Claims Email Obtained From GPWA

**AussieDave** · 7th April 2010, 03:13 PM

Hi,

Received what I thought was your typical SPAM. But on closer inspection the sender stated my email addy was obtained from the gpwa.org

The headers all relayed back to India as did the from email addy. However the final X-Originating-IP: [196.207.227.8] returned Amsterdam.

I'm not concerned about the SPAM but am concerned why a non casino spam would include reference to the gpwa.org

Anyway here are the full headers followed by the email. If anyone can figure this out or add a heads up, I'd appreciate it.

Cheers

Dave

---------

Return-Path: <mismaryzaya@indiatimes.com>
Received: from compute2.internal (compute2.internal [10.202.2.42])
by store61m.internal (Cyrus v2.3.16-git-fastmail-5654) with LMTPA;
Wed, 07 Apr 2010 05:00:07 -0400
X-Sieve: CMU Sieve 2.3
X-Spam-score: 3.9
X-Spam-hits: BAYES_60 1.5, FREEMAIL_FROM 0.001, FREEMAIL_REPLYTO 2.398, SPF_PASS -0.001,
T_HK_NAME_FM_MR_MRS 0.01, T_RP_MATCHES_RCVD -0.01,
T_TO_NO_BRKTS_FREEMAIL 0.01, BAYES_USED global, SA_VERSION 3.3.0
X-Spam-source: IP='220.226.197.44', Host='omta4.indiatimes.com', Country='IN',
FromHeader='com', MailFrom='com'
X-Spam-charsets: plain='utf-8'
X-Resolved-to: xxxxxxx@fastmail.com.au
X-Delivered-to: xxxxxxx@fastmail.com.au
X-Mail-from: mismaryzaya@indiatimes.com
Received: from mx5.messagingengine.com ([10.202.2.204])
by compute2.internal (LMTPProxy); Wed, 07 Apr 2010 05:00:07 -0400
Received: from omta4.indiatimes.com (omta4.indiatimes.com [220.226.197.44])
by mx5.messagingengine.com (Postfix) with ESMTP id 0DD6E203
for <xxxxxxx@fastmail.com.au>; Wed, 7 Apr 2010 05:00:06 -0400 (EDT)
Received: from omta4.indiatimes.com (localhost.localdomain [127.0.0.1])
by omta4.indiatimes.com (Postfix) with ESMTP id C78AC2B975D;
Wed, 7 Apr 2010 14:20:19 +0530 (IST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=indiatimes.com; h=date
:from:reply-to:message-id:subject:mime-version:content-type
:content-transfer-encoding:to; s=private; bh=IsNrt8guTedwZRZUTe6
6XEkSkNo=; b=tB4m6BMFDgQOWR1f0jlKnhdNzpJ6Tzx17vB9TET4ThIMRqRz Krx
FHyQykMHuS/ou
DomainKey-Signature: a=rsa-sha1; c=nofws; d=indiatimes.com; h=date:from
:reply-to:message-id:subject:mime-version:content-type
:content-transfer-encoding:to; q=dns; s=private; b=uoo/wA5LBiE12
oFhYEaKvJdE6ZezHwnRDVNXAf5HCc0HQL4b8h8SKuf0AHRd597 z
Received: from omta4.indiatimes.com (localhost.localdomain [127.0.0.1])
by omta4.indiatimes.com (Postfix) with ESMTP id BAE652B9758;
Wed, 7 Apr 2010 14:20:19 +0530 (IST)
Received: (from filter@localhost)
by omta4.indiatimes.com (8.13.1/8.13.1/Submit) id o378oBi4013959;
Wed, 7 Apr 2010 14:20:11 +0530
X-Authentication-Warning: omta4.indiatimes.com: filter set sender to mismaryzaya@indiatimes.com using -f
X-Remote-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on omta4.indiatimes.com
X-Remote-Spam-Level: *
X-Remote-Spam-Status: No, score=1.1 required=5.0 tests=AWL,BAYES_60,RDNS_NONE
autolearn=no version=3.2.5
Received: from tilmb19.indiatimes.com (unknown [192.168.61.45])
by omta4.indiatimes.com (Postfix) with ESMTP id 25D232B974C;
Wed, 7 Apr 2010 14:20:10 +0530 (IST)
Date: Wed, 7 Apr 2010 15:27:37 +0530 (IST)
From: Miss Mary Zaya <mismaryzaya@indiatimes.com>
Reply-To: "mis.maryzaya@yahoo.com" <mis.maryzaya@yahoo.com>
Message-ID: <202909448.187201270634257942.JavaMail.root@vmtilm b19.indiatimes.com>
Subject: Hello Dear Friend,
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [196.207.227.8]
X-Mailer: Zimbra 5.0.6_GA_2313.RHEL4_64 (zclient/5.0.6_GA_2313.RHEL4_64)
To: undisclosed-recipients:;
X-Copyrighted-Material: Please visit XXXindiatimes.com/policyterms/1554651.cms
X-Truedomain-SPF: Pass
X-Truedomain-DKIM: Pass
X-Truedomain-Domain: indiatimes.com
X-Truedomain: Neutral

----- Original message -----
From: "Miss Mary Zaya" <mismaryzaya@indiatimes.com>
To: undisclosed-recipients: ;
Date: Wed, 7 Apr 2010 15:27:37 +0530 (IST)
Subject: Hello Dear Friend,

how are you doing? i hope you are fine ,please don,t be suprise
to receive my message, my name is Mary. i came accross your contact through (gpwa.org) websites i decided to communicate with you,because i believe one can find a very good caring, understanding and God fearing person anywhere in the world, i hope to hear from you so that i can tell you more about my self with love and trust, and as well give you my pics,please kindly write me back so that we can know more about each other for further conversation.
yours new friend
Mary

**SlotMonster** · 7th April 2010, 03:43 PM

Originally Posted by AussieDave

----- Original message -----
From: "Miss Mary Zaya" <mismaryzaya@indiatimes.com>
To: undisclosed-recipients: ;
Date: Wed, 7 Apr 2010 15:27:37 +0530 (IST)
Subject: Hello Dear Friend,

how are you doing? i hope you are fine ,please don,t be suprise
to receive my message, my name is Mary. i came accross your contact through (www.gpwa.org ) websites i decided to communicate with you,because i believe one can find a very good caring, understanding and God fearing person anywhere in the world, i hope to hear from you so that i can tell you more about my self with love and trust, and as well give you my pics,please kindly write me back so that we can know more about each other for further conversation.
yours new friend
Mary

Maybe she thought that GPWA is dating website?

Well, personally I doubt