by buried under 419s
Mon Oct 03, 2011 12:14 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 03 Oct 2011 05:01:52 -0700
Received: from a2-shark3.uol.com.br ([200.147.35.106])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RAhDT-0000Lq-4C
for ; Mon, 03 Oct 2011 05:01:52 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by a2-shark3.uol.com.br (Postfix) with ESMTP id 922A33800119;
Mon, 3 Oct 2011 09:01:46 -0300 (BRT)
Received: from a2-shark3.adm.intranet (localhost.localdomain [127.0.0.1])
by a2-shark3.uol.com.br (Postfix) with ESMTP id 8545B380008F;
Mon, 3 Oct 2011 08:59:38 -0300 (BRT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=uol.com.br; s=ubz;
t=1317643306; bh=eufcnVs7G7lU9BpYLqWc5h4QQZ5f1Nj7GJSaR8Om/YM=;
h=Date:From:Message-Id:Subject:Mime-Version:Content-Type:To;
b=I4Wd1fl5yxx5GhHN6sQkQRcjGVl3CbfZ4IWoN7EV8TYcKWx8pSQ3U4y5XaNfk2MzD
PEsFXJh9YFCoMWry1QQRPIWNpz91rMuCu6COI8T4wFqbpXJJwZEj51gvqX4UwYPRd9
KVHeF6cp7+a+SXRjVAc+bNrF8EkSsnCZa2ZpBp6A=
Received: from localhost.localdomain (a2-weasel19.host.intranet [10.129.128.97])
by a2-shark3.adm.intranet (Postfix) with ESMTP id 5967D380008E;
Mon, 3 Oct 2011 08:59:38 -0300 (BRT)
Date: Mon, 3 Oct 2011 08:59:38 -0300
From: "Mrs. Donna Williams" <[email protected]>
Message-Id: <[email protected]>
Subject: EMERGENCY PLS READ
Mime-Version: 1.0
Content-Type: text/html; charset=utf-8
X-SenderIP: 41.217.65.4
To: undisclosed-recipients:;
X-SIG5: 6b7e5ade56458f24d5bc492c1d4c8408
X-Spam-Subject: ***SPAM*** EMERGENCY PLS READ
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear beloved, I am writing this mail to you with heavy tears
In my eyes and great sorrow in my heart. My Doctor told me that I will die
in three months time, due to the complication of the esophageal cancer I
was diagnosed. Base on this development I want to WILL my fortune to you.
I am contacting you to assist me, use this Fund to build charity organization.
I would want you to keep 20% of the fund to yourself and dispatch the rest
to orphanage / charity organizations. I grew up as an Orphan and i dont have
anybody/family member to take over of my wealth after my death. [...]
Content analysis details: (11.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tina08[at]uol.com.br)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[200.147.35.106 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.217.65.4 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.217.65.4 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.217.65.4>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (tina08[at]uol.com.br)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1801]
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
I am writing this mail to you with heavy tears In my eyes and great sorrow in my heart. My Doctor told me that I will die in three months time, due to the complication of the esophageal cancer I was diagnosed. Base on this development I want to WILL my fortune to you. I am contacting you to assist me, use this Fund to build charity organization. I would want you to keep 20% of the fund to yourself and dispatch the rest to orphanage / charity organizations. I grew up as an Orphan and i dont have anybody/family member to take over of my wealth after my death.
The total money in question is $5,500,000-00 Million United States Dollars. I was brought up from a motherless babies home was married to my late husband for twenty years without a child, My Husband (Micheal Williams) died in a fatal motor accident Before his death we were true Christians.Since his death I decided not to re-marry,I sold all my inherited belongings and deposited all the s um of $5.5 million dollars with a certified bank in los angeles
california. I will provide you with other information.
Best Regards,
Mrs. Donna Williams
Envelope-to:
Delivery-date: Mon, 03 Oct 2011 05:01:52 -0700
Received: from a2-shark3.uol.com.br ([200.147.35.106])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RAhDT-0000Lq-4C
for ; Mon, 03 Oct 2011 05:01:52 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by a2-shark3.uol.com.br (Postfix) with ESMTP id 922A33800119;
Mon, 3 Oct 2011 09:01:46 -0300 (BRT)
Received: from a2-shark3.adm.intranet (localhost.localdomain [127.0.0.1])
by a2-shark3.uol.com.br (Postfix) with ESMTP id 8545B380008F;
Mon, 3 Oct 2011 08:59:38 -0300 (BRT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=uol.com.br; s=ubz;
t=1317643306; bh=eufcnVs7G7lU9BpYLqWc5h4QQZ5f1Nj7GJSaR8Om/YM=;
h=Date:From:Message-Id:Subject:Mime-Version:Content-Type:To;
b=I4Wd1fl5yxx5GhHN6sQkQRcjGVl3CbfZ4IWoN7EV8TYcKWx8pSQ3U4y5XaNfk2MzD
PEsFXJh9YFCoMWry1QQRPIWNpz91rMuCu6COI8T4wFqbpXJJwZEj51gvqX4UwYPRd9
KVHeF6cp7+a+SXRjVAc+bNrF8EkSsnCZa2ZpBp6A=
Received: from localhost.localdomain (a2-weasel19.host.intranet [10.129.128.97])
by a2-shark3.adm.intranet (Postfix) with ESMTP id 5967D380008E;
Mon, 3 Oct 2011 08:59:38 -0300 (BRT)
Date: Mon, 3 Oct 2011 08:59:38 -0300
From: "Mrs. Donna Williams" <[email protected]>
Message-Id: <[email protected]>
Subject: EMERGENCY PLS READ
Mime-Version: 1.0
Content-Type: text/html; charset=utf-8
X-SenderIP: 41.217.65.4
To: undisclosed-recipients:;
X-SIG5: 6b7e5ade56458f24d5bc492c1d4c8408
X-Spam-Subject: ***SPAM*** EMERGENCY PLS READ
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear beloved, I am writing this mail to you with heavy tears
In my eyes and great sorrow in my heart. My Doctor told me that I will die
in three months time, due to the complication of the esophageal cancer I
was diagnosed. Base on this development I want to WILL my fortune to you.
I am contacting you to assist me, use this Fund to build charity organization.
I would want you to keep 20% of the fund to yourself and dispatch the rest
to orphanage / charity organizations. I grew up as an Orphan and i dont have
anybody/family member to take over of my wealth after my death. [...]
Content analysis details: (11.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tina08[at]uol.com.br)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[200.147.35.106 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.217.65.4 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.217.65.4 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.217.65.4>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (tina08[at]uol.com.br)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1801]
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
I am writing this mail to you with heavy tears In my eyes and great sorrow in my heart. My Doctor told me that I will die in three months time, due to the complication of the esophageal cancer I was diagnosed. Base on this development I want to WILL my fortune to you. I am contacting you to assist me, use this Fund to build charity organization. I would want you to keep 20% of the fund to yourself and dispatch the rest to orphanage / charity organizations. I grew up as an Orphan and i dont have anybody/family member to take over of my wealth after my death.
The total money in question is $5,500,000-00 Million United States Dollars. I was brought up from a motherless babies home was married to my late husband for twenty years without a child, My Husband (Micheal Williams) died in a fatal motor accident Before his death we were true Christians.Since his death I decided not to re-marry,I sold all my inherited belongings and deposited all the s um of $5.5 million dollars with a certified bank in los angeles
california. I will provide you with other information.
Best Regards,
Mrs. Donna Williams
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces