by buried under 419s
Tue Sep 18, 2012 12:08 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 17 Sep 2012 20:45:52 -0700
Received: from oms-mc03.r1000.mx.aol.com ([64.12.81.68]:55942)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TDokx-0007Ao-JU
for ; Mon, 17 Sep 2012 20:45:52 -0700
Received: from mtaout-db05.r1000.mx.aol.com (mtaout-db05.r1000.mx.aol.com [172.29.51.197])
by oms-mc03.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id ED8A938001687;
Mon, 17 Sep 2012 23:45:52 -0400 (EDT)
Received: from [199.195.213.199] (unknown [199.195.213.199])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaout-db05.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id 00EB6E000082;
Mon, 17 Sep 2012 23:45:51 -0400 (EDT)
Content-Type: multipart/alternative; boundary="===============0281727660=="
MIME-Version: 1.0
To: Recipients <[email protected]>
From: "DR SANI AHMED" <[email protected]>
Date: Mon, 17 Sep 2012 20:45:50 -0700
Reply-To: [email protected]
x-aol-global-disposition: S
X-SPAM-FLAG: YES
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20110426; t=1347939952;
bh=3m2yrJfbjIvqRx/dhIA/fRg4aP28VLpyVi1ehuVrpMI=;
h=From:To:Subject:Date:MIME-Version:Content-Type;
b=hj6J7szDlBwTK+F7ZoNLsGLBd1pm/8clZ5wxlkpTlhPhUmcbf9cOt30pp7HBVF2tO
LCM4w8D98OW42EqpnHcZxIm5psFzShTk8hqIC4vR54qKGyhEXJHU7gf1eJgJSlLoyw
sKHhNtSW19OEzNYa6/GXontNf4QElf14g8wwlB54=
X-AOL-SCOLL-SCORE: 0:5:52737904:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d33c55057ee6f199c
X-AOL-IP: 199.195.213.199
X-Spam-Status: Yes, score=8.2
X-Spam-Score: 82
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (8.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 AXB_X_AOL_SEZ_S AOL said this is S
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(joannepoco[at]aol.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[64.12.81.68 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?199.195.213.199>]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(saniahmed599[at]yahoo.com.hk
)
-0.2 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9867]
0.5 MISSING_MID Missing Message-Id: header
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** DID YOU SEND MRS VIRGINIA WALTER FROM CALIFORNIA TO CLAIM YOUR FUND ON YOUR
BEHALF? WITH FOLLOWING DETAILS.NAME: MRS. VIRGINIA WALTER.BANK NAME: WELLS
FARGO BANK.BANK ADDRESS:CALIFORNIA, USA.ACCOUNT NUMBER: 6503809428
You will not see this in a MIME-aware mail reader.
--===============0281727660==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
=20
--===============0281727660==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
[in subject line]""DID YOU SEND MRS VIRGINIA WALTER FROM CALIFORNIA TO CLAIM YOUR FUND ON YOUR
BEHALF? WITH FOLLOWING DETAILS.NAME: MRS. VIRGINIA WALTER.BANK NAME: WELLS
FARGO BANK.BANK ADDRESS:CALIFORNIA, USA.ACCOUNT NUMBER: 6503809428
Envelope-to:
Delivery-date: Mon, 17 Sep 2012 20:45:52 -0700
Received: from oms-mc03.r1000.mx.aol.com ([64.12.81.68]:55942)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TDokx-0007Ao-JU
for ; Mon, 17 Sep 2012 20:45:52 -0700
Received: from mtaout-db05.r1000.mx.aol.com (mtaout-db05.r1000.mx.aol.com [172.29.51.197])
by oms-mc03.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id ED8A938001687;
Mon, 17 Sep 2012 23:45:52 -0400 (EDT)
Received: from [199.195.213.199] (unknown [199.195.213.199])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaout-db05.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id 00EB6E000082;
Mon, 17 Sep 2012 23:45:51 -0400 (EDT)
Content-Type: multipart/alternative; boundary="===============0281727660=="
MIME-Version: 1.0
To: Recipients <[email protected]>
From: "DR SANI AHMED" <[email protected]>
Date: Mon, 17 Sep 2012 20:45:50 -0700
Reply-To: [email protected]
x-aol-global-disposition: S
X-SPAM-FLAG: YES
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20110426; t=1347939952;
bh=3m2yrJfbjIvqRx/dhIA/fRg4aP28VLpyVi1ehuVrpMI=;
h=From:To:Subject:Date:MIME-Version:Content-Type;
b=hj6J7szDlBwTK+F7ZoNLsGLBd1pm/8clZ5wxlkpTlhPhUmcbf9cOt30pp7HBVF2tO
LCM4w8D98OW42EqpnHcZxIm5psFzShTk8hqIC4vR54qKGyhEXJHU7gf1eJgJSlLoyw
sKHhNtSW19OEzNYa6/GXontNf4QElf14g8wwlB54=
X-AOL-SCOLL-SCORE: 0:5:52737904:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d33c55057ee6f199c
X-AOL-IP: 199.195.213.199
X-Spam-Status: Yes, score=8.2
X-Spam-Score: 82
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (8.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 AXB_X_AOL_SEZ_S AOL said this is S
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(joannepoco[at]aol.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[64.12.81.68 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?199.195.213.199>]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(saniahmed599[at]yahoo.com.hk
)
-0.2 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9867]
0.5 MISSING_MID Missing Message-Id: header
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** DID YOU SEND MRS VIRGINIA WALTER FROM CALIFORNIA TO CLAIM YOUR FUND ON YOUR
BEHALF? WITH FOLLOWING DETAILS.NAME: MRS. VIRGINIA WALTER.BANK NAME: WELLS
FARGO BANK.BANK ADDRESS:CALIFORNIA, USA.ACCOUNT NUMBER: 6503809428
You will not see this in a MIME-aware mail reader.
--===============0281727660==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
=20
--===============0281727660==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
[in subject line]""DID YOU SEND MRS VIRGINIA WALTER FROM CALIFORNIA TO CLAIM YOUR FUND ON YOUR
BEHALF? WITH FOLLOWING DETAILS.NAME: MRS. VIRGINIA WALTER.BANK NAME: WELLS
FARGO BANK.BANK ADDRESS:CALIFORNIA, USA.ACCOUNT NUMBER: 6503809428
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces