Gemma Joffroy
Queja 296893 Detalles

I ALMOST got scammed by 'Gemma Joffroy' when I was buying a MacBook Pro. After she sent me the Cargo Force Canada link, I was suspicious and I did searches on Cargo Force Canada. Cargo Force was indeed a legitimate company; however, this Cargo Force Canada company is not real at all. Using the email, I checked the IPs embedded with her email and got some information that may be useful.

The email servers for the website cqmemail.com is hosted by 1&1 (1and1.com)

Gemma uses America Online as her ISP and the computer she used to send the email from is in either Dulles, Virgina or Louisville, Alabama. Unless I read the metadata wrong, her IP is 172.129.54.71.

Gemma used Mozilla Thunderbird for sending the email.

This should help track down 'her' location. ISPs can track down IPs down to the exact lat and long, so the data should help. The complete metadata is below for reference. Thanks, and I hope I helped. I've removed my IPs and email address to preserve my privacy.

Return-Path: <[email protected]>
Received: from st11p00mm-smtpin001.mac.com ([17.172.83.250]) by ms04511.mac.com (Oracle Communications Messaging Server 7u4-27.07 (7.0.4.27.6) 64bit (built Jun 21 2013)) with ESMTP id <[email protected]> for ***my email goes here***; Fri, 26 Jul 2013 23:03:16 +0000 (GMT)
Received: from moutng.kundenserver.de ([212.227.126.171]) by st11p00mm-smtpin001.mac.com (Oracle Communications Messaging Server 7u4-27.07(7.0.4.27.6) 64bit (built Jun 21 2013)) with ESMTP id <[email protected]> for **my email** (ORCPT **my email**); Fri, 26 Jul 2013 23:03:16 +0000 (GMT)
Received: from [172.129.54.71] (AC813647.ipt.aol.com [172.129.54.71]) by mrelayeu.kundenserver.de (node=mrbap2) with ESMTP (Nemesis) id 0MZ776-1UodZt0lEi-00LBqo; Sat, 27 Jul 2013 01:03:13 +0200
Original-Recipient: rfc822;[email protected]
Received-Spf: none (st11p00mm-smtpin001.mac.com: [email protected] does not designate permitted sender hosts) receiver=st11p00mm-smtpin001.mac.com; client-ip=212.227.126.171; helo=moutng.kundenserver.de; [email protected]; x-software=spfmilter 0.97 http://www.acme.com/software/spfmilter/ with libspf-unknown;
Message-Id: <[email protected]>
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:17.0) Gecko/20130620 Thunderbird/17.0.7
Mime-Version: 1.0
References: <5B5C5C0CAE1856A4B33573C18FC9EB4B9C563812@gigi> <[email protected]> <[email protected]>
In-Reply-To: <[email protected]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Authentication-Results: st11p00mm-smtpin001.mac.com; dkim=none reason="no signature"; dkim-adsp=none
X-Icloud-Spam-Score: 30022 f=cqmemail.com;e=cqmemail.com;pp=ham;spf=?;dkim=?;wl=absent;pwl=absent
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.10.8794,1.0.431,0.0.0000 definiti