by buried under 419s
Thu Oct 13, 2011 3:22 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Oct 2011 11:08:12 -0700
Received: from host2.webhostingservers.net ([209.239.35.220])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1REPhT-0008H8-Gr
for ; Thu, 13 Oct 2011 11:08:12 -0700
Received: from localhost.localdomain (localhost [127.0.0.1])
by host2.webhostingservers.net (8.14.3/8.12.10) with ESMTP id p9DI5L3C015810;
Thu, 13 Oct 2011 14:05:21 -0400
From: "Amos John" <[email protected]>
Reply-To: [email protected]
Subject: ATTN: MATTER OF URGENCY, RESPOND URGENT
Date: Thu, 13 Oct 2011 13:05:21 -0500
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 41.216.50.181 (resume)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=OPENWEBMAIL_ATT_0.48949071652363"
X-Spam-Subject: ***SPAM*** ATTN: MATTER OF URGENCY, RESPOND URGENT
X-Spam-Status: Yes, score=14.0
X-Spam-Score: 140
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: THIS MESSAGE IS ONLY FOR THE OWNER OF THISEMAIL ADDRESS.
Branch TGDIsidore de Souza 41 Blvd Du Mongo EMAIL ( [email protected])
Phone Line: +229 996-012-96 Welcome to UPS Delivery Home . HERE IS YOUR PARCEL
CODE: AWB33XZS [...]
Content analysis details: (14.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(amos.john07[at]gmail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.239.35.220 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (amos.john07[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
-1.5 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------=OPENWEBMAIL_ATT_0.48949071652363
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by host2.webhostingservers.net id p9DI5L3C015810
THIS MESSAGE IS ONLY FOR THE OWNER OF THISEMAIL ADDRESS.
Branch TGDIsidore de Souza 41 Blvd Du Mongo
EMAIL ( [email protected])
Phone Line: +229 996-012-96
Welcome to UPS Delivery Home .
HERE IS YOUR PARCEL CODE: AWB33XZS
Attention: Extreme customer.
We wish to inform you that the diplomatic agent conveying the consignment
box valued the sum of $2.8 Million United States Dollars misplacedyour
address and he is currently stranded at the International airport now. We
required you re-confirm the following information below so that he can
deliver your consignment box to you today and You can also call him
immediately to enable him complete your delivery today because he has been
long there waiting for your call.
(1)Your Full Name=============
(2)Phone Number======
(3)Current Home Address========
(4)Occupation====================
(4)Fax Number================
(5)Country====================
(6)City======================
(7)Nearest Airport ==============
(8)A Copy of Your I D For Identification.
Please do contact the diplomatic agent with the email below with the
information required.
Contact Person: Prince Mark Ude
Email: [email protected]
He is waiting to hear from you today with the information.
NOTE : The Diplomatic agent does not know that the content of the
consignment box is $2.8Million United States Dollars and on no
circumstances should you let him know the content. The consignment was
moved from here as family values, so never allow him to open the box.You
have to be urgent because he has spent weeks there and his condition in
the airport is not ok, I want you to contact him immediately you receive
this message.
Yours Sincerely,
REV. DR. AMOS JOHN
UPS MANAGING DIRECTOR BENIN REPUBLIC
TELEPHONE: +229 996-012-96
Office E-mail: ([email protected] )
Envelope-to:
Delivery-date: Thu, 13 Oct 2011 11:08:12 -0700
Received: from host2.webhostingservers.net ([209.239.35.220])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1REPhT-0008H8-Gr
for ; Thu, 13 Oct 2011 11:08:12 -0700
Received: from localhost.localdomain (localhost [127.0.0.1])
by host2.webhostingservers.net (8.14.3/8.12.10) with ESMTP id p9DI5L3C015810;
Thu, 13 Oct 2011 14:05:21 -0400
From: "Amos John" <[email protected]>
Reply-To: [email protected]
Subject: ATTN: MATTER OF URGENCY, RESPOND URGENT
Date: Thu, 13 Oct 2011 13:05:21 -0500
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 41.216.50.181 (resume)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=OPENWEBMAIL_ATT_0.48949071652363"
X-Spam-Subject: ***SPAM*** ATTN: MATTER OF URGENCY, RESPOND URGENT
X-Spam-Status: Yes, score=14.0
X-Spam-Score: 140
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: THIS MESSAGE IS ONLY FOR THE OWNER OF THISEMAIL ADDRESS.
Branch TGDIsidore de Souza 41 Blvd Du Mongo EMAIL ( [email protected])
Phone Line: +229 996-012-96 Welcome to UPS Delivery Home . HERE IS YOUR PARCEL
CODE: AWB33XZS [...]
Content analysis details: (14.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(amos.john07[at]gmail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.239.35.220 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (amos.john07[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
-1.5 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------=OPENWEBMAIL_ATT_0.48949071652363
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by host2.webhostingservers.net id p9DI5L3C015810
THIS MESSAGE IS ONLY FOR THE OWNER OF THISEMAIL ADDRESS.
Branch TGDIsidore de Souza 41 Blvd Du Mongo
EMAIL ( [email protected])
Phone Line: +229 996-012-96
Welcome to UPS Delivery Home .
HERE IS YOUR PARCEL CODE: AWB33XZS
Attention: Extreme customer.
We wish to inform you that the diplomatic agent conveying the consignment
box valued the sum of $2.8 Million United States Dollars misplacedyour
address and he is currently stranded at the International airport now. We
required you re-confirm the following information below so that he can
deliver your consignment box to you today and You can also call him
immediately to enable him complete your delivery today because he has been
long there waiting for your call.
(1)Your Full Name=============
(2)Phone Number======
(3)Current Home Address========
(4)Occupation====================
(4)Fax Number================
(5)Country====================
(6)City======================
(7)Nearest Airport ==============
(8)A Copy of Your I D For Identification.
Please do contact the diplomatic agent with the email below with the
information required.
Contact Person: Prince Mark Ude
Email: [email protected]
He is waiting to hear from you today with the information.
NOTE : The Diplomatic agent does not know that the content of the
consignment box is $2.8Million United States Dollars and on no
circumstances should you let him know the content. The consignment was
moved from here as family values, so never allow him to open the box.You
have to be urgent because he has spent weeks there and his condition in
the airport is not ok, I want you to contact him immediately you receive
this message.
Yours Sincerely,
REV. DR. AMOS JOHN
UPS MANAGING DIRECTOR BENIN REPUBLIC
TELEPHONE: +229 996-012-96
Office E-mail: ([email protected] )
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces