by buried under 419s
Return-path: <IMCEAEX-_O=FMMAIL_OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FYDIBOHF23SPDLT+29_CN=RECIPIENTS_CN=+[email protected]>
Envelope-to:
Delivery-date: Fri, 09 Jun 2017 06:01:42 -0700
Received: from mail.fmschools.org ([170.158.81.4]:55435)
by with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.89)
(envelope-from <IMCEAEX-_O=FMMAIL_OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FYDIBOHF23SPDLT+29_CN=RECIPIENTS_CN=+[email protected]>)
id 1dJJXC-0008St-7M
for Fri, 09 Jun 2017 06:01:42 -0700
Received: from EXCHANGE.Oaktree.FMSchools.org ([fe80::6c0d:a985:f3f5:2ea9]) by
EXCHANGE.Oaktree.FMSchools.org ([fe80::6c0d:a985:f3f5:2ea9%14]) with mapi id
14.03.0266.001; Fri, 9 Jun 2017 08:49:42 -0400
From: Wendy Blasland
<IMCEAEX-_O=FMMAIL_OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FYDIBOHF23SPDLT+29_CN=RECIPIENTS_CN=+[email protected]>
To: "[email protected]" <[email protected]>
Subject: FW: parade band
Thread-Topic: parade band
Thread-Index: AdLVe5oejHjpQ304T2OUK2+1c2TBrgAMNhsAAhx/7ZAAFWSUkwBxrw6wADjWM2AAAAAoMAAAABVgAAAAFVAAAAAWgAAAABeAAAAAFEAAAAAXoAAAABLQAAAAFJAAAAAW8AAAABXwAAAAGSAAAAAU4AAAABSgAAAAFHAAAAAWoAAAABYAAAAAULAAAAAZQAAAABsAAAAAGaAAAAAekAAAABwgAAAAI4AAAAAesAAAABzQAAAAHGAAAAAeYAAAAB5QAAAAH7AAAAAh4AAAACfQAAAAHzAAAAAhUAAAACFQAAAAIBAAAAAicAAAACUAAAAAI5AAAAAmsAAAACRAAAAAJHAAAAAowAAAACggAAAAJYAAAAAo0A==
Date: Fri, 9 Jun 2017 12:48:14 +0000
Message-ID: <A79920320B196440976BE32642954003B23EC012@EXCHANGE.Oaktree.FMSchools.org>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [103.240.234.235]
Content-Type: multipart/mixed;
boundary="_006_A79920320B196440976BE32642954003B23EC012EXCHANGEOaktree_"
MIME-Version: 1.0
X-Spam-Status: No, score=5.6
X-Spam-Score: 56
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I need your assistance. Reply Back for info. [cid:[email protected]]
[...]
Content analysis details: (5.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[170.158.81.4 listed in list.dnswl.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(sgt_franklugard001[at]hotmail.com)
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9893]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO
I need your assistance. Reply Back for info.
Envelope-to:
Delivery-date: Fri, 09 Jun 2017 06:01:42 -0700
Received: from mail.fmschools.org ([170.158.81.4]:55435)
by with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.89)
(envelope-from <IMCEAEX-_O=FMMAIL_OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FYDIBOHF23SPDLT+29_CN=RECIPIENTS_CN=+[email protected]>)
id 1dJJXC-0008St-7M
for Fri, 09 Jun 2017 06:01:42 -0700
Received: from EXCHANGE.Oaktree.FMSchools.org ([fe80::6c0d:a985:f3f5:2ea9]) by
EXCHANGE.Oaktree.FMSchools.org ([fe80::6c0d:a985:f3f5:2ea9%14]) with mapi id
14.03.0266.001; Fri, 9 Jun 2017 08:49:42 -0400
From: Wendy Blasland
<IMCEAEX-_O=FMMAIL_OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FYDIBOHF23SPDLT+29_CN=RECIPIENTS_CN=+[email protected]>
To: "[email protected]" <[email protected]>
Subject: FW: parade band
Thread-Topic: parade band
Thread-Index: AdLVe5oejHjpQ304T2OUK2+1c2TBrgAMNhsAAhx/7ZAAFWSUkwBxrw6wADjWM2AAAAAoMAAAABVgAAAAFVAAAAAWgAAAABeAAAAAFEAAAAAXoAAAABLQAAAAFJAAAAAW8AAAABXwAAAAGSAAAAAU4AAAABSgAAAAFHAAAAAWoAAAABYAAAAAULAAAAAZQAAAABsAAAAAGaAAAAAekAAAABwgAAAAI4AAAAAesAAAABzQAAAAHGAAAAAeYAAAAB5QAAAAH7AAAAAh4AAAACfQAAAAHzAAAAAhUAAAACFQAAAAIBAAAAAicAAAACUAAAAAI5AAAAAmsAAAACRAAAAAJHAAAAAowAAAACggAAAAJYAAAAAo0A==
Date: Fri, 9 Jun 2017 12:48:14 +0000
Message-ID: <A79920320B196440976BE32642954003B23EC012@EXCHANGE.Oaktree.FMSchools.org>
Reply-To: "[email protected]" <[email protected]>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [103.240.234.235]
Content-Type: multipart/mixed;
boundary="_006_A79920320B196440976BE32642954003B23EC012EXCHANGEOaktree_"
MIME-Version: 1.0
X-Spam-Status: No, score=5.6
X-Spam-Score: 56
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I need your assistance. Reply Back for info. [cid:[email protected]]
[...]
Content analysis details: (5.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[170.158.81.4 listed in list.dnswl.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(sgt_franklugard001[at]hotmail.com)
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9893]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO
I need your assistance. Reply Back for info.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

