Hellen Cart <[email protected]>

Header Analysis Quick Report<br>Originating IP: 41.203.69.2<br>Originating ISP: Globacom Ltd<br> City: n/a<br>Country of Origin: Nigeria<br>* For a complete report on this email header goto ipTRACKERonline

Received: from EX2013MBX-1.gothamemail.net (69.67.62.146) by
EX2013MBX-1.gothamemail.net (69.67.62.146) with Microsoft SMTP Server (TLS)
id 15.0.620.29 via Mailbox Transport; Sat, 11 Jan 2014 08:47:26 -0500
Received: from EXCHANGE-6.gothamemail.net (69.67.62.31) by
EX2013MBX-1.gothamemail.net (69.67.62.146) with Microsoft SMTP Server (TLS)
id 15.0.620.29; Sat, 11 Jan 2014 08:47:08 -0500
Received: from bsf600-1.gothamweb.net (69.67.62.10) by
exchange-6.gothamemail.net (69.67.62.31) with Microsoft SMTP Server id
14.3.123.3; Sat, 11 Jan 2014 08:47:08 -0500
X-ASG-Debug-ID: 1389448026-06dae378121048b0001-4ZP3W1
Received: from omr-d04.mx.aol.com (omr-d04.mx.aol.com [205.188.109.201]) by
bsf600-1.gothamweb.net with ESMTP id tqytKIyo6Fcs5DpO (version=TLSv1
cipher=AES256-SHA bits=256 verify=NO) for <snipped>; Sat,
11 Jan 2014 08:47:06 -0500 (EST)
X-Barracuda-Envelope-From: [email protected]
X-Barracuda-Apparent-Source-IP: 205.188.109.201
Received: from mtaout-maa01.mx.aol.com (mtaout-maa01.mx.aol.com
[172.26.222.141]) by omr-d04.mx.aol.com (Outbound Mail Relay) with ESMTP id
270A770004394; Sat, 11 Jan 2014 08:47:06 -0500 (EST)
Received: from User (unknown [41.203.69.2]) by mtaout-maa01.mx.aol.com
(MUA/Third Party Client Interface) with ESMTPA id 18A4E38000091; Sat, 11 Jan
2014 08:46:46 -0500 (EST)
Reply-To: <[email protected]>
From: Mrs Hellen Cart <[email protected]>
Subject: Do you remember of your over due funds
Date: Sat, 11 Jan 2014 14:47:01 +0100
X-ASG-Orig-Subj: Do you remember of your over due funds
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 140110-0, 01/10/2014), Outbound message
X-Antivirus-Status: Clean
x-aol-global-disposition: G
DKIM-Signature: <snipped>
x-aol-sid: 3039ac1ade8d52d14b46490d
X-AOL-IP: 41.203.69.2
X-Barracuda-Connect: omr-d04.mx.aol.com[205.188.109.201]
X-Barracuda-Start-Time: 1389448026
X-Barracuda-Encrypted: AES256-SHA
X-Barracuda-URL: http://69.67.62.10:80/cgi-mod/mark.cgi
X-Virus-Scanned: by bsmtpd at gothamweb.net
X-Barracuda-BRTS-Status: 1
X-Barracuda-BRTS-Evidence: 216c63b13b8b6346a5d877bb6b38d85a-677-txt
X-Barracuda-Bayes: INNOCENT GLOBAL 0.0082 1.0000 -1.9676
X-Barracuda-Spam-Score: 0.91
X-Barracuda-Spam-Status: No, SCORE=0.91 using per-user scores of TAG_LEVEL=1.5 QUARANTINE_LEVEL=4.0 KILL_LEVEL=8.0 tests=DKIM_SIGNED, DKIM_VERIFIED, FORGED_MUA_OUTLOOK, MISSING_HEADERS, MISSING_MID, TO_CC_NONE, US_DOLLARS_3
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.2.143971
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
0.14 MISSING_MID Missing Message-Id: header
-0.00 DKIM_VERIFIED Domain Keys Identified Mail: signature passes
verification
0.00 DKIM_SIGNED Domain Keys Identified Mail: message has a signature
1.21 MISSING_HEADERS Missing To: header
0.17 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.00 TO_CC_NONE No To: or Cc: header
1.36 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Message-ID: <[email protected]>
To: Undisclosed recipients:;
Return-Path: [email protected]
X-MS-Exchange-Organization-Network-Message-Id: 3322e73a-82f2-472b-0d49-08d0dceac1a5
X-MS-Exchange-Organization-AVStamp-Enterprise: 1.0
X-MS-Exchange-Organization-AuthSource: exchange-6.gothamemail.net
X-MS-Exchange-Organization-AuthAs: Anonymous

Hi dear,

This is to notify that your over due fund of $15,000,000.00USD which has been delayed since years ago is now ready for payment but i don't know how i am to explain this to you because what i was able to retrieve from the bank is only but $1,000,000.00 which i don't know how i am to send these funds across to you.

If you really need the funds valued $1,000,000.00USD, then do let me know so i can instruct the bank to send you the money.

Hope it is safe for you to receive the funds?

D/L: +17272825627

Remain blessed and healthy.

Hellen Cart

---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com