by Faizan Docherty
Thu Jan 30, 2014 12:34 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report<br>Originating IP: 83.172.33.19<br>Originating ISP: The Municipal Enterprise Severskelektrosviaz<br> City: Tomsk<br>Country of Origin: Russian Federation<br>* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.70.126.40 with SMTP id mv8csp13843pdb;
Thu, 30 Jan 2014 03:37:37 -0800 (PST)
X-Received: by 10.43.74.198 with SMTP id yx6mr10052226icb.40.1391081856507;
Thu, 30 Jan 2014 03:37:36 -0800 (PST)
Return-Path: <[email protected]>
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com. [184.154.1.124])
by mx.google.com with ESMTPS id oc7si8801371igb.71.2014.01.30.03.37.35
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Thu, 30 Jan 2014 03:37:36 -0800 (PST)
Received-SPF: neutral (google.com: 184.154.1.124 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=184.154.1.124;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 184.154.1.124 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from hosting.tomsk-7.ru ([83.172.33.19]:52277 helo=mail.vseversk.ru)
by r8-chicago.webserversystems.com with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1W8pw2-000BzG-Ub
for <snipped>; Thu, 30 Jan 2014 05:37:35 -0600
Received: from Vseversk.ru (localhost [127.0.0.1])
by mail.vseversk.ru (Postfix) with ESMTP id D7F9B2AB61;
Thu, 30 Jan 2014 18:37:28 +0700 (NOVT)
MIME-Version: 1.0
Date: Thu, 30 Jan 2014 17:37:28 +0600
From: maryallen <[email protected]>
To: undisclosed-recipients:;
Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Sels Webmail/0.1
Content-Type: multipart/alternative;
boundary="=_c502a2ef2b1847fee3896f7bba92488a"
X-Spam-Status: Yes, score=9.3
X-Spam-Score: 93
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Donation My dear in Christ Jesus, My name is Mary Allen from
Texas USA. I lived in Africa for many years and now currently hospitalized
in a private hospital here in Texas as a result of brain cancer. My purpose
of writing you is because I was led by the spirit of God to offer you the
money that I have in my private account in Africa now that is clear that
I'm approaching the last days of my life. I'm 33 year old and may not even
need the money again for any thing. I'm [...]
Content analysis details: (9.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[83.172.33.19 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
4.2 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Donation
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r8-chicago.webserversystems.com
X-AntiAbuse: Original Domain - <snipped>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - vseversk.ru
X-Get-Message-Sender-Via: r8-chicago.webserversystems.com: none
X-Source:
X-Source-Args:
X-Source-Dir:
Donation
My dear in Christ Jesus,
My name is Mary Allen
from Texas USA. I lived in Africa for many years and now currently
hospitalized in a private hospital here in Texas as a result of brain
cancer. My purpose of writing you is because I was led by the spirit of
God to offer you the money that I have in my private account in Africa
now that is clear that I’m approaching the last days of my life. I’m 33 year old and may not even need the money again for any thing. I’m
offering you the sum of $10.5 million us dollars as a donation for the
work of God and charity.May the good Lord bless you for the work you are doing already and may he give you wisdom to continue it .When I hear
from you, I will direct you on how to receive the money.Please pray that God will accept my soul even if I die today.
Mary Allen
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.