by buried under 419s
Wed May 25, 2011 1:26 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 25 May 2011 02:05:26 -0700
Received: from smtp6.freeserve.com ([193.252.22.190])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QPA1r-0001jH-NP
for ; Wed, 25 May 2011 02:05:26 -0700
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3629.me.freeserve.com (SMTP Server) with ESMTP id 0748E70042CA;
Wed, 25 May 2011 11:02:04 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3629.me.freeserve.com (SMTP Server) with ESMTP id EFE4C70045E1;
Wed, 25 May 2011 11:02:03 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3629.me.freeserve.com (SMTP Server) with ESMTP id E213970042D1;
Wed, 25 May 2011 11:02:03 +0200 (CEST)
Received: from User (unknown [109.181.235.205])
by mwinf3629.me.freeserve.com (SMTP Server) with SMTP id 9F9327004130;
Wed, 25 May 2011 11:01:59 +0200 (CEST)
X-ME-UUID: 20110525090159653.9F9327004130@mwinf362 ... eserve.com
Reply-To: <[email protected]>
From: "John Clark"<[email protected]>
Subject: Re: Hello,....I can explain in details.
Date: Wed, 25 May 2011 10:02:04 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Subject: ***SPAM*** Re: Hello,....I can explain in details.
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: From: John Clark I work in a financial institution as a manager
and I am in a position to move out funds to a foreigner legally. I am ready
to give you 40% of the funds for your role. If you are interested let me
have your full names and phone numbers so I can explain in details. [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is freemail (j.clarks[at]ymail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[193.252.22.190 listed in list.dnswl.org]
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7992]
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
1.5 FROM_MISSP_USER From misspaced, from "User"
1.5 FAKE_REPLY_C FAKE_REPLY_C
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
From: John Clark
I work in a financial institution as a manager and I am
in a position to move out funds to a foreigner legally.
I am ready to give you 40% of the funds for your role.
If you are interested let me have your full names and
phone numbers so I can explain in details.
Regards
John Clark.
Envelope-to:
Delivery-date: Wed, 25 May 2011 02:05:26 -0700
Received: from smtp6.freeserve.com ([193.252.22.190])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QPA1r-0001jH-NP
for ; Wed, 25 May 2011 02:05:26 -0700
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3629.me.freeserve.com (SMTP Server) with ESMTP id 0748E70042CA;
Wed, 25 May 2011 11:02:04 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3629.me.freeserve.com (SMTP Server) with ESMTP id EFE4C70045E1;
Wed, 25 May 2011 11:02:03 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3629.me.freeserve.com (SMTP Server) with ESMTP id E213970042D1;
Wed, 25 May 2011 11:02:03 +0200 (CEST)
Received: from User (unknown [109.181.235.205])
by mwinf3629.me.freeserve.com (SMTP Server) with SMTP id 9F9327004130;
Wed, 25 May 2011 11:01:59 +0200 (CEST)
X-ME-UUID: 20110525090159653.9F9327004130@mwinf362 ... eserve.com
Reply-To: <[email protected]>
From: "John Clark"<[email protected]>
Subject: Re: Hello,....I can explain in details.
Date: Wed, 25 May 2011 10:02:04 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Subject: ***SPAM*** Re: Hello,....I can explain in details.
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: From: John Clark I work in a financial institution as a manager
and I am in a position to move out funds to a foreigner legally. I am ready
to give you 40% of the funds for your role. If you are interested let me
have your full names and phone numbers so I can explain in details. [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is freemail (j.clarks[at]ymail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[193.252.22.190 listed in list.dnswl.org]
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7992]
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
1.5 FROM_MISSP_USER From misspaced, from "User"
1.5 FAKE_REPLY_C FAKE_REPLY_C
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
From: John Clark
I work in a financial institution as a manager and I am
in a position to move out funds to a foreigner legally.
I am ready to give you 40% of the funds for your role.
If you are interested let me have your full names and
phone numbers so I can explain in details.
Regards
John Clark.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces