by buried under 419s
Tue Mar 15, 2016 2:12 am
X-Spam-Flag: YES
X-Envelope-From: [email protected]
Return-Path: <[email protected]>
Received: from mail.btconnect.com (c2beaomr08.btconnect.com [213.123.26.186])
by mail57c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id u2F3rshx028437
for <>; Mon, 14 Mar 2016 23:53:56 -0400
Received: from host81-133-151-158.in-addr.btopenworld.com (EHLO EX01.sickchildren.local) ([81.133.151.158])
by c2beaomr08.btconnect.com
with ESMTP id ITK30064;
Tue, 15 Mar 2016 03:02:58 +0000 (GMT)
Received: from [192.168.0.136] (195.59.157.157) by EX01.sickchildren.local
(192.168.1.13) with Microsoft SMTP Server (TLS) id 14.1.438.0; Mon, 14 Mar
2016 23:46:57 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Description: Mail message body
Subject: *****SPAM***** Contact
To: <>
From: Matt Ryan <[email protected]>
Date: Tue, 15 Mar 2016 00:47:03 +0100
Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Originating-IP: [195.59.157.157]
X-Brightmail-Tracker: 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
X-Mirapoint-IP-Reputation: reputation=Good-1,
source=Queried,
refid=tid=0001.0A0B0301.56E780AA.00DD,
actions=tag
X-Junkmail-Premium-Raw: score=25/50,
refid=2.7.2:2016.3.15.32117:17:25.923,
ip=,
rules=__CT,
__CT_TEXT_PLAIN,
__MIME_VERSION,
__CTE,
SUBJ_1WORD,
__TO_MALFORMED_2,
__TO_NO_NAME,
__HAS_FROM,
__HAS_REPLYTO,
__FRAUD_WEBMAIL_REPLYTO,
__HAS_MSGID,
__SANE_MSGID,
WEBMAIL_XOIP,
__HAS_XOIP,
WEBMAIL_X_IP_HDR,
__ANY_URI,
__FRAUD_BODY_WEBMAIL,
__URI_NO_WWW,
__FRAUD_MONEY_CURRENCY_EURO,
__FRAUD_MONEY_BIG_COIN_EN,
BODY_SIZE_100_199,
BODYTEXTP_SIZE_400_LESS,
BODYTEXTP_SIZE_3000_LESS,
__MIME_TEXT_ONLY,
__URI_NS,
HTML_00_01,
HTML_00_10,
__FRAUD_MONEY_CURRENCY,
__FRAUD_MONEY_BIG_COIN,
__FRAUD_MONEY_VALUE,
__FRAUD_MONEY,
BODY_SIZE_5000_LESS,
WEBMAIL_REPLYTO_NOT_FROM,
WEBMAIL_SOURCE,
FRAUD_WEBMAIL_R_NOT_F,
FRAUD_LITTLE_BODY,
__PHISH_SPEAR_STRUCTURE_1,
BODY_SIZE_1000_LESS,
BODY_SIZE_2000_LESS,
SMALL_BODY,
__PHISH_SPEAR_STRUCTURE_2,
__FRAUD_WEBMAIL,
REPLYTO_FROM_DIFF_ADDY,
BODY_SIZE_7000_LESS,
NO_URI_HTTPS
X-Junkmail-Status: score=25/50, host=c2beaomr08.btconnect.com
X-Junkmail-Signature-Raw: score=unknown,
refid=str=0001.0A0B0202.56E78751.00F7:SCFSTAT29597838,ss=1,re=-4.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0,
ip=0.0.0.0,
so=2011-07-25 19:15:43,
dmn=2013-03-21 17:37:32,
mode=multiengine
X-Junkmail-IWF: false
X-CTCH-RefID: str=0001.0A010204.56E78755.0014:SCFSTAT29597838,ss=1,re=-1.900,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
X-CTCH-VOD: Unknown
X-CTCH-Spam: Unknown
X-CTCH-Score: -1.900
X-CTCH-Rules: FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,
X-CTCH-Flags: 0
X-CTCH-ScoreCust: 0.000
X-CSC: 100
X-CHA: v=2.1 cv=V4FEj4Xi c=1 sm=1 tr=0 p=xb3ngfBXeIeNLizEQKpm1Q==:17
p=0JYbFSOr2GYA:10 p=8thCjVXDpDQA:10 a=juJ4ui28Z1Tbh8NigYVaTQ==:117
a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10 a=pebN5Osrj9wA:10
a=8nJEP1OIZ-IA:10 a=7OsogOcEt9IA:10 a=pGLkceISAAAA:8
a=A4G5w_XX-5wYC_nLeMQA:9 a=cdNorle0LYxeMHc9:21 a=wBh1F3SROEcFQPRs:21
a=wPNLvfGTeEIA:10 a=l6ZRKZayVn4A:10 a=w2ahZM_67FkA:10
Received-SPF: none (mail57c28: domain of sickchildrenstrust.org does not provide an SPF record) client-ip=213.123.26.186; [email protected];
X-WHL: LR
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by mail57c28.carrierzone.com id u2F3rshx028437
Contact Monica Torres via email: [email protected] for your winnings of EIGHT MILLION EUROS IN THE EURO MILLONS LOTTERY.
X-Envelope-From: [email protected]
Return-Path: <[email protected]>
Received: from mail.btconnect.com (c2beaomr08.btconnect.com [213.123.26.186])
by mail57c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id u2F3rshx028437
for <>; Mon, 14 Mar 2016 23:53:56 -0400
Received: from host81-133-151-158.in-addr.btopenworld.com (EHLO EX01.sickchildren.local) ([81.133.151.158])
by c2beaomr08.btconnect.com
with ESMTP id ITK30064;
Tue, 15 Mar 2016 03:02:58 +0000 (GMT)
Received: from [192.168.0.136] (195.59.157.157) by EX01.sickchildren.local
(192.168.1.13) with Microsoft SMTP Server (TLS) id 14.1.438.0; Mon, 14 Mar
2016 23:46:57 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Description: Mail message body
Subject: *****SPAM***** Contact
To: <>
From: Matt Ryan <[email protected]>
Date: Tue, 15 Mar 2016 00:47:03 +0100
Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Originating-IP: [195.59.157.157]
X-Brightmail-Tracker: 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
X-Mirapoint-IP-Reputation: reputation=Good-1,
source=Queried,
refid=tid=0001.0A0B0301.56E780AA.00DD,
actions=tag
X-Junkmail-Premium-Raw: score=25/50,
refid=2.7.2:2016.3.15.32117:17:25.923,
ip=,
rules=__CT,
__CT_TEXT_PLAIN,
__MIME_VERSION,
__CTE,
SUBJ_1WORD,
__TO_MALFORMED_2,
__TO_NO_NAME,
__HAS_FROM,
__HAS_REPLYTO,
__FRAUD_WEBMAIL_REPLYTO,
__HAS_MSGID,
__SANE_MSGID,
WEBMAIL_XOIP,
__HAS_XOIP,
WEBMAIL_X_IP_HDR,
__ANY_URI,
__FRAUD_BODY_WEBMAIL,
__URI_NO_WWW,
__FRAUD_MONEY_CURRENCY_EURO,
__FRAUD_MONEY_BIG_COIN_EN,
BODY_SIZE_100_199,
BODYTEXTP_SIZE_400_LESS,
BODYTEXTP_SIZE_3000_LESS,
__MIME_TEXT_ONLY,
__URI_NS,
HTML_00_01,
HTML_00_10,
__FRAUD_MONEY_CURRENCY,
__FRAUD_MONEY_BIG_COIN,
__FRAUD_MONEY_VALUE,
__FRAUD_MONEY,
BODY_SIZE_5000_LESS,
WEBMAIL_REPLYTO_NOT_FROM,
WEBMAIL_SOURCE,
FRAUD_WEBMAIL_R_NOT_F,
FRAUD_LITTLE_BODY,
__PHISH_SPEAR_STRUCTURE_1,
BODY_SIZE_1000_LESS,
BODY_SIZE_2000_LESS,
SMALL_BODY,
__PHISH_SPEAR_STRUCTURE_2,
__FRAUD_WEBMAIL,
REPLYTO_FROM_DIFF_ADDY,
BODY_SIZE_7000_LESS,
NO_URI_HTTPS
X-Junkmail-Status: score=25/50, host=c2beaomr08.btconnect.com
X-Junkmail-Signature-Raw: score=unknown,
refid=str=0001.0A0B0202.56E78751.00F7:SCFSTAT29597838,ss=1,re=-4.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0,
ip=0.0.0.0,
so=2011-07-25 19:15:43,
dmn=2013-03-21 17:37:32,
mode=multiengine
X-Junkmail-IWF: false
X-CTCH-RefID: str=0001.0A010204.56E78755.0014:SCFSTAT29597838,ss=1,re=-1.900,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
X-CTCH-VOD: Unknown
X-CTCH-Spam: Unknown
X-CTCH-Score: -1.900
X-CTCH-Rules: FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,
X-CTCH-Flags: 0
X-CTCH-ScoreCust: 0.000
X-CSC: 100
X-CHA: v=2.1 cv=V4FEj4Xi c=1 sm=1 tr=0 p=xb3ngfBXeIeNLizEQKpm1Q==:17
p=0JYbFSOr2GYA:10 p=8thCjVXDpDQA:10 a=juJ4ui28Z1Tbh8NigYVaTQ==:117
a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10 a=pebN5Osrj9wA:10
a=8nJEP1OIZ-IA:10 a=7OsogOcEt9IA:10 a=pGLkceISAAAA:8
a=A4G5w_XX-5wYC_nLeMQA:9 a=cdNorle0LYxeMHc9:21 a=wBh1F3SROEcFQPRs:21
a=wPNLvfGTeEIA:10 a=l6ZRKZayVn4A:10 a=w2ahZM_67FkA:10
Received-SPF: none (mail57c28: domain of sickchildrenstrust.org does not provide an SPF record) client-ip=213.123.26.186; [email protected];
X-WHL: LR
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by mail57c28.carrierzone.com id u2F3rshx028437
Contact Monica Torres via email: [email protected] for your winnings of EIGHT MILLION EUROS IN THE EURO MILLONS LOTTERY.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces