by buried under 419s
Thu Nov 10, 2011 1:02 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 10 Nov 2011 05:46:32 -0800
Received: from [209.239.32.49] (helo=host.expresservers.com)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1ROUxb-0004L0-Nm
for ; Thu, 10 Nov 2011 05:46:32 -0800
Received: from localhost.localdomain (localhost [127.0.0.1])
by host.expresservers.com (8.14.3/8.12.10) with ESMTP id pAADh6uO025276;
Thu, 10 Nov 2011 08:43:06 -0500
From: "MR BEN EZE." <[email protected]>
Reply-To: [email protected]
Subject: URGENT CONTACT COURIER DIPLOMATIC AGENT CALL HIM NOW AT (754) 816-9619
Date: Thu, 10 Nov 2011 09:43:06 -0400
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 41.216.50.32 (test1)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=OPENWEBMAIL_ATT_0.496351208110479"
X-Spam-Subject: ***SPAM*** URGENT CONTACT COURIER DIPLOMATIC AGENT CALL HIM NOW AT (754) 816-9619
X-Spam-Status: Yes, score=17.8
X-Spam-Score: 178
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION : We wish to inform you that the diplomatic agent
conveying the consignment box valued the sum of $4.5 Million United States
Dollars misplaced your addressand [...]
Content analysis details: (17.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(eze.mrben[at]yahoo.fr)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.239.32.49 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[209.239.32.49 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[209.239.32.49 listed in dnsbl.sorbs.net]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(bensonejimofor13[at]yahoo.co.jp
)
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=ho ... roject.com]
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5002]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_NORDNS To: misformatted and no rDNS
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------=OPENWEBMAIL_ATT_0.496351208110479
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by host.expresservers.com id pAADh6uO025276
ATTENTION :
We wish to inform you that the diplomatic agent conveying the consignment box
valued the sum of $4.5 Million United States Dollars misplaced your addressand
he is currently stranded at Austin-Bergstrom International Airport Texas now.
We required you to
re-confirm the following informations below so that he can deliver your
consignment box to you today.
NAME:========================= =====
ADDRESS:====================== =====
MOBILE NO:=========================
NAME OF YOUR NEARESTAIRPORT:======
A COPYOF YOUR IDENTIFICATION:=======
Please do contact the diplomatic agent with the email below with the
informations required.
Contact Person : Mr. Ejimofor Benson
EMAIL:( [email protected] )
Phone Number. (754) 816-9619
He is waiting tohear from you today with theinformations.
NOTE : The Diplomatic agent does not know that the content of the consignment
box is $4.5 Millions United States Dollars and on no circumstances should you
let him know the content. The consignments was moved from here as family
treasures, so never allow him to open the box.
Thanks.
Mr Ben Eze,
Envelope-to:
Delivery-date: Thu, 10 Nov 2011 05:46:32 -0800
Received: from [209.239.32.49] (helo=host.expresservers.com)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1ROUxb-0004L0-Nm
for ; Thu, 10 Nov 2011 05:46:32 -0800
Received: from localhost.localdomain (localhost [127.0.0.1])
by host.expresservers.com (8.14.3/8.12.10) with ESMTP id pAADh6uO025276;
Thu, 10 Nov 2011 08:43:06 -0500
From: "MR BEN EZE." <[email protected]>
Reply-To: [email protected]
Subject: URGENT CONTACT COURIER DIPLOMATIC AGENT CALL HIM NOW AT (754) 816-9619
Date: Thu, 10 Nov 2011 09:43:06 -0400
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 41.216.50.32 (test1)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=OPENWEBMAIL_ATT_0.496351208110479"
X-Spam-Subject: ***SPAM*** URGENT CONTACT COURIER DIPLOMATIC AGENT CALL HIM NOW AT (754) 816-9619
X-Spam-Status: Yes, score=17.8
X-Spam-Score: 178
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION : We wish to inform you that the diplomatic agent
conveying the consignment box valued the sum of $4.5 Million United States
Dollars misplaced your addressand [...]
Content analysis details: (17.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(eze.mrben[at]yahoo.fr)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.239.32.49 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[209.239.32.49 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[209.239.32.49 listed in dnsbl.sorbs.net]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(bensonejimofor13[at]yahoo.co.jp
)
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=ho ... roject.com]
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5002]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_NORDNS To: misformatted and no rDNS
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------=OPENWEBMAIL_ATT_0.496351208110479
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by host.expresservers.com id pAADh6uO025276
ATTENTION :
We wish to inform you that the diplomatic agent conveying the consignment box
valued the sum of $4.5 Million United States Dollars misplaced your addressand
he is currently stranded at Austin-Bergstrom International Airport Texas now.
We required you to
re-confirm the following informations below so that he can deliver your
consignment box to you today.
NAME:========================= =====
ADDRESS:====================== =====
MOBILE NO:=========================
NAME OF YOUR NEARESTAIRPORT:======
A COPYOF YOUR IDENTIFICATION:=======
Please do contact the diplomatic agent with the email below with the
informations required.
Contact Person : Mr. Ejimofor Benson
EMAIL:( [email protected] )
Phone Number. (754) 816-9619
He is waiting tohear from you today with theinformations.
NOTE : The Diplomatic agent does not know that the content of the consignment
box is $4.5 Millions United States Dollars and on no circumstances should you
let him know the content. The consignments was moved from here as family
treasures, so never allow him to open the box.
Thanks.
Mr Ben Eze,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces