by buried under 419s
Sun Mar 06, 2011 2:18 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 05 Mar 2011 21:53:29 -0800
Received: from [210.196.73.98] (helo=smtp.king.co.jp)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Pw6uG-0006ms-BS
for ; Sat, 05 Mar 2011 21:53:29 -0800
Received: from User (unknown [180.215.171.76])
by smtp.king.co.jp (Postfix) with ESMTP id 55307626F2;
Thu, 3 Mar 2011 18:59:49 +0900 (JST)
Reply-To: <[email protected]>
From: "John Phillip"<[email protected]>
Subject: Important: From John Phillip
Date: Thu, 3 Mar 2011 10:33:47 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Subject: ***SPAM*** Important: From John Phillip
X-Spam-Status: Yes, score=18.1
X-Spam-Score: 181
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello Friend, How are you today? I am a Civil Lawyer. I have
a client that wishes to invest her financial estate in your Country. Can
you be of Assistance as a Partner? I will give details when you reply. This
transaction demands Absolute Secrecy from You. [...]
Content analysis details: (18.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[210.196.73.98 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[210.196.73.98 listed in bb.barracudacentral.org]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5003]
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
1.5 FROM_MISSP_USER From misspaced, from "User"
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Hello Friend,
How are you today?
I am a Civil Lawyer. I have a client that wishes to invest her financial estate in your Country. Can you be of Assistance as a Partner? I will give details when you reply. This transaction demands Absolute Secrecy from You.
Yours truly,
John Phillip
Envelope-to:
Delivery-date: Sat, 05 Mar 2011 21:53:29 -0800
Received: from [210.196.73.98] (helo=smtp.king.co.jp)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Pw6uG-0006ms-BS
for ; Sat, 05 Mar 2011 21:53:29 -0800
Received: from User (unknown [180.215.171.76])
by smtp.king.co.jp (Postfix) with ESMTP id 55307626F2;
Thu, 3 Mar 2011 18:59:49 +0900 (JST)
Reply-To: <[email protected]>
From: "John Phillip"<[email protected]>
Subject: Important: From John Phillip
Date: Thu, 3 Mar 2011 10:33:47 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Subject: ***SPAM*** Important: From John Phillip
X-Spam-Status: Yes, score=18.1
X-Spam-Score: 181
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello Friend, How are you today? I am a Civil Lawyer. I have
a client that wishes to invest her financial estate in your Country. Can
you be of Assistance as a Partner? I will give details when you reply. This
transaction demands Absolute Secrecy from You. [...]
Content analysis details: (18.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[210.196.73.98 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[210.196.73.98 listed in bb.barracudacentral.org]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5003]
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
1.5 FROM_MISSP_USER From misspaced, from "User"
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Hello Friend,
How are you today?
I am a Civil Lawyer. I have a client that wishes to invest her financial estate in your Country. Can you be of Assistance as a Partner? I will give details when you reply. This transaction demands Absolute Secrecy from You.
Yours truly,
John Phillip
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces