by buried under 419s
Thu May 05, 2011 5:33 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 05 May 2011 14:02:09 -0700
Received: from mail01.vietnamair.com.vn ([183.90.160.81] helo=mail02.vietnamair.com.vn)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QI5gV-0001Mv-7h
for ; Thu, 05 May 2011 14:02:09 -0700
X-AuditID: c0a80316-b7c21ae000001797-02-4dc30dcc517d
Received: from vietnamair.com.vn ( [192.168.2.5])
by mail02.vietnamair.com.vn (mail02.vietnamair.com.vn) with SMTP id 8F.D2.06039.CCD03CD4; Fri, 6 May 2011 03:51:24 +0700 (ICT)
To: undisclosed-recipients:;
Received: from [115.164.213.32] (account n3son.cargo HELO User)
by vietnamair.com.vn (CommuniGate Pro SMTP 4.1.
with ESMTP id 60630; Fri, 06 May 2011 04:00:39 +0700
Reply-To: <[email protected]>
From: "Barr.Patrick Chain"<[email protected]>
Subject: I have a lucrative deal of 18million dollars that will benefit both of us
Date: Fri, 6 May 2011 05:01:59 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Brightmail-Tracker: AAAABhgAC8UYALmaGADDFxgAxSUYAM5REtYyYA==
X-Spam-Subject: ***SPAM*** I have a lucrative deal of 18million dollars that will benefit both of us
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FREEMAIL_FROM Sender email is freemail (patrickchain44[at]gmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[183.90.160.81 listed in bb.barracudacentral.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (patrickchain44[at]gmail.com)
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
[offer in subject line]
Envelope-to:
Delivery-date: Thu, 05 May 2011 14:02:09 -0700
Received: from mail01.vietnamair.com.vn ([183.90.160.81] helo=mail02.vietnamair.com.vn)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QI5gV-0001Mv-7h
for ; Thu, 05 May 2011 14:02:09 -0700
X-AuditID: c0a80316-b7c21ae000001797-02-4dc30dcc517d
Received: from vietnamair.com.vn ( [192.168.2.5])
by mail02.vietnamair.com.vn (mail02.vietnamair.com.vn) with SMTP id 8F.D2.06039.CCD03CD4; Fri, 6 May 2011 03:51:24 +0700 (ICT)
To: undisclosed-recipients:;
Received: from [115.164.213.32] (account n3son.cargo HELO User)
by vietnamair.com.vn (CommuniGate Pro SMTP 4.1.
with ESMTP id 60630; Fri, 06 May 2011 04:00:39 +0700
Reply-To: <[email protected]>
From: "Barr.Patrick Chain"<[email protected]>
Subject: I have a lucrative deal of 18million dollars that will benefit both of us
Date: Fri, 6 May 2011 05:01:59 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Brightmail-Tracker: AAAABhgAC8UYALmaGADDFxgAxSUYAM5REtYyYA==
X-Spam-Subject: ***SPAM*** I have a lucrative deal of 18million dollars that will benefit both of us
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FREEMAIL_FROM Sender email is freemail (patrickchain44[at]gmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[183.90.160.81 listed in bb.barracudacentral.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (patrickchain44[at]gmail.com)
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
[offer in subject line]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces