by buried under 419s
Tue Jul 26, 2011 2:44 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Jul 2011 22:27:51 -0700
Received: from tic.unne.edu.ar ([200.45.54.139])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QlaBK-0006NT-B6
for ; Mon, 25 Jul 2011 22:27:51 -0700
Received: from localhost (localhost [127.0.0.1])
by tic.unne.edu.ar (Postfix) with ESMTP id 10B92591A;
Tue, 26 Jul 2011 02:21:21 -0300 (ART)
X-Virus-Scanned: amavisd-new at tic2.unne.edu.ar
Received: from tic.unne.edu.ar ([127.0.0.1])
by localhost (tic.unne.edu.ar [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id pcVAfAb9d-VT; Tue, 26 Jul 2011 02:21:20 -0300 (ART)
Received: from med.unne.edu.ar (med.unne.edu.ar [200.45.54.115])
by tic.unne.edu.ar (Postfix) with ESMTP id 6B5A35911;
Tue, 26 Jul 2011 02:21:20 -0300 (ART)
Received: from localhost (localhost.localdomain [127.0.0.1])
by med.unne.edu.ar (Postfix) with ESMTP id A296A7BB3;
Tue, 26 Jul 2011 02:24:52 -0300 (ART)
X-Virus-Scanned: amavisd-new at medi.unne.edu.ar
Received: from med.unne.edu.ar ([127.0.0.1])
by localhost (med.unne.edu.ar [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id rq7bklx1mGtB; Tue, 26 Jul 2011 02:24:51 -0300 (ART)
Received: by med.unne.edu.ar (Postfix, from userid 60001)
id 1F3E67BB0; Tue, 26 Jul 2011 02:24:51 -0300 (ART)
Received: from 41.203.64.253 ([41.203.64.253]) by med.unne.edu.ar (Horde
Framework) with HTTP; Tue, 26 Jul 2011 02:24:41 -0300
Message-ID: <[email protected]>
Date: Tue, 26 Jul 2011 02:24:41 -0300
From: David Rutten <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: Administrative concern
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.9)
X-Spam-Subject: ***SPAM*** Administrative concern
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Subject: Administrative concern Attn:CEO, RE: Funds Investment
and Management Placement of $1million to $100Million. [...]
Content analysis details: (12.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 DNS_FROM_RFC_BOGUSMX RBL: Envelope sender in bogusmx.rfc-ignorant.org
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.203.64.253>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.203.64.253 listed in dnsbl.sorbs.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: Administrative concern
Attn:CEO,
RE: Funds Investment and Management Placement of $1million to $100Million.
We solicit for a private investor who wants to invest his financial
estate in long-term business venture in
your country/company under your supervision.
Your contact details was received from our market research department
and I am writing you to confirm this address validity.
You will be required to;
[1]. Receive the funds.
[2]. Invest and Manage the funds profitably.
My client is willing to negotiate Management sharing percentage after your
acceptance.
We expect to hear from you urgently as this is a high priority
Investment placement and kindly send your
telephone number to enhance communication via emaillto : [email protected]
Thank you for your understanding.
Sincerely Yours,
David Rutten.
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
Envelope-to:
Delivery-date: Mon, 25 Jul 2011 22:27:51 -0700
Received: from tic.unne.edu.ar ([200.45.54.139])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QlaBK-0006NT-B6
for ; Mon, 25 Jul 2011 22:27:51 -0700
Received: from localhost (localhost [127.0.0.1])
by tic.unne.edu.ar (Postfix) with ESMTP id 10B92591A;
Tue, 26 Jul 2011 02:21:21 -0300 (ART)
X-Virus-Scanned: amavisd-new at tic2.unne.edu.ar
Received: from tic.unne.edu.ar ([127.0.0.1])
by localhost (tic.unne.edu.ar [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id pcVAfAb9d-VT; Tue, 26 Jul 2011 02:21:20 -0300 (ART)
Received: from med.unne.edu.ar (med.unne.edu.ar [200.45.54.115])
by tic.unne.edu.ar (Postfix) with ESMTP id 6B5A35911;
Tue, 26 Jul 2011 02:21:20 -0300 (ART)
Received: from localhost (localhost.localdomain [127.0.0.1])
by med.unne.edu.ar (Postfix) with ESMTP id A296A7BB3;
Tue, 26 Jul 2011 02:24:52 -0300 (ART)
X-Virus-Scanned: amavisd-new at medi.unne.edu.ar
Received: from med.unne.edu.ar ([127.0.0.1])
by localhost (med.unne.edu.ar [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id rq7bklx1mGtB; Tue, 26 Jul 2011 02:24:51 -0300 (ART)
Received: by med.unne.edu.ar (Postfix, from userid 60001)
id 1F3E67BB0; Tue, 26 Jul 2011 02:24:51 -0300 (ART)
Received: from 41.203.64.253 ([41.203.64.253]) by med.unne.edu.ar (Horde
Framework) with HTTP; Tue, 26 Jul 2011 02:24:41 -0300
Message-ID: <[email protected]>
Date: Tue, 26 Jul 2011 02:24:41 -0300
From: David Rutten <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: Administrative concern
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.9)
X-Spam-Subject: ***SPAM*** Administrative concern
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Subject: Administrative concern Attn:CEO, RE: Funds Investment
and Management Placement of $1million to $100Million. [...]
Content analysis details: (12.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 DNS_FROM_RFC_BOGUSMX RBL: Envelope sender in bogusmx.rfc-ignorant.org
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.203.64.253>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.203.64.253 listed in dnsbl.sorbs.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: Administrative concern
Attn:CEO,
RE: Funds Investment and Management Placement of $1million to $100Million.
We solicit for a private investor who wants to invest his financial
estate in long-term business venture in
your country/company under your supervision.
Your contact details was received from our market research department
and I am writing you to confirm this address validity.
You will be required to;
[1]. Receive the funds.
[2]. Invest and Manage the funds profitably.
My client is willing to negotiate Management sharing percentage after your
acceptance.
We expect to hear from you urgently as this is a high priority
Investment placement and kindly send your
telephone number to enhance communication via emaillto : [email protected]
Thank you for your understanding.
Sincerely Yours,
David Rutten.
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces