The world's premier anti internet scam, anti fraud information website 

  • Norbert Export <[email protected]>

  • Exposed email scams targeting businesses: CEO fraud, invoice scams, vendor impersonation, and business email compromise (BEC). 1,426+ documented cases.
Who are you really talking to? Check their location - InfoSniper
Exposed email scams targeting businesses: CEO fraud, invoice scams, vendor impersonation, and business email compromise (BEC). 1,426+ documented cases.
  Been Targeted by This Scam?

Here's how to report a scam to the FBI, FTC, and other agencies. Read our guides on fake check scams, sugar daddy scams, and sextortion. Not sure? Try our free Scam Checker Tool.

  by Faizan Docherty
 
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 41.82.73.102<br>Originating ISP: Sonatel<br> City: Dakar<br>Country of Origin: Senegal<br>* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.220.177.2 with SMTP id bg2csp236188vcb;
Tue, 3 Dec 2013 13:58:00 -0800 (PST)
X-Received: by 10.15.45.6 with SMTP id a6mr8356242eew.46.1386107879958;
Tue, 03 Dec 2013 13:57:59 -0800 (PST)
Return-Path: <[email protected]>
Received: from outrelay03.libero.it (outrelay03.libero.it. [212.52.84.103])
by mx.google.com with ESMTP id e2si4467125eeg.177.2013.12.03.13.57.58
for <multiple recipients>;
Tue, 03 Dec 2013 13:57:59 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 212.52.84.103 as permitted sender) client-ip=212.52.84.103;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 212.52.84.103 as permitted sender) smtp.mail=[email protected]
X-CTCH-Spam: Bulk
X-CTCH-RefID: str=0001.0A0C0206.529DBDAC.0127,ss=3,sh,re=0.000,fgs=0
X-libjamoibt: 1587
Received: from wmail10.libero.it (172.31.0.79) by outrelay03.libero.it (8.5.140.03)
id 52758881047ADCAC; Tue, 3 Dec 2013 22:57:51 +0100
Message-ID: <24860517.347701386107871442.JavaMail.defaultUser@defaultHost>
Date: Tue, 3 Dec 2013 22:57:51 +0100 (CET)
From: norbert kalinna <[email protected]>
Reply-To: [email protected]
Subject: Order inquiry
MIME-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-SenderIP: 41.82.73.102
X-libjamv: UZ0BhVp4Pj4=
X-libjamsun: rUnwSBVpBAZQLK9a41CBcal+SMdStSSCNPheMjEyvNk=
Hello

Can we have your Price List and catalog. We are Norway Company interested in

big purchase.

Get Back asp

Mr.Norbert
  by Faizan Docherty
 
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 41.82.116.69<br>Originating ISP: Sonatel<br> City: Dakar<br>Country of Origin: Senegal<br>* For a complete report on this email header goto ipTRACKERonline
From aleksenk anna Wed Dec 4 04:59:32 2013
X-Apparently-To: <snipped> via 72.30.238.253; Wed, 04 Dec 2013 05:04:38 -0800
Return-Path: <[email protected]>
X-YahooFilteredBulk: 212.52.84.106
Received-SPF: pass (domain of libero.it designates 212.52.84.106 as permitted sender)
X-YMailISG: <snipped>
X-Originating-IP: [212.52.84.106]
Authentication-Results: mta1243.mail.bf1.yahoo.com from=libero.it; domainkeys=neutral (no sig); from=libero.it; dkim=pass (ok)
Received: from 127.0.0.1 (EHLO outrelay05.libero.it) (212.52.84.106)
by mta1243.mail.bf1.yahoo.com with SMTP; Wed, 04 Dec 2013 05:04:38 -0800
X-CTCH-Spam: Bulk
X-CTCH-RefID: str=0001.0A0C0206.529F153D.00A6,ss=3,sh,re=0.000,fgs=0
X-libjamoibt: 1933
Received: from outrelay01.libero.it (192.168.34.10) by outrelay05.libero.it (8.5.140.03)
id 528A306400C28D8E; Wed, 4 Dec 2013 13:59:32 +0100
DKIM-Signature: <snipped>
X-CTCH-Spam: Bulk
X-CTCH-RefID: str=0001.0A0C0204.529F17CA.0091,ss=3,sh,re=0.000,fgs=0
X-libjamoibt: 1587
Received: from wmail60 (172.31.0.57) by outrelay01.libero.it (8.5.140.03)
id 5231BBA00BD3B542; Wed, 4 Dec 2013 13:59:32 +0100
Message-ID: <13761757.472051386161972006.JavaMail.defaultUser@defaultHost>
Date: Wed, 4 Dec 2013 13:59:32 +0100 (CET)
From: aleksenk anna <[email protected]>
Reply-To: [email protected]
Subject: inquiry Order
MIME-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-SenderIP: 41.82.116.69
X-libjamv: WczCFopc/TI=
X-libjamsun: i+fa/OZW+J3M4z921vsTBQeetdDxpYUbGj+nX1Fh4og=
Content-Length: 124
Hello

Can we have your Price List and catalog. We are Norway Company interested
in

big purchase.

Get Back asp

Ms.Anna