Scams operating under the guise of a charity.
#234468 by Faizan Docherty Fri Jan 16, 2015 4:38 am
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 41.66.28.72
Originating ISP: Cote D'ivoire Telecom
City: Abidjan
Country of Origin: Cote D'Ivoire
* For a complete report on this email header goto ipTRACKERonline


Delivered-To: <snipped>
Received: by 10.70.51.10 with SMTP id g10csp262507pdo;
Thu, 15 Jan 2015 23:19:01 -0800 (PST)
X-Received: by 10.66.250.225 with SMTP id zf1mr20621726pac.31.1421392741162;
Thu, 15 Jan 2015 23:19:01 -0800 (PST)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (si-002-i86.relay.mailchannels.net. [173.236.122.36])
by mx.google.com with ESMTP id ua2si4426020pab.180.2015.01.15.23.19.00
for <snipped>;
Thu, 15 Jan 2015 23:19:01 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 173.236.122.36 as permitted sender) client-ip=173.236.122.36;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 173.236.122.36 as permitted sender) [email protected];
dkim=fail [email protected]
X-Sender-Id: _forwarded-from|183.79.150.96
Received: from r8-chicago.webserversystems.com (ip-10-213-14-133.us-west-2.compute.internal [10.213.14.133])
by relay.mailchannels.net (Postfix) with ESMTPA id 2D11460523
for <snipped>; Fri, 16 Jan 2015 07:18:58 +0000 (UTC)
X-Sender-Id: _forwarded-from|183.79.150.96
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.248.16.86])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.4.2);
Fri, 16 Jan 2015 07:18:58 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|183.79.150.96
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1421392738493:2309368307
X-MC-Ingress-Time: 1421392738492
Received: from web101609.mail.kks.yahoo.co.jp ([183.79.150.96]:39514)
by r8-chicago.webserversystems.com with smtp (Exim 4.82)
(envelope-from <[email protected]>)
id 1YC1BE-000BVP-UU
for <snipped>; Fri, 16 Jan 2015 01:18:55 -0600
Received: (qmail 17831 invoked by uid 60001); 16 Jan 2015 07:18:49 -0000
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>;
Message-ID: <[email protected]>
X-YMail-OSG: <snipped>
Received: from [41.66.28.72] by web101609.mail.kks.yahoo.co.jp via HTTP; Fri, 16 Jan 2015 16:18:49 JST
X-Mailer: YahooMailWebService/0.8.111_57
X-YMail-JAS: <snipped>
Date: Fri, 16 Jan 2015 16:18:49 +0900 (JST)
From: Mrs Marie David <[email protected]>
Reply-To: Mrs Marie David <[email protected]>
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1586866734-184250926-1421392729=:11645"
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: My dear friend, I think you can make a lot of difference in
my life if we talk, become good friends in the Lord, and see that with greater
power, becomes greater responsibility. You can make a change in the life
of others, most especially the poor hearted, and the less privileged I believe
you can do this. I think I would start all with a proper introduction of
myself. I am Mrs.Marie David, a widow to Late Mr.Antonio David. I am 57 years
old, suffering from long time cancer of the cancer of the bone marrow, (blood).
[...]

Content analysis details: (9.7 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(kitatyan0210[at]yahoo.co.jp)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[183.79.150.96 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.66.28.72 listed in dnsbl.sorbs.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (kitatyan0210[at]yahoo.co.jp)
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 MONEY_FROM_41 Lots of money from Africa
3.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.1 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Hello dear
X-AuthUser:


My dear friend,
I think you can make a lot of difference in my life if we talk, become good friends in the Lord, and see that with greater power, becomes greater responsibility. You can make a change in the life of others, most especially the poor hearted, and the less privileged I believe you can do this. I think I would start all with a proper introduction of myself. I am Mrs.Marie David, a widow to Late Mr.Antonio David. I am 57 years old, suffering from long time cancer of the cancer of the bone marrow, (blood).

From all indications, my condition is really deteriorating and is quite obvious that I may not live more than two months after my next surgery, because the cancer stage has gotten to a very bad stage and my personal physician told me that I may not live for more than four months and I am so scared about it. I have no child of mine, even though I wish I had it, is late now you know, since I cannot get married again, and age is no longer on my side. So, I now decide to divide part of my wealth, by contributing to the development of the motherless babies homes, needy, poor, charity homes and widows too.I am willing to donate the some amount of 18.5million dollars,which is still the major inheritance i have left.

I wish you could be someone who I could trust with all my heart to make this wish of mine come true. Please note that, this fund is Deposited with a reputable bank/ security company. I need you to use the funds to help the poor I know this is hard and it take a very strong heart to get this done,But you should keep this saying in your heart.

Remain blessed.


Mrs. Marie David

Please DO NOT tell a scammer that he has been posted here!

If you wish you can email me at
faizandocherty @ scamwarners [dot] com

How do I find email headers???

How to analyze an email header.
Advertisement

Who is online

Users browsing this forum: No registered users and 5 guests