Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#224002 by Faizan Docherty Tue Oct 21, 2014 10:59 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 200.42.138.254
Originating ISP: Cablevision
City: Buenos Aires
Country of Origin: Argentina
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.78.147 with SMTP id l19csp350403vck;
Tue, 21 Oct 2014 02:28:56 -0700 (PDT)
X-Received: by 10.224.112.2 with SMTP id u2mr43535351qap.15.1413883736440;
Tue, 21 Oct 2014 02:28:56 -0700 (PDT)
Return-Path: <[email protected]>
Received: from v461uprod.int.cmd.com.ar (relay18.ciudad.com.ar. [200.42.138.254])
by mx.google.com with ESMTP id g4si3114987qam.6.2014.10.21.02.28.42
for <multiple recipients>;
Tue, 21 Oct 2014 02:28:56 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.42.138.254 as permitted sender) client-ip=200.42.138.254;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.42.138.254 as permitted sender) [email protected];
dmarc=pass (p=QUARANTINE dis=NONE) header.from=ciudad.com.ar
Received: from zap2.int.cmd.com.ar (s078uprod.int.cmd.com.ar [10.4.0.43])
by v461uprod.int.cmd.com.ar (Postfix) with ESMTP id 8C77015274E;
Tue, 21 Oct 2014 06:02:54 -0300 (ART)
Received: from localhost (localhost [127.0.0.1])
by zap2.int.cmd.com.ar (Postfix) with ESMTP id 70C0D22122F;
Tue, 21 Oct 2014 06:02:22 -0300 (ART)
X-Virus-Scanned: amavisd-new at zap2.int.cmd.com.ar
X-Spam-Flag: YES
X-Spam-Score: 11.197
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.197 tagged_above=-10 required=6.6
tests=[ALL_TRUSTED=-1, BAYES_99=2.8, BENIN_KEYWORDS2=0.5,
BENIN_KEYWORDS7=0.3, BENIN_MONEY_TRANSFER_MAIL_OTHER=0.35,
BENIN_TRANSFER_PAYMENT=0.25, FREEMAIL_ENVFROM_END_DIGIT=0.1,
FREEMAIL_FROM=0.001, FREEMAIL_REPLYTO=2.398,
FREEMAIL_REPLYTO_END_DIGIT=1.151, MISSING_HEADERS=1.021,
REPLYTO_WITHOUT_TO_CC=1.552, T_LOTS_OF_MONEY=0.01,
T_TO_NO_BRKTS_FREEMAIL=0.01, US_DOLLARS_3=1.754]
autolearn=no autolearn_force=no
Received: from mta1.ciudad.com.ar ([10.4.0.13])
by localhost (zap2.int.cmd.com.ar [10.4.0.43]) (amavisd-new, port 10024)
with ESMTP id oEG0yV17Y9SI; Tue, 21 Oct 2014 06:02:13 -0300 (ART)
Received: from zsp8.int.cmd.com.ar (s183uprod.int.cmd.com.ar [10.4.1.183])
by mta1.ciudad.com.ar (Postfix) with ESMTP id 2C93142716;
Tue, 21 Oct 2014 06:02:13 -0300 (ART)
Date: Tue, 21 Oct 2014 06:02:13 -0300 (ART)
From: JohnMike <[email protected]>
Reply-To: UNITEDNATION <[email protected]>
Message-ID: <[email protected]>
Subject: *** SPAM *** Dear Esteemed Client
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [10.4.0.14]
X-Mailer: Zimbra 8.0.7_GA_6021 (zclient/8.0.7_GA_6021)
Thread-Topic: Dear Esteemed Client
Thread-Index: QcVkw604OU4CHtJ3uiHTjSSx9jJ9cQ==


Dear Esteemed Client

WE ARE THE UNITED NATIONS COMMISSION UNIT: This is to inform you that you have
been entitled to receive a payment of ($4.700,000dollars ) from UN and the
payment has been installed in ATM MASTER CARD and it awaits delivery to your
home address therefore kindly furnish us with your details such as Full name,
Address and direct phone number to enable the delivery commence without wasting
much time.

Send your details to Dr John Viera ([email protected]) and call him on
phone +229 68725323 for more clarifications.

Regards
compensation team

MESSAGE

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: Bing [Bot], Majestic-12 [Bot] and 291 guests