by buried under 419s
Mon May 02, 2011 9:25 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 02 May 2011 16:47:05 -0700
Received: from mx1.bol-online.com ([202.84.32.3])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QH2pA-0002GE-7G
for ; Mon, 02 May 2011 16:47:05 -0700
Received: from mail.norpknit.com (unknown [122.144.11.45])
by mx1.bol-online.com (Postfix) with ESMTP id 239AED641D3;
Tue, 3 May 2011 05:43:38 +0600 (BDT)
Received: from 122.144.11.45 (unknown [127.0.0.1])
by mail.norpknit.com (Postfix) with ESMTPA id 17150232EAC;
Tue, 3 May 2011 06:03:05 +0700 (BDST)
Received: from 41.71.145.207
(SquirrelMail authenticated user accounts)
by 122.144.11.45 with HTTP;
Tue, 3 May 2011 06:03:05 +0700 (BDST)
Message-ID: <[email protected]>
Date: Tue, 3 May 2011 06:03:05 +0700 (BDST)
Subject: Need Your Assistance
From: "Mr. Leung Cheung" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.13
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable
X-Spam-Subject: ***SPAM*** Need Your Assistance
X-Spam-Status: Yes, score=9.8
X-Spam-Score: 98
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend I need your assistance of the transfer an abandoned
$22.5 Million Dollars from Hong-Kong to your country. You will get more info
when i receive a positive reply from you. Best Regards, Mr. Leung Cheung
[...]
Content analysis details: (9.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(leungcheung01[at]hotmail.com
)
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4978]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Dear Friend
I need your assistance of the transfer an abandoned $22.5 Million Dollars
from Hong-Kong to your country. You will get more info when i receive a
positive reply from you.
Best Regards,
Mr. Leung Cheung
Envelope-to:
Delivery-date: Mon, 02 May 2011 16:47:05 -0700
Received: from mx1.bol-online.com ([202.84.32.3])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QH2pA-0002GE-7G
for ; Mon, 02 May 2011 16:47:05 -0700
Received: from mail.norpknit.com (unknown [122.144.11.45])
by mx1.bol-online.com (Postfix) with ESMTP id 239AED641D3;
Tue, 3 May 2011 05:43:38 +0600 (BDT)
Received: from 122.144.11.45 (unknown [127.0.0.1])
by mail.norpknit.com (Postfix) with ESMTPA id 17150232EAC;
Tue, 3 May 2011 06:03:05 +0700 (BDST)
Received: from 41.71.145.207
(SquirrelMail authenticated user accounts)
by 122.144.11.45 with HTTP;
Tue, 3 May 2011 06:03:05 +0700 (BDST)
Message-ID: <[email protected]>
Date: Tue, 3 May 2011 06:03:05 +0700 (BDST)
Subject: Need Your Assistance
From: "Mr. Leung Cheung" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.13
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable
X-Spam-Subject: ***SPAM*** Need Your Assistance
X-Spam-Status: Yes, score=9.8
X-Spam-Score: 98
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend I need your assistance of the transfer an abandoned
$22.5 Million Dollars from Hong-Kong to your country. You will get more info
when i receive a positive reply from you. Best Regards, Mr. Leung Cheung
[...]
Content analysis details: (9.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(leungcheung01[at]hotmail.com
)
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4978]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Dear Friend
I need your assistance of the transfer an abandoned $22.5 Million Dollars
from Hong-Kong to your country. You will get more info when i receive a
positive reply from you.
Best Regards,
Mr. Leung Cheung
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces