by buried under 419s
Mon Feb 14, 2011 9:39 pm
Return-path: <[email protected]>
Envelope-to: c
Delivery-date: Mon, 14 Feb 2011 16:43:18 -0800
Received: from [62.21.96.204] (helo=mail4.inea.pl)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Pp90c-0000RL-GT
for ; Mon, 14 Feb 2011 16:43:17 -0800
Received: from [120.141.212.205] (helo=User)
by mail4.inea.pl with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.63)
(envelope-from <[email protected]>)
id 1Pp8zx-00054A-Jh; Tue, 15 Feb 2011 01:42:36 +0100
Reply-To: <[email protected]>
From: "great proposal"<[email protected]>
To: [email protected]
Subject: PROPOSAL
Date: Tue, 15 Feb 2011 08:42:17 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 110214-1, 02/15/2011), Outbound message
X-Antivirus-Status: Clean
X-Spam_score: 12.0
X-Spam_score_int: 120
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "mail4.inea.pl", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Barr. Thomas Phillip, A deceased client of mine, that
shares the same last name as yours,who died as the result of a heart-related
condition in March 12th 2005.His heart condition was due to the death of
all the members of his family in the tsunami disaster on the 26th December
2004 in Sumatra Indonesia. http://en.wikipedia.org/wiki/2004_India ... earthquake.
[...]
Content analysis details: (12.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.1 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_DKIM From misspaced, DKIM dependable
0.0 DECEASED_NO_ML Dead not via mailing list
0.5 MONEY_FROM_MISSP Lots of money and misspaced From
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Subject: ***SPAM*** PROPOSAL
X-Spam-Status: Yes, score=17.1
X-Spam-Score: 171
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.trucidodolusloricaproject.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Barr. Thomas Phillip, A deceased client of mine, that
shares the same last name as yours,who died as the result of a heart-related
condition in March 12th 2005.His heart condition was due to the death of
all the members of his family in the tsunami disaster on the 26th December
2004 in Sumatra Indonesia. http://en.wikipedia.org/wiki/2004_India ... earthquake.
[...]
Content analysis details: (17.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[62.21.96.204 listed in bb.barracudacentral.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 DECEASED_NO_ML Dead not via mailing list
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
I am Barr. Thomas Phillip, A deceased client of mine, that shares the same last name as yours,who died as the result of a heart-related condition in
March 12th 2005.His heart condition was due to the death of all the members of his family in the tsunami disaster on the 26th December 2004 in
Sumatra Indonesia. http://en.wikipedia.org/wiki/2004_India ... earthquake.
You can reach me on ( [email protected]) for more information as my late Client has a deposit of $17,500,000.00 Million Dollars left behind.
Best Regard
Barr.Thomas Philip
(Attorney at Law).
TEL: +60172718538 / 011 601 72718538
Envelope-to: c
Delivery-date: Mon, 14 Feb 2011 16:43:18 -0800
Received: from [62.21.96.204] (helo=mail4.inea.pl)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Pp90c-0000RL-GT
for ; Mon, 14 Feb 2011 16:43:17 -0800
Received: from [120.141.212.205] (helo=User)
by mail4.inea.pl with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.63)
(envelope-from <[email protected]>)
id 1Pp8zx-00054A-Jh; Tue, 15 Feb 2011 01:42:36 +0100
Reply-To: <[email protected]>
From: "great proposal"<[email protected]>
To: [email protected]
Subject: PROPOSAL
Date: Tue, 15 Feb 2011 08:42:17 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 110214-1, 02/15/2011), Outbound message
X-Antivirus-Status: Clean
X-Spam_score: 12.0
X-Spam_score_int: 120
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "mail4.inea.pl", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Barr. Thomas Phillip, A deceased client of mine, that
shares the same last name as yours,who died as the result of a heart-related
condition in March 12th 2005.His heart condition was due to the death of
all the members of his family in the tsunami disaster on the 26th December
2004 in Sumatra Indonesia. http://en.wikipedia.org/wiki/2004_India ... earthquake.
[...]
Content analysis details: (12.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.1 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_DKIM From misspaced, DKIM dependable
0.0 DECEASED_NO_ML Dead not via mailing list
0.5 MONEY_FROM_MISSP Lots of money and misspaced From
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Subject: ***SPAM*** PROPOSAL
X-Spam-Status: Yes, score=17.1
X-Spam-Score: 171
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.trucidodolusloricaproject.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Barr. Thomas Phillip, A deceased client of mine, that
shares the same last name as yours,who died as the result of a heart-related
condition in March 12th 2005.His heart condition was due to the death of
all the members of his family in the tsunami disaster on the 26th December
2004 in Sumatra Indonesia. http://en.wikipedia.org/wiki/2004_India ... earthquake.
[...]
Content analysis details: (17.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[62.21.96.204 listed in bb.barracudacentral.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 DECEASED_NO_ML Dead not via mailing list
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
I am Barr. Thomas Phillip, A deceased client of mine, that shares the same last name as yours,who died as the result of a heart-related condition in
March 12th 2005.His heart condition was due to the death of all the members of his family in the tsunami disaster on the 26th December 2004 in
Sumatra Indonesia. http://en.wikipedia.org/wiki/2004_India ... earthquake.
You can reach me on ( [email protected]) for more information as my late Client has a deposit of $17,500,000.00 Million Dollars left behind.
Best Regard
Barr.Thomas Philip
(Attorney at Law).
TEL: +60172718538 / 011 601 72718538
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces