#256203 by Faizan Docherty Sun Jun 14, 2015 11:19 am
Delivered-To: <snipped>
Received: by 10.194.58.228 with SMTP id u4csp3622264wjq;
Wed, 10 Jun 2015 22:35:14 -0700 (PDT)
X-Received: by 10.152.25.198 with SMTP id e6mr7849541lag.83.1434000914528;
Wed, 10 Jun 2015 22:35:14 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-la0-x241.google.com (mail-la0-x241.google.com. [2a00:1450:4010:c03::241])
by mx.google.com with ESMTPS id t11si9663613lbf.65.2015.06.10.22.35.14
for <snipped>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 10 Jun 2015 22:35:14 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::241 as permitted sender) client-ip=2a00:1450:4010:c03::241;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::241 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-la0-x241.google.com with SMTP id gd6so5091815lab.1
for <snipped>; Wed, 10 Jun 2015 22:35:14 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.112.210.137 with SMTP id mu9mr7633314lbc.95.1434000914216;
Wed, 10 Jun 2015 22:35:14 -0700 (PDT)
Sender: [email protected]
Received: by 10.25.151.66 with HTTP; Wed, 10 Jun 2015 22:35:14 -0700 (PDT)
Date: Thu, 11 Jun 2015 06:35:14 +0100
X-Google-Sender-Auth: 06-v5az5w5nWg-tyfuI0TvaNedc
Message-ID: <CAFvAdNA5CfMPTyUcftzU2hoSjwss1DgCjGLdktU0urX_DNgs6w@mail.gmail.com>
Subject: Shipment Inquiry : Marda Impex Group LLC, UAE.
From: Marda Impex Group LLC UAE <[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary=001a11c3d7dc198c610518375b4d
Bcc: <snipped>


Hi,

This is Ms. Pamila Morad Zahabian from Marda Impex Group LLC, UAE. Could you please send us more information about your company and detailed product, also let us know if shipment can be done within 3 weeks from date?


Waiting on your immediate response by return mail and look forward to a successful business relationship with you.

Thanks,

Ms. Pamila Morad Zahabian

Marda Impex Group LLC UAE
Address:Al Wahda Street, Al Khan Bridge, Sharjah, UAE.
Phone: 0097165333411.
E-mail: [email protected]

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

#256546 by AlanJones Tue Jun 16, 2015 11:03 pm
From: [email protected]
Reply-to: [email protected]
Tel. No.: +6085431122

Dear Sir/Madam,

We are interested in purchasing your products and we sincerely hope to
establish a long-term business relation with your esteemed company. Please
kindly send me your latest catalog. Also, inform me about the Minimum Order
Quantity, Delivery time or FOB, and payment terms warranty. Your early
reply is highly appreciated.
Thank You!
Best Regards,
Mr.Venkat ratnam
Apex

Global LTD.Malaysia Sdn Bhd operates restaurants, kiosks, and cafes.
The company is based in Kuala Lumpur, Malaysia Sdn Bhd is a subsidiary
of ApexPal International Ltd
Tel:+6085431122

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
#257193 by vonpaso xlura Sat Jun 20, 2015 10:51 pm
Delivered-To: snip
Received: by 10.140.92.180 with SMTP id b49csp305824qge;
Thu, 7 May 2015 20:57:07 -0700 (PDT)
X-Received: by 10.55.50.201 with SMTP id y192mr4147990qky.10.1431057427684;
Thu, 07 May 2015 20:57:07 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-qg0-x232.google.com (mail-qg0-x232.google.com. [2607:f8b0:400d:c04::232])
by mx.google.com with ESMTPS id 16si3791629qkw.36.2015.05.07.20.57.07
for <snip>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 07 May 2015 20:57:07 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:400d:c04::232 as permitted sender) client-ip=2607:f8b0:400d:c04::232;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:400d:c04::232 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-qg0-x232.google.com with SMTP id y78so29551341qgd.0
for <snip>; Thu, 07 May 2015 20:57:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=0pbrHsFNF5uYlb7zlQru3LUhOmqBClCUNilny2rr7Fs=;
b=lKnNpMKysIIDIkT+8UcyqQNbbUJsgXRrBoDZRX4rsiIUEoJED7F4aHaOGVpfDeo/+O
LnrNk707N3/3y63orQbHAhZFSG8pTWoHKla8MTGE4qB/JemGQ/UTginEJF7G9FXXKlZE
ONkL+OhfcAI0xHnZMhuc9zsJMNlijrvuRFE5B2ke0IzDIJRGjsJJCC93A8q4SL2CSVE0
E+73K787iNXQGp4b9qB3LgAEPtl5THp+K/xmvl7xegD5ILK3JidWTDn0BYxAdfkEnTXP
XCGfQYnfQYOf2uli4XsE0VSEOjN9bkY+9XAfmYpW8SVszLJt/PJ4kxIWWgIOOlFN5jlc
m9Jw==
MIME-Version: 1.0
X-Received: by 10.55.20.207 with SMTP id 76mr4154314qku.46.1431057427354; Thu,
07 May 2015 20:57:07 -0700 (PDT)
Received: by 10.140.86.100 with HTTP; Thu, 7 May 2015 20:57:07 -0700 (PDT)
Date: Fri, 8 May 2015 04:57:07 +0100
Message-ID: <CAFPsqM1i7YHex_RyavmCK_tYUJ4ahdC9zfbgWM=L+mijEQNEtQ@mail.gmail.com>
Subject: Items Needed......................................................................Contact
Shipper
From: daddy mark <[email protected]>
To: <snip>
Content-Type: multipart/alternative; boundary=001a114005329c5bda05158a051d

--001a114005329c5bda05158a051d
Content-Type: text/plain; charset=UTF-8

Hello snip,

Good to read back from you.I felt comfortable to email you my order this
way rather than to fill it on your site,so below are the items I want to
order

(snip list of products)

SHIPPING ADDRESS
1)My Customer's ID # : D7LO231101LOP
2)Delivery Full Address:
Company Name: Social P.store Inc
82 Samuel Ram
PO Box 1184
Nadi
Fiji Islands

Concerning the shipment,the likes of UPS,FEDEX and POST OFFICE alway
s don't take care of the charges down here. Charges like handling, customs
duties,tax etc. I have experienced such situation before and I don't want
to be the victims of such a thing again. I will be glad if you contact this
freight forwarder JIDAIR CARGO LOGISTICS LTD for shipping quote.The
shipping company will arrange the pick-up of my order from your store,so
you don't have any stress to face in shipping processing at all.Here is
their email address ([email protected]) ,Not that I can't deal
with the shipper directly,but they always prefer to deal with the store
where they will be doing the pick up in other to reduce the customs duties
and other charges.They have a way of preparing their shipment documents
whereby the custom duties payment on this goods will be reduced and if I
wanted to pay for the custom duties and other charges, at times it is 40%
of the whole package amount.I do trust JIDAIR CARGO LOGISTICS LTD ,if not I
wouldn't have recommend them for my shipment.They are very reliable and
fast.They will take care of everything including Handling, Customs
duties,Tax, Insurance etc.Contact them to obtain a quote and get back to me
in the format bellow:

COST OF THE ORDER
COST OF THE SHIPPING FROM JIDAIR CARGO LOGISTICS LTD
TOTAL COST (ORDER + SHIPPING)
Once I have these details from you, I will get back to you with my credit
card information,so you can charge and make the necessary shipping
arrangements.
Regards,
Mark

NOTE:The freight company will need these 5 information to get you a
quote,so provide them with the details bellow:
1)My Customer's ID # : D7LO231101LOP
2)Delivery Full Address:
Company Name: Social P.store Inc
82 Samuel Ram
PO Box 1184
Nadi
Fiji Islands
3)Pick Up Full Address : PROVIDE YOUR ADDRESS
4)Weight Of The Consignment : PROVIDE ORDER WEIGHT
5)Momentary Value Of The Consignment : PROVIDE ORDER TOTAL COST

Delivered-To: snip
Received: by 10.140.92.180 with SMTP id b49csp272859qge;
Fri, 8 May 2015 13:10:24 -0700 (PDT)
X-Received: by 10.194.190.168 with SMTP id gr8mr9963657wjc.83.1431115824276;
Fri, 08 May 2015 13:10:24 -0700 (PDT)
Return-Path: <[email protected]>
Received: from DUB004-OMC3S8.hotmail.com (dub004-omc3s8.hotmail.com. [157.55.2.17])
by mx.google.com with ESMTPS id q3si410993wix.19.2015.05.08.13.10.23
for <snip>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 08 May 2015 13:10:24 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 157.55.2.17 as permitted sender) client-ip=157.55.2.17;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 157.55.2.17 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from DUB126-W85 ([157.55.2.9]) by DUB004-OMC3S8.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Fri, 8 May 2015 13:10:23 -0700
X-TMN: [7EbcGhZWsw+S+DuPu1ZP445d34giWGhS]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_b9703d9d-1bd4-4936-ac18-84df69c9b7c8_"
From: JIDAIR CARGO LOGISTICS <[email protected]>
To: <snip>
Subject: Thank you for contacting JIDAIR CARGO LOGISTICS LTD for your service
Date: Fri, 8 May 2015 21:10:23 +0100
Importance: Normal
In-Reply-To:
<CAFZMU1cUatha6=1s0PfAUXb+jfxghN0dfhmyfAX2L_147KUM3Q@mail.gmail.com>
References:
<CAFZMU1cUatha6=1s0PfAUXb+jfxghN0dfhmyfAX2L_147KUM3Q@mail.gmail.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 08 May 2015 20:10:23.0409 (UTC) FILETIME=[041C8A10:01D089CB]

Hello snip,


Thank you for contacting JIDAIR CARGO LOGISTICS LTD for your service. We appreciate your business,We will need the full information below to give a quote.


1)Customer's ID #
2)Delivery Full Address:
3)Pick Up Full Address :
4)Weight Of The Consignment :
5)Momentary Value Of The Consignment

Thanks,
Benson Tom
Customer Care Specialist and Account Department
JIDAIR CARGO LOGISTICS LTD
Address: 300 Pine Avenue, Randburg, Johannesburg, 2194
Country: South Africa

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
#258698 by Faizan Docherty Wed Jul 01, 2015 10:18 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.203.71.250
Originating ISP: Globacom Ltd
City: n/a
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.79.89.196 with SMTP id n187csp1311351ivb;
Sun, 28 Jun 2015 14:47:14 -0700 (PDT)
X-Received: by 10.194.92.10 with SMTP id ci10mr21599603wjb.49.1435528033895;
Sun, 28 Jun 2015 14:47:13 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.seleron.ro (mail.seleron.ro. [176.223.202.32])
by mx.google.com with ESMTPS id z12si70332993wjw.88.2015.06.28.14.47.05
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Sun, 28 Jun 2015 14:47:13 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 176.223.202.32 as permitted sender) client-ip=176.223.202.32;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 176.223.202.32 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from selero28 by mail.seleron.ro with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1Z9KPc-0003ZL-CL; Mon, 29 Jun 2015 00:46:52 +0300
To: <snipped>
Subject:
X-PHP-Script: seleron.ro/mail.php for 41.203.71.250
From: Mac Willimas <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Mon, 29 Jun 2015 00:46:52 +0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mail.seleron.ro
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [501 502] / [47 12]
X-AntiAbuse: Sender Address Domain - mail.seleron.ro
X-Get-Message-Sender-Via: mail.seleron.ro: authenticated_id: selero28/only user confirmed/virtual account not confirmed


Hi Sales, Am ordering from United Kingdom I want to place an order from you. I know the difficulties encountered when shipping internationally, But that will not be a problem because i am registered with a shipping company whom i have used severally without any delay nor problems with my goods. Before i place this order, i want you to notify me if i am able to place the order and most important: If i can make payment with my credit cards Visa/Mc (Issued in the United States) because that is the only way we are set for payment without no delay. I don't place online orders ,can i e-mail my ORDER needed then you can give me a quote here and make charges to my cards manually on your end ? Pls Clarify. Looking forward to your swift response then we can proceed further as soon as possible. Regards, Mac Wiiliams

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#259323 by AlanJones Tue Jul 07, 2015 6:59 am
From: [email protected]
Reply-to: [email protected]
Tel. Nos.: +19204674621 & +19204678573

Good Day,

Am Ms grace nelson from Trading Co., Ltd. we are a big firm sourcing Company base in United State of America.
We are currently sourcing for two of our Client in Mexico and Turkey who is in need Of your product.
Please treat this as an urgent inquiry because our client are in need of this product urgently, we do hope to establish a

long term relationship.
However please reply us with your company's latest catalogs with the,

Minimum Order Quantity

payment terms warranty

Delivery time/FOB

We await Your early reply

Regards,
Ms Pervez Abro
Purchasing Manager
Trading Co., Ltd.
2755 lake pine path apt 122,
St Joseph, MI United States
Telephone: +1 (920) 467 4621
Fax: 920.467.8573
Email:[email protected]

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
#260333 by vonpaso xlura Wed Jul 15, 2015 11:44 pm
Delivered-To: snip
Received: by 10.140.33.8 with SMTP id i8csp110661qgi;
Wed, 15 Jul 2015 15:36:21 -0700 (PDT)
X-Received: by 10.112.50.230 with SMTP id f6mr6337868lbo.17.1436999781305;
Wed, 15 Jul 2015 15:36:21 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-la0-x234.google.com (mail-la0-x234.google.com. [2a00:1450:4010:c03::234])
by mx.google.com with ESMTPS id az11si5175960lab.27.2015.07.15.15.36.20
for <snip>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 15 Jul 2015 15:36:21 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::234 as permitted sender) client-ip=2a00:1450:4010:c03::234;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:4010:c03::234 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-la0-x234.google.com with SMTP id w2so32901467lag.3
for <snip>; Wed, 15 Jul 2015 15:36:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=waFE0x7+35GoebKoEqE1Vag0lYCrA2WWWc0r7mWxW8U=;
b=WTgMhsaLcrSLlrzua6vWM6eudcA2J5TgLJfXwhgAx+mV4ubrxqhQLXx8ZGxJzXnUDX
DcRc33M9WEFnbC/mJLuLvAqPZnbxDkIiC2IB82IGq3VFs2SZRtdiJ29E8uC9+DxO1Ftd
+oyXFuQCtPDTQz6Z8JE5GbeM382SU8n/luvqJ5R3AZtqiw0V5bVJb0lOvMal71ijSApY
DjY28GZaz88UGv6Eog/3RNCtYaNOaPxU+mci4yTwR34NmGhbXNZvl8u/w//6jEkeV67+
gpNGrDiLGxTiUxjI+csPxL8F8DNzjcO+zTg3OLyoCkApvMXloLJrsJjbVu+d5GDhFJH0
z2pA==
MIME-Version: 1.0
X-Received: by 10.152.242.37 with SMTP id wn5mr6387171lac.90.1436999780361;
Wed, 15 Jul 2015 15:36:20 -0700 (PDT)
Received: by 10.112.75.129 with HTTP; Wed, 15 Jul 2015 15:36:20 -0700 (PDT)
In-Reply-To: <CAFZMU1dAU=JTs6ACa4ixy8eSfr12uS4QayfEC0-EyEJEzkmYrA@mail.gmail.com>
References: <CAFZMU1dAU=JTs6ACa4ixy8eSfr12uS4QayfEC0-EyEJEzkmYrA@mail.gmail.com>
Date: Wed, 15 Jul 2015 16:36:20 -0600
Message-ID: <CANchdHWQUqJ83aP8P_0aaO3D2KK=Kf3GQcs+QP6dPfTixvj9tw@mail.gmail.com>
Subject: Re: Product list
From: Oceanside LLC <[email protected]>
To: Snip <snip>
Content-Type: text/plain; charset=UTF-8

Hi Snip,
Thanks for your email.We are supplying some of your products to
a sister company of ours at Nadi, Republic of Fiji Islands,We will
like to pay with our

credit card Visa or Master Card bill in USA Address for the
product.Courier like ups, FedEx and dhl are common but in our client
address it is very difficult

and more expensive to receive shipments so proceed to mailing our
shipper at First Point Freight Inc
([email protected]), for the shipping

cost we have used them previously and shipments was ease and in good
condition we are ordering for resale.You can also notify the shipping
company with

our customer id# DE32051272T .


ORDER DESCRIPTION

(snip parts)

Mail us with the total cost of this order and also get to our
shipper with the weight and dimension of the items and the address
First Point Freight Inc
([email protected]),CARGO to ship from so that they
can give you a shipping cost to Nadi, Fiji Islands.

Delivery Address:
Basic Store
Suite 5, SPR Towers, Ashram Road,
Nadi, Fiji Islands
Tele/Fax: (679) 6702 193

Thanks
David Stewart
Owner

The phone number is in Nadi but looks like an invalid number in NANP. Proper form is +679-670-2193.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
#261464 by Faizan Docherty Sat Jul 25, 2015 4:37 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 24.145.134.15
Originating ISP: Earthlink
City: Powell
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


From "Christopher Burke Sat Jul 25 06:11:42 2015
X-Apparently-To: <snipped>; Sat, 25 Jul 2015 06:18:35 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 207.69.195.105
Received-SPF: none (domain of earthlink.net does not designate permitted sender hosts)
X-YMailISG: <snipped>
X-Originating-IP: [207.69.195.105]
Authentication-Results: mta1062.mail.bf1.yahoo.com from=earthlink.net; domainkeys=neutral (no sig); from=earthlink.net; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO fall-curlleaf.atl.sa.earthlink.net) (207.69.195.105)
by mta1062.mail.bf1.yahoo.com with SMTPS; Sat, 25 Jul 2015 06:18:34 +0000
Received: from pop03.mail.atl.earthlink.net ([207.69.200.48])
by fall-curlleaf.atl.sa.earthlink.net with esmtp (Exim 4.34)
id 1ZIsmx-00044z-1q; Sat, 25 Jul 2015 02:18:27 -0400
Received: from user-0c931gf.cable.mindspring.com ([24.145.134.15] helo=User)
by pop03.mail.atl.earthlink.net with smtp (Exim 3.36 #1)
id 1ZIsgG-0003OO-00; Sat, 25 Jul 2015 02:11:32 -0400
Reply-To: <[email protected]>
From: "Christopher Burke"<[email protected]>
Subject: Dear Sir/Madam
Date: Sat, 25 Jul 2015 02:11:42 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
Content-Length: 546


Dear Sir/Madam,

We are interested in purchasing your products and we sincerely hope to establish a
long-term business relation with your esteemed company.

Please kindly send me your latest catalog. Also, inform me about the Minimum Order Quantity, Delivery time or FOB, and payment terms warranty.

Please contact us via: [email protected]

Your early reply would be highly appreciated.
Thank You!

Regards,
Christopher Burke
(Purchasing Manager)
=================
Super Mega Trade Centre
Email: [email protected]

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#261736 by AlanJones Tue Jul 28, 2015 2:01 am
From: [email protected]
Reply-to: [email protected]
Tel. No.: +17077866256

Dear sir/Madam

This is a trade inquiry to get more details about your products for export/import purposes.

We are American trade company linking export and import business through Europe and America into Middle east countries.

Reply with your product specification and trade conditions to ascertain if we can connect you with our numerous clients in the waiting list.

Regards

Morgan

+17077866256

Almond Trading Co.
Califonia.

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
#262933 by Faizan Docherty Thu Aug 06, 2015 7:15 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 101.0.104.106
Originating ISP: Digital Pacific Pty Ltd
City: Jannali
Country of Origin: Australia
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.28.47.19 with SMTP id v19csp48220wmv;
Tue, 4 Aug 2015 15:10:02 -0700 (PDT)
X-Received: by 10.70.34.171 with SMTP id a11mr12361437pdj.18.1438726202732;
Tue, 04 Aug 2015 15:10:02 -0700 (PDT)
Return-Path: <[email protected]>
Received: from aso-006-i430.relay.mailchannels.net (aso-006-i430.relay.mailchannels.net. [174.136.13.87])
by mx.google.com with ESMTP id jv9si1375480pbb.201.2015.08.04.15.10.01
for <snipped>;
Tue, 04 Aug 2015 15:10:02 -0700 (PDT)
Received-SPF: neutral (google.com: 174.136.13.87 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=174.136.13.87;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 174.136.13.87 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
X-Sender-Id: _forwarded-from|ded747.digitalpacific.com.au:userid:48
Received: from r8-chicago.webserversystems.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id 02C501021C9
for <snipped>; Tue, 4 Aug 2015 22:09:59 +0000 (UTC)
X-Sender-Id: _forwarded-from|ded747.digitalpacific.com.au:userid:48
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.232.141.54])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.5.1);
Tue, 04 Aug 2015 22:10:00 +0000
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|ded747.digitalpacific.com.au:userid:48
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1438726200288:2681800463
X-MC-Ingress-Time: 1438726200288
Received: from 106.104.0.101.static.digitalpacific.com.au ([101.0.104.106]:56918 helo=ded747.digitalpacific.com.au)
by r8-chicago.webserversystems.com with esmtp (Exim 4.85)
(envelope-from <[email protected]>)
id 1ZMkPF-0002P6-DN
for <snipped>; Tue, 04 Aug 2015 17:09:58 -0500
Received: by ded747.digitalpacific.com.au (Postfix, from userid 48)
id 96F18A29FDA; Wed, 5 Aug 2015 08:08:58 +1000 (EST)
Date: Wed, 5 Aug 2015 08:08:58 +1000
To: <snipped>
From: Steve <[email protected]>
Subject: Inquiry
Message-ID: <[email protected]>
X-Priority: 3
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"
X-Spam-Status: No, score=2.8
X-Spam-Score: 28
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Hello, I am Steve. I would like to place an order from you
and have it ship ped with a shipping company I have used several times in
the past. Before p lacing an order with you, I would like to know if I can
pay with a credit c ard (such as Master, Visa or American Express), also,
I don't like to place online orders so can I simply email my order and have
you give me a quote? This will allow the fastest processing of my orders.
Before we continue wi th this order, i will like it to come to your notice
that, I will send you my order and i will need you to get back to me with
the total cost of my or der. I will send you my credit card to be charged
for the total cost of my order and I would like you to help me Charge another
extra fee from my card for the freight forwarder who will be coming to pick
up my ordered items f rom you, as they do not presently have a credit card
payment option,because they are presently reconstructing their management.
After all the charges have been made on my credit card, you will help me
Transfer the shipment fe e to the freight forwarder and i will let them know
when to come for the pi ckup as soon as i have the go ahead from you. Let
me know if this can be do ne and i will get back to you with the items needed.Looking
forward to your swift response then we can proceed further as soon as possible..
Very Resp ectfully, Steve [...]

Content analysis details: (2.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(stevestoreltd[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-1.4 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
X-Spam-Flag: NO
X-AuthUser:


Hello, I am Steve. I would like to place an order from you and have it ship ped with a shipping company I have used several times in the past. Before p lacing an order with you, I would like to know if I can pay with a credit c ard (such as Master, Visa or American Express), also, I don't like to place online orders so can I simply email my order and have you give me a quote? This will allow the fastest processing of my orders. Before we continue wi th this order, i will like it to come to your notice that, I will send you my order and i will need you to get back to me with the total cost of my or der. I will send you my credit card to be charged for the total cost of my order and I would like you to help me Charge another extra fee from my card for the freight forwarder who will be coming to pick up my ordered items f rom you, as they do not presently have a credit card payment option,because they are presently reconstructing their management. After all the charges have been made on my credit card, you will help me Transfer the shipment fe e to the freight forwarder and i will let them know when to come for the pi ckup as soon as i have the go ahead from you. Let me know if this can be do ne and i will get back to you with the items needed.Looking forward to your swift response then we can proceed further as soon as possible.. Very Resp ectfully, Steve

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#262934 by Faizan Docherty Thu Aug 06, 2015 7:20 pm
From: Gary Wembley <[email protected]>
Date: Wed, Aug 5, 2015 at 3:58 PM
Subject: Order requestion
To: <snipped>


Hello ,
My name is Gary Wembley and i Understand your Company deals in Wall stickers ,If you do email me with the types that you have including with their prices range On them thank you.

Best regards
Gary Wembley

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#263394 by AlanJones Wed Aug 12, 2015 12:01 am
From: [email protected]
Reply-to: [email protected]
Tel. No.: +16682880323

Hello

Checking on your website we request more discretionary information/brochure and availability of items on the website and price quotation per unit as well as your shipping method.

Regards

douglasmostoles Distributor
Contact Email: [email protected]
Tel: 668-288-0323
Contact: douglas mostoles
HQ - GM :

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
#265055 by Tim Atem Tue Aug 25, 2015 3:22 pm
Delivered-To: <snipped>
Received: by 10.107.9.195 with SMTP id 64csp3320413ioj;
Tue, 25 Aug 2015 11:34:58 -0700 (PDT)
X-Received: by 10.180.37.33 with SMTP id v1mr7248626wij.88.1440527697740;
Tue, 25 Aug 2015 11:34:57 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-wi0-x242.google.com (mail-wi0-x242.google.com. [2a00:1450:400c:c05::242])
by mx.google.com with ESMTPS id bx16si1071086wib.20.2015.08.25.11.34.56
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 25 Aug 2015 11:34:57 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2a00:1450:400c:c05::242 as permitted sender) client-ip=2a00:1450:400c:c05::242;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2a00:1450:400c:c05::242 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-wi0-x242.google.com with SMTP id s16so662482wiu.0
for <<snipped>>; Tue, 25 Aug 2015 11:34:56 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.194.120.198 with SMTP id le6mr52757197wjb.133.1440527696296;
Tue, 25 Aug 2015 11:34:56 -0700 (PDT)
Received: by 10.28.5.131 with HTTP; Tue, 25 Aug 2015 11:34:56 -0700 (PDT)
Reply-To: [email protected]
Date: Tue, 25 Aug 2015 19:34:56 +0100
Message-ID: <CAJK6O6Cc1SsvFJLs6rTiwQfCHAT3dNy3r4Az6z=cpYRfkJwLnw@mail.gmail.com>
Subject: PRODUCT PRICES NEEDED
From: FRANK ETU <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc: <snipped>


--

--
DEAR FRIEND,
THE INQUIRY SUPPLY,

YOU ARE REQUIRED TO SEND YOUR PRODUCTS AND PRICE LIST FOR THE ONGOING
SUPPLY IN GHANA.

DETAILS SHALL BE GIVEN TO YOU WHEN YOU REPLY.

THANKS,
MR. FRANK ETU
NOKINS INVESTMENTS CO.LTD
35 TEMA STATION ROAD,
ACCRA GHANA.
Phone :+233 268 986 239.
Email : [email protected]

====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!

Learn what a scam is and how to protect yourself
https://www.scamwarners.com/forum/viewtopic.php?f=3&t=5
#266966 by AlanJones Tue Sep 08, 2015 10:38 pm
From: Wie Sun - [email protected]
Reply-to: [email protected]
Tel. No.: +86256754391

Hello, We are really interested in your product being advertise in IM,i will like to know more about your company especially how good your products are for my company to go into a good business relationship with your company. Kindly send us quotations.to our email ([email protected]) I await to have your urgent reply to proceed. Thanks Chan wie sun MD/CEO DAMAGIX TRADING GROUP (DAMAGIX ) Tel:86256754391

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
#267619 by AlanJones Sun Sep 13, 2015 11:27 pm
From: Todd - [email protected]
Reply-to: Todd - [email protected]

Hello, I'm Todd Leonard. I would like to place an order from you and have it shipped with a shipping company I have used several times in the past. Before placing an order with you, I would like to know if I can pay with a credit card (such as Master, Visa or American Express), also, I don't like to place online orders so can I simply email my order and have you give me a quote? This will allow the fastest processing of my orders. Before we continue with this order, i will like it to come to your notice that, I will send you my order and i will need you to get back to me with the total cost of my order. I will send you my credit card to be charged for the total cost of my order and I would like you to help me Charge another extra fee from my card for the freight forwarder who will be coming to pick up my ordered items from you, as they do not presently have a credit card payment option,because they are presently reconstructing their management. After all the charges have been made on my credit card, you will help me Transfer the shipment fee to the freight forwarder and i will let them know when to come for the pickup as soon as i have the go ahead from you. Let me know if this can be done and i will get back to you with the items needed.Looking forward to your swift response then we can proceed further as soon as possible.. Very Respectfully, Todd Leonard.

Please do not tell scammers that they are listed here - it will take them seconds to change their fake details and their new details will not be listed for any future victims to find.
#268240 by vonpaso xlura Fri Sep 18, 2015 5:03 am
Received: from mc-com-us05.server.lan ([74.208.122.14]) by mx-ha.gmx.net (mxgmxus002) with ESMTP (Nemesis) id 0LsksJ-1Yjnl70ksT-012Fq2 for <********>; Mon, 24 Aug 2015 04:19:24 +0200
Received: from pop.mail.com [74.208.5.12] by mc-com-us05.server.lan with POP3 (fetchmail-6.3.9) for <*******> (single-drop); Sun, 23 Aug 2015 22:19:24 -0400 (EDT)
Received: from vmailhost.connectbd.com ([202.79.16.19]) by mx-ha.gmx.net (mxgmxus003) with ESMTPS (Nemesis) id 0MXqRl-1ZHCLn0pRX-00WpW4 for <*********>; Mon, 24 Aug 2015 04:18:04 +0200
Received: (qmail 31624 invoked by uid 511); 24 Aug 2015 06:46:03 +0600
Received: from 127.0.0.1 by vmailhost.connectbd.com (envelope-from <[email protected]>, uid 509) with qmail-scanner-1.25-st-qms (clamdscan: 0.97.5/15242. spamassassin: 3.3.1. perlscan: 1.25-st-qms. Clear:RC:1(127.0.0.1):. Processed in 0.237829 secs); 24 Aug 2015 00:46:03 -0000
X-Antivirus-MYDOMAIN-Mail-From: [email protected] via vmailhost.connectbd.com
X-Antivirus-MYDOMAIN: 1.25-st-qms (Clear:RC:1(127.0.0.1):. Processed in 0.237829 secs Process 31616)
Received: from localhost.connectbd.com (HELO webmail.snowtexal.com) (127.0.0.1) by vmailhost.connectbd.com with SMTP; 24 Aug 2015 06:46:03 +0600
Received: from 41.138.165.93 (SquirrelMail authenticated user [email protected]) by webmail.snowtexal.com with HTTP; Mon, 24 Aug 2015 06:46:03 +0600
Message-ID: <[email protected]>
Date: Mon, 24 Aug 2015 06:46:03 +0600
Subject: For you
From: "Rezayat Trading Company Ltd" <[email protected]>
To: [email protected]
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="----=_20150824064603_46213"
X-Priority: 3 (Normal)
Importance: Normal
Envelope-To: <*******>
X-GMX-Antispam: 0 (Mail was not recognized as spam); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Application: 2:movetofolder=Mg==,name=cmV2LnByZWFjaGVyQG1pbmlzdGVyLmNvbQ==
X-UI-Filterresults: notjunk:1;V01:K0:WEsY4e4+eLY=:hTeIzi7n57gqAnn+gxHb0gU0xu eZzzE6QqwHjdZrJAyMFOM4GZVT98EkwElOjhHiw5x8YVlDxE2vEzBKaltbT6yvglaDxJ2MfTA 68XBTwGV06TqSfelroxzy4LMaq0W7o3ajC/9MqdCHxPl8nhB7SGs0apjMqaqsZ/Ralpx0ANi+ OFIlLwIIQTNLNUm8kGSWitsn/mOMt2LMR+5QGwVqDsI8x9S4hyMynHhA/ershOQVacU8F1P2f uDY+gk3vcjd37KQKIBtUBi+R1wvr/fIZeSFmwzLoRNrBjfe29slne/W1iG+fB8T0tVgqTkwGW 0gStTg3oRtKpV5ROYvcgoo8qGllveBEAce7ti5SLPZc5nNd5+55Vapdtf2cLtUmzT4Z/U5/G+ nWy6o+af6N98guJIDZUNafArB1UF2BnhZmM1v52dWFDEI/N3FB7dw362fWCrfJ08omZkrjWBN 5VQpOv83H6DZBhrih+Ds1zacBoohzV0BmY1dQQaW/eWhDcYEmHwoilBWcfd5OB+coaQlOvdWk /BIjpqJ8Njue/7m8k/Hf8EWwJijYVakYJtsZSlyyzIyPa3bd2jPhcq8z9B+Ok2wzfgHZWArGA JiHfzmsuL+GGXBw1AEEGZ1hzC+pfB22NW7SV+ZRoif3tvxd+p8GBpe8IxnGZHE3ADgxFAguPY JkaaqIbu4cmpzGO2Q3Oln6/qxT4p8g9d5IozAn0fC1DitOUb4dk4e+rZGlMof6Oi6vt7JtBM0 pb6haKF8xAZWFnOeKdI6jeYzAjMus8+IX/ZLtNpCrawNhNMMpa0i39/7CkXsBlVvdYsZSiwi4 YpGy9dJy+l7a15VuWQvbEw1dQc7SdXHRAbgmMu3tI+CntNBEtN/bLMb7WCKcxiYyXX4SVtvQ6 n/5Vhr8y7cXdz4/OeJ5eamTx6ar7G6YCOMYsfbkJmditM9tOchOWgzSw5V6HV1E3ccYXNitqg +k21QiXxzSUpeQTBMpqtxpz9mIkfu8jS335ZeaAcL1omP2BOqc0dmSqklCrXn9z8/w+IUxVKq yOcPh4HSlZRdit5teZTn+5DCIPGUg3vCzPvz/ZO1VTkqtrGoJOzNSFZ9oUTgbgsgvLxHutYF2 LT32NCrBoPfDht4UCm/5Vn9OcNG+7mXQmyHEp6FIpaevjoV+dF3f7pnb2IvpXkibZDN+tAKmW 8g0TVEanhOkzaIeLoxW4wruGIYxtooKBRS/Zy+DU6JG8wMpK6EhpL9q1GFe7jf8xq8hnbHf4J k5HP7iucomKqHqCA2Bic9IzTopcmsOOk2/g==

We are in need of your products attached which we saw online. We will like
to know more on the product so we can place our orders. and let us know
the price listing and your payment terms and delivery terms.

Waiting for your response
Shaikh Shahid
Rezayat Trading Company Ltd.
Kuwait. Kuwait Office P.O.Box 106.
Address: Safat 13002, Kuwait
Tel: +965-2481 6836. Fax: +965-2483 1030 / 2481 0270n s
www.rezayatkwt.com

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10

Who is online

Users browsing this forum: No registered users and 17 guests