by buried under 419s
Thu Jul 21, 2011 7:47 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 21 Jul 2011 13:14:03 -0700
Received: from mail1.mahealthcare.com ([64.22.221.35] helo=sophos.mahealthcare.com)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QjzdC-0006Qb-Dc
for ; Thu, 21 Jul 2011 13:14:03 -0700
Received: from sophos.mahealthcare.com (localhost.localdomain [127.0.0.1])
by localhost (Email Security Appliance) with SMTP id 3D9A923A05C9_E288135B;
Thu, 21 Jul 2011 19:42:45 +0000 (GMT)
X-Sophos-ESA-SMTPD-Auth-On: authentication enabled
X-Sophos-ESA-External-Sender: external sender
X-Sophos-ESA-External-Sender: external sender
Received: from User (unknown [12.175.28.91])
by sophos.mahealthcare.com (Sophos Email Appliance) with ESMTP id A676923A058E_E28812FF;
Thu, 21 Jul 2011 19:42:39 +0000 (GMT)
Reply-To: <[email protected]>
From: "Henry Smith"<[email protected]>
Subject: Job Vacancy!!!
Date: Thu, 21 Jul 2011 15:52:34 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable
X-Spam-Subject: ***SPAM*** Job Vacancy!!!
X-Spam-Status: Yes, score=19.5
X-Spam-Score: 195
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Henry Smith, Manager Arena Trust House Plc.We need a
Representative who can be working for us as a Payment Officer.we receive Payments
from clients in form of Money Orders or Cashiers Check for which its always
too expensive and stressful for me to come down and receive such payment
so,We decided to contact you.We are willing to pay you 10% of every payment
received by you. Email back with the Info below : [...]
Content analysis details: (19.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 LOTTO_AGENT BODY: Claims Agent
1.2 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is freemail (henrysmith718[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (henrysmith718[at]gmail.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
1.5 FROM_MISSP_USER From misspaced, from "User"
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
X-Spam-Flag: YES
I am Henry Smith, Manager Arena Trust House Plc.We need a Representative who can be working for us as a Payment Officer.we receive Payments from clients in form of Money Orders or Cashiers Check for which its always too expensive and stressful for me to come down and receive such payment so,We decided to contact you.We are willing to pay you 10% of every payment received by you. Email back with the Info below :
NAME FULL:
ADDRESS(not p.o. box):
CITY:
STATE:
ZIP CODE:
PHONE NUMBER:
Henry Smith.
CONFIDENTIALITY NOTICE: This message, including any attachments, is for
the sole use of the intended recipient (s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please contact
the sender by reply e-mail and destroy all copies of the original message.
The views expressed in this communication are that of the individual and
shall not be construed as those of Medical Associates or any of its entities.
Envelope-to:
Delivery-date: Thu, 21 Jul 2011 13:14:03 -0700
Received: from mail1.mahealthcare.com ([64.22.221.35] helo=sophos.mahealthcare.com)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QjzdC-0006Qb-Dc
for ; Thu, 21 Jul 2011 13:14:03 -0700
Received: from sophos.mahealthcare.com (localhost.localdomain [127.0.0.1])
by localhost (Email Security Appliance) with SMTP id 3D9A923A05C9_E288135B;
Thu, 21 Jul 2011 19:42:45 +0000 (GMT)
X-Sophos-ESA-SMTPD-Auth-On: authentication enabled
X-Sophos-ESA-External-Sender: external sender
X-Sophos-ESA-External-Sender: external sender
Received: from User (unknown [12.175.28.91])
by sophos.mahealthcare.com (Sophos Email Appliance) with ESMTP id A676923A058E_E28812FF;
Thu, 21 Jul 2011 19:42:39 +0000 (GMT)
Reply-To: <[email protected]>
From: "Henry Smith"<[email protected]>
Subject: Job Vacancy!!!
Date: Thu, 21 Jul 2011 15:52:34 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable
X-Spam-Subject: ***SPAM*** Job Vacancy!!!
X-Spam-Status: Yes, score=19.5
X-Spam-Score: 195
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Henry Smith, Manager Arena Trust House Plc.We need a
Representative who can be working for us as a Payment Officer.we receive Payments
from clients in form of Money Orders or Cashiers Check for which its always
too expensive and stressful for me to come down and receive such payment
so,We decided to contact you.We are willing to pay you 10% of every payment
received by you. Email back with the Info below : [...]
Content analysis details: (19.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 LOTTO_AGENT BODY: Claims Agent
1.2 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is freemail (henrysmith718[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (henrysmith718[at]gmail.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
1.5 FROM_MISSP_USER From misspaced, from "User"
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
X-Spam-Flag: YES
I am Henry Smith, Manager Arena Trust House Plc.We need a Representative who can be working for us as a Payment Officer.we receive Payments from clients in form of Money Orders or Cashiers Check for which its always too expensive and stressful for me to come down and receive such payment so,We decided to contact you.We are willing to pay you 10% of every payment received by you. Email back with the Info below :
NAME FULL:
ADDRESS(not p.o. box):
CITY:
STATE:
ZIP CODE:
PHONE NUMBER:
Henry Smith.
CONFIDENTIALITY NOTICE: This message, including any attachments, is for
the sole use of the intended recipient (s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please contact
the sender by reply e-mail and destroy all copies of the original message.
The views expressed in this communication are that of the individual and
shall not be construed as those of Medical Associates or any of its entities.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces