IP Address Inspector

D.Smith21 commented...

Website the Amazon links were routed to:

gardamalare.se/wp-content/uploads/fgallery/pid13569.html
December 29 2011 01:39 PM

D.Smith21 commented...

Return-Path:
Delivered-To: editor@301929.306957
Received: (qmail 2220 invoked by uid 78); 29 Dec 2011 14:13:32 -0000
Received: from unknown (HELO cloudmark1) (10.49.16.96)
by 0 with SMTP; 29 Dec 2011 14:13:32 -0000
Return-Path:
Received: from [77.229.31.119] ([77.229.31.119:56089] helo=static-119-31-229-77.ipcom.comunitel.net)
by cm-mr21 (envelope-from )
(ecelerity 2.2.3.46 r(37554)) with ESMTP
id 12/FD-16330-C857CFE4; Thu, 29 Dec 2011 09:13:32 -0500
Date: Thu, 29 Dec 2011 15:13:31 +0100
Message-ID:
From: "Numbers Connell"
To:
Subject: Your Amazon.com order of "Superwinch 0294227 Terra 45 4,500" has shipped!
X-Mailer: sodau
MIME-Version: 1.0
Content-Type: text/html;
charset=windows-1250
Content-Transfer-Encoding: 7bit
December 29 2011 01:37 PM

D.Smith21 commented...

Hello,

Shipping Confirmation
Order # 566-0020417-8747557

Your estimated delivery date is:
Tuesday, December 30, 2011
Track your package
Thank you for shopping with us. We thought you'd like to know that we shipped this portion of your order separately to give you quicker service. You won't be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.

Shipment Details
Superwinch 0294227 Terra 45 4,500 $159.95
Item Subtotal: $159.95
Shipping & Handling: $0.00
Total Before Tax: $159.95
Shipment Total: $159.95
Paid by Visa: $159.95
You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.

Returns are easy. Visit our .
If you need further assistance with your order, please visit Customer Service.

We hope to see you again soon!
Amazon.com
December 29 2011 01:36 PM

D.Smith21 commented...

This IP address sent a phishing email pretending to be Amazon.com and claiming that I had just purchased a winch for $159.00. When I checked the message source I found that the supposed Amazon links went to a domain in Sweden that came back to this IP address when pinged.

Return-Path:
Delivered-To: editor@301929.306957
Received: (qmail 2220 invoked by uid 78); 29 Dec 2011 14:13:32 -0000
Received: from unknown (HELO cloudmark1) (10.49.16.96)
by 0 with SMTP; 29 Dec 2011 14:13:32 -0000
Return-Path:
Received: from [77.229.31.119] ([77.229.31.119:56089] helo=static-119-31-229-77.ipcom.comunitel.net)
by cm-mr21 (envelope-from )
(ecelerity 2.2.3.46 r(37554)) with ESMTP
id 12/FD-16330-C857CFE4; Thu, 29 Dec 2011 09:13:32 -0500
Date: Thu, 29 Dec 2011 15:13:31 +0100
Message-ID:
From: "Numbers Connell"
To:
Subject: Your Amazon.com order of "Superwinch 0294227 Terra 45 4,500" has shipped!
X-Mailer: sodau
MIME-Version: 1.0
Content-Type: text/html;
charset=windows-1250
Content-Transfer-Encoding: 7bit
December 29 2011 01:35 PM