Scams operating under the guise of a charity.
#285286 by Faizan Docherty Sun Feb 21, 2016 1:29 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 154.72.62.10
Originating ISP: About It Online (pty) Ltd
City: Johannesburg
Country of Origin: South Africa
* For a complete report on this email header goto ipTRACKERonline


From "Bob Matheson" Sun Feb 21 16:02:03 2016
X-Apparently-To: <snipped>; Sun, 21 Feb 2016 16:02:22 +0000
Return-Path: <[email protected]>
Received-SPF: none (domain of dmcl.ca does not designate permitted sender hosts)
ZWQgb24gdGhlIFByaW5jZSBBbHdhbGVlZCBCaW4gQ2hhcml0eSBwcm9ncmFt
LCBHTyBUTyBodHRwOi8vYWx3YWxlZWQtb3JnYW5pemF0aW9uLndlYm5vZGUu
Y29tLyBmb3IgaW5mbyABMAEBAQEDdGV4dC9wbGFpbgMDMAIDdGV4dC9odG1s
AwMy
X-YMailISG: <snipped>
X-Originating-IP: [8.19.118.49]
Authentication-Results: mta1295.mail.bf1.yahoo.com from=dmcl.ca; domainkeys=neutral (no sig); from=dmcl.ca; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server519.appriver.com) (8.19.118.49)
by mta1295.mail.bf1.yahoo.com with SMTPS; Sun, 21 Feb 2016 16:02:18 +0000
X-Note-AR-ScanTimeLocal: 2/21/2016 10:02:06 AM
X-Policy: GLOBAL - dmcl.ca
X-Policy: GLOBAL - dmcl.ca
X-Policy: GLOBAL - dmcl.ca
X-Policy: GLOBAL - dmcl.ca
X-Policy: GLOBAL - dmcl.ca
X-Policy: Too many policies to list
X-Primary: [email protected]
X-Note: This Email was scanned by AppRiver SecureTide
X-Note: SecureTide Build: 2/5/2016 4:38:24 PM UTC
X-Virus-Scan: V-
X-Note-SnifferID: 0
X-Note: TCH-CT/SI:0-60/SG:5 2/21/2016 10:01:44 AM
X-GBUdb-Analysis: 0, 72.28.77.165, Ugly c=0.652463 p=-0.967972 Source White
X-Signature-Violations:
0-0-0-4111-c
X-Note-419: 0 ms. Fail:0 Chk:1324 of 1324 total
X-Note: SCH-CT/SI:0-1324/SG:1 2/21/2016 10:02:01 AM
X-Note: Spam Tests Failed:
X-Country-Path: ->Canada->
X-Note-Sending-IP: 72.28.77.165
X-Note-Reverse-DNS:
X-Note-Return-Path: [email protected]
X-Note: User Rule Hits:
X-Note: Global Rule Hits: G275 G276 G277 G278 G282 G283 G406 G423
X-Note: Encrypt Rule Hits:
X-Note: Mail Class: VALID
X-Note: Headers Injected
Received: from [72.28.77.165] (HELO mail.dmch.com)
by server519.appriver.com (CommuniGate Pro SMTP 6.1.2)
with ESMTPS id 51219598; Sun, 21 Feb 2016 10:02:06 -0600
Received: from DMCL-EMAIL1.dmch-van.com ([fe80::193e:8013:9b71:7030]) by
DMCL-EMAIL1.dmch-van.com ([fe80::193e:8013:9b71:7030%13]) with mapi id
14.03.0266.001; Sun, 21 Feb 2016 08:02:04 -0800
From: "Bob Matheson" <[email protected]>
Subject: Re
Thread-Topic: Re
Thread-Index: AdFr0Uv4w+22Sh7VSlqeiO3me2pVRg==
Date: Sun, 21 Feb 2016 16:02:03 +0000
Message-ID: <[email protected]>
Reply-To: "[email protected]"
<[email protected]>

Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [154.72.62.10]
Content-Type: multipart/alternative;
boundary="_000_7BB9A190F67D7742AAAD7466615B10E98998D9DMCLEMAIL1dmchvan_"
MIME-Version: 1.0
Content-Length: 2487


Congratulations!! You have been nominated on the Prince Alwaleed Bin Charity program, GO TO http://alwaleed-organization.webnode.com/ for info

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: No registered users and 2 guests