I just got multiple emails from the same person attempting the same thing.
I obv didn't dl it cuz im not ******ed.
C
Here is the email header from an authentic ftp email.
Delivered-To:
xxx@gmail.com
Received: by 10.64.213.17 with SMTP id l17cs155013qbg;
Wed, 12 Mar 2008 22:00:03 -0700 (PDT)
Received: by 10.65.196.2 with SMTP id y2mr19439661qbp.36.1205384403482;
Wed, 12 Mar 2008 22:00:03 -0700 (PDT)
Return-Path: <cashier@fulltiltpoker.com>
Received: from mail01.fulltiltpoker.com (mail01.fulltiltpoker.com [66.212.238.233])
by mx.google.com with ESMTP id f16si12467335qba.26.2008.03.12.22.00.03;
Wed, 12 Mar 2008 22:00:03 -0700 (PDT)
Received-SPF: pass (google.com: domain of
cashier@fulltiltpoker.com designates 66.212.238.233 as permitted sender) client-ip=66.212.238.233;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
cashier@fulltiltpoker.com designates 66.212.238.233 as permitted sender) smtp.mail=cashier@fulltiltpoker.com
Received: from casino0 (unknown [10.20.6.10])
by mail01.fulltiltpoker.com (Postfix) with SMTP id A31EC1EB1C3
for <xxx@gmail.com>; Thu, 13 Mar 2008 01:00:02 -0400 (EDT)
Date: Thu, 13 Mar 2008 01:00:02 -0400
Subject: =?ISO-8859-1?B?RnVsbCBUaWx0IFBva2VyIC0gRnVuZHMgVHJhbnNmZXIgUm VxdWVzdA==?=
From:
cashier@fulltiltpoker.com
Reply-To:
cashier@fulltiltpoker.com
Errors-To:
com-cashier-error@fulltiltpoker.com
To:
xxx@gmail.com
Message-Id: <20080313050002.A31EC1EB1C3@mail01.fulltiltpoker.c om>
The scammer's email header looks as follow:
Delivered-To:
xxx@gmail.com
Received: by 10.64.213.17 with SMTP id l17cs293787qbg;
Tue, 25 Mar 2008 15:11:00 -0700 (PDT)
Received: by 10.141.87.13 with SMTP id p13mr3835688rvl.295.1206483059779;
Tue, 25 Mar 2008 15:10:59 -0700 (PDT)
Return-Path: <generalmail@bravehost.com>
Received: from hostmail2.bravehost.com (hostmail2.bravehost.com [65.39.211.68])
by mx.google.com with ESMTP id c36si6280273rvf.28.2008.03.25.15.10.59;
Tue, 25 Mar 2008 15:10:59 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of
generalmail@bravehost.com designates 65.39.211.68 as permitted sender) client-ip=65.39.211.68;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of
generalmail@bravehost.com designates 65.39.211.68 as permitted sender) smtp.mail=generalmail@bravehost.com
Received: from localhost (unknown [127.0.0.1])
by hostmail2.bravehost.com (Postfix) with ESMTP id 3BBA2165389
for <xxx@gmail.com>; Tue, 25 Mar 2008 22:10:59 +0000 (UTC)
Received: from hostmail2.bravehost.com ([65.39.211.68])
by localhost (mungo.vc.bravenet.com [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id kx5ft6HzWL8X for <xxx@gmail.com>;
Tue, 25 Mar 2008 15:10:53 -0700 (PDT)
Received: (from
generalmail@bravehost.com)
by neutron.vc.bravenet.com (mini_sendmail/1.3.6 29jun2005);
Tue, 25 Mar 2008 15:10:53 PDT
(sender
php@neutron.vc.bravenet.com)
To:
xxx@gmail.com
Subject: Important Information About Your Full Tilt Poker Account. Please Read!
X-PHP-Script: enigmasad.bravehost.com/emailsnew.php for 172.173.5.248
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From:
support@fulltiltpoker.com
Message-Id: <20080325221053.2089B12ED61@localhost.localdomai n>
Date: Tue, 25 Mar 2008 15:10:53 -0700 (PDT)
Last edited by craigmarq; 03-25-2008 at 06:57 PM.