#223983 by Faizan Docherty Tue Oct 21, 2014 10:23 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 65.54.190.200
Originating ISP: Microsoft Hosting
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.78.147 with SMTP id l19csp369627vck;
Tue, 21 Oct 2014 04:57:51 -0700 (PDT)
X-Received: by 10.70.87.168 with SMTP id az8mr34666701pdb.55.1413892671504;
Tue, 21 Oct 2014 04:57:51 -0700 (PDT)
Return-Path: <[email protected]>
Received: from BAY004-OMC4S25.hotmail.com (bay004-omc4s25.hotmail.com. [65.54.190.227])
by mx.google.com with ESMTPS id ch7si10955514pdb.20.2014.10.21.04.57.50
for <multiple recipients>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 21 Oct 2014 04:57:51 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.54.190.227 as permitted sender) client-ip=65.54.190.227;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.54.190.227 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from BAY176-W22 ([65.54.190.200]) by BAY004-OMC4S25.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Tue, 21 Oct 2014 04:57:49 -0700
X-TMN: [1dFIMhSKluriKIEWckBU5wdaGTe5z2Zv]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_8bdbd465-673e-4665-82cb-6c133f4f93b1_"
From: kuffo effo <[email protected]>
To: "[email protected]" <[email protected]>
Subject: supply
Date: Tue, 21 Oct 2014 11:57:49 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 21 Oct 2014 11:57:49.0972 (UTC) FILETIME=[3CAFAD40:01CFED26]


Dear Sir/Madam,
Can You Provide Me The Details Of Your Product, In terms Of Payment,
Quality Level And FOB Price If Ordered In Large Quantity.

Please Reply On My Email: [email protected] Directly On; Thank You.

Mr.Kuffo Effo
Country: Ghana
Emai: [email protected]

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

#224231 by Faizan Docherty Wed Oct 22, 2014 3:53 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 107.1.216.243
Originating ISP: Comcast Cable
City: Brookfield
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.125.234 with SMTP id mt10csp409367pdb;
Tue, 21 Oct 2014 09:50:28 -0700 (PDT)
X-Received: by 10.68.89.3 with SMTP id bk3mr36018689pbb.73.1413910228404;
Tue, 21 Oct 2014 09:50:28 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (ar-005-i201.relay.mailchannels.net. [162.253.144.83])
by mx.google.com with ESMTP id kk1si2658112pbc.81.2014.10.21.09.50.27
for <snipped>;
Tue, 21 Oct 2014 09:50:28 -0700 (PDT)
Received-SPF: permerror (google.com: permanent error in processing during lookup of [email protected]) client-ip=162.253.144.83;
Authentication-Results: mx.google.com;
spf=permerror (google.com: permanent error in processing during lookup of [email protected]) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=brickbodies.com
X-Sender-Id: _forwarded-from|199.168.100.154
Received: from r8-chicago.webserversystems.com (ip-10-213-14-133.us-west-2.compute.internal [10.213.14.133])
by relay.mailchannels.net (Postfix) with ESMTPA id E0D5A60558
for <snipped>; Tue, 21 Oct 2014 16:50:22 +0000 (UTC)
X-Sender-Id: _forwarded-from|199.168.100.154
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.216.27.60])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.3.1);
Tue, 21 Oct 2014 16:50:25 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|199.168.100.154
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1413910223978:1651712444
X-MC-Ingress-Time: 1413910223977
Received: from mail.brickbodies.com ([107.1.216.243]:48089)
by r8-chicago.webserversystems.com with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XgcdW-000DQF-FA
for <snipped>; Tue, 21 Oct 2014 11:50:19 -0500
Received: from brickbodies.com (199.168.100.154) by BBMail.brickbodies.com
(192.168.0.41) with Microsoft SMTP Server id 8.3.327.1; Tue, 21 Oct 2014
12:50:04 -0400
Reply-To: Mr. Johnson Addo <[email protected]>
From: Mr.Johnson Addo <[email protected]>
To: <snipped>
Subject: Re: We Are Interested In Your Products.
Date: Tue, 21 Oct 2014 10:49:41 -0600
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Brightmail-Tracker: <snipped>
X-Spam-Status: No, score=3.3
X-Spam-Score: 33
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Dear Sir, An open tender for the supply of your products to
the Government of Ghana. We will appreciate it more if you can give us with
detail specification/price lists of your product/s to avoid making a wrong
choice of product. [...]

Content analysis details: (3.3 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 SPF_PASS SPF: sender matches SPF record
-1.4 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
X-Spam-Flag: NO
X-MC-Forward: <snipped>
X-AuthUser:


Dear Sir,


An open tender for the supply of your products to the Government of Ghana. We will appreciate it more if you can give us with detail specification/price lists of your product/s to avoid making a wrong choice of product.



Mr. Johnson Addo
EV GHANA LTD
No.115 Tema Road,
Accra-Ghana
Tel: +233 541554856
Email: [email protected]

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#224263 by Faizan Docherty Wed Oct 22, 2014 9:25 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.222.211.226
Originating ISP: Galaxy Backbone Plc
City: Abuja
Country of Origin: Nigeria
* For a complete report on this email header goto ipTRACKERonline


From Floyd Carter Sun Oct 19 17:48:56 2014
X-Apparently-To: <snipped>; Wed, 22 Oct 2014 00:31:35 +0000
Return-Path: <[email protected]>
X-YahooFilteredBulk: 41.222.211.226
Received-SPF: fail (domain of cpanel.kano.gov.ng does not designate 41.222.211.226 as permitted sender)
X-YMailISG: <snipped>
X-Originating-IP: [41.222.211.226]
Authentication-Results: mta1250.mail.ne1.yahoo.com from=outlook.com; domainkeys=neutral (no sig); from=outlook.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO cpanel.kano.gov.ng) (41.222.211.226)
by mta1250.mail.ne1.yahoo.com with SMTPS; Wed, 22 Oct 2014 00:31:34 +0000
Received: from moanr by cpanel.kano.gov.ng with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1XfubA-0008QG-Tx
for <snipped>; Sun, 19 Oct 2014 13:48:56 -0400
To: <snipped>
Subject: ORDER ITEMS FROM YOUR STORE/COMPANY
From: Floyd Carter <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sun, 19 Oct 2014 13:48:56 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cpanel.kano.gov.ng
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [505 502] / [47 12]
X-AntiAbuse: Sender Address Domain - cpanel.kano.gov.ng
X-Get-Message-Sender-Via: cpanel.kano.gov.ng: authenticated_id: moanr/only user confirmed/virtual account not confirmed
Content-Length: 739


Hello My name is Floyd Carter. I'm the General Manager of CARTERS SHOP LTD. We are certainly willing to make some purchase of some items in your company or store but before we proceed answer the question below. 1. Do you have POS machine to charge credit card? 2. Do you accept master and visa credit card payment? 3. Do you accept private pick up by our forwarder? 4. Can you send me your website to view your products? 5. Can you send me your wholesale price sheet if possible? Kindly email me if this is possible to ship to us with out any problem. I will await your reply Asap Thank you Floyd Carter CARTERS SHOP LTD 15613 rue Indira Gandhi BP 8619 Antananarivo 101 Madagascar Tel::+261.43.2483218 Fax::+261.34.2459812

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#224790 by Faizan Docherty Sun Oct 26, 2014 8:22 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 65.55.34.7
Originating ISP: Microsoft Hosting
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.78.147 with SMTP id l19csp59810vck;
Sat, 25 Oct 2014 06:45:02 -0700 (PDT)
X-Received: by 10.68.141.4 with SMTP id rk4mr11619577pbb.54.1414244701757;
Sat, 25 Oct 2014 06:45:01 -0700 (PDT)
Return-Path: <[email protected]>
Received: from COL004-OMC1S12.hotmail.com (col004-omc1s12.hotmail.com. [65.55.34.22])
by mx.google.com with ESMTPS id m13si6516322pdj.84.2014.10.25.06.45.00
for <multiple recipients>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Sat, 25 Oct 2014 06:45:01 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.22 as permitted sender) client-ip=65.55.34.22;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.55.34.22 as permitted sender) [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=outlook.com
Received: from COL127-W4 ([65.55.34.7]) by COL004-OMC1S12.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Sat, 25 Oct 2014 06:45:00 -0700
X-TMN: [07G+AutTRb4GWaLNOId9fkgQ6CumNRdT]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_bf7cde4e-0ec6-4d84-b13c-782a56507328_"
From: prince beno20 <[email protected]>
To: "[email protected]" <[email protected]>
Subject: WE ARE LOOKING FOR YOUR SUPPLY
Date: Sat, 25 Oct 2014 13:45:00 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 25 Oct 2014 13:45:00.0647 (UTC) FILETIME=[DF51CF70:01CFF059]


Dear Sir/Madam,

We Are interested in your product and to do business with your company let us
know if you can handle the supply of most items and also send your
product website.

PAYMENT TERMS:The terms of payment is 80% advance payment via (T/T) by
telegraphic
transfer confirmed in your account before Production and 20% to be
confirmed as well
before shipment Delivery Time: 6 to 12 months after receipt your full payment.

Regards,
Mr.PRINCE BENO
Government Accredited Agent

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#225071 by vonpaso xlura Tue Oct 28, 2014 5:56 am
From [email protected] Thu Oct 23 12: 02:10 2014
Return-Path: <[email protected]>
X-Original-To: me
Delivered-To: me
Received: from mail.netbsd.org (mail.NetBSD.org [IPv6:2001:4f8:3:7::25]) by my box (Postfix) with ESMTPS id 5CCF87F5 for <me>; Thu, 23 Oct 2014 12:02:09 -0400 (EDT)
Received: by mail.netbsd.org (Postfix, from userid 605) id 4880D14A2E5; Thu, 23 Oct 2014 16:02:05 +0000 (UTC)
Delivered-To: [email protected]
Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id D5AB314A30A for <[email protected]>; Thu, 23 Oct 2014 16:02:00 +0000 (UTC)
X-Virus-Scanned: amavisd-new at NetBSD.org
X-Spam-Flag: NO
X-Spam-Score: 3.217
X-Spam-Level: ***
X-Spam-Status: No, score=3.217 tagged_above=2 required=8 tests=[BAYES_50=2.5, FREEMAIL_FROM=0.001, FREEMAIL_REPLYTO=1, RP_MATCHES_RCVD=-1.501, SUBJ_ALL_CAPS=1.197, T_FREEMAIL_FORGED_FROMDOMAIN=0.01, T_HEADER_FROM_DIFFERENT_DOMAINS=0.01] autolearn=no autolearn_force=no
Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.NetBSD.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id PWtp236hI6fe for <[email protected]>; Thu, 23 Oct 2014 16:02:00 +0000 (UTC)
Received: from server2.qizlafhosting.com (mail.qizlafhosting.com [113.23.184.87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.netbsd.org (Postfix) with ESMTPS id B598514A278 for <[email protected]>; Thu, 23 Oct 2014 16:01:59 +0000 (UTC)
Received: from suppm074 by server2.qizlafhosting.com with local (Exim 4.82) (envelope-from <[email protected]>) id 1XhKpe-0003dZ-7S for [email protected]; Fri, 24 Oct 2014 00:01:46 +0800
To: [email protected]
Subject: PRODUCT INQUIRY
X-PHP-Script: asatra.com/wp-content/themes/radiate/run.php for 37.221.173.231
From: TECHIE TREND GROUP LIMITED <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-ID: <[email protected]>
Date: Fri, 24 Oct 2014 00:01:46 +0800
X-Antiabuse: This header was added to track abuse, please include it with any abuse report
X-Antiabuse: Primary Hostname - server2.qizlafhosting.com
X-Antiabuse: Original Domain - netbsd.org
X-Antiabuse: Originator/Caller UID/GID - [968 969] / [47 12]
X-Antiabuse: Sender Address Domain - server2.qizlafhosting.com
X-Get-Message-Sender-Via: server2.qizlafhosting.com: authenticated_id: suppm074/only user confirmed/virtual account not confirmed
Sender: [email protected]
List-ID: mriste.NetBSD.org
Precedence: bulk

Greetings Sales person,

I am Miss Cathline Oleta Sims from TECHIE TREND GROUP LIMITED based in Tulsa,Oklahoma USA.I am contacting you based on your advert placement i saw on a website which caught my interest; could you let me know more about your products quality and also send me your company catalog and price list on receipt of this message.

Your prompt response will be appreciated

Warm regards,
Yours Sincerely,
Oleta Cathline Sims(Sales Rep.)
TECHIE-TREND GROUP LTD
1119 E. 48 St. Oak Tree Fall
Tulsa, Oklahoma USA 74105
Email: [email protected]
Tel: 1-800-992-8312

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
#225349 by Faizan Docherty Wed Oct 29, 2014 7:29 pm
Dear Manager,

We want to make a large purchase from your company. We would be delighted to enter into business cooperation with you.

if you can produce and supply us good quality products in large quantity. Please advise your terms.

contact Email: [email protected]

Expecting to hear from you.

Best regards,

Kierownik David
Grupa Topex Sp. z o.o. Sp.k.,
Street: ul. Pograniczna 2/4,
ZIP: 02-285
CITY: Warszawa
POLAND
T +48 22 57 32 310

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#228402 by Faizan Docherty Sun Nov 23, 2014 12:29 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 65.55.34.199
Originating ISP: Microsoft Hosting
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


From salesoffice john Wed Nov 19 06:36:40 2014
X-Apparently-To: <snipped> via 76.13.25.64; Thu, 20 Nov 2014 16:29:43 +0000
X-Apparently-To: <snipped> via 98.138.227.89; Wed, 19 Nov 2014 14:37:20 +0000
X-YahooFilteredBulk: 65.55.34.206
Received-SPF: pass (domain of outlook.com designates 65.55.34.206 as permitted sender)
X-YMailISG: <snipped>
X-Originating-IP: [65.55.34.206]
Authentication-Results: mta1668.mail.gq1.yahoo.com from=outlook.com; domainkeys=neutral (no sig); from=outlook.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO COL004-OMC4S4.hotmail.com) (65.55.34.206)
by mta1668.mail.gq1.yahoo.com with SMTPS; Wed, 19 Nov 2014 14:37:17 +0000
Received: from COL131-W32 ([65.55.34.199]) by COL004-OMC4S4.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Wed, 19 Nov 2014 06:36:41 -0800
X-TMN: [UBdLJyKAH6hbcqwXDz4qTvCk2UdsQwhb]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_4d4489e9-3605-471c-b90f-4ebb37638be7_"
From: salesoffice john <[email protected]>
Subject: product needed
Date: Wed, 19 Nov 2014 15:36:40 +0100
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 19 Nov 2014 14:36:41.0274 (UTC) FILETIME=[3BC3B1A0:01D00406]
Content-Length: 1086


Dear Sir.

Please could you help us source this Items. and check the sales contract if it can work with your conditions.
Kindly View and send me your final price.
Please check and get back to me ASAP.

awesomegod1.host56.com


Michael Wilson.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#228658 by Faizan Docherty Tue Nov 25, 2014 11:56 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 209.85.216.196
Originating ISP: Google
City: Mountain View
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.29.68 with SMTP id i4csp28032pdh;
Sun, 23 Nov 2014 10:57:17 -0800 (PST)
X-Received: by 10.66.222.100 with SMTP id ql4mr26230445pac.123.1416769036902;
Sun, 23 Nov 2014 10:57:16 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (nov-007-i631.relay.mailchannels.net. [46.232.183.185])
by mx.google.com with ESMTP id bs14si18165696pdb.173.2014.11.23.10.57.12
for <snipped>;
Sun, 23 Nov 2014 10:57:16 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 46.232.183.185 as permitted sender) client-ip=46.232.183.185;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 46.232.183.185 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
X-Sender-Id: _forwarded-from|209.85.216.196
Received: from r8-chicago.webserversystems.com (ip-10-237-13-110.us-west-2.compute.internal [10.237.13.110])
by relay.mailchannels.net (Postfix) with ESMTPA id E2AE860177
for <snipped>; Sun, 23 Nov 2014 18:57:08 +0000 (UTC)
X-Sender-Id: _forwarded-from|209.85.216.196
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.248.72.174])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.4.1);
Sun, 23 Nov 2014 18:57:09 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|209.85.216.196
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1416769029171:1838485239
X-MC-Ingress-Time: 1416769029171
Received: from mail-qc0-f196.google.com ([209.85.216.196]:36127)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XscLL-00089t-NE
for <snipped>; Sun, 23 Nov 2014 12:57:07 -0600
Received: by mail-qc0-f196.google.com with SMTP id r5so1238008qcx.11
for <snipped>; Sun, 23 Nov 2014 10:57:07 -0800 (PST)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.140.88.100 with SMTP id s91mr22591844qgd.65.1416769027017;
Sun, 23 Nov 2014 10:57:07 -0800 (PST)
Received: by 10.229.190.66 with HTTP; Sun, 23 Nov 2014 10:57:06 -0800 (PST)
Reply-To: [email protected]
Date: Sun, 23 Nov 2014 18:57:06 +0000
Message-ID: <CAC4rvjdkeZLPmSVnM2sxH8RJiEGKy2==PVyCKqb7FoCQ9pZ=cA@mail.gmail.com>
Subject: URGENT INQUIRY
From: "mrs.mira jones" <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
X-Spam-Status: No, score=3.9
X-Spam-Score: 39
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Dear Sir/Madam, I am Mrs. Mira Jones from AL GHURAIR GROUP
GLOBAL FIRM LTD. I got your contact from 2014 China Trade Yellow Pages and
i believe you are a registered manufacturer/supplier. We are looking for
a trusted supplier who can be supplying us constantly based on the quality
of products with competitive prices. [...]

Content analysis details: (3.9 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.216.196 listed in list.dnswl.org]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mira.jones244[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mira.jones244[at]gmail.com)
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
X-AuthUser:


Dear Sir/Madam,

I am Mrs. Mira Jones from AL GHURAIR GROUP GLOBAL FIRM LTD.
I got your contact from 2014 China Trade Yellow Pages and i believe
you are a registered manufacturer/supplier.
We are looking for a trusted supplier
who can be supplying us constantly based on the quality of products
with competitive prices.

Please send your MOQ, price list, payment terms and delivery time
after signing of invoice.

Expecting to hear from you.

Best regards,

Mrs.Mira Jones
Sales manager
Email:([email protected])
Fax:+966-531-647-336
Country/Region:Saudi Arabia

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#228746 by vonpaso xlura Fri Nov 28, 2014 11:40 pm
Date: Tue, 11 Nov 2014 12:18:00 +0100
Message-ID: <CAL6vZ9Dvjj5EfHzo+qyT4EYna+1n6HwdY28TRevJ7mbYDugm_A@mail.gmail.com>
Subject: TOTAL COST ..Contact my shipper
From: Justin Lucas <[email protected]>
To: <snip>

Hello,

Thanks for the mail , below is the list of items i want to purchase
for and i need you to prepare quotation for:

1, <snip part name>
:............. Order 12 Qty

SHIPPING ADDRESS:
LUCAS VENTURES INCS
Lot 47 Vytauto Str, LT-00101
Palanga, Lithuania
Tel.: (+370 460) 51299

Concerning the shipping , the likes of UPS, DHL and others always
don't take care of the charges down here.Charges like handling,customs
and duties etc. We have experienced such situation before and i don't
want to experience such thing again,you do not need to worry about the
stress involve and all documentations because i have a shipping
company that have delivered to me in the past,i really like their
services so i will like you contact them about the shipping.I will be
glad if you contact this shipper (Morris Trucking Express & Forwarding
Services) for the shipping quote. Here is there email address
([email protected]) They will take care of everything
including handling, customs and duties,Tax, insurance etc,also you
will be responsible for payment to Morris Trucking Express & Forwarding
Services then all costs as far as shipping, taxes, duties, and
insurance in addition to the costs of the product should be sent to me
in a proforma invoice to be paid in advance of shipment.Always send me
the copy of email you send to them ,Kindly email them with pick up
address,shipping address and the weight of the order.get back to me
with the following once you hear back from them..

cost of items..........
shipping cost via Morris Trucking Express & Forwarding Services........
all additional cost(transfer fee to Morris Trucking Express & Forwarding
Services ).....................
total cost (cost of items+shipping cost via Morris Trucking Express &
Forwarding Services agent + transfer fee to Morris Trucking Express &
Forwarding Services agent )..........

so i can send you my credit card details for you to charge the total
cost from it and get the shipping fees settled,then my order can be
shipped out asap.

Regards,
Justin Lucas.
SHIPPING ADDRESS:
LUCAS VENTURES INCS
Lot 47 Vytauto Str, LT-00101
Palanga, Lithuania
Tel.: (+370 460) 51299
---------------------------------------------------------------
Received: by 10.202.48.196 with SMTP id w187csp68638oiw;
Mon, 17 Nov 2014 01:40:54 -0800 (PST)
X-Received: by 10.140.84.201 with SMTP id l67mr18021575qgd.100.1416217254227;
Mon, 17 Nov 2014 01:40:54 -0800 (PST)
Return-Path: <[email protected]>
Received: from omr-m4.mx.aol.com (omr-m4.mx.aol.com. [64.12.226.25])
by mx.google.com with ESMTPS id q3si8004037qah.8.2014.11.17.01.40.53
for <snip>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Mon, 17 Nov 2014 01:40:54 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 64.12.226.25 as permitted sender) client-ip=64.12.226.25;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 64.12.226.25 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=REJECT dis=NONE) header.from=aol.com
Received: from mtaomg-aad01.mx.aol.com (mtaomg-aad01.mx.aol.com [172.26.127.227])
by omr-m4.mx.aol.com (Outbound Mail Relay) with ESMTP id C9FFC3800008E;
Mon, 17 Nov 2014 04:40:53 -0500 (EST)
Received: from core-anb03b.mail.aol.com (core-anb03.mail.aol.com [172.27.0.13])
by mtaomg-aad01.mx.aol.com (OMAG/Core Interface) with ESMTP id 94BA438000082;
Mon, 17 Nov 2014 04:40:53 -0500 (EST)
To: snip
Subject: Delivery To Lithuania & Shipping Quotation
X-MB-Message-Source: WebUI
MIME-Version: 1.0
From: Morris Trucking Express <[email protected]>
X-MB-Message-Type: User
Content-Type: multipart/alternative;
boundary="--------MB_8D1D061B6E16B1C_9B8_9F022_webmail-vm076.sysops.aol.com"
X-Mailer: AOL Webmail BASIC
Received: from 197.242.106.87 by webmail-vm076.sysops.aol.com (64.12.252.52) with HTTP (WebMailUI); Mon, 17 Nov 2014 04:40:53 -0500
Message-Id: <[email protected]>
X-Originating-IP: [197.242.106.87] Spectranet, Lagos, Nigeria
Date: Mon, 17 Nov 2014 04:40:53 -0500
x-aol-global-disposition: G
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20140625; t=1416217253;
bh=tyrWygLyGqT9E99rcbesJmlxJlVUEYetFYtVnsda+pI=;
h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type;
b=dP6j+QkSa9lQnuiHf7EW3pd0vj3i8Ne4Q10865VPajW4DleTWV1LAM4mKXVjI1XJe
4Mv6R51xAQ17Shl48z/pK1isKY4uFqEFWZI1r9e/i/Fq8Ay3hlV2zocVpmeNs71j62
8TrQiDdmrbcHUd7Ib+HvqKl7WgIBNlHBLXZM18/s=
x-aol-sid: 3039ac1a7fe35469c2a536ca

Dear Customer,

Thank you for contacting Morris Trucking Express. We do deliver to most business outlet worldwide. So getting your shipment to your client won't be a problem. For a shipment moving from your company with the Total weight and dimension you provide, below is the Standard and Express Shipment Air Freight quote.

===========Pick Up=======================================
Pick up Address Location: <city>
( Full Pick Up Address Require )
===========RECIPIENT-====================================
LUCAS VENTURES INCS
Lot 47 Vytauto Str, LT-00101
Palanga, Lithuania
========================================================
Customer ID #TW004<snip>
========================================================
Total Weight: ## sets of <part>
## cm cube, and the mass is ## kg
========================================================
(Air freight Cost)
Express Shipment (2 to 3 days)........... USD <snip>
Standard Shipment (3 to 5 days).......... USD <snip>
========================================================
The freight costs includes:
Collection from your location
Customs clearance fee
Duties & taxes Inland transit to Lithuania
Insured Door To Door Delivery
Including Tax fee
========================================================

Pick up will be made by our agents after payment is confirmed. We will need you to provide us with an estimate pick up date and time so that we can schedule a date and time for you before the item/s are ready for picked up as we normally have numerous shipping request.

As soon as we receive all necessary information from you we will proceed on the pick up at your location, Also we require payment via our Bank account for now prior to pick up and collection of package which is to be paid as soon as the order is ready for pick up.

So you will have to send us the payments via wire transfer so that we can do the pick up and settle the necessary tax and custom duties, this price includes insurance and all there duties, then we will get back to you with the necessary details.We have greatly reduce the price of your shipment. For further information do not hesitate to contact us.

We look forward to providing you with the lowest prices and the best customer service possible Customer Service (Morris Trucking Express)

Thank you,
JOHN MORRIS

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
#230182 by Faizan Docherty Wed Dec 10, 2014 8:47 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 65.55.90.206
Originating ISP: Microsoft Hosting
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.51.10 with SMTP id g10csp210341pdo;
Wed, 10 Dec 2014 04:09:13 -0800 (PST)
X-Received: by 10.68.236.163 with SMTP id uv3mr6381731pbc.5.1418213352538;
Wed, 10 Dec 2014 04:09:12 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (ar-005-i201.relay.mailchannels.net. [162.253.144.83])
by mx.google.com with ESMTP id vb10si6454955pac.124.2014.12.10.04.09.10
for <snipped>;
Wed, 10 Dec 2014 04:09:12 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 162.253.144.83 as permitted sender) client-ip=162.253.144.83;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 162.253.144.83 as permitted sender) [email protected]
X-Sender-Id: _forwarded-from|65.55.90.200
Received: from r8-chicago.webserversystems.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id E6279100276
for <snipped>; Wed, 10 Dec 2014 12:09:09 +0000 (UTC)
X-Sender-Id: _forwarded-from|65.55.90.200
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.252.6.112])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.4.2);
Wed, 10 Dec 2014 12:09:10 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|65.55.90.200
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1418213350284:3293700507
X-MC-Ingress-Time: 1418213350284
Received: from snt004-omc4s3.hotmail.com ([65.55.90.206]:51392)
by r8-chicago.webserversystems.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1Xyg4p-0002Ez-CR
for <snipped>; Wed, 10 Dec 2014 06:09:08 -0600
Received: from SNT147-W48 ([65.55.90.200]) by SNT004-OMC4S3.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Wed, 10 Dec 2014 04:09:06 -0800
X-TMN: [MQYab2/k4jCqlpAC95luc5SIzialFkV5zYE33cWBOsQ=]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_2947a252-f6d1-4185-84e3-0e24e8b2abb6_"
From: VIJAY SHANKAR BHAMIDIPATI <[email protected]>
To: <snipped>
Subject: (ARGANIA SPINOSA SEED (A.S )
Date: Wed, 10 Dec 2014 12:09:06 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 10 Dec 2014 12:09:06.0903 (UTC) FILETIME=[18D2A670:01D01472]
X-Spam-Status: No, score=3.8
X-Spam-Score: 38
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Dear /MadamMy name is Dr.mark Phillips.I got your contact
from a business directory.I decided to contact you for a business with my
company,which is located here in UNITED STATES OF AMERICA.The company I work
with is into manufacturing of pharmaceutical materials.There is a rare raw
material which the company usually sends me to India to buy.The name of the
raw material is ARGANIA SPINOSA SEED,it is a natural seeds that is been cultivated
in India and it is very rare to find.Right now I have been promoted to the
post of manager,the company can not send me to India again,rather they will
send a more junior staff.The director has asked for the contact of the supplier
in India,i need a honest person whom i will present to the company as the
local supplier in India.You will now buy the product from the local dealer
and supply to my company.The profit would be shared between you and I.This
proposal is risk free and will be another income generating business besides
your specialization,this company pays in cash immediately they verify the
sample and confirmed the material (ARGANIA SPINOSA SEED (A.S )including bulk
purchase of the raw material.I don't want the company to have direct contact
of the local dealer and know the actual price I was buying the product.If
you are interested kindly contact me for more details.through this email
id: [email protected] RegardsDr.mark Phillips [...]

Content analysis details: (3.8 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[65.55.90.206 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[65.55.90.206 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(vizayshankar[at]hotmail.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: NO
X-AuthUser:


Dear /Madam

My name is Dr.mark Phillips.I got your contact from a business directory.I decided to contact you for a business with my company,which is located here in UNITED STATES OF AMERICA.The company I work with is into manufacturing of pharmaceutical materials.There is a rare raw material which the company usually sends me to India to buy.The name of the raw material is ARGANIA SPINOSA SEED,it is a natural seeds that is been cultivated in India and it is very rare to find.
Right now I have been promoted to the post of manager,the company can not send me to India again,rather they will send a more junior staff.The director has asked for the contact of the supplier in India,i need a honest person whom i will present to the company as the local supplier in India.You will now buy the product from the local dealer and supply to my company.The profit would be shared between you and I.

This proposal is risk free and will be another income generating business besides your specialization,this company pays in cash immediately they verify the sample and confirmed the material (ARGANIA SPINOSA SEED (A.S )including bulk purchase of the raw material.
I don't want the company to have direct contact of the local dealer and know the actual price I was buying the product.If you are interested kindly contact me for more details.through this email id: [email protected]

Best Regards
Dr.mark Phillips

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#231217 by Jack Fendly Wed Dec 17, 2014 8:29 am
From Ken Williams Wed Dec 17 10:53:39 2014
X-Apparently-To:
Return-Path: <[email protected]>
X-YahooFilteredBulk: 98.136.217.23
Received-SPF: none (domain of yahoo.pt does not designate permitted sender hosts)
X-YMailISG:
X-Originating-IP: [98.136.217.23]
Authentication-Results: mta1491.mail.bf1.yahoo.com from=yahoo.pt; domainkeys=pass (ok); from=yahoo.pt; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO nm40.bullet.mail.gq1.yahoo.com) (98.136.217.23)
by mta1491.mail.bf1.yahoo.com with SMTPS; Wed, 17 Dec 2014 10:56:32 +0000
DKIM-Signature
DomainKey-Signature:
Received: from [127.0.0.1] by nm40.bullet.mail.gq1.yahoo.com with NNFMP; 17 Dec 2014 10:56:27 -0000
Received: from [216.39.60.180] by nm40.bullet.mail.gq1.yahoo.com with NNFMP; 17 Dec 2014 10:53:45 -0000
Received: from [212.82.98.57] by tm16.bullet.mail.gq1.yahoo.com with NNFMP; 17 Dec 2014 10:53:44 -0000
Received: from [212.82.98.85] by tm10.bullet.mail.ir2.yahoo.com with NNFMP; 17 Dec 2014 10:53:44 -0000
Received: from [127.0.0.1] by omp1022.mail.ir2.yahoo.com with NNFMP; 17 Dec 2014 10:53:44 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG:
Received: by 212.82.98.117; Wed, 17 Dec 2014 10:53:43 +0000
Date: Wed, 17 Dec 2014 10:53:39 +0000 (UTC)
From: Ken Williams <[email protected]>
Reply-To: Ken Williams <[email protected]>
Message-ID: <1027647149.159229.1418813619528.JavaMail.yahoo@jws11154.mail.ir2.yahoo.com>
Subject: Re:Market Opportunity for your : Provide e-catalog and brochure for
evaluations.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_159228_109438932.1418813619527"
Content-Length: 1940

Dear Sir/Madam,

How are you and work? Hope you are doing fine.

I am a consultant to a trading company based here in Lagos -Nigeria who interested in importing and marketing your products here and beyond. If you are interested in exporting them through them , please provide us with your e-catalog and brochure for evaluation as to give you details inquiry.

Please Reply Through my email:

Thank you as I await your prompt and positive response.

Regards,

Ken Williams

You cannot win a lottery you haven't entered

Please DO NOT tell a scammer you found their details posted here
#231228 by Faizan Docherty Wed Dec 17, 2014 10:10 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 184.154.112.194
Originating ISP: Singlehop
City: Chicago
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.51.10 with SMTP id g10csp854022pdo;
Mon, 15 Dec 2014 08:45:01 -0800 (PST)
X-Received: by 10.68.245.7 with SMTP id xk7mr53026970pbc.65.1418661901408;
Mon, 15 Dec 2014 08:45:01 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (aso-006-i413.relay.mailchannels.net. [207.210.193.22])
by mx.google.com with ESMTP id vt3si14750911pbc.51.2014.12.15.08.44.59
for <snipped>;
Mon, 15 Dec 2014 08:45:01 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=207.210.193.22;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
X-Sender-Id: whogohost|x-authuser|ujocomng
Received: from r8-chicago.webserversystems.com (ip-10-33-12-218.us-west-2.compute.internal [10.33.12.218])
by relay.mailchannels.net (Postfix) with ESMTPA id 873E61D0CB8
for <snipped>; Mon, 15 Dec 2014 16:44:55 +0000 (UTC)
X-Sender-Id: wwwh|x-authuser|3359415267
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.245.145.112])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.4.2);
Mon, 15 Dec 2014 16:44:56 GMT
X-MC-Relay: Junk
X-MailChannels-SenderId: wwwh|x-authuser|3359415267
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1418661896356:2959606328
X-MC-Ingress-Time: 1418661896356
Received: from si-002-i29.relay.mailchannels.net ([184.154.112.194]:23678 helo=relay.mailchannels.net)
by r8-chicago.webserversystems.com with esmtp (Exim 4.82)
(envelope-from <[email protected]>)
id 1Y0YlR-0001pd-1v
for <snipped>; Mon, 15 Dec 2014 10:44:54 -0600
X-Sender-Id: whogohost|x-authuser|ujocomng
Received: from parrot.whogohost.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id 8C76F1213FB
for <snipped>; Mon, 15 Dec 2014 16:44:40 +0000 (UTC)
X-Sender-Id: whogohost|x-authuser|ujocomng
Received: from parrot.whogohost.com ([UNAVAILABLE]. [10.224.0.170])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.4.2);
Mon, 15 Dec 2014 16:44:49 GMT
X-MC-Relay: Junk
X-MailChannels-SenderId: whogohost|x-authuser|ujocomng
X-MailChannels-Auth-Id: whogohost
X-MC-Loop-Signature: 1418661886937:1271142390
X-MC-Ingress-Time: 1418661886937
Received: from ujocomng by parrot.whogohost.com with local (Exim 4.84)
(envelope-from <[email protected]>)
id 1Y0YlC-0006Im-1Y
for <snipped>; Mon, 15 Dec 2014 17:44:38 +0100
To: <snipped>
Subject: Order
From: Noam <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html
Message-Id: <[email protected]>
Date: Mon, 15 Dec 2014 17:44:38 +0100
X-AuthUser: ujocomng
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=2.0
X-Spam-Score: 20
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Hello, Am Steve, but running one of my stores here in Ukraine.
I will like to place an order from you and i am registered with a shipping
company whom i have used severally without any delay nor problems with my
goods. Before i place these order, i will like to know if i am able to place
the order a nd most important: 1) If i can make payment with my credit cards
Visa/Mc be cause that is the only way i am set for payment for now without
no delay. 2 ) I don't place online orders, can i e-mail my order then you
can give me a quote here and make charges to my cards manually on your end
( Credit Card Terminal) Pls Clarify. SHIPPING ADDRESS: 103, Klovskiy Uzviz
Street 01021 Kiev, Ukraine Looking forward to your swift response t hen we
can proceed further as soon as possible.. Warmest Regards [...]

Content analysis details: (2.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(noamjotham[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[184.154.112.194 listed in list.dnswl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
X-Spam-Flag: NO
X-AuthUser:


Hello, Am Steve, but running one of my stores here in Ukraine. I will like to place an order from you and i am registered with a shipping company whom i have used severally without any delay nor problems with my goods. Before i place these order, i will like to know if i am able to place the order a nd most important: 1) If i can make payment with my credit cards Visa/Mc be cause that is the only way i am set for payment for now without no delay. 2 ) I don't place online orders, can i e-mail my order then you can give me a quote here and make charges to my cards manually on your end ( Credit Card Terminal) Pls Clarify. SHIPPING ADDRESS: 103, Klovskiy Uzviz Street 01021 Kiev, Ukraine Looking forward to your swift response t hen we can proceed further as soon as possible.. Warmest Regards

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
#231254 by vonpaso xlura Wed Dec 17, 2014 1:55 pm
From the above Steve aka Noam Jotham:
At the same time you need to contact the BARAMI LOGISTIC FREIGHT (BLF). at ([email protected]),I am registered with them,a shipping company that specializes in the shipping of consignments from anywhere with the following information :(1)Your full location address where the items will be picked up .(2) The sizes and weights of the shipping will then contact you for the time the items will be picked up,you will have to give them my client registration number Id#URL72HFJ80G and let them know i asked you to contact them and BARAMI LOGISTIC FREIGHT (BLF). will get back to you with the estimated shipping cost,Please do not be worried about their policy ....they always like to get the seller along in their dealings with the buyer as well .No matter what the shipment cost is I will definitely be responsible for the payment .They have got like products shipped out to me here several time without any breakages nor damages . So I can rely on their services .As soon as you have+ the estimates let me know so as to proceed with the payment as soon as possible.


Total Cost Of Items..........

Shipping Cost Via BARAMI LOGISTICS FREIGHT LTD........

All Additional Cost (Transfer Fee To BARAMI LOGISTICS FREIGHT LTD .....................


I will be looking forward to hear back from so that i can e-mail you my

credit card details for you to charge the total cost from and get the

shipping fees settled,then my order can be picked up asap.

The writing shows that Steve is actually West African.

... ni los estafadores heredarán el reino de Dios. 1 Cor. 6:10
#231481 by Zamby21 Fri Dec 19, 2014 7:49 am
Placed here upon instructions.

Zamby

Forwarded message ----------
From: "Gary Wembley" < [email protected] >
Date: Dec 17, 2014 10:06 AM
Subject: New message
To: "plxxxxx" <[email protected]>
Cc:


Hello My name is Gary Wembley and i would like to know if you do sell Trailer Mounted jetters, if you do sell them email me back with the sizes or types that you have including with their prices range on each , kindly advise if you do accept credit card as a form of payment thank you

Best regards
Gary Wembley
#231496 by Faizan Docherty Fri Dec 19, 2014 9:38 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 217.12.9.12
Originating ISP: Yahoo! Europe
City: n/a
Country of Origin: United Kingdom
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.25.141.131 with SMTP id p125csp1382157lfd;
Wed, 17 Dec 2014 02:55:55 -0800 (PST)
X-Received: by 10.68.236.67 with SMTP id us3mr48169254pbc.121.1418813754778;
Wed, 17 Dec 2014 02:55:54 -0800 (PST)
Return-Path: <[email protected]>
Received: from nm38-vm7.bullet.mail.gq1.yahoo.com (nm38-vm7.bullet.mail.gq1.yahoo.com. [98.136.217.78])
by mx.google.com with ESMTPS id g6si5231650pdo.22.2014.12.17.02.55.53
for <snipped>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Wed, 17 Dec 2014 02:55:54 -0800 (PST)
Received-SPF: none (google.com: [email protected] does not designate permitted sender hosts) client-ip=98.136.217.78;
Authentication-Results: mx.google.com;
spf=none (google.com: [email protected] does not designate permitted sender hosts) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=yahoo.pt
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>;
Received: from [127.0.0.1] by nm38.bullet.mail.gq1.yahoo.com with NNFMP; 17 Dec 2014 10:55:49 -0000
Received: from [98.137.12.190] by nm38.bullet.mail.gq1.yahoo.com with NNFMP; 17 Dec 2014 10:53:07 -0000
Received: from [212.82.98.56] by tm11.bullet.mail.gq1.yahoo.com with NNFMP; 17 Dec 2014 10:53:06 -0000
Received: from [212.82.98.90] by tm9.bullet.mail.ir2.yahoo.com with NNFMP; 17 Dec 2014 10:53:06 -0000
Received: from [127.0.0.1] by omp1027.mail.ir2.yahoo.com with NNFMP; 17 Dec 2014 10:53:06 -0000
X-Yahoo-Newman-Property: ymail-4
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 217.12.9.12; Wed, 17 Dec 2014 10:53:06 +0000
Date: Wed, 17 Dec 2014 10:53:05 +0000 (UTC)
From: Ken Williams <[email protected]>
Reply-To: Ken Williams <[email protected]>
Message-ID: <642206384.144900.1418813585328.JavaMail.yahoo@jws11165.mail.ir2.yahoo.com>
Subject: Re:Market Opportunity for your : Provide e-catalog and brochure for
evaluations.

MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_144899_376317810.1418813585326"
Content-Length: 1940


Dear Sir/Madam,

How are you and work? Hope you are doing fine.

I am a consultant to a trading company based here in Lagos -Nigeria who interested in importing and marketing your products here and beyond. If you are interested in exporting them through them , please provide us with your e-catalog and brochure for evaluation as to give you details inquiry.

Please Reply Through my email:

Thank you as I await your prompt and positive response.

Regards,

Ken Williams

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: No registered users and 5 guests