Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Faizan Docherty Thu Dec 04, 2014 8:40 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 200.42.138.135
Originating ISP: Cablevision
City: Buenos Aires
Country of Origin: Argentina
* For a complete report on this email header goto ipTRACKERonline


From [email protected] Fri Nov 28 09:01:54 2014
X-Apparently-To: <snipped>; Fri, 28 Nov 2014 09:02:42 +0000
Return-Path: <[email protected]>
Received-SPF: pass (domain of ciudad.com.ar designates 200.42.138.234 as permitted sender)
aXMgbWF0dGVyIGFuZCB0aGlzIGlzIGZvciByZWFsIGFuZCBsZWdhbCxJIGFt
IE1yIE1haWtpIEJhaGlzIGEgbWFuYWdlciB3aXRoIENvbnRyYWN0IEluaGVy
aXRhbmNlIFBheW1lbnQgQ29tbWlzc2lvbiBhbmQgaSB3YW50IHRvIGxldCB5
b3Uga25vdyB0aGF0IHlvdXIgb3V0c3RhbmRpbmcgcGF5bWVudCB0aGUgc3Vt
IG9mIOKCrCA4LjUwMC4wMDAuMDAgaGFzIGJlZW4gYXBwcm92ZQEwAQEBAQ--
X-YMailISG: <snipped>
X-Originating-IP: [200.42.138.234]
Authentication-Results: mta1492.mail.gq1.yahoo.com from=ciudad.com.ar; domainkeys=fail (bad sig); from=ciudad.com.ar; dkim=permerror (bad sig)
Received: from 127.0.0.1 (EHLO relay11.ciudad.com.ar) (200.42.138.234)
by mta1492.mail.gq1.yahoo.com with SMTP; Fri, 28 Nov 2014 09:02:39 +0000
Received: from localhost (unknown [200.42.138.135])
by relay11.ciudad.com.ar (Postfix) with ESMTP id D16CD22B827;
Fri, 28 Nov 2014 06:02:37 -0300 (ART)
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>
X-Virus-Scanned: amavisd-new at zrm4.int.cmd.com.ar
Received: from relay4.ciudad.com.ar ([127.0.0.1])
by localhost (zrm4.int.cmd.com.ar [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id e6SGnFMyYjST; Fri, 28 Nov 2014 06:02:33 -0300 (ART)
Received: by relay4.ciudad.com.ar (Postfix, from userid 509)
id 55FE040513; Fri, 28 Nov 2014 06:02:33 -0300 (ART)
Received: from zsp8.int.cmd.com.ar (zsp8.int.cmd.com.ar [10.4.1.183])
by relay4.ciudad.com.ar (Postfix) with ESMTP id A597540503;
Fri, 28 Nov 2014 06:01:54 -0300 (ART)
Date: Fri, 28 Nov 2014 06:01:54 -0300 (ART)
From: [email protected]
Reply-To: [email protected]
Message-ID: <[email protected]>
Subject: fund transfer
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [10.4.0.14]
X-Mailer: Zimbra 8.0.7_GA_6021 (ZimbraWebClient - FF34 (Win)/8.0.6_GA_5922)
Thread-Topic: fund transfer
Thread-Index: 7zuAc4liqkZAZJE+AZ9TWfDyJzV9MA==
To: undisclosed-recipients
Content-Length: 496


Please urgent attention is needed in this matter and this is for real and legal,I am Mr Maiki Bahis a manager with Contract Inheritance Payment Commission and i want to let you know that your outstanding payment the sum of € 8.500.000.00 has been approved through my good effort and is ready to be transfer to you.so that both of us can share it 50%/ 50% for me and you. i want to know if you will be honest and sincere with me if the fund is transfer to you.
Mr Maiki Bahis

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 28 guests