by buried under 419s
Wed Jul 27, 2011 4:24 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 27 Jul 2011 11:45:47 -0700
Received: from mxchg03.rrz.uni-hamburg.de ([134.100.38.113])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Qm974-0002Nw-Lo
for m; Wed, 27 Jul 2011 11:45:47 -0700
Received: from localhost (localhost [127.0.0.1])
by mxchg03.rrz.uni-hamburg.de (Postfix) with ESMTP id 190F81EE428;
Wed, 27 Jul 2011 20:45:42 +0200 (CEST)
X-Virus-Scanned: by University of Hamburg ( RRZ / mgw02.rrz.uni-hamburg.de )
Received: from mxchg03.rrz.uni-hamburg.de ([127.0.0.1])
by localhost (mxchg03.rrz.uni-hamburg.de [127.0.0.1]) (amavisd-new, port 10324)
with ESMTP id 0o1RoXSjZQ1d; Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
Received: from mailhost.uni-hamburg.de (mailhost.uni-hamburg.de [134.100.38.99])
by mxchg03.rrz.uni-hamburg.de (Postfix) with ESMTPS;
Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mailhost.uni-hamburg.de (Postfix) with ESMTP id E8D9990002;
Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
X-Virus-Scanned: by University of Hamburg (RRZ/mailhost)
Received: from mailhost.uni-hamburg.de ([127.0.0.1])
by localhost (mailhost.uni-hamburg.de [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id aSdNh9vilC+K; Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
Received: from webmail.rrz.uni-hamburg.de (webmail.rrz.uni-hamburg.de [134.100.38.33])
by mailhost.uni-hamburg.de (Postfix) with ESMTP id 4FADB90005;
Wed, 27 Jul 2011 20:45:40 +0200 (CEST)
Received: by webmail.rrz.uni-hamburg.de (Postfix, from userid 30)
id 1903617E958; Wed, 27 Jul 2011 20:45:39 +0200 (CEST)
Received: from 74-115-6-14.anchorfree.com (74-115-6-14.anchorfree.com
[74.115.6.14]) by webmail.rrz.uni-hamburg.de (Horde Framework) with HTTP;
Wed, 27 Jul 2011 20:45:37 +0200
Message-ID: <[email protected]>
Date: Wed, 27 Jul 2011 20:45:37 +0200
From: Jianguo <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: BUSINESS PROPOSITION.
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.4)
X-Spam-Subject: ***SPAM*** BUSINESS PROPOSITION.
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: My name is Z. Jianguo, I have a transaction of $21,830,000.00
to bring to your attention, if interested for more details, do kindly respond
back to me at ([email protected],[email protected]) for further explanation
on the said transaction. [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (zjian45454[at]hotmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zjian45454[at]hotmail.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8998]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES
My name is Z. Jianguo, I have a transaction of $21,830,000.00 to bring
to your attention, if interested for more details, do kindly respond
back to me at ( [email protected] , [email protected] ) for further
explanation on the said transaction.
I would appreciate your kind response.
Sincerely,
Z.Jianguo
Envelope-to:
Delivery-date: Wed, 27 Jul 2011 11:45:47 -0700
Received: from mxchg03.rrz.uni-hamburg.de ([134.100.38.113])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Qm974-0002Nw-Lo
for m; Wed, 27 Jul 2011 11:45:47 -0700
Received: from localhost (localhost [127.0.0.1])
by mxchg03.rrz.uni-hamburg.de (Postfix) with ESMTP id 190F81EE428;
Wed, 27 Jul 2011 20:45:42 +0200 (CEST)
X-Virus-Scanned: by University of Hamburg ( RRZ / mgw02.rrz.uni-hamburg.de )
Received: from mxchg03.rrz.uni-hamburg.de ([127.0.0.1])
by localhost (mxchg03.rrz.uni-hamburg.de [127.0.0.1]) (amavisd-new, port 10324)
with ESMTP id 0o1RoXSjZQ1d; Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
Received: from mailhost.uni-hamburg.de (mailhost.uni-hamburg.de [134.100.38.99])
by mxchg03.rrz.uni-hamburg.de (Postfix) with ESMTPS;
Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mailhost.uni-hamburg.de (Postfix) with ESMTP id E8D9990002;
Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
X-Virus-Scanned: by University of Hamburg (RRZ/mailhost)
Received: from mailhost.uni-hamburg.de ([127.0.0.1])
by localhost (mailhost.uni-hamburg.de [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id aSdNh9vilC+K; Wed, 27 Jul 2011 20:45:41 +0200 (CEST)
Received: from webmail.rrz.uni-hamburg.de (webmail.rrz.uni-hamburg.de [134.100.38.33])
by mailhost.uni-hamburg.de (Postfix) with ESMTP id 4FADB90005;
Wed, 27 Jul 2011 20:45:40 +0200 (CEST)
Received: by webmail.rrz.uni-hamburg.de (Postfix, from userid 30)
id 1903617E958; Wed, 27 Jul 2011 20:45:39 +0200 (CEST)
Received: from 74-115-6-14.anchorfree.com (74-115-6-14.anchorfree.com
[74.115.6.14]) by webmail.rrz.uni-hamburg.de (Horde Framework) with HTTP;
Wed, 27 Jul 2011 20:45:37 +0200
Message-ID: <[email protected]>
Date: Wed, 27 Jul 2011 20:45:37 +0200
From: Jianguo <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: BUSINESS PROPOSITION.
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.4)
X-Spam-Subject: ***SPAM*** BUSINESS PROPOSITION.
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: My name is Z. Jianguo, I have a transaction of $21,830,000.00
to bring to your attention, if interested for more details, do kindly respond
back to me at ([email protected],[email protected]) for further explanation
on the said transaction. [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (zjian45454[at]hotmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zjian45454[at]hotmail.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8998]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES
My name is Z. Jianguo, I have a transaction of $21,830,000.00 to bring
to your attention, if interested for more details, do kindly respond
back to me at ( [email protected] , [email protected] ) for further
explanation on the said transaction.
I would appreciate your kind response.
Sincerely,
Z.Jianguo
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces