by buried under 419s
Wed Mar 23, 2011 11:49 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 23 Mar 2011 08:41:18 -0700
Received: from [124.217.229.67] (helo=server5117.hidsb.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2QBP-0004ig-BJ
for ; Wed, 23 Mar 2011 08:41:18 -0700
Received: from localhost ([127.0.0.1] helo=webmail.hidsb.com)
by server5117.hidsb.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2Q4U-0004sh-DA; Wed, 23 Mar 2011 11:34:06 -0400
Received: from 41.211.194.170 ([41.211.194.170])
(SquirrelMail authenticated user [email protected])
by webmail.hidsb.com with HTTP;
Wed, 23 Mar 2011 11:34:06 -0400
Message-ID: <[email protected]>
Date: Wed, 23 Mar 2011 11:34:06 -0400
Subject:
From: "From Gary Williams" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.21
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server5117.hidsb.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - fastwebmail.it
X-Spam-Status: No, score=6.9
X-Spam-Score: 69
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: -- From Gary Williams My purpose of contacting you is to seek
your assistance to act as the Benefactor of the WILL, and lay claim to the
legacy [...]
Content analysis details: (6.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail
(johnwilliams[at]fastwebmail.it)
1.0 MISSING_HEADERS Missing To: header
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6475]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_FROM T_HK_NAME_FM_FROM
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO
--
From Gary Williams
My purpose of contacting you is to seek your assistance to act
as the Benefactor of the WILL, and lay claim to the legacy
(6.8million pounds sterling), which this my Unfortunate client
bequeathed to his next-of-kin. For now, It is only known to me,
as my client has great confident in me. Everything will be left
Between You and I.
I require you to immediately indicate your interest by a return
e-mail. with your Phone Number and Addresses.
Best regard,
Gary Williams
[email protected]
N.B
WHAT INVESTMENT ARE YOU INTO?
Envelope-to:
Delivery-date: Wed, 23 Mar 2011 08:41:18 -0700
Received: from [124.217.229.67] (helo=server5117.hidsb.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2QBP-0004ig-BJ
for ; Wed, 23 Mar 2011 08:41:18 -0700
Received: from localhost ([127.0.0.1] helo=webmail.hidsb.com)
by server5117.hidsb.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2Q4U-0004sh-DA; Wed, 23 Mar 2011 11:34:06 -0400
Received: from 41.211.194.170 ([41.211.194.170])
(SquirrelMail authenticated user [email protected])
by webmail.hidsb.com with HTTP;
Wed, 23 Mar 2011 11:34:06 -0400
Message-ID: <[email protected]>
Date: Wed, 23 Mar 2011 11:34:06 -0400
Subject:
From: "From Gary Williams" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.21
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server5117.hidsb.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - fastwebmail.it
X-Spam-Status: No, score=6.9
X-Spam-Score: 69
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: -- From Gary Williams My purpose of contacting you is to seek
your assistance to act as the Benefactor of the WILL, and lay claim to the
legacy [...]
Content analysis details: (6.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail
(johnwilliams[at]fastwebmail.it)
1.0 MISSING_HEADERS Missing To: header
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6475]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_FROM T_HK_NAME_FM_FROM
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO
--
From Gary Williams
My purpose of contacting you is to seek your assistance to act
as the Benefactor of the WILL, and lay claim to the legacy
(6.8million pounds sterling), which this my Unfortunate client
bequeathed to his next-of-kin. For now, It is only known to me,
as my client has great confident in me. Everything will be left
Between You and I.
I require you to immediately indicate your interest by a return
e-mail. with your Phone Number and Addresses.
Best regard,
Gary Williams
[email protected]
N.B
WHAT INVESTMENT ARE YOU INTO?
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces