by buried under 419s
Mon Oct 31, 2011 11:12 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 31 Oct 2011 20:05:46 -0700
Received: from mail.batavia-air.co.id ([202.152.54.70] helo=batavia-air.co.id)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RL4fV-0006lQ-6S
for ; Mon, 31 Oct 2011 20:05:45 -0700
Received: from 202.152.54.70 (mail.batavia-air.co.id [127.0.0.1])
by batavia-air.co.id (Postfix) with ESMTP id 32D601A88CFA;
Tue, 1 Nov 2011 09:47:09 +0700 (WIT)
Received: from 41.184.29.65
(SquirrelMail authenticated user fernando)
by 202.152.54.70 with HTTP;
Tue, 1 Nov 2011 09:47:09 +0700 (WIT)
Message-ID: <[email protected]>
Date: Tue, 1 Nov 2011 09:47:09 +0700 (WIT)
Subject: Dear Beloved
From: "rosemary" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-4.0.1.el4.centos
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable
X-Spam-Subject: ***SPAM*** Dear Beloved
X-Spam-Status: Yes, score=15.0
X-Spam-Score: 150
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beloved, Greetings!! I am Mrs.rosemary adigwe a widow
of 59years, suffering from cancer of the breast, my husband and my only son
were killed during the UK terrorist attack when we visited London for holidays.My
condition is serious and according to my doctor, it is obvious that I might
not survive. [...]
Content analysis details: (15.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(rosemary_adigwe12[at]yahoo.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.152.54.70 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[202.152.54.70 listed in bb.barracudacentral.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(rosejude11[at]yahoo.co.jp
)
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (rosemary_adigwe12[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
Dear Beloved,
Greetings!! I am Mrs.rosemary adigwe a widow of 59years, suffering from
cancer of the breast, my husband and my only son were killed during the UK
terrorist attack when we visited London for holidays.My condition is
serious and according to my doctor, it is obvious that I might not
survive.
I have some funds that my late husband WILLED to me in cash; the sum of
$8,900,000.00 United States of American Dollars. I packaged it in a
consignments and deposited it with a finance house.
After my prayers, I searched a Christian site in the internet, I found
your email address and I decided to contact you for the usage of the funds
in your Ministry.Therefore, if you are honest and faithful enough to use
this fund strictly for the work, your response will be highly appreciated.
Yours sincerely,
rosemary adigwe
Envelope-to:
Delivery-date: Mon, 31 Oct 2011 20:05:46 -0700
Received: from mail.batavia-air.co.id ([202.152.54.70] helo=batavia-air.co.id)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RL4fV-0006lQ-6S
for ; Mon, 31 Oct 2011 20:05:45 -0700
Received: from 202.152.54.70 (mail.batavia-air.co.id [127.0.0.1])
by batavia-air.co.id (Postfix) with ESMTP id 32D601A88CFA;
Tue, 1 Nov 2011 09:47:09 +0700 (WIT)
Received: from 41.184.29.65
(SquirrelMail authenticated user fernando)
by 202.152.54.70 with HTTP;
Tue, 1 Nov 2011 09:47:09 +0700 (WIT)
Message-ID: <[email protected]>
Date: Tue, 1 Nov 2011 09:47:09 +0700 (WIT)
Subject: Dear Beloved
From: "rosemary" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-4.0.1.el4.centos
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable
X-Spam-Subject: ***SPAM*** Dear Beloved
X-Spam-Status: Yes, score=15.0
X-Spam-Score: 150
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beloved, Greetings!! I am Mrs.rosemary adigwe a widow
of 59years, suffering from cancer of the breast, my husband and my only son
were killed during the UK terrorist attack when we visited London for holidays.My
condition is serious and according to my doctor, it is obvious that I might
not survive. [...]
Content analysis details: (15.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(rosemary_adigwe12[at]yahoo.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.152.54.70 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[202.152.54.70 listed in bb.barracudacentral.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(rosejude11[at]yahoo.co.jp
)
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (rosemary_adigwe12[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
Dear Beloved,
Greetings!! I am Mrs.rosemary adigwe a widow of 59years, suffering from
cancer of the breast, my husband and my only son were killed during the UK
terrorist attack when we visited London for holidays.My condition is
serious and according to my doctor, it is obvious that I might not
survive.
I have some funds that my late husband WILLED to me in cash; the sum of
$8,900,000.00 United States of American Dollars. I packaged it in a
consignments and deposited it with a finance house.
After my prayers, I searched a Christian site in the internet, I found
your email address and I decided to contact you for the usage of the funds
in your Ministry.Therefore, if you are honest and faithful enough to use
this fund strictly for the work, your response will be highly appreciated.
Yours sincerely,
rosemary adigwe
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces