by Tim Atem
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.86.234.138
Originating ISP: Isocel Telecom
City: Cotonou
Country of Origin: Benin
* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>I Have paid the fee for your atm but the manager of eko bank benin told me that before the card will get to you that it must have expired,so i told him to covert the card worth 3.5 milion usd into a bank cheque and all the necessary arrangement in delivering your cheque has been made with dhl company,contact them with this email at [email protected] also the director micheal ambrus
Received: by 10.107.170.86 with SMTP id t83csp1214351ioe;
Fri, 26 Jun 2015 05:19:44 -0700 (PDT)
X-Received: by 10.13.232.144 with SMTP id r138mr1487508ywe.16.1435321184699;
Fri, 26 Jun 2015 05:19:44 -0700 (PDT)
Return-Path: <[email protected]>
Received: from 10ibl20ser04.datacenter.cha.cantv.net (10ibl20ser04.datacenter.cha.cantv.net. [200.11.173.11])
by mx.google.com with ESMTPS id z65si12863278ywb.79.2015.06.26.05.19.15
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Fri, 26 Jun 2015 05:19:44 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) client-ip=200.11.173.11;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 200.11.173.11 as permitted sender) smtp.mail=[email protected]
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id t5QCJAut027762;
Fri, 26 Jun 2015 07:49:10 -0430
X-Matched-Lists: []
Received: from 41.86.234.138 ([41.86.234.138]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Fri, 26 Jun 2015 07:49:09 -0430 (VET)
Date: Fri, 26 Jun 2015 07:49:09 -0430 (VET)
From: markfrank <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <1901976791.6603620.1435321150569.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
Subject: contact dhl company
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.86.234.138]
i registered it as 1 box sensitive photographic film material which they doesn’t know that it contents is money is money related,this is to avoid them delaying the bank cheque,they have finally agreed to collect $75 usd from you as security keeping fee
regard mark frank
====================================
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!
Learn what a scam is and how to protect yourself
viewtopic.php?f=3&t=5
PLEASE DO NOT TELL A SCAMMER HE IS REPORTED HERE!
Learn what a scam is and how to protect yourself
viewtopic.php?f=3&t=5

