by buried under 419s
Fri Feb 11, 2011 12:55 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 11 Feb 2011 04:36:49 -0800
Received: from outgoing.hosting.tp.pl ([193.110.120.20] helo=mta7.hosting.tp.pl)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PnsEx-00058g-LA
for ; Fri, 11 Feb 2011 04:36:49 -0800
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; charset=Windows-1251
Received: from User ([120.140.179.120]) by mta7.hosting.tp.pl (m7)
with ESMTPA id <[email protected]> for
; Fri, 11 Feb 2011 13:33:24 +0100 (CET)
Message-id: <[email protected]>
Sender: [email protected]
Reply-to: [email protected]
From: ROBERT GOA <[email protected]>
To: [email protected]
Subject: Dear Friend,
Date: Fri, 11 Feb 2011 20:32:30 -0800
X-Priority: 3
X-MSMail-priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 110210-0, 02/10/2011), Outbound message
X-Antivirus-Status: Clean
X-Spam-Subject: ***SPAM*** Dear Friend,
X-Spam-Status: Yes, score=19.8
X-Spam-Score: 198
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, My name is Mr. Robert Gao, an external auditor
working with MayBank Malaysia. I have taken pains to find your contact through
personal endeavors because a late investor who bears the same last name with
you has left monies totaling a little over ($10M) with Our Bank for the past
Eight years and no next of kin has come forward all these years. [...]
Content analysis details: (19.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: HK_SCAM_N2
1.2 NSL_RCVD_FROM_USER Received from User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[193.110.120.20 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Dear Friend,
My name is Mr. Robert Gao, an external auditor working with MayBank Malaysia. I have taken pains to find your contact through personal endeavors because a late investor who bears the same last name with you has left monies totaling a little over ($10M) with Our Bank for the past Eight years and no next of kin has come forward all these years.
To affirm your willingness and cooperation to my proposal, please do so via my private EMAIL
[email protected] ) for more information. I will like you to acknowledge the receipt of this e-mail as soon as possible and treat with absolute confidentiality and sincerity.
Best Regards.
Robert Gao
Envelope-to:
Delivery-date: Fri, 11 Feb 2011 04:36:49 -0800
Received: from outgoing.hosting.tp.pl ([193.110.120.20] helo=mta7.hosting.tp.pl)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PnsEx-00058g-LA
for ; Fri, 11 Feb 2011 04:36:49 -0800
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; charset=Windows-1251
Received: from User ([120.140.179.120]) by mta7.hosting.tp.pl (m7)
with ESMTPA id <[email protected]> for
; Fri, 11 Feb 2011 13:33:24 +0100 (CET)
Message-id: <[email protected]>
Sender: [email protected]
Reply-to: [email protected]
From: ROBERT GOA <[email protected]>
To: [email protected]
Subject: Dear Friend,
Date: Fri, 11 Feb 2011 20:32:30 -0800
X-Priority: 3
X-MSMail-priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 110210-0, 02/10/2011), Outbound message
X-Antivirus-Status: Clean
X-Spam-Subject: ***SPAM*** Dear Friend,
X-Spam-Status: Yes, score=19.8
X-Spam-Score: 198
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, My name is Mr. Robert Gao, an external auditor
working with MayBank Malaysia. I have taken pains to find your contact through
personal endeavors because a late investor who bears the same last name with
you has left monies totaling a little over ($10M) with Our Bank for the past
Eight years and no next of kin has come forward all these years. [...]
Content analysis details: (19.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: HK_SCAM_N2
1.2 NSL_RCVD_FROM_USER Received from User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[193.110.120.20 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Dear Friend,
My name is Mr. Robert Gao, an external auditor working with MayBank Malaysia. I have taken pains to find your contact through personal endeavors because a late investor who bears the same last name with you has left monies totaling a little over ($10M) with Our Bank for the past Eight years and no next of kin has come forward all these years.
To affirm your willingness and cooperation to my proposal, please do so via my private EMAIL
[email protected] ) for more information. I will like you to acknowledge the receipt of this e-mail as soon as possible and treat with absolute confidentiality and sincerity.Best Regards.
Robert Gao
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces