by buried under 419s
Mon Feb 14, 2011 2:23 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 14 Feb 2011 03:51:25 -0800
Received: from [61.129.74.3] (helo=ns10.chinanetunion.com)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Powxc-0001UP-SY
for ; Mon, 14 Feb 2011 03:51:25 -0800
Received: from User (unknown [195.117.61.4])
by ns10.chinanetunion.com (Postfix) with ESMTP
id 4EFE825EBD1; Mon, 14 Feb 2011 19:45:12 +0800 (CST)
Reply-To: <[email protected]>
From: "Behind" <[email protected]>
To: [email protected]
Subject: Hello!!!!
Date: Mon, 14 Feb 2011 19:49:30 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Subject: ***SPAM*** Hello!!!!
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Barr Arif Ahmed, I have contacted you in distributing
the money left behind by my client who share the same last name as yours,Please
get back immediately to proceed US$18 Million. [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9969]
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[195.117.61.4 listed in dnsbl.sorbs.net]
2.2 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[195.117.61.4 listed in combined.njabl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?195.117.61.4>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[61.129.74.3 listed in bb.barracudacentral.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
I am Barr Arif Ahmed, I have contacted you in distributing the money left behind by my client who share the same last name as yours,Please get back immediately to proceed US$18 Million.
Envelope-to:
Delivery-date: Mon, 14 Feb 2011 03:51:25 -0800
Received: from [61.129.74.3] (helo=ns10.chinanetunion.com)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Powxc-0001UP-SY
for ; Mon, 14 Feb 2011 03:51:25 -0800
Received: from User (unknown [195.117.61.4])
by ns10.chinanetunion.com (Postfix) with ESMTP
id 4EFE825EBD1; Mon, 14 Feb 2011 19:45:12 +0800 (CST)
Reply-To: <[email protected]>
From: "Behind" <[email protected]>
To: [email protected]
Subject: Hello!!!!
Date: Mon, 14 Feb 2011 19:49:30 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Subject: ***SPAM*** Hello!!!!
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Barr Arif Ahmed, I have contacted you in distributing
the money left behind by my client who share the same last name as yours,Please
get back immediately to proceed US$18 Million. [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9969]
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[195.117.61.4 listed in dnsbl.sorbs.net]
2.2 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[195.117.61.4 listed in combined.njabl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?195.117.61.4>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[61.129.74.3 listed in bb.barracudacentral.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
I am Barr Arif Ahmed, I have contacted you in distributing the money left behind by my client who share the same last name as yours,Please get back immediately to proceed US$18 Million.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces