Scam invitations to non-existent conferences
#224455 by Faizan Docherty Thu Oct 23, 2014 11:17 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 65.55.90.73
Originating ISP: Microsoft Hosting
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.220.78.147 with SMTP id l19csp316347vck;
Thu, 23 Oct 2014 11:38:24 -0700 (PDT)
X-Received: by 10.202.174.4 with SMTP id x4mr4894146oie.12.1414089504181;
Thu, 23 Oct 2014 11:38:24 -0700 (PDT)
Return-Path: <[email protected]>
Received: from SNT004-OMC2S3.hotmail.com (snt004-omc2s3.hotmail.com. [65.55.90.78])
by mx.google.com with ESMTPS id q16si2490553oey.85.2014.10.23.11.38.23
for <multiple recipients>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 23 Oct 2014 11:38:24 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.90.78 as permitted sender) client-ip=65.55.90.78;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 65.55.90.78 as permitted sender) [email protected]
Received: from SNT149-W70 ([65.55.90.73]) by SNT004-OMC2S3.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Thu, 23 Oct 2014 11:38:24 -0700
X-TMN: [96Whncflf9MToWG0x3MeEKjXnnmByu4/]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_406212d2-100a-4f99-950f-3a6a25bc8c91_"
Reply-To: <[email protected]>
From: noood good <[email protected]>
Subject: hi
Date: Thu, 23 Oct 2014 18:38:23 +0000
Importance: Normal
MIME-Version: 1.0
Bcc:
X-OriginalArrivalTime: 23 Oct 2014 18:38:24.0046 (UTC) FILETIME=[86EFD4E0:01CFEEF0]


Dear Colleague,

The National Child Welfare Organization (NCWO) is delighted to invite you to our forthcoming International Conference on (Child Abuse, Control of EBOLA Outbreak, Racism And Human Trafficking). These event will begins from (November 17th-20th 2014) in California, USA and (November 24th-27th 2014) Dakar-Senegal.

For more details regarding this conference and how you can register to participate, please contact the secretary directly on these email: [[email protected]] Endeavor to inform the secretariat that you were invited by (Dr.Miss sarafina williams) a staff member of The National Child Welfare Organization (NCWO).

The Organizing Committee and Our donor sponsors will take the full responsibility of all registered participants Visa processing for those that required visa to U.S. These will include your Round trip air tickets to both events. While delegates will only be responsible for their own hotel booking in Senegal. I do hope you can make time in your busy schedule to attend this International Workshop and share your ideas on the above topics.

For more information and any further clarification, do not hesitate to contact me via; [[email protected]]

Thanks for your anticipation.

Dr. Miss sarafina williams
National Child Welfare Organization, NCWO.
California, USA 92660.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

#227117 by Faizan Docherty Thu Nov 13, 2014 7:56 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 65.54.51.77
Originating ISP: Microsoft Hosting
City: Redmond
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.50.233 with SMTP id f9csp10574pdo;
Thu, 13 Nov 2014 15:08:06 -0800 (PST)
X-Received: by 10.67.14.129 with SMTP id fg1mr5991283pad.114.1415920085964;
Thu, 13 Nov 2014 15:08:05 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (aso-006-i425.relay.mailchannels.net. [174.136.13.71])
by mx.google.com with ESMTP id ia9si25265385pad.184.2014.11.13.15.08.04
for <snipped>;
Thu, 13 Nov 2014 15:08:05 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 174.136.13.71 as permitted sender) client-ip=174.136.13.71;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 174.136.13.71 as permitted sender) [email protected]
X-Sender-Id: _forwarded-from|65.55.90.137
Received: from r8-chicago.webserversystems.com (ip-10-204-4-183.us-west-2.compute.internal [10.204.4.183])
by relay.mailchannels.net (Postfix) with ESMTPA id 7254112022A
for <snipped>; Thu, 13 Nov 2014 23:08:02 +0000 (UTC)
X-Sender-Id: _forwarded-from|65.55.90.137
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.252.6.112])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.3.3);
Thu, 13 Nov 2014 23:08:02 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|65.55.90.137
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1415920082678:1909034037
X-MC-Ingress-Time: 1415920082677
Received: from snt004-omc3s40.hotmail.com ([65.54.51.77]:60114)
by r8-chicago.webserversystems.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1Xp3Ue-00096V-Ey
for <snipped>; Thu, 13 Nov 2014 17:08:01 -0600
Received: from SNT151-W86 ([65.55.90.137]) by SNT004-OMC3S40.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22751);
Thu, 13 Nov 2014 15:08:00 -0800
X-TMN: [D9qKnSdZQTpogt9hTur+gr8eip7sEz0b]
X-Originating-Email: [[email protected]]
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_44fdcb66-138e-4c48-9dcd-7cb481c91f55_"
Reply-To: <[email protected]>
From: good dook <[email protected]>
Subject: hi
Date: Thu, 13 Nov 2014 23:07:59 +0000
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 13 Nov 2014 23:08:00.0134 (UTC) FILETIME=[AB4FBA60:01CFFF96]
X-Spam-Status: No, score=3.3
X-Spam-Score: 33
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Dear Participant, The National Child Welfare Organization
(NCWO) is delighted to invite you to our forthcoming International Conference
on (Child Abuse and Human Trafficking with issues on EBOLA control). These
event will begins from (December 6th-9th 2014) in California, USA and (December
12th-16th ) Dakar-Senegal. For more details regarding this conference and
how you can register to participate, please contact the secretary directly
on these email: [[email protected]] Endeavor to inform the secretariat that
you were invited by (Ms.Sarafina Williams) a staff member of The National
Child Welfare Organization (NCWO).The Organizing Committee and Our donor
sponsors will take the full responsibility of all registered participants
Visa processing for those that required visa to U.S. These will include your
Round trip air tickets to both events. While delegates will only be responsible
for their own hotel booking in Senegal. I do hope you can make time in your
busy schedule to attend this International Workshop and share your ideas
on the above topics. For more information and any further clarification, do
not hesitate to contact me via; [[email protected]]Thanks for your
anticipation.Ms.Sarafina Williams.National Child Welfare Organization, NCWO.California,
USA 92660. [...]

Content analysis details: (3.3 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[65.54.51.77 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(odoka[at]hotmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<sarafinawilliams1[at]aol.com>
)
-0.6 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
X-AuthUser:


Dear Participant,
The National Child Welfare Organization (NCWO) is delighted to invite you to our forthcoming International Conference on (Child Abuse and Human Trafficking with issues on EBOLA control). These event will begins from (December 6th-9th 2014) in California, USA and (December 12th-16th ) Dakar-Senegal.

For more details regarding this conference and how you can register to participate, please contact the secretary directly on these email: [[email protected]] Endeavor to inform the secretariat that you were invited by (Ms.Sarafina Williams) a staff member of The National Child Welfare Organization (NCWO).
The Organizing Committee and Our donor sponsors will take the full responsibility of all registered participants Visa processing for those that required visa to U.S. These will include your Round trip air tickets to both events. While delegates will only be responsible for their own hotel booking in Senegal. I do hope you can make time in your busy schedule to attend this International Workshop and share your ideas on the above topics.

For more information and any further clarification, do not hesitate to contact me via; [[email protected]]
Thanks for your anticipation.
Ms.Sarafina Williams.
National Child Welfare Organization, NCWO.
California, USA 92660.

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.

Who is online

Users browsing this forum: No registered users and 7 guests