by buried under 419s
Tue Jan 15, 2013 2:51 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 14 Jan 2013 21:40:06 -0800
Received: from imr-da01.mx.aol.com ([205.188.105.143]:53041)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TuzFj-00020S-H2
for ; Mon, 14 Jan 2013 21:40:06 -0800
Received: from mtaout-db05.r1000.mx.aol.com (mtaout-db05.r1000.mx.aol.com [172.29.51.197])
by imr-da01.mx.aol.com (Outbound Mail Relay) with ESMTP id 3D0421C000116;
Tue, 15 Jan 2013 00:40:05 -0500 (EST)
Received: from omh-da01.r1000.mx.aol.com (omh-da01.r1000.mx.aol.com [172.29.51.136])
by mtaout-db05.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTP id E9606E000085;
Tue, 15 Jan 2013 00:40:04 -0500 (EST)
Received: from mtaout-da04.r1000.mx.aol.com (mtaout-da04.r1000.mx.aol.com [172.29.51.132])
by omh-da01.r1000.mx.aol.com (AOL Outbound Holding Interface) with ESMTP id AC5C8E0000F4;
Tue, 15 Jan 2013 00:38:59 -0500 (EST)
Received: from pti-server.perfectime.local (adsl-99-103-158-188.dsl.lsan03.sbcglobal.net [99.103.158.188])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaout-da04.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id 5663AE0000A4;
Tue, 15 Jan 2013 00:38:56 -0500 (EST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re: I have decided to choose you among the numerous internet users in the world.I have chosen you because I know that with your position you can assist people in need. Just read carefully the message below as I am about to tell you about my life and that of my Late husband.I deposited a cheque in the sum of £5,8M with A SECURITY COMP to deliver to you upon your contact with them. Write Mr.Terry Morgan [email protected]
To: Recipients <[email protected]>
From: "Mother Lucy Torkild" <[email protected]>
Date: Mon, 14 Jan 2013 21:26:19 -0800
Reply-To: [email protected]
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20121107; t=1358228339;
bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
h=From:To:Subject:Date:MIME-Version:Content-Type;
b=qNP+EdEdShW8u6qrYxG5PRJB/n+12X2mgtUMaxlftcksNc0jSkT8V2pBI0aSpLJ4K
3Q4+0A4TWBOu0O6DiAx6jwL4VVB66WJAtugASk1RRn2N7GyIq4qfFm0cqKZP1ver7j
SAo06zaOxOCxP2CgTjDC430lQ02yqOH4drF3263o=
X-AOL-SCOLL-SCORE: 1:5:70689256:93952408
X-AOL-SCOLL-URL_COUNT: -1
x-aol-global-disposition: G
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20121107; t=1358228405;
bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
h=From:To:Subject:Date:MIME-Version:Content-Type;
b=xVnx3CAtKGLCqJCJVu8L7uP+ItCJi+0P1fqhRiwAk9KqTJN60tHj9VTaCR7fZ7bNq
E1OlLaAbXariV8UliHQyOIuxkSXDD/0tGC0jxgz9QlaR6iTjxbDolRdc2oo431dG7Q
Z+fL4dZBRfiXkPXjHlcH5zfxOhSGZPRrCPAReNHk=
X-AOL-SCOLL-SCORE: 1:5:25548856:93952408
X-AOL-SCOLL-URL_COUNT: -1
x-aol-sid: 3039ac1d33c550f4ebb41a7b
X-Spam-Status: No, score=2.8
X-Spam-Score: 28
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (2.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tiggcar[at]aol.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[205.188.105.143 listed in list.dnswl.org]
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.4 DECEASED_NO_ML Dead not via mailing list
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
[scam in suject line]
Envelope-to:
Delivery-date: Mon, 14 Jan 2013 21:40:06 -0800
Received: from imr-da01.mx.aol.com ([205.188.105.143]:53041)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TuzFj-00020S-H2
for ; Mon, 14 Jan 2013 21:40:06 -0800
Received: from mtaout-db05.r1000.mx.aol.com (mtaout-db05.r1000.mx.aol.com [172.29.51.197])
by imr-da01.mx.aol.com (Outbound Mail Relay) with ESMTP id 3D0421C000116;
Tue, 15 Jan 2013 00:40:05 -0500 (EST)
Received: from omh-da01.r1000.mx.aol.com (omh-da01.r1000.mx.aol.com [172.29.51.136])
by mtaout-db05.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTP id E9606E000085;
Tue, 15 Jan 2013 00:40:04 -0500 (EST)
Received: from mtaout-da04.r1000.mx.aol.com (mtaout-da04.r1000.mx.aol.com [172.29.51.132])
by omh-da01.r1000.mx.aol.com (AOL Outbound Holding Interface) with ESMTP id AC5C8E0000F4;
Tue, 15 Jan 2013 00:38:59 -0500 (EST)
Received: from pti-server.perfectime.local (adsl-99-103-158-188.dsl.lsan03.sbcglobal.net [99.103.158.188])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaout-da04.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id 5663AE0000A4;
Tue, 15 Jan 2013 00:38:56 -0500 (EST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re: I have decided to choose you among the numerous internet users in the world.I have chosen you because I know that with your position you can assist people in need. Just read carefully the message below as I am about to tell you about my life and that of my Late husband.I deposited a cheque in the sum of £5,8M with A SECURITY COMP to deliver to you upon your contact with them. Write Mr.Terry Morgan [email protected]
To: Recipients <[email protected]>
From: "Mother Lucy Torkild" <[email protected]>
Date: Mon, 14 Jan 2013 21:26:19 -0800
Reply-To: [email protected]
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20121107; t=1358228339;
bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
h=From:To:Subject:Date:MIME-Version:Content-Type;
b=qNP+EdEdShW8u6qrYxG5PRJB/n+12X2mgtUMaxlftcksNc0jSkT8V2pBI0aSpLJ4K
3Q4+0A4TWBOu0O6DiAx6jwL4VVB66WJAtugASk1RRn2N7GyIq4qfFm0cqKZP1ver7j
SAo06zaOxOCxP2CgTjDC430lQ02yqOH4drF3263o=
X-AOL-SCOLL-SCORE: 1:5:70689256:93952408
X-AOL-SCOLL-URL_COUNT: -1
x-aol-global-disposition: G
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20121107; t=1358228405;
bh=47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=;
h=From:To:Subject:Date:MIME-Version:Content-Type;
b=xVnx3CAtKGLCqJCJVu8L7uP+ItCJi+0P1fqhRiwAk9KqTJN60tHj9VTaCR7fZ7bNq
E1OlLaAbXariV8UliHQyOIuxkSXDD/0tGC0jxgz9QlaR6iTjxbDolRdc2oo431dG7Q
Z+fL4dZBRfiXkPXjHlcH5zfxOhSGZPRrCPAReNHk=
X-AOL-SCOLL-SCORE: 1:5:25548856:93952408
X-AOL-SCOLL-URL_COUNT: -1
x-aol-sid: 3039ac1d33c550f4ebb41a7b
X-Spam-Status: No, score=2.8
X-Spam-Score: 28
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (2.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tiggcar[at]aol.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[205.188.105.143 listed in list.dnswl.org]
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.4 DECEASED_NO_ML Dead not via mailing list
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
[scam in suject line]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces