by Faizan Docherty
Wed Oct 29, 2014 8:39 pm
ipTRACKERonline.com wrote:Header Analysis Quick Report
Originating IP: 98.138.105.214
Originating ISP: Yahoo
City: Sunnyvale
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline
Delivered-To: <snipped>
Received: by 10.70.125.234 with SMTP id mt10csp634923pdb;
Wed, 29 Oct 2014 06:23:14 -0700 (PDT)
X-Received: by 10.70.27.225 with SMTP id w1mr10600179pdg.40.1414588993810;
Wed, 29 Oct 2014 06:23:13 -0700 (PDT)
Return-Path: <[email protected]>
Received: from relay.mailchannels.net (nov-007-i631.relay.mailchannels.net. [46.232.183.185])
by mx.google.com with ESMTP id yr10si3999650pab.139.2014.10.29.06.23.10
for <snipped>;
Wed, 29 Oct 2014 06:23:13 -0700 (PDT)
Received-SPF: neutral (google.com: 46.232.183.185 is neither permitted nor denied by domain of [email protected]) client-ip=46.232.183.185;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 46.232.183.185 is neither permitted nor denied by domain of [email protected]) [email protected];
dkim=fail [email protected]
X-Sender-Id: _forwarded-from|98.138.91.180
Received: from r8-chicago.webserversystems.com (ip-10-33-12-218.us-west-2.compute.internal [10.33.12.218])
by relay.mailchannels.net (Postfix) with ESMTPA id 291B460AA0
for <snipped>; Wed, 29 Oct 2014 13:22:44 +0000 (UTC)
X-Sender-Id: _forwarded-from|98.138.91.180
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com [10.224.1.53])
(using TLSv1 with cipher DHE-RSA-AES256-SHA)
by 0.0.0.0:2500 (trex/5.3.2);
Wed, 29 Oct 2014 13:23:09 GMT
X-MC-Relay: Forwarding
X-MailChannels-SenderId: _forwarded-from|98.138.91.180
X-MailChannels-Auth-Id: wwwh
X-MC-Loop-Signature: 1414588973000:2024745845
X-MC-Ingress-Time: 1414588973000
Received: from nm20-vm4.bullet.mail.ne1.yahoo.com ([98.138.91.180]:51509)
by r8-chicago.webserversystems.com with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from <[email protected]>)
id 1XjTCx-000Dqk-2u
for <snipped>; Wed, 29 Oct 2014 08:22:41 -0500
DKIM-Signature: <snipped>
DomainKey-Signature: <snipped>;
Received: from [98.138.100.118] by nm20.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2014 13:22:37 -0000
Received: from [98.138.89.245] by tm109.bullet.mail.ne1.yahoo.com with NNFMP; 29 Oct 2014 13:22:37 -0000
Received: from [127.0.0.1] by omp1059.mail.ne1.yahoo.com with NNFMP; 29 Oct 2014 13:22:37 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
X-YMail-OSG: <snipped>
Received: by 98.138.105.214; Wed, 29 Oct 2014 13:22:36 +0000
Date: Wed, 29 Oct 2014 13:22:36 +0000 (UTC)
From: Victoria Kim <[email protected]>
Reply-To: Victoria Kim <[email protected]>
Message-ID: <916872731.94414.1414588956228.JavaMail.yahoo@jws10055.mail.ne1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_94413_1162104818.1414588956226"
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: CAN YOU HELP THE PEOPLE OF GOD? I AM MRS,VICTORIA KIM, FROM
NATHERLAND A WIDOW TO LATE FRANK KIM, I AM 55 YEARS OLD, I AM A NEW CHRISTAIN
CONVERT, SUFFERING FROM LONG TIME CANCER OF THE BREAST,FLORA ALL INDICATION
MY CONDITIONS IS REALLY DETERIORATING AND IT IS QUITE OBVIOUS THAT I WOUDIN,
T LIVE MORE THAN THREE MONTHS, ACCORDING TO MY DOCTORS, AND IN ALL INDICATION
REGARDS TO MEDICAL ANALYSIS, THIS IS BECAUSE THE CANCER STAGE HAS GOTTEN
TO A VERY BAD STAGE THAT NO HOPE FOR ME TO BE A LIVING PERSON AGAIN, [...]
Content analysis details: (11.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(victoria_11kim[at]yahoo.co.jp)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.91.180 listed in list.dnswl.org]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.6 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (victoriakim301[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 XFER_LOTSA_MONEY Transfer a lot of money
3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** CAN YOU HELP THE PEOPLE OF GOD?
X-AuthUser:
CAN YOU HELP THE PEOPLE OF GOD?
I AM MRS,VICTORIA KIM, FROM NATHERLAND A WIDOW TO LATE FRANK KIM, I AM 55 YEARS OLD, I AM A NEW CHRISTAIN CONVERT, SUFFERING FROM LONG TIME CANCER OF THE BREAST,FLORA ALL INDICATION MY CONDITIONS IS REALLY DETERIORATING AND IT IS QUITE OBVIOUS THAT I WOUDIN, T LIVE MORE THAN THREE MONTHS, ACCORDING TO MY DOCTORS, AND IN ALL INDICATION REGARDS TO MEDICAL ANALYSIS, THIS IS BECAUSE THE CANCER STAGE HAS GOTTEN TO A VERY BAD STAGE THAT NO HOPE FOR ME TO BE A LIVING PERSON AGAIN,
MY LATE HUSBAND KILLED DURING THE FRANCE RAID AGAINST TERRORISM IN TOGO, AND DURING THE PERIOD OF OUR MARRIAGE WE COULD NOT PRODUCE ANY CHILE MELATE HUSBAND WAS VERY WEALTHY AND AFTER HIS DEATH, I INHERITED ALL HIS BUSINESS AND WEALTH. THE DOCTORS HAS ADVISED ME THAT I MAY NOT LIVE FOR MORE THAN FOUR MONTHS, SO I NOW DECIDED TO DIVIDE THE PART OF THIS WEALTH, TO CONTRIBUTE TO THE DEVELOPMENT OF THE CHURCH IN AMERICA, AFRICA, ASIA AND EUROPE ESPECAILLY CREATE SOLUTION TO PROBLEM OF LESS PREVILLAGED ONES AND ORPHANAGE HOMES.
I SELECTED YOU AFTER VISITING THE WEBSITE I PRAYED AND FAST FOR THREE WEEKS OVER IT, I AM WILLING TO DONATE THE SUM OF $3 MILLION DOLLARS, TO THE LESS PRIVILEGED. PLEASE I WANT YOU TO NOTE THAT FUND IS LYING IN A BANK IN TOGO AND UPON MY INSTRUCTION,WILL FILE IN AN APPLICATION FOR THE TRANSFER OF THE MONEY IN YOUR NAME.
LASTLY,I HONESTLY PRAY THAT THIS MONEY WHEN TRANSFERRED WILL BE USED FOR THE SAID PURPOSE EVEN THOUHG IM LATE THEN, BECAUSE I HAVE COME TO FIND OUT THAT WEALTH ACQUISITION WITHOUT CHRIST IS VANITY AND I MADE THE PROMISE TO GOD THAT THE FUND WILL BE USE TO BUILD HIS TAMPLE. MAY THE GRACE OF OUR LORD JESUS THE LOVE OF GOD AND THE FELLOWSHIP OF GOD BE WITH YOU AND YOUR FAMILY I AM WAIT URGENT REPLY FROM YOU.
GOD BLESSES YOU.
MRS VICTORIA KIM,
REMAIN BLESSED
Please DO NOT tell a scammer that he has been posted here!
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.
If you wish you can email me at
faizandocherty @ scamwarners [dot] com
How do I find email headers???
How to analyze an email header.