[email protected] Mrs. Mary Allen

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 21 May 2011 10:37:01 -0700
Received: from server.therockgods.com ([216.14.122.101])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QNq6g-0002WE-UU
for ; Sat, 21 May 2011 10:37:01 -0700
Received: from 60-248-110-117.hinet-ip.hinet.net ([60.248.110.117] helo=User)
by server.therockgods.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1QNq5e-0000Qc-Gv; Sat, 21 May 2011 12:35:51 -0500
Reply-To: <[email protected]>
From: "Mrs. Mary Allen"<[email protected]>
Subject: AWAITING YOUR RESPONSE
Date: Sun, 22 May 2011 01:35:42 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.therockgods.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - tpg.com.au
X-Spam-Subject: ***SPAM*** AWAITING YOUR RESPONSE
X-Spam-Status: Yes, score=19.0
X-Spam-Score: 190
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello My name is Mary Allen from Immune Delivery service in
New York. I am contacting you on a very strict and confidential basis concerning
some of your belongings in our company's possession. I am the clearance officer
for the above company and have stumbled on some valuable information that
concerns you. During a routine inspection of uncleared consignments in our
warehouse I discovered two diplomatic trunk boxes that bears your name as
the beneficiary. On further verification by scanning, I found that the consignments
is filled with hard currency, in US dollars. [...]
Content analysis details: (19.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[216.14.122.101 listed in bb.barracudacentral.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<msmaryallen32[at]yahoo.co.jp>
)
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.5 MISSING_MID Missing Message-Id: header
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
0.0 FROM_MISSPACED From: missing whitespace
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES

Hello
My name is Mary Allen from Immune Delivery service in New York. I am contacting you on a very strict and confidential basis concerning some of your belongings in our company's possession.

I am the clearance officer for the above company and have stumbled on some valuable information that concerns you. During a routine inspection of uncleared consignments in our warehouse I discovered two diplomatic trunk
boxes that bears your name as the beneficiary. On further verification by scanning, I found that the consignments is filled with hard currency, in
US dollars.

I strongly advice that you contact me immediately for further instructions on how you can claim your consignment, When contacting me via email,kindly quote these reference number JB2/11992/10


Yours in service

Mrs Mary Allen