by buried under 419s
Tue Apr 05, 2011 1:39 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 05 Apr 2011 09:06:06 -0700
Received: from [194.219.85.123] (helo=centos.acg.edu)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q78lW-0002cS-B0
for ; Tue, 05 Apr 2011 09:06:06 -0700
Received: from [82.128.80.188] (helo=User)
by centos.acg.edu with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q78jA-0000Sp-07; Tue, 05 Apr 2011 19:03:36 +0300
Reply-To: <[email protected]>
From: "Mr. Henry McCallion"<[email protected]>
To: [email protected]
Subject: Second Noticeb:
Date: Tue, 5 Apr 2011 17:04:06 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - centos.acg.edu
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - newbailey.com
X-Spam-Subject: ***SPAM*** Second Noticeb:
X-Spam-Status: Yes, score=16.0
X-Spam-Score: 160
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings, I understand that through Internet is not the best
way to link up with you because of the confidentiality which my proposal
demands. However, I have already sent you this same letter one month ago,but
I am not sure if it did get to you since I have not heard from you, hence
i am constrain to reach you through the Internet which has been abused over
the years. [...]
Content analysis details: (16.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[194.219.85.123 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[82.128.80.188 listed in zen.spamhaus.org]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5186]
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 DECEASED_NO_ML Dead not via mailing list
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Greetings,
I understand that through Internet is not the best way to link up with you because of the confidentiality which my proposal demands.
However, I have already sent you this same letter one month ago,but I am not sure if it did get to you since I have not heard from you, hence i am constrain to reach you through the Internet which has been abused over the years.
I wish to notify you again that You were listed as a Heir to the total sum of (Five Million Six Hundred Thousand British Pounds) in the codicil and last testament of the deceased.(Name now withheld since this is our second letter to you). We contacted you because you bear the surname identity and therefore can present you as the Heir to the inheritance funds.
Please indicate your interest immediately for us to proceed. I shall feed you with full details of this transaction upon receipt of your reply towards this proposal.
All the legal papers will be processed in your acceptance. In your acceptance of this deal, we request that you kindly forward to us your letter of acceptance; your current telephone and fax numbers and a forwarding address to enable us file necessary documents at our high court probate division for the release of this sum of money.
I look forward to hearing from you.
Mr. Henry McCallion
Telephone +447024076433
Envelope-to:
Delivery-date: Tue, 05 Apr 2011 09:06:06 -0700
Received: from [194.219.85.123] (helo=centos.acg.edu)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q78lW-0002cS-B0
for ; Tue, 05 Apr 2011 09:06:06 -0700
Received: from [82.128.80.188] (helo=User)
by centos.acg.edu with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q78jA-0000Sp-07; Tue, 05 Apr 2011 19:03:36 +0300
Reply-To: <[email protected]>
From: "Mr. Henry McCallion"<[email protected]>
To: [email protected]
Subject: Second Noticeb:
Date: Tue, 5 Apr 2011 17:04:06 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - centos.acg.edu
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - newbailey.com
X-Spam-Subject: ***SPAM*** Second Noticeb:
X-Spam-Status: Yes, score=16.0
X-Spam-Score: 160
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings, I understand that through Internet is not the best
way to link up with you because of the confidentiality which my proposal
demands. However, I have already sent you this same letter one month ago,but
I am not sure if it did get to you since I have not heard from you, hence
i am constrain to reach you through the Internet which has been abused over
the years. [...]
Content analysis details: (16.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[194.219.85.123 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[82.128.80.188 listed in zen.spamhaus.org]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5186]
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 DECEASED_NO_ML Dead not via mailing list
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Greetings,
I understand that through Internet is not the best way to link up with you because of the confidentiality which my proposal demands.
However, I have already sent you this same letter one month ago,but I am not sure if it did get to you since I have not heard from you, hence i am constrain to reach you through the Internet which has been abused over the years.
I wish to notify you again that You were listed as a Heir to the total sum of (Five Million Six Hundred Thousand British Pounds) in the codicil and last testament of the deceased.(Name now withheld since this is our second letter to you). We contacted you because you bear the surname identity and therefore can present you as the Heir to the inheritance funds.
Please indicate your interest immediately for us to proceed. I shall feed you with full details of this transaction upon receipt of your reply towards this proposal.
All the legal papers will be processed in your acceptance. In your acceptance of this deal, we request that you kindly forward to us your letter of acceptance; your current telephone and fax numbers and a forwarding address to enable us file necessary documents at our high court probate division for the release of this sum of money.
I look forward to hearing from you.
Mr. Henry McCallion
Telephone +447024076433
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces