by buried under 419s
Tue Sep 06, 2011 12:47 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 06 Sep 2011 09:31:48 -0700
Received: from octopus.ucg.gr ([195.251.108.251])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R0yYr-0008TH-3q
for ; Tue, 06 Sep 2011 09:31:48 -0700
Received: (qmail 18052 invoked from network); 6 Sep 2011 16:29:51 -0000
Received: by simscan 1.1.0 ppid: 18043, pid: 18044, t: 0.0837s
scanners: regex: 1.1.0
Received: from unknown (HELO octopus.ucg.gr) ([127.0.0.1])
(envelope-sender <[email protected]>)
by localhost (qmail-ldap-1.03) with SMTP
for <[email protected]>; 6 Sep 2011 16:29:51 -0000
Received: (from nobody@localhost)
by octopus.ucg.gr (8.13.1/8.13.1/Submit) id p86GTWLE017984;
Tue, 6 Sep 2011 17:29:32 +0100
X-Authentication-Warning: octopus.ucg.gr: nobody set sender to [email protected] using -f
Received: from 41.58.130.244 ([41.58.130.244]) by webmail.ucg.gr (Horde
MIME library) with HTTP; Tue, 06 Sep 2011 17:29:31 +0100
Message-ID: <[email protected]>
Date: Tue, 06 Sep 2011 17:29:31 +0100
From: Pascal Irene <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: CONFIRM THIS MESSAGE PLEASE
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
User-Agent: Internet Messaging Program (IMP) H3 (4.1)
X-Spam-Subject: ***SPAM*** CONFIRM THIS MESSAGE PLEASE
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, After series of investigations by the Senate, it is
verified that your payment ceased by the previous Govt. has been over-due
for collection. It is ridiculous and hypatheting that payment should be approved
but delayed by unknown elements. [...]
Content analysis details: (10.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (pascalirene3[at]msn.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.58.130.244>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[195.251.108.251 listed in bb.barracudacentral.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (pascalirene3[at]msn.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES
Hello,
After series of investigations by the Senate, it is verified that your payment
ceased by the previous Govt. has been over-due for collection. It is ridiculous
and hypatheting that payment should be approved but delayed by unknown elements.
I hereby inform you that your funds were finally transferred to your account as
your friend presented on Friday 26/08/11 from our Telex Dept. Office in
California, U.S.A address: 8194 SW MURRAY BLVD BEAVERTON, OREGON 97005.
We are not comfortable because you have not contacted us to confirm that you
have received your funds in your account.
Therefore you are advice to get back to us or re-confirm if you has received the
payment or not,immediately to help us cross-check your transaction with our
banking Telex.
Make sure you respond immediately for quick check on the info. to enable me
release your transaction # for you to re-check your funds with your bank. Reply
here: [email protected].
Thanks.
Yours Faithfully,
Mr. Pascal Irene
----------------------------------------------------------------
This Webmail system is supported by the NOC of UCG Hello,
Envelope-to:
Delivery-date: Tue, 06 Sep 2011 09:31:48 -0700
Received: from octopus.ucg.gr ([195.251.108.251])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R0yYr-0008TH-3q
for ; Tue, 06 Sep 2011 09:31:48 -0700
Received: (qmail 18052 invoked from network); 6 Sep 2011 16:29:51 -0000
Received: by simscan 1.1.0 ppid: 18043, pid: 18044, t: 0.0837s
scanners: regex: 1.1.0
Received: from unknown (HELO octopus.ucg.gr) ([127.0.0.1])
(envelope-sender <[email protected]>)
by localhost (qmail-ldap-1.03) with SMTP
for <[email protected]>; 6 Sep 2011 16:29:51 -0000
Received: (from nobody@localhost)
by octopus.ucg.gr (8.13.1/8.13.1/Submit) id p86GTWLE017984;
Tue, 6 Sep 2011 17:29:32 +0100
X-Authentication-Warning: octopus.ucg.gr: nobody set sender to [email protected] using -f
Received: from 41.58.130.244 ([41.58.130.244]) by webmail.ucg.gr (Horde
MIME library) with HTTP; Tue, 06 Sep 2011 17:29:31 +0100
Message-ID: <[email protected]>
Date: Tue, 06 Sep 2011 17:29:31 +0100
From: Pascal Irene <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: CONFIRM THIS MESSAGE PLEASE
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
User-Agent: Internet Messaging Program (IMP) H3 (4.1)
X-Spam-Subject: ***SPAM*** CONFIRM THIS MESSAGE PLEASE
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, After series of investigations by the Senate, it is
verified that your payment ceased by the previous Govt. has been over-due
for collection. It is ridiculous and hypatheting that payment should be approved
but delayed by unknown elements. [...]
Content analysis details: (10.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (pascalirene3[at]msn.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.58.130.244>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[195.251.108.251 listed in bb.barracudacentral.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (pascalirene3[at]msn.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES
Hello,
After series of investigations by the Senate, it is verified that your payment
ceased by the previous Govt. has been over-due for collection. It is ridiculous
and hypatheting that payment should be approved but delayed by unknown elements.
I hereby inform you that your funds were finally transferred to your account as
your friend presented on Friday 26/08/11 from our Telex Dept. Office in
California, U.S.A address: 8194 SW MURRAY BLVD BEAVERTON, OREGON 97005.
We are not comfortable because you have not contacted us to confirm that you
have received your funds in your account.
Therefore you are advice to get back to us or re-confirm if you has received the
payment or not,immediately to help us cross-check your transaction with our
banking Telex.
Make sure you respond immediately for quick check on the info. to enable me
release your transaction # for you to re-check your funds with your bank. Reply
here: [email protected].
Thanks.
Yours Faithfully,
Mr. Pascal Irene
----------------------------------------------------------------
This Webmail system is supported by the NOC of UCG Hello,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces