Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Fri Nov 14, 2014 10:20 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 195.146.144.201
Originating ISP: Slovak Telecom
City: n/a
Country of Origin: Slovakia
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.50.233 with SMTP id f9csp28891pdo;
Fri, 14 Nov 2014 06:05:31 -0800 (PST)
X-Received: by 10.67.14.129 with SMTP id fg1mr10193174pad.114.1415973931463;
Fri, 14 Nov 2014 06:05:31 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (nov-007-i630.relay.mailchannels.net. [46.232.183.184])
by mx.google.com with ESMTP id z1si28492645pas.155.2014.11.14.06.05.28
for <snipped>;
Fri, 14 Nov 2014 06:05:31 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 46.232.183.184 as permitted sender) client-ip=46.232.183.184;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 46.232.183.184 as permitted sender) [email protected]
X-Sender-Id: _forwarded-from|smtp01.post.sk:userid:112
Received: from r8-chicago.webserversystems.com (ip-10-213-14-133.us-west-2.compute.internal [10.213.14.133])
by relay.mailchannels.net (Postfix) with ESMTPA id 5FAF161255
for <snipped>; Fri, 14 Nov 2014 14:05:26 +0000 (UTC)
X-Sender-Id: _forwarded-from|smtp01.post.sk:userid:112
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.216.27.60])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.3.3);
Fri, 14 Nov 2014 14:05:26 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|smtp01.post.sk:userid:112
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1415973926764:3658419620
X-MC-Ingress-Time: 1415973926763
Received: from smtp01.post.sk ([195.146.144.201]:53711)
by r8-chicago.webserversystems.com with esmtp (Exim 4.82)
(envelope-from <[email protected]>)
id 1XpHV0-0005ok-7R
for <snipped>; Fri, 14 Nov 2014 08:05:21 -0600
Received: by smtp01.post.sk (Postfix, from userid 112)
id 866E6281A8; Fri, 14 Nov 2014 15:05:16 +0100 (CET)
Received: from mbox05.in.post.sk (unknown [172.17.2.5])
by smtp01.post.sk (Postfix) with ESMTP id EC0F028441;
Fri, 14 Nov 2014 15:05:14 +0100 (CET)
Date: Fri, 14 Nov 2014 15:05:14 +0100 (CET)
From: Abraham Karid <[email protected]>
Reply-To: "[email protected]" <[email protected]>
Message-ID: <1214349379.210787.1415973914940.JavaMail.root@mbox05>
In-Reply-To: <470749377.210773.1415973883046.JavaMail.root@mbox05>
Subject: HELLO
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Mailer: Zimbra 6.0.10_GA_2692 (ZimbraWebClient - FF3.0 (Win)/6.0.10_GA_2692)
To: undisclosed-recipients:;
X-Spam-Status: No, score=2.0
X-Spam-Score: 20
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: My name is Abraham Karid, You can know more about me through
my Facebook link by adding my facebook email id [email protected]
I am presently in the Military base in Egypt but will be headed to Gaza soon
because of my job. It is a bloody scene down there. I see blood every where.
The Land is covered by innocent blood. Anyway I want you to help me heal
the world.I want to help the less-privileged and the victims of war and conflicts/crisis
in Mid-east Asia and Africa. I have enough fund which i believe will go a
long way in achieving this aim. Let us help the unfortunate ones, the less-privileged
and the poor. I believe we can do this together. Firstly, I have to inform
you of everything you need to know including how I got the money. [...]

Content analysis details: (2.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sandranana[at]post.sk)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[195.146.144.201 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
("abrahamkarid18[at]yahoo.com"
<abrahamkarid18[at]yahoo.com>
)
-0.6 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
X-AuthUser:


My name is Abraham Karid, You can know more about me through my Facebook link by adding my facebook email id [email protected]
I am presently in the Military base in Egypt but will be headed to Gaza soon because of my job. It is a bloody scene down there. I see blood every where. The Land is covered by innocent blood.
Anyway I want you to help me heal the world.I want to help the less-privileged and the victims of war and conflicts/crisis in Mid-east Asia and Africa.
I have enough fund which i believe will go a long way in achieving this aim. Let us help the unfortunate ones, the less-privileged and the poor. I believe we can do this together.
Firstly, I have to inform you of everything you need to know including how I got the money.

On the 14th of August, I had a terrible experience which I pray never to witness again in this life, that was the day Mick Deane died, during the clash between Egyptian security services and supporters of ousted president Mohammed Morsi
http://www.inquisitr.com/903325/sky-new ... -in-egypt/
or

https://en.rsf.org/egypte-british-tv-ca ... 45054.html .

The news has gone all over the world but no one knows the truth of it all;the real story behind his death. On that fateful day, We went as a team of journalists to the Rebel's camp. Myself and other press crew which Mick was part of it.
Though we were guarded by the Egyptian security men.So when we got to the camp the militants were out and as we were doing some recordings. Mick and I found a box belonging to the militants. and we succeeded in taking the box into our van.
After a little-while, the members of the Muslim brotherhood came in and opened fire at us while the security men fought them back.
As Allah may have it, we succeeded in rushing back to our base with Mick having a bullet in him. The Health Workers tried their possible best but Mick kicked the bucket.

Right now, Mick is dead, The rebels are angry with the journalists here in Egypt because of the Missing box. They are desperately looking for the box. At a time they abducted some journalists. To cut the story short, I am with the box now and want to get the box out of Egypt now.

My life and my job is at stake. so I need you to keep this confidential.

All i needed is your assistance, to help me receive the box from the member of the Health Workers (Red Cross Society) that will be returning to your city.

I will package the box in such away that nobody will know what is inside the box. i will also use my diplomatic tag to seal it, so that it will not be scanned at the airport.
for your assistance; i will be giving you 20% of the whole money the the box.
Thanks

NB; This must be kept secret. Please!!!
Abraham Karid

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: Bing [Bot], ClaudeBot, Google [Bot] and 44 guests