by buried under 419s
Fri Apr 08, 2011 11:58 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Apr 2011 02:54:06 -0700
Received: from [72.55.146.84] (helo=server600.hostline.gr)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q88OD-0005st-9i
for ; Fri, 08 Apr 2011 02:54:06 -0700
Received: from [60.52.98.215] (helo=User)
by server600.hostline.gr with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q88Nz-0006t1-Rj; Fri, 08 Apr 2011 12:53:52 +0300
Reply-To: <[email protected]>
From: "Katrine Lewis"<[email protected]>
Subject: Attn: Will
Date: Fri, 8 Apr 2011 17:54:02 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 110407-2, 04/07/2011), Outbound message
X-Antivirus-Status: Clean
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server600.hostline.gr
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - itech.com
X-Spam-Subject: ***SPAM*** Attn: Will
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I'm Katrine Lewis am going on a cancer surgery today. contact
my lawyer quoting my personal reference number JJ/MMS/953/5015/GwrI/316us/uk.
Tell him that I have will 14.258M to you for charity work. I have paid for
the state tax on this money to be transferred to you. My lawyer Name: Barrister
James Morgan email: [email protected] God bless Katrine Lewis.
[...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
1.0 MISSING_HEADERS Missing To: header
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6991]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSPACED From: missing whitespace
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
I'm Katrine Lewis am going on a cancer surgery today. contact my lawyer quoting my personal reference number JJ/MMS/953/5015/GwrI/316us/uk. Tell him that I have will 14.258M to you for charity work. I have paid for the state tax on this money to be transferred to you.
My lawyer Name: Barrister James Morgan
email: [email protected]
God bless Katrine Lewis.
Envelope-to:
Delivery-date: Fri, 08 Apr 2011 02:54:06 -0700
Received: from [72.55.146.84] (helo=server600.hostline.gr)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q88OD-0005st-9i
for ; Fri, 08 Apr 2011 02:54:06 -0700
Received: from [60.52.98.215] (helo=User)
by server600.hostline.gr with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q88Nz-0006t1-Rj; Fri, 08 Apr 2011 12:53:52 +0300
Reply-To: <[email protected]>
From: "Katrine Lewis"<[email protected]>
Subject: Attn: Will
Date: Fri, 8 Apr 2011 17:54:02 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 110407-2, 04/07/2011), Outbound message
X-Antivirus-Status: Clean
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server600.hostline.gr
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - itech.com
X-Spam-Subject: ***SPAM*** Attn: Will
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I'm Katrine Lewis am going on a cancer surgery today. contact
my lawyer quoting my personal reference number JJ/MMS/953/5015/GwrI/316us/uk.
Tell him that I have will 14.258M to you for charity work. I have paid for
the state tax on this money to be transferred to you. My lawyer Name: Barrister
James Morgan email: [email protected] God bless Katrine Lewis.
[...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
1.0 MISSING_HEADERS Missing To: header
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6991]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSPACED From: missing whitespace
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
I'm Katrine Lewis am going on a cancer surgery today. contact my lawyer quoting my personal reference number JJ/MMS/953/5015/GwrI/316us/uk. Tell him that I have will 14.258M to you for charity work. I have paid for the state tax on this money to be transferred to you.
My lawyer Name: Barrister James Morgan
email: [email protected]
God bless Katrine Lewis.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces