You can't win a lottery you haven't entered! Please read here for information on lottery scams.
#181564 by Gateway Tue Nov 19, 2013 4:01 pm
Return-Path: [email protected]
Received: from www.latc.com.tw ([211.20.132.219]) by mx-ha.gmx.net (mxgmx113)
with ESMTP (Nemesis) id 0MV2DB-1WBebc3vRd-00YQAM for
Sun, 17 Nov 2013 19:04:42 +0100
X-HEADER-Auth-LOCAL: LOCAL
X-HEADER-Auth-SASL: SASL
Received: from User (unknown [116.202.0.138])
by www.latc.com.tw (VVV) with ESMTP id DAAE4479DF5;
Sun, 17 Nov 2013 19:09:08 +0800 (CST)
Reply-To: < [email protected]>
From: "UK SHELL OIL COMPANY"<[email protected]

This is to notify you that your Email has won you SIX HUNDRED AND FIFTY THOUSAND POUNDS (650,000.00 GBP) In the 2013 UK SHELL OIL COMPANY Email Award .
Please contact us with
1.Your Names
2. Your Winning Email
3. Once We Receive your full names and email , We Will Send You Form For Claim
4. This Will Enable Us Verify If You Are The Rightful Email Winner
Note : Be Sure You Are The Rightful Email Winner .
You Will Receive Your Winning In 4 Working Days
Email Us : [email protected]
IF YOU FOUND THIS NOTIFICATION IN SPAM , PLEASE MOVE TO INBOX

Copyright © 2013 UkShellOilCompany.All Rights Reserved.

If you wish you can email me at
[email protected]

How to get E-Mail Headers
http://www.isipp.com/resources/email-headers/
Advertisement

#191532 by Faizan Docherty Tue Feb 18, 2014 5:27 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.13.40.135
Originating ISP: Vodacom
City: Johannesburg
Country of Origin: South Africa
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.14.62.6 with SMTP id x6csp227285eec;
Tue, 18 Feb 2014 11:06:55 -0800 (PST)
X-Received: by 10.236.147.107 with SMTP id s71mr31537139yhj.45.1392750415113;
Tue, 18 Feb 2014 11:06:55 -0800 (PST)
Return-Path: <[email protected]>
Received: from na01-bl2-obe.outbound.protection.outlook.com (na01-bl2-ndr.ptr.protection.outlook.com. [157.55.133.99])
by mx.google.com with ESMTPS id b4si23407756yhh.32.2014.02.18.11.06.24
for <multiple recipients>
(version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 18 Feb 2014 11:06:55 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 157.55.133.99 as permitted sender) client-ip=157.55.133.99;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 157.55.133.99 as permitted sender) [email protected]
Received: from BL2PR03MB372.namprd03.prod.outlook.com (10.141.89.15) by
BL2PR03MB371.namprd03.prod.outlook.com (10.141.89.14) with Microsoft SMTP
Server (TLS) id 15.0.878.16; Tue, 18 Feb 2014 19:06:23 +0000
Received: from BL2PR03MB372.namprd03.prod.outlook.com ([10.141.89.15]) by
BL2PR03MB372.namprd03.prod.outlook.com ([10.141.89.15]) with mapi id
15.00.0878.008; Tue, 18 Feb 2014 19:06:22 +0000
From: gg gh <[email protected]>
Subject: Attn:Shell Payment Letter Attached
Thread-Topic: Attn:Shell Payment Letter Attached
Thread-Index: AQHPLNw+Yrl3tiJuGU6S9+/AEJqEoQ==
Date: Tue, 18 Feb 2014 19:06:18 +0000
Message-ID: <[email protected]ook.com>
References: <[email protected]ook.com>
In-Reply-To: <[email protected]ook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [41.13.40.135]
x-forefront-prvs: 0126A32F74
x-forefront-antispam-report: SFV:SPM;SFS:(10019001)(6009001)(199002)(189002)(94316002)(94946001)(86442001)(93516002)(86362001)(74706001)(89136004)(64872006)(74662001)(47446002)(87936001)(74502001)(63696002)(81342001)(54356001)(69226001)(81542001)(881003)(54316002)(53806001)(76482001)(65816001)(80022001)(66066001)(47976001)(51856001)(86632001)(2656002)(74876001)(95416001)(87266001)(31966008)(93136001)(49866001)(47736001)(86902001)(4396001)(50986001)(85306002)(95666001)(80976001)(92566001)(85852003)(56776001)(81816001)(16236675002)(56816005)(90146001)(79102001)(81686001)(74316001)(558084003)(33646001)(46102001)(59766001)(77982001)(1671002)(86152002)(83072002)(74366001)(83322001)(76786001)(76796001)(76576001)(90346006)(62146010);DIR:OUT;SFP:1501;SCL:5;SRVR:BL2PR03MB371;H:BL2PR03MB372.namprd03.prod.outlook.com;CLIP:41.13.40.135;FPR:E0284ABE.3C9DE58D.3DE33708.C1C18C12.2001B;MLV:spm;PTR:InfoNoRecords;A:0;MX:1;LANG:en;
Content-Type: multipart/mixed;
boundary="_004_4e3a1c8cf0f34edfbee60804524d6401BL2PR03MB372namprd03pro_"
MIME-Version: 1.0
X-OriginatorOrg: daqq.onmicrosoft.com


Attn:Shell Payment Letter Attached​


Contents of the attachment:

===================================================================
UK SHELL PETROLEUM INTERNATIONAL LOTTERY PROMOTION AWARD.
Seafield House Hill of Rublislaw Aberdeen AB15 6BL London
REF Nº: EGS/2251256003/02
BATCH Nº: 14/0017/1PD
WINNING Nº: 60/84/27/17/36
OFFICIAL WINNING NOTIFICATION
Dear lucky winner,
The UK Shell Petroleum lottery board wishes to inform you that the results of their online
ballot lottery international program held in United Kingdom and released to you today.
Your E-mail address was picked as one of the E-mail online lucky winner of the year for the
lump sum of £1,500,000.00. GBP, therefore we have issued a letter of credit to the paying
bank (HSBC BANK PLC LONDON) for the pay out lump sum of £1,500,000.00. GBP, to
you.
All the e-mail participants for the online version were selected randomly from World Wide
Web sites through Shell Petroleum computer draw system and extracted from over 100,000
Companies and corporate bodies that are listed online. This promotion takes place
biannually i.e. twice in a year.
All winning must be claimed not later than 15 DAYS. After this date all unclaimed funds
will be returned to European Union treasury as unclaimed, to file for your claim kindly
Contact the paying bank with your verification form below:
Payment bank: HSBC BANK PLC LONDON UK
Contact Manger: DR.W.R MARSHALL
Email: [email protected]
TEL: +44-122-445-9653
FAX: +44-122-441-8561
WINNERS VERIFICATION FORM
(1) Full Names:
(2) Private Cell No:
(3) Nationality/Present Country:
{4} E-mail address:
{5} Occupation:
{6} Age.
(7) Gender/ Sex:
(8) Residential Address:
Congratulations once more!
Yours sincerely,
Dr. (Mrs.) Wright D. Cruz
Online Winning Notification Dept.,
UK Shell petroleum online Lottery International.


Image

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#191639 by Faizan Docherty Wed Feb 19, 2014 1:45 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 188.135.202.234<br>Originating ISP: Aria S.p.a.<br> City: Cascina<br>Country of Origin: Italy<br>* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp221431vcj;
Tue, 18 Feb 2014 16:19:23 -0800 (PST)
X-Received: by 10.180.98.165 with SMTP id ej5mr20090960wib.33.1392769163280;
Tue, 18 Feb 2014 16:19:23 -0800 (PST)
Return-Path: <[email protected]>
Received: from server14.simplewebserver.co.uk (server14.simplewebserver.co.uk. [85.92.75.91])
by mx.google.com with ESMTPS id o10si16332053wjz.142.2014.02.18.16.19.22
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 18 Feb 2014 16:19:23 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 85.92.75.91 as permitted sender) client-ip=85.92.75.91;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 85.92.75.91 as permitted sender) [email protected]
Message-Id: <[email protected]>
Received: from [188.135.202.234] (port=38963 helo=User)
by server14.simplewebserver.co.uk with esmtpa (Exim 4.82)
(envelope-from <[email protected]>)
id 1WFusZ-0007W2-SU; Wed, 19 Feb 2014 00:19:12 +0000
Reply-To: <[email protected]>
From: "The SHELL PETROLEUM"<[email protected]>
Subject: Re: Winner / REF NO.: CD80./..
Date: Wed, 19 Feb 2014 01:19:10 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server14.simplewebserver.co.uk
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - philipgray.com
X-Get-Message-Sender-Via: server14.simplewebserver.co.uk: authenticated_id: [email protected]


THE SHELL PETROLEUM CORPORATION

Address: Shell U.K.

Limited Shell Centre London SE1 7NA.





Congratulations!



YOU HAVE WON TWO MILLION BRITISH POUNDS (Ј2,000,000.00) ON SHELL PETROLEUM UK/QATAR DRAW. REF NO.: CD80.



YOUR NAME WAS AMONG THE 2014 DRAW WINNERS. INCLUDE YOUR FULL NAME AND TELEPHONE NUMBER FOR IMMEDIATE RELEASE OF YOUR WINNER'S CERTIFICATE TO YOU.



CONGRATULATIONS!



YOUR IN SERVICE,



MR. PHILIP G. WILLIAMS

COORDINATOR FOR DRAW WINNERS.

THE SHELL PETROLEUM CORPORATION, UK.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#191738 by Faizan Docherty Thu Feb 20, 2014 5:18 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 188.135.202.234
Originating ISP: Aria S.p.a.
City: Cascina
Country of Origin: Italy
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.70.5 with SMTP id b5csp60156vcj;
Wed, 19 Feb 2014 15:19:05 -0800 (PST)
X-Received: by 10.15.94.135 with SMTP id bb7mr42499859eeb.48.1392851944858;
Wed, 19 Feb 2014 15:19:04 -0800 (PST)
Return-Path: <[email protected]>
Received: from mail.unitednaghi.com.sa (mail.unitednaghi.com.sa. [212.116.216.233])
by mx.google.com with ESMTP id s9si3871275eeg.240.2014.02.19.15.19.04
for <multiple recipients>;
Wed, 19 Feb 2014 15:19:04 -0800 (PST)
Received-SPF: fail (google.com: domain of [email protected] does not designate 212.116.216.233 as permitted sender) client-ip=212.116.216.233;
Authentication-Results: mx.google.com;
spf=hardfail (google.com: domain of [email protected] does not designate 212.116.216.233 as permitted sender) [email protected]
Received: from User ([188.135.202.234])
by mail.unitednaghi.com.sa (IBM Domino Release 9.0.1)
with ESMTP id 2014022002125852-5678 ;
Thu, 20 Feb 2014 02:12:58 +0300
Reply-To: <[email protected]>
From: "The SHELL PETROLEUM"<[email protected]>
Subject: Re: Winner / REF NO.: CD80./..
Date: Thu, 20 Feb 2014 00:12:44 +0100
MIME-Version: 1.0
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-MIMETrack: Itemize by SMTP Server on Unedmailho/UNITEDNAGHI(Release 9.0.1|October 14, 2013) at
02/20/2014 02:13:00 AM,
Serialize by Router on Unedmailho/UNITEDNAGHI(Release 9.0.1|October 14, 2013) at
02/20/2014 02:19:16 AM,
Serialize complete at 02/20/2014 02:19:16 AM
Message-ID: <[email protected]>
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
charset="Windows-1251"


THE SHELL PETROLEUM CORPORATION
Address: Shell U.K.
Limited Shell Centre London SE1 7NA.

Congratulations!

YOU HAVE WON TWO MILLION BRITISH POUNDS (Ј2,000,000.00) ON SHELL PETROLEUM UK/QATAR DRAW. REF NO.: CD80.

YOUR NAME WAS AMONG THE 2014 DRAW WINNERS. INCLUDE YOUR FULL NAME AND TELEPHONE NUMBER FOR IMMEDIATE RELEASE OF YOUR WINNER'S CERTIFICATE TO YOU.

CONGRATULATIONS!

YOUR IN SERVICE,

MR. PHILIP G. WILLIAMS
COORDINATOR FOR DRAW WINNERS.
THE SHELL PETROLEUM CORPORATION, UK.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: No registered users and 6 guests