by buried under 419s
Thu Jan 20, 2011 11:30 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Jan 2011 18:04:49 -0800
Received: from [38.101.21.55] (helo=cp4.node1server.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Pg6Mq-0006vy-8q
for ; Thu, 20 Jan 2011 18:04:49 -0800
Received: from localhost ([127.0.0.1] helo=node1internet.com)
by cp4.node1server.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Pg6Dx-0000NQ-3G; Thu, 20 Jan 2011 20:55:41 -0500
Received: from 41.138.191.156 ([41.138.191.156])
(SquirrelMail authenticated user [email protected])
by node1internet.com with HTTP;
Thu, 20 Jan 2011 20:55:37 -0500
Message-ID: <[email protected]>
Date: Thu, 20 Jan 2011 20:55:37 -0500
Subject:
From: "Miss Elaine Richie" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.21
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cp4.node1server.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=16.3
X-Spam-Score: 163
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FEDEX COURIER SERVICE, EDO STATE,NIGERIA WEST AFRICA. 20-01-2011.
Dear Customer! SHIPMENT CODE: CPEL/OWN/9856 PARCEL #: EG2272 You have a parcel
contaning a cheque worth Eight Hundred Thousand Dollars [$800,000.00USD]
with us at the fedex delivery company. Your delivery charges has been paid
for. All you have to do is to re-confirm your information with the correct
mailing address and make a payment of $240.49USD only [Two Hundred and Twenty
Dollars Only] for the security keeping fee of the said parcel. Please reconfirm
your details: [...]
Content analysis details: (16.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9945]
0.0 FREEMAIL_FROM Sender email is freemail
(atmfreelotto2010[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (atmfreelotto2010[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
FEDEX COURIER SERVICE,
EDO STATE,NIGERIA
WEST AFRICA.
20-01-2011.
Dear Customer!
SHIPMENT CODE: CPEL/OWN/9856
PARCEL #: EG2272
You have a parcel contaning a cheque worth Eight
Hundred Thousand Dollars [$800,000.00USD] with us at
the fedex delivery company. Your delivery charges has been paid for.
All you have to do is to re-confirm your information
with the correct mailing address and make a payment of
$240.49USD only [Two Hundred and Twenty Dollars Only]
for the security keeping fee of the said parcel.
Please reconfirm your details:
FULL NAMES:
TELEPHONE:
POSTAL ADDRESS:
CITY:
STATE:
COUNTRY:
Best Regards
Mr. Bryan Smith
FedEx Dispatch Office
Email: [email protected]
Envelope-to:
Delivery-date: Thu, 20 Jan 2011 18:04:49 -0800
Received: from [38.101.21.55] (helo=cp4.node1server.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Pg6Mq-0006vy-8q
for ; Thu, 20 Jan 2011 18:04:49 -0800
Received: from localhost ([127.0.0.1] helo=node1internet.com)
by cp4.node1server.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Pg6Dx-0000NQ-3G; Thu, 20 Jan 2011 20:55:41 -0500
Received: from 41.138.191.156 ([41.138.191.156])
(SquirrelMail authenticated user [email protected])
by node1internet.com with HTTP;
Thu, 20 Jan 2011 20:55:37 -0500
Message-ID: <[email protected]>
Date: Thu, 20 Jan 2011 20:55:37 -0500
Subject:
From: "Miss Elaine Richie" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.21
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cp4.node1server.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=16.3
X-Spam-Score: 163
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FEDEX COURIER SERVICE, EDO STATE,NIGERIA WEST AFRICA. 20-01-2011.
Dear Customer! SHIPMENT CODE: CPEL/OWN/9856 PARCEL #: EG2272 You have a parcel
contaning a cheque worth Eight Hundred Thousand Dollars [$800,000.00USD]
with us at the fedex delivery company. Your delivery charges has been paid
for. All you have to do is to re-confirm your information with the correct
mailing address and make a payment of $240.49USD only [Two Hundred and Twenty
Dollars Only] for the security keeping fee of the said parcel. Please reconfirm
your details: [...]
Content analysis details: (16.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9945]
0.0 FREEMAIL_FROM Sender email is freemail
(atmfreelotto2010[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (atmfreelotto2010[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
FEDEX COURIER SERVICE,
EDO STATE,NIGERIA
WEST AFRICA.
20-01-2011.
Dear Customer!
SHIPMENT CODE: CPEL/OWN/9856
PARCEL #: EG2272
You have a parcel contaning a cheque worth Eight
Hundred Thousand Dollars [$800,000.00USD] with us at
the fedex delivery company. Your delivery charges has been paid for.
All you have to do is to re-confirm your information
with the correct mailing address and make a payment of
$240.49USD only [Two Hundred and Twenty Dollars Only]
for the security keeping fee of the said parcel.
Please reconfirm your details:
FULL NAMES:
TELEPHONE:
POSTAL ADDRESS:
CITY:
STATE:
COUNTRY:
Best Regards
Mr. Bryan Smith
FedEx Dispatch Office
Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces