by buried under 419s
Tue Oct 19, 2010 12:00 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 18 Oct 2010 16:22:23 -0700
Received: from [210.47.0.231] (helo=cust.edu.cn)
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1P7z25-0004oP-Qv
for ; Mon, 18 Oct 2010 16:22:23 -0700
X-EYOU-SPAMVALUE:0
X-EYOU-DEALDRC:
X-EMDG-VER:2009-02-28
Received: (eyou anti_spam gateway 3.0); Tue, 19 Oct 2010 07:27:26 +0800
Message-ID: <[email protected]>
X-EYOUMAIL-SMTPAUTH: @
Received: from 221.231.139.5 by 210.47.0.231 with SMTP; Tue, 19 Oct 2010 07:27:24 +0800
Reply-To: <[email protected]>
From: "Sanusi Lamido Sanusi"<[email protected]>
Date: Tue, 19 Oct 2010 00:19:41 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.0
X-Spam-Score: 190
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beneficiary I am Dr Sanusi Lamido Governor Central Bank
of Nigeria( CBN).There is counter claims on your funds presently by one Mr.Jones
Tsai,who is trying to make us believe that you are dead and even explained
that you had an agreement with him, to help you in receiving your part payment
of $7.3Million US, kindly reconfirm to us, for your urgent release of the
Premium immediately. Reconfirm the above information to avoid making payment
to a wrong person. [...]
Content analysis details: (19.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[221.231.139.5 listed in dnsbl.sorbs.net]
1.5 DNS_FROM_RFC_BOGUSMX RBL: Envelope sender in bogusmx.rfc-ignorant.org
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?221.231.139.5>]
0.6 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
2.1 SUBJ_ALL_CAPS Subject is all capitals
1.3 MISSING_HEADERS Missing To: header
0.8 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
0.8 RCVD_DOUBLE_IP_LOOSE Received: by and from look like IP addresses
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** KINDLY RECONFIRM TO US (TT5070CBN)
Dear Beneficiary
I am Dr Sanusi Lamido Governor Central Bank of Nigeria( CBN).There is counter claims on your funds presently by one Mr.Jones Tsai,who is trying to make us believe that you are dead and even explained that you had an agreement with him, to help you in receiving your part
payment of $7.3Million US, kindly reconfirm to us, for your urgent release of the Premium immediately.
Reconfirm the above information to avoid making payment to a wrong person.
Dr Sanusi Lamido
Governor Central Bank of Nigeria
Envelope-to:
Delivery-date: Mon, 18 Oct 2010 16:22:23 -0700
Received: from [210.47.0.231] (helo=cust.edu.cn)
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1P7z25-0004oP-Qv
for ; Mon, 18 Oct 2010 16:22:23 -0700
X-EYOU-SPAMVALUE:0
X-EYOU-DEALDRC:
X-EMDG-VER:2009-02-28
Received: (eyou anti_spam gateway 3.0); Tue, 19 Oct 2010 07:27:26 +0800
Message-ID: <[email protected]>
X-EYOUMAIL-SMTPAUTH: @
Received: from 221.231.139.5 by 210.47.0.231 with SMTP; Tue, 19 Oct 2010 07:27:24 +0800
Reply-To: <[email protected]>
From: "Sanusi Lamido Sanusi"<[email protected]>
Date: Tue, 19 Oct 2010 00:19:41 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.0
X-Spam-Score: 190
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beneficiary I am Dr Sanusi Lamido Governor Central Bank
of Nigeria( CBN).There is counter claims on your funds presently by one Mr.Jones
Tsai,who is trying to make us believe that you are dead and even explained
that you had an agreement with him, to help you in receiving your part payment
of $7.3Million US, kindly reconfirm to us, for your urgent release of the
Premium immediately. Reconfirm the above information to avoid making payment
to a wrong person. [...]
Content analysis details: (19.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[221.231.139.5 listed in dnsbl.sorbs.net]
1.5 DNS_FROM_RFC_BOGUSMX RBL: Envelope sender in bogusmx.rfc-ignorant.org
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?221.231.139.5>]
0.6 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
2.1 SUBJ_ALL_CAPS Subject is all capitals
1.3 MISSING_HEADERS Missing To: header
0.8 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
0.8 RCVD_DOUBLE_IP_LOOSE Received: by and from look like IP addresses
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** KINDLY RECONFIRM TO US (TT5070CBN)
Dear Beneficiary
I am Dr Sanusi Lamido Governor Central Bank of Nigeria( CBN).There is counter claims on your funds presently by one Mr.Jones Tsai,who is trying to make us believe that you are dead and even explained that you had an agreement with him, to help you in receiving your part
payment of $7.3Million US, kindly reconfirm to us, for your urgent release of the Premium immediately.
Reconfirm the above information to avoid making payment to a wrong person.
Dr Sanusi Lamido
Governor Central Bank of Nigeria
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces