfix) with ESMTP id 634101C2641;
Thu, 23 Oct 2014 05:26:01 -0300 (ART)
X-Virus-Scanned: amavisd-new at zap1.int.cmd.com.ar
X-Spam-Flag: YES
X-Spam-Score: 7.062
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.062 tagged_above=-10 required=6.6
tests=[ALL_TRUSTED=-1, BAYES_99=2.8, BENIN_LOTS_MONEY=0.03,
BENIN_TRANSFER_PAYMENT=0.25, FREEMAIL_FROM=0.001,
FREEMAIL_REPLYTO=2.398, MISSING_HEADERS=1.021,
REPLYTO_WITHOUT_TO_CC=1.552, T_TO_NO_BRKTS_FREEMAIL=0.01]
autolearn=no autolearn_force=no
Received: from mta1.ciudad.com.ar ([10.4.0.13])
by localhost (zap1.int.cmd.com.ar [10.4.0.42]) (amavisd-new, port 10024)
with ESMTP id N8G2FceXmKHQ; Thu, 23 Oct 2014 05:25:55 -0300 (ART)
Received: from zsp8.int.cmd.com.ar (s183uprod.int.cmd.com.ar [10.4.1.183])
by mta1.ciudad.com.ar (Postfix) with ESMTP id 89E934270E;
Thu, 23 Oct 2014 05:25:55 -0300 (ART)
Date: Thu, 23 Oct 2014 05:25:55 -0300 (ART)
From: [email protected]
Reply-To: [email protected]
Message-ID: <[email protected]>
Subject: *** SPAM *** urgent attention
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [10.4.0.15]
X-Mailer: Zimbra 8.0.7_GA_6021 (ZimbraWebClient - FF33 (Win)/8.0.6_GA_5922)
Thread-Topic: urgent attention
Thread-Index: pmYjdkOzHa2k3T6CWOJ2WVxOAoAnTg==
Please urgent attention is need in this matter,I am Mr Maiki Bahis a manager with Contract Inheritance Payment Commission and i want to let you know that your outstanding payment the sum of € 8.500.000.00 has been approved through my good effort and is ready to be transfer to you.so that both of us can share it 50%/ 50% for me and you. i want to know if you will be honest and sincere with me if the fund is transfer to you.
Mr Maiki Bahis
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.