by buried under 419s
Wed Dec 22, 2010 5:03 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 22 Dec 2010 10:51:15 -0800
Received: from [196.200.177.4] (helo=servmail.fstbm.ac.ma)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1PVTmK-0003NV-D5
for ; Wed, 22 Dec 2010 10:51:15 -0800
Received: from servmail.fstbm.ac.ma (localhost [127.0.0.1] (may be forged))
by servmail.fstbm.ac.ma (8.13.1/8.13.1) with ESMTP id oBMIA3b1001465;
Wed, 22 Dec 2010 18:33:42 GMT
Received: (from apache@localhost)
by servmail.fstbm.ac.ma (8.13.1/8.13.1/Submit) id oBLI01Y4028652;
Tue, 21 Dec 2010 12:00:02 -0600
X-Authentication-Warning: servmail.fstbm.ac.ma: apache set sender to [email protected] using -f
Received: from 200.175.53.75 (proxying for 41.203.64.250)
(SquirrelMail authenticated user alaoui);
by mail.fstbm.ac.ma with HTTP;
Tue, 21 Dec 2010 12:00:01 -0600 (CST)
Message-ID: <[email protected]>
Date: Tue, 21 Dec 2010 12:00:01 -0600 (CST)
Subject: End Of Year Compensation!!!
From: "Western Union Money Transfer" <[email protected]>
Reply-To: [email protected]
Bcc:
User-Agent: SquirrelMail/1.4.3a-12.EL4.centos4
X-Mailer: SquirrelMail/1.4.3a-12.EL4.centos4
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-fstbm-MailScanner-Information: Please contact the ISP for more information
X-MailScanner-ID: oBMIA3b1001465
X-fstbm-MailScanner: Found to be clean
X-fstbm-MailScanner-From: [email protected]
X-Spam-Status: No
X-Spam-Subject: ***SPAM*** End Of Year Compensation!!!
X-Spam-Status: Yes, score=15.8
X-Spam-Score: 158
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: How are you doing today? I write to inform you that we have
already sent you USD5000.00 dollars through Western union as we have been
given the mandate to transfer your full compensation payment of USD1.800,000.00
via western union by the United Nation Government. I called to give you the
information through phone as internet hackers were many but i cannot reach
you for over one week now and even this morning. So,I decided to email you
the MTCN and Sender's Name so that can pick up this USD5000.00 to enable
us send another USD5000.00 by tomorrow as you knows we will be sending you
only USD5000.00 per day.Please pick up this information, you are run fast
to any western union in your country to pick up the USD5000.00 and send us
e-mail back so we can send you another payment tomorrow. [...]
Content analysis details: (15.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[196.200.177.4 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[196.200.177.4 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8749]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[196.200.177.4 listed in psbl.surriel.com]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 MAY_BE_FORGED Relay IP's reverse DNS does not resolve to IP
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES
How are you doing today?
I write to inform you that we have already sent you USD5000.00 dollars
through Western union as we have been given the mandate to transfer your
full compensation payment of USD1.800,000.00 via western union by the United
Nation Government. I called to give you the information through phone as
internet hackers were many but i cannot reach you for over one week now and
even this morning. So,I decided to email you the MTCN and Sender's Name so
that can pick up this USD5000.00 to enable us send another USD5000.00 by
tomorrow as you knows we will be sending you only USD5000.00 per day.Please
pick up this information, you are run fast to any western union in your
country to pick up the USD5000.00 and send us e-mail back so we can send you
another payment tomorrow.
Manager Mr charles Bowa
www.westernunion.com
Tell:+2347035359036
Email: [email protected]
E-mail me once you picked up this USD5000.00 today.
Here is the western union information to pick up the USD5000.00,
MTCN : 622 159 4597
Sender's Name: Linda Benson
Question: Honest
Answer:Trust
Amount: $5000.00USD
I am waiting for your E-mail once you pick up USD5000.00,
For more information call +2347035359036
Thanks
Martins Rock
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
Envelope-to:
Delivery-date: Wed, 22 Dec 2010 10:51:15 -0800
Received: from [196.200.177.4] (helo=servmail.fstbm.ac.ma)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1PVTmK-0003NV-D5
for ; Wed, 22 Dec 2010 10:51:15 -0800
Received: from servmail.fstbm.ac.ma (localhost [127.0.0.1] (may be forged))
by servmail.fstbm.ac.ma (8.13.1/8.13.1) with ESMTP id oBMIA3b1001465;
Wed, 22 Dec 2010 18:33:42 GMT
Received: (from apache@localhost)
by servmail.fstbm.ac.ma (8.13.1/8.13.1/Submit) id oBLI01Y4028652;
Tue, 21 Dec 2010 12:00:02 -0600
X-Authentication-Warning: servmail.fstbm.ac.ma: apache set sender to [email protected] using -f
Received: from 200.175.53.75 (proxying for 41.203.64.250)
(SquirrelMail authenticated user alaoui);
by mail.fstbm.ac.ma with HTTP;
Tue, 21 Dec 2010 12:00:01 -0600 (CST)
Message-ID: <[email protected]>
Date: Tue, 21 Dec 2010 12:00:01 -0600 (CST)
Subject: End Of Year Compensation!!!
From: "Western Union Money Transfer" <[email protected]>
Reply-To: [email protected]
Bcc:
User-Agent: SquirrelMail/1.4.3a-12.EL4.centos4
X-Mailer: SquirrelMail/1.4.3a-12.EL4.centos4
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-fstbm-MailScanner-Information: Please contact the ISP for more information
X-MailScanner-ID: oBMIA3b1001465
X-fstbm-MailScanner: Found to be clean
X-fstbm-MailScanner-From: [email protected]
X-Spam-Status: No
X-Spam-Subject: ***SPAM*** End Of Year Compensation!!!
X-Spam-Status: Yes, score=15.8
X-Spam-Score: 158
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: How are you doing today? I write to inform you that we have
already sent you USD5000.00 dollars through Western union as we have been
given the mandate to transfer your full compensation payment of USD1.800,000.00
via western union by the United Nation Government. I called to give you the
information through phone as internet hackers were many but i cannot reach
you for over one week now and even this morning. So,I decided to email you
the MTCN and Sender's Name so that can pick up this USD5000.00 to enable
us send another USD5000.00 by tomorrow as you knows we will be sending you
only USD5000.00 per day.Please pick up this information, you are run fast
to any western union in your country to pick up the USD5000.00 and send us
e-mail back so we can send you another payment tomorrow. [...]
Content analysis details: (15.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[196.200.177.4 listed in bl.score.senderscore.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[196.200.177.4 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8749]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[196.200.177.4 listed in psbl.surriel.com]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 MAY_BE_FORGED Relay IP's reverse DNS does not resolve to IP
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES
How are you doing today?
I write to inform you that we have already sent you USD5000.00 dollars
through Western union as we have been given the mandate to transfer your
full compensation payment of USD1.800,000.00 via western union by the United
Nation Government. I called to give you the information through phone as
internet hackers were many but i cannot reach you for over one week now and
even this morning. So,I decided to email you the MTCN and Sender's Name so
that can pick up this USD5000.00 to enable us send another USD5000.00 by
tomorrow as you knows we will be sending you only USD5000.00 per day.Please
pick up this information, you are run fast to any western union in your
country to pick up the USD5000.00 and send us e-mail back so we can send you
another payment tomorrow.
Manager Mr charles Bowa
www.westernunion.com
Tell:+2347035359036
Email: [email protected]
E-mail me once you picked up this USD5000.00 today.
Here is the western union information to pick up the USD5000.00,
MTCN : 622 159 4597
Sender's Name: Linda Benson
Question: Honest
Answer:Trust
Amount: $5000.00USD
I am waiting for your E-mail once you pick up USD5000.00,
For more information call +2347035359036
Thanks
Martins Rock
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces