by buried under 419s
Sat Mar 05, 2011 1:08 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 05 Mar 2011 03:40:49 -0800
Received: from [94.76.229.146] (helo=server.uaeprog.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Pvpqn-0002Hk-RB
for ; Sat, 05 Mar 2011 03:40:49 -0800
Received: from localhost ([127.0.0.1] helo=webmail.uaeprog.com)
by server.uaeprog.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Pvpeg-0006lh-LI; Sat, 05 Mar 2011 15:28:14 +0400
Received: from 41.203.64.250 ([41.203.64.250]) (proxying for 41.203.64.250)
(SquirrelMail authenticated user [email protected])
by webmail.uaeprog.com with HTTP;
Sat, 5 Mar 2011 07:28:14 -0400
Message-ID: <[email protected]>
Date: Sat, 5 Mar 2011 07:28:14 -0400
Subject:
We.notify.you.as.a.scam.victim.beneficiary.to.be.compensated.with.$500,000.00.USD.in.th
.United.Nation.and.Obama.Foundation. Contact.Mr.Spencer
Walter.For.more.Information.via.email: [email protected]
full__ names__country__tel__
From: =?iso-8859-1?Q?=22Compensation_=A9_2011=22?= <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.21
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.uaeprog.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - mail.com
X-Spam-Subject: ***SPAM*** We.notify.you.as.a.scam.victim.beneficiary.to.be.compensated.with.$500,000.00.USD.in.th
.United.Nation.and.Obama.Foundation. Contact.Mr.Spencer
Walter.For.more.Information.via.email: [email protected]
full__ names__country__tel__
X-Spam-Status: Yes, score=13.5
X-Spam-Score: 135
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (13.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9998]
0.0 FREEMAIL_FROM Sender email is freemail (info18[at]mail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[94.76.229.146 listed in psbl.surriel.com]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (info18[at]mail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
We.notify.you.as.a.scam.victim.beneficiary.to.be.compensated.with.$500,000.00.USD.in.th
.United.Nation.and.Obama.Foundation. Contact.Mr.Spencer
Walter.For.more.Information.via.email: [email protected]
Envelope-to:
Delivery-date: Sat, 05 Mar 2011 03:40:49 -0800
Received: from [94.76.229.146] (helo=server.uaeprog.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Pvpqn-0002Hk-RB
for ; Sat, 05 Mar 2011 03:40:49 -0800
Received: from localhost ([127.0.0.1] helo=webmail.uaeprog.com)
by server.uaeprog.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Pvpeg-0006lh-LI; Sat, 05 Mar 2011 15:28:14 +0400
Received: from 41.203.64.250 ([41.203.64.250]) (proxying for 41.203.64.250)
(SquirrelMail authenticated user [email protected])
by webmail.uaeprog.com with HTTP;
Sat, 5 Mar 2011 07:28:14 -0400
Message-ID: <[email protected]>
Date: Sat, 5 Mar 2011 07:28:14 -0400
Subject:
We.notify.you.as.a.scam.victim.beneficiary.to.be.compensated.with.$500,000.00.USD.in.th
.United.Nation.and.Obama.Foundation. Contact.Mr.Spencer
Walter.For.more.Information.via.email: [email protected]
full__ names__country__tel__
From: =?iso-8859-1?Q?=22Compensation_=A9_2011=22?= <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.21
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.uaeprog.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - mail.com
X-Spam-Subject: ***SPAM*** We.notify.you.as.a.scam.victim.beneficiary.to.be.compensated.with.$500,000.00.USD.in.th
.United.Nation.and.Obama.Foundation. Contact.Mr.Spencer
Walter.For.more.Information.via.email: [email protected]
full__ names__country__tel__
X-Spam-Status: Yes, score=13.5
X-Spam-Score: 135
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (13.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9998]
0.0 FREEMAIL_FROM Sender email is freemail (info18[at]mail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[94.76.229.146 listed in psbl.surriel.com]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (info18[at]mail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
We.notify.you.as.a.scam.victim.beneficiary.to.be.compensated.with.$500,000.00.USD.in.th
.United.Nation.and.Obama.Foundation. Contact.Mr.Spencer
Walter.For.more.Information.via.email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces