by buried under 419s
Fri Jun 17, 2011 3:39 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 16 Jun 2011 23:12:27 -0700
Received: from mail-out-2.pop.com.br ([200.175.8.253] helo=pop-9.pop.com.br)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QXSI6-0001bx-4Y
for ; Thu, 16 Jun 2011 23:12:27 -0700
Received: (qmail 1121 invoked from network); 17 Jun 2011 05:35:38 -0000
Received: from pop-34.pop.com.br (HELO localhost) ([email protected]@[200.175.8.91])
(envelope-sender <[email protected]>)
by pop-9.pop.com.br (qmail-ldap-1.03) with SMTP
for <[email protected]>; 17 Jun 2011 05:35:38 -0000
X-C3Mail-ID: 1308288935604977
Received: from host-41-206-74-89.afnet.net (host-41-206-74-89.afnet.net
[41.206.74.89]) by wajax.pop.com.br (C3Mail) with HTTP; Fri, 17 Jun 2011
02:35:34 -0300
Message-ID: <[email protected]>
Date: Fri, 17 Jun 2011 02:35:34 -0300
From: Lily Wilson <[email protected]>
To: undisclosed-recipients:;
Subject: Please read and reply,
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_29hca596ns12"
Content-Transfer-Encoding: 7bit
User-Agent: C3Mail(TM) - http://www.c3systems.com.br - 2000-2008
X-Remote-IP: 200.175.8.91
X-Spam-Subject: ***SPAM*** Please read and reply,
X-Spam-Status: Yes, score=10.7
X-Spam-Score: 107
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dearest, How are you doing today? Hope fine. I am Miss Lily
Wilson,the only daughter of my late parents Mr and Mrs. Dikko Wilson. I need
your help to retrived the consignment that my late Father deposited with
a security company here in Abidjan,Cote dvoire in West Africa and to transfer
the consignment fund my late father left for me in the security company before
he died. [...]
Content analysis details: (10.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4405]
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
This message is in MIME format.
--=_29hca596ns12
Content-Type: text/plain;
charset=ISO-8859-1
Content-Description: =?iso-8859-1?b?VmVyc+Nv?= da Mensagem em Texto Puro
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Dearest,
How are you doing today? Hope fine. I am Miss Lily Wilson,the only daughter of my late parents Mr and Mrs. Dikko Wilson. I need your help to retrived the consignment that my late Father deposited with a security company here in Abidjan,Cote dvoire in West Africa and to transfer the consignment fund my late father left for me in the security company before he died.
I want to invest the money in your country and continue my studies. The money is ($3,Million USD) and i will give you 20% of the Total money for your help.
Once I get your mail with fully assurancse to help me I will send you my pictures together with my identity, and I am prepared to offer you a reasonable amount of the total money for your time spent in the course of the transfer. Please consider this and get back to me as soon as possible. I wait for your immediate response for more details.
You are advice to reply me through my private email address, [email protected]
Thanks and God bless you.
Kind Regards,
Miss Lily Wilson.
Envelope-to:
Delivery-date: Thu, 16 Jun 2011 23:12:27 -0700
Received: from mail-out-2.pop.com.br ([200.175.8.253] helo=pop-9.pop.com.br)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QXSI6-0001bx-4Y
for ; Thu, 16 Jun 2011 23:12:27 -0700
Received: (qmail 1121 invoked from network); 17 Jun 2011 05:35:38 -0000
Received: from pop-34.pop.com.br (HELO localhost) ([email protected]@[200.175.8.91])
(envelope-sender <[email protected]>)
by pop-9.pop.com.br (qmail-ldap-1.03) with SMTP
for <[email protected]>; 17 Jun 2011 05:35:38 -0000
X-C3Mail-ID: 1308288935604977
Received: from host-41-206-74-89.afnet.net (host-41-206-74-89.afnet.net
[41.206.74.89]) by wajax.pop.com.br (C3Mail) with HTTP; Fri, 17 Jun 2011
02:35:34 -0300
Message-ID: <[email protected]>
Date: Fri, 17 Jun 2011 02:35:34 -0300
From: Lily Wilson <[email protected]>
To: undisclosed-recipients:;
Subject: Please read and reply,
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_29hca596ns12"
Content-Transfer-Encoding: 7bit
User-Agent: C3Mail(TM) - http://www.c3systems.com.br - 2000-2008
X-Remote-IP: 200.175.8.91
X-Spam-Subject: ***SPAM*** Please read and reply,
X-Spam-Status: Yes, score=10.7
X-Spam-Score: 107
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dearest, How are you doing today? Hope fine. I am Miss Lily
Wilson,the only daughter of my late parents Mr and Mrs. Dikko Wilson. I need
your help to retrived the consignment that my late Father deposited with
a security company here in Abidjan,Cote dvoire in West Africa and to transfer
the consignment fund my late father left for me in the security company before
he died. [...]
Content analysis details: (10.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4405]
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
This message is in MIME format.
--=_29hca596ns12
Content-Type: text/plain;
charset=ISO-8859-1
Content-Description: =?iso-8859-1?b?VmVyc+Nv?= da Mensagem em Texto Puro
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Dearest,
How are you doing today? Hope fine. I am Miss Lily Wilson,the only daughter of my late parents Mr and Mrs. Dikko Wilson. I need your help to retrived the consignment that my late Father deposited with a security company here in Abidjan,Cote dvoire in West Africa and to transfer the consignment fund my late father left for me in the security company before he died.
I want to invest the money in your country and continue my studies. The money is ($3,Million USD) and i will give you 20% of the Total money for your help.
Once I get your mail with fully assurancse to help me I will send you my pictures together with my identity, and I am prepared to offer you a reasonable amount of the total money for your time spent in the course of the transfer. Please consider this and get back to me as soon as possible. I wait for your immediate response for more details.
You are advice to reply me through my private email address, [email protected]
Thanks and God bless you.
Kind Regards,
Miss Lily Wilson.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces