by buried under 419s
Fri Apr 08, 2016 4:07 am
eturn-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 07 Apr 2016 13:27:54 -0700
Received: from mail.ohiorealtitle.com ([172.98.102.14]:41951)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1aoGWu-0000zJ-5O
for ; Thu, 07 Apr 2016 13:27:54 -0700
Received: from localhost (localhost [127.0.0.1])
by mail.ohiorealtitle.com (Postfix) with ESMTP id EB0533C189D;
Thu, 7 Apr 2016 14:59:40 -0400 (EDT)
Received: from mail.ohiorealtitle.com ([127.0.0.1])
by localhost (mail.ohiorealtitle.com [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id ihoeUo8Rc0Kj; Thu, 7 Apr 2016 14:59:40 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1])
by mail.ohiorealtitle.com (Postfix) with ESMTP id BE56538E212;
Thu, 7 Apr 2016 06:44:31 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.9.2 mail.ohiorealtitle.com BE56538E212
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ohiorealtitle.com;
s=55B38F68-D0A3-11E3-A46E-A29DCFF65D51; t=1460025871;
bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:To:
From:Date:Reply-To:Message-Id;
b=eIxrw1qIf9omUxpahdYcs7SGjlwROotOgSmeJ0hZLz1Xp5iyQhRYFmrKZn1XS+Kkp
ogkIm3fqyXku5ZdqCmlZonbbXdIQq6WNta+9Zc7EFlVIT0Y59tzXYW6i8uVVHeGnCN
jqM83gD3dv9/JZ/IFAU0Nz8OG9wUHmsdAOmNJmx8=
X-Virus-Scanned: amavisd-new at mail.ohiorealtitle.com
Received: from mail.ohiorealtitle.com ([127.0.0.1])
by localhost (mail.ohiorealtitle.com [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id 0Djdg-mOaEDC; Thu, 7 Apr 2016 06:44:31 -0400 (EDT)
Received: from [172.20.1.24] (unknown [212.98.135.89])
by mail.ohiorealtitle.com (Postfix) with ESMTPA id 32C0A2BBC97;
Wed, 6 Apr 2016 16:31:22 -0400 (EDT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "JASON MILLER" <[email protected]>
Date: Wed, 06 Apr 2016 23:31:13 +0300
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=7.0
X-Spam-Score: 70
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (7.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[172.98.102.14 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?172.98.102.14>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=o ... roject.com]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=ma ... roject.com]
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9161]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
X-Spam-Flag: YES
Subject: ***SPAM*** #Your E-MAIL ADDRESS WON £1,000,000GBP IN 2016 CNN AWARD PROMOTION. For claims process, send(Full Name,Mobile Number) to Email: [email protected]
Envelope-to:
Delivery-date: Thu, 07 Apr 2016 13:27:54 -0700
Received: from mail.ohiorealtitle.com ([172.98.102.14]:41951)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1aoGWu-0000zJ-5O
for ; Thu, 07 Apr 2016 13:27:54 -0700
Received: from localhost (localhost [127.0.0.1])
by mail.ohiorealtitle.com (Postfix) with ESMTP id EB0533C189D;
Thu, 7 Apr 2016 14:59:40 -0400 (EDT)
Received: from mail.ohiorealtitle.com ([127.0.0.1])
by localhost (mail.ohiorealtitle.com [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id ihoeUo8Rc0Kj; Thu, 7 Apr 2016 14:59:40 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1])
by mail.ohiorealtitle.com (Postfix) with ESMTP id BE56538E212;
Thu, 7 Apr 2016 06:44:31 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.9.2 mail.ohiorealtitle.com BE56538E212
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ohiorealtitle.com;
s=55B38F68-D0A3-11E3-A46E-A29DCFF65D51; t=1460025871;
bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:To:
From:Date:Reply-To:Message-Id;
b=eIxrw1qIf9omUxpahdYcs7SGjlwROotOgSmeJ0hZLz1Xp5iyQhRYFmrKZn1XS+Kkp
ogkIm3fqyXku5ZdqCmlZonbbXdIQq6WNta+9Zc7EFlVIT0Y59tzXYW6i8uVVHeGnCN
jqM83gD3dv9/JZ/IFAU0Nz8OG9wUHmsdAOmNJmx8=
X-Virus-Scanned: amavisd-new at mail.ohiorealtitle.com
Received: from mail.ohiorealtitle.com ([127.0.0.1])
by localhost (mail.ohiorealtitle.com [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id 0Djdg-mOaEDC; Thu, 7 Apr 2016 06:44:31 -0400 (EDT)
Received: from [172.20.1.24] (unknown [212.98.135.89])
by mail.ohiorealtitle.com (Postfix) with ESMTPA id 32C0A2BBC97;
Wed, 6 Apr 2016 16:31:22 -0400 (EDT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "JASON MILLER" <[email protected]>
Date: Wed, 06 Apr 2016 23:31:13 +0300
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=7.0
X-Spam-Score: 70
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (7.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[172.98.102.14 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?172.98.102.14>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=o ... roject.com]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=ma ... roject.com]
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9161]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
X-Spam-Flag: YES
Subject: ***SPAM*** #Your E-MAIL ADDRESS WON £1,000,000GBP IN 2016 CNN AWARD PROMOTION. For claims process, send(Full Name,Mobile Number) to Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces