by buried under 419s
Thu Feb 23, 2012 2:13 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 23 Feb 2012 04:38:17 -0800
Received: from 62-2-85-231.static.cablecom.ch ([62.2.85.231] helo=gafforini.ch)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1S0Xw6-00084B-5F
for ; Thu, 23 Feb 2012 04:38:17 -0800
Received: by gafforini.ch (Postfix, from userid 783)
id 8081095307; Wed, 22 Feb 2012 20:13:00 +0100 (CET)
Received: from localhost by rg-n01
with SpamAssassin (version 3.2.5);
Wed, 22 Feb 2012 20:12:56 +0100
From: "From Mr. Basil Samid"<[email protected]>
To: undisclosed-recipients:;
Subject: *****SPAM***** Recover this money
Date: Wed, 22 Feb 2012 06:48:51 -0800
Message-Id: <[email protected]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on rg-n01
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.1 required=5.0 tests=ADVANCE_FEE_2,ADVANCE_FEE_3,
ADVANCE_FEE_4,ALL_TRUSTED,AWL,DEAR_FRIEND,FORGED_MUA_OUTLOOK,
MSOE_MID_WRONG_CASE autolearn=unavailable version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4F453E38.910B371A"
X-Spam-Subject: ***SPAM*** *****SPAM***** Recover this money
X-Spam-Status: Yes, score=14.3
X-Spam-Score: 143
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Spam detection software, running on the system "rg-n01", has
identified this incoming email as possible spam. The original message has
been attached to this so you can view it (if it isn't spam) or label similar
future email. If you have any questions, see admin for details. [...]
Content analysis details: (14.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[62.2.85.231 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[62.2.85.231 listed in bb.barracudacentral.org]
3.1 HK_SCAM_N2 BODY: HK_SCAM_N2
0.0 TVD_RCVD_IP TVD_RCVD_IP
1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 T_HK_NAME_FROM T_HK_NAME_FROM
0.0 LOTS_OF_MONEY Huge... sums of money
1.9 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------------=_4F453E38.910B371A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Spam detection software, running on the system "rg-n01", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
admin for details.
Content preview: Dear Friend, How Are You Today I am contacting you base=
d on
my desire to establish a mutually benefiting business relationship wit=
h you
and consequently accomplish a certain business opportunity in Africa. =
I am
Mr. Basil Samid, staff of Libyan national banking corporation, I am pr=
esently
in London-UK due to the unrest in my country. I write you in respect o=
f a
customer of my bank Mallam Mohamed Kadir; who was killed by NATO air-s=
trike
attack in Libya, I was his account officer. [...]=20
Content analysis details: (11.1 points, 5.0 required)
pts rule name description
---- ---------------------- ---------------------------------------------=
-----
-1.4 ALL_TRUSTED Passed through trusted hosts only via SMTP
2.7 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.7 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
2.0 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419=
)
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419=
)
1.5 ADVANCE_FEE_4 Appears to be advance fee fraud (Nigerian 419=
)
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
-0.0 AWL AWL: From: address is in the auto white-list
------------=_4F453E38.910B371A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Received: from User (206-211-210-106.utilitytelephone.net [206.211.210.106])
(Authenticated sender: temp)
by gafforini.ch (Postfix) with ESMTPA id BCD4B95C7F;
Wed, 22 Feb 2012 15:51:49 +0100 (CET)
Reply-To: <[email protected]>
From: "From Mr. Basil Samid"<[email protected]>
Subject: Recover this money
Date: Wed, 22 Feb 2012 06:48:51 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
Dear Friend,
How Are You Today
I am contacting you based on my desire to establish a mutually benefiting business relationship with you and consequently accomplish a certain business opportunity in Africa. I am Mr. Basil Samid, staff of Libyan national banking corporation, I am presently in London-UK due to the unrest in my country. I write you in respect of a customer of my bank Mallam Mohamed Kadir; who was killed by NATO air-strike attack in Libya, I was his account officer.
Before his death he completed a fund-transfer process of (USD 18.1m) to a west-African bank 'Intercontinental Bank' in Cotonou, Benin-Republic from our bank in Libya. As it stands, nobody will ever come for this money because he died with his family as his resident home was leveled by the air-strike. I write with intention to solicit your assistance to be presented as NEXT OF KIN to my Late Client to enable you lay claims on this inheritance and get this fund transferred into your nominated account. Though I know that a transaction of this magnitude will make any one apprehensive and worried, but I am assuring you all will be well at the end of the day.
I want you to collaborate with me under a clear and legitimate agreement with you to safekeeping this money for further sharing between us. Services of a legal-attorney will be required to help legitimize your claims as the next of kin. However confidentiality and honest cooperation to enable us succeed is needed from you, we must ensure legitimate and timely transaction. I hope you read this proposal with good understanding of intent behind and please View this BBC web publication: http://www.bbc.co.uk/news/world-africa-13843798
PLEASE YOU MAY CONTACT ME THROUGH MY PRIVATE EMAIL.
([email protected])
Yours Faithfully,
Mr. Basil Samid
National Banking Corporation
-------------
Please discard this mail if you have no interest, and delete from your mail box.
-------------
------------=_4F453E38.910B371A
Envelope-to:
Delivery-date: Thu, 23 Feb 2012 04:38:17 -0800
Received: from 62-2-85-231.static.cablecom.ch ([62.2.85.231] helo=gafforini.ch)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1S0Xw6-00084B-5F
for ; Thu, 23 Feb 2012 04:38:17 -0800
Received: by gafforini.ch (Postfix, from userid 783)
id 8081095307; Wed, 22 Feb 2012 20:13:00 +0100 (CET)
Received: from localhost by rg-n01
with SpamAssassin (version 3.2.5);
Wed, 22 Feb 2012 20:12:56 +0100
From: "From Mr. Basil Samid"<[email protected]>
To: undisclosed-recipients:;
Subject: *****SPAM***** Recover this money
Date: Wed, 22 Feb 2012 06:48:51 -0800
Message-Id: <[email protected]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on rg-n01
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.1 required=5.0 tests=ADVANCE_FEE_2,ADVANCE_FEE_3,
ADVANCE_FEE_4,ALL_TRUSTED,AWL,DEAR_FRIEND,FORGED_MUA_OUTLOOK,
MSOE_MID_WRONG_CASE autolearn=unavailable version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4F453E38.910B371A"
X-Spam-Subject: ***SPAM*** *****SPAM***** Recover this money
X-Spam-Status: Yes, score=14.3
X-Spam-Score: 143
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Spam detection software, running on the system "rg-n01", has
identified this incoming email as possible spam. The original message has
been attached to this so you can view it (if it isn't spam) or label similar
future email. If you have any questions, see admin for details. [...]
Content analysis details: (14.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[62.2.85.231 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[62.2.85.231 listed in bb.barracudacentral.org]
3.1 HK_SCAM_N2 BODY: HK_SCAM_N2
0.0 TVD_RCVD_IP TVD_RCVD_IP
1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 T_HK_NAME_FROM T_HK_NAME_FROM
0.0 LOTS_OF_MONEY Huge... sums of money
1.9 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
This is a multi-part message in MIME format.
------------=_4F453E38.910B371A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Spam detection software, running on the system "rg-n01", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
admin for details.
Content preview: Dear Friend, How Are You Today I am contacting you base=
d on
my desire to establish a mutually benefiting business relationship wit=
h you
and consequently accomplish a certain business opportunity in Africa. =
I am
Mr. Basil Samid, staff of Libyan national banking corporation, I am pr=
esently
in London-UK due to the unrest in my country. I write you in respect o=
f a
customer of my bank Mallam Mohamed Kadir; who was killed by NATO air-s=
trike
attack in Libya, I was his account officer. [...]=20
Content analysis details: (11.1 points, 5.0 required)
pts rule name description
---- ---------------------- ---------------------------------------------=
-----
-1.4 ALL_TRUSTED Passed through trusted hosts only via SMTP
2.7 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.7 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
2.0 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419=
)
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419=
)
1.5 ADVANCE_FEE_4 Appears to be advance fee fraud (Nigerian 419=
)
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
-0.0 AWL AWL: From: address is in the auto white-list
------------=_4F453E38.910B371A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Received: from User (206-211-210-106.utilitytelephone.net [206.211.210.106])
(Authenticated sender: temp)
by gafforini.ch (Postfix) with ESMTPA id BCD4B95C7F;
Wed, 22 Feb 2012 15:51:49 +0100 (CET)
Reply-To: <[email protected]>
From: "From Mr. Basil Samid"<[email protected]>
Subject: Recover this money
Date: Wed, 22 Feb 2012 06:48:51 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
Dear Friend,
How Are You Today
I am contacting you based on my desire to establish a mutually benefiting business relationship with you and consequently accomplish a certain business opportunity in Africa. I am Mr. Basil Samid, staff of Libyan national banking corporation, I am presently in London-UK due to the unrest in my country. I write you in respect of a customer of my bank Mallam Mohamed Kadir; who was killed by NATO air-strike attack in Libya, I was his account officer.
Before his death he completed a fund-transfer process of (USD 18.1m) to a west-African bank 'Intercontinental Bank' in Cotonou, Benin-Republic from our bank in Libya. As it stands, nobody will ever come for this money because he died with his family as his resident home was leveled by the air-strike. I write with intention to solicit your assistance to be presented as NEXT OF KIN to my Late Client to enable you lay claims on this inheritance and get this fund transferred into your nominated account. Though I know that a transaction of this magnitude will make any one apprehensive and worried, but I am assuring you all will be well at the end of the day.
I want you to collaborate with me under a clear and legitimate agreement with you to safekeeping this money for further sharing between us. Services of a legal-attorney will be required to help legitimize your claims as the next of kin. However confidentiality and honest cooperation to enable us succeed is needed from you, we must ensure legitimate and timely transaction. I hope you read this proposal with good understanding of intent behind and please View this BBC web publication: http://www.bbc.co.uk/news/world-africa-13843798
PLEASE YOU MAY CONTACT ME THROUGH MY PRIVATE EMAIL.
([email protected])
Yours Faithfully,
Mr. Basil Samid
National Banking Corporation
-------------
Please discard this mail if you have no interest, and delete from your mail box.
-------------
------------=_4F453E38.910B371A
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces