by buried under 419s
Fri Apr 13, 2012 12:03 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 13 Apr 2012 04:16:08 -0700
Received: from [62.128.135.129] (port=55155 helo=lxplesk070.fm.netbenefit.co.uk)
by m with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SIeU3-0005DV-EN
for ; Fri, 13 Apr 2012 04:16:08 -0700
Received: (qmail 12691 invoked by uid 2020); 13 Apr 2012 11:10:52 +0100
Received: from 173-162-125-25-miami.hfc.comcastbusiness.net (HELO User) (173.162.125.25)
by webmail.bumblebeebargains.co.uk with SMTP; 13 Apr 2012 11:10:52 +0100
Reply-To: <[email protected]>
From: "Francis Cullen"<[email protected]>
To: [email protected]
Date: Fri, 13 Apr 2012 06:16:10 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings, I know you will be surprised to read my email.
I got your contact from your Email domain, apart from been surprise you may
be skeptical to respond due to the fact you do not know me, if you are willing
to show me your honesty and trust, I think I will be able to trust and work
with you. I am Mr. Francis Cullen, An auditor here in United Kingdom. I am
offering you a life changing venture worth 15M British pounds. I will explain
to you why this message is addressed to you in my next letter. Please indicate
your interest by responding with the following. Your full name and your cell
phone number for further communication. [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
2.0 NSL_RCVD_HELO_USER Received from HELO User
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[62.128.135.129 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5002]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.1 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
2.6 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 TO_EQ_FM_HTML_ONLY To == From and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Read
Greetings,
I know you will be surprised to read my email. I got your contact from your Email domain, apart from been surprise you may be skeptical to respond due to the fact you do not know me, if you are willing to show me your honesty and trust, I think I will be able to trust and work with you. I am Mr. Francis Cullen, An auditor here in United Kingdom. I am offering you a life changing venture worth 15M British pounds. I will explain to you why this message is addressed to you in my next letter. Please indicate your interest by responding with the following. Your full name and your cell phone number for further communication.
This offer is legal.
Francis Cullen.
Envelope-to:
Delivery-date: Fri, 13 Apr 2012 04:16:08 -0700
Received: from [62.128.135.129] (port=55155 helo=lxplesk070.fm.netbenefit.co.uk)
by m with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SIeU3-0005DV-EN
for ; Fri, 13 Apr 2012 04:16:08 -0700
Received: (qmail 12691 invoked by uid 2020); 13 Apr 2012 11:10:52 +0100
Received: from 173-162-125-25-miami.hfc.comcastbusiness.net (HELO User) (173.162.125.25)
by webmail.bumblebeebargains.co.uk with SMTP; 13 Apr 2012 11:10:52 +0100
Reply-To: <[email protected]>
From: "Francis Cullen"<[email protected]>
To: [email protected]
Date: Fri, 13 Apr 2012 06:16:10 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings, I know you will be surprised to read my email.
I got your contact from your Email domain, apart from been surprise you may
be skeptical to respond due to the fact you do not know me, if you are willing
to show me your honesty and trust, I think I will be able to trust and work
with you. I am Mr. Francis Cullen, An auditor here in United Kingdom. I am
offering you a life changing venture worth 15M British pounds. I will explain
to you why this message is addressed to you in my next letter. Please indicate
your interest by responding with the following. Your full name and your cell
phone number for further communication. [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
2.0 NSL_RCVD_HELO_USER Received from HELO User
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[62.128.135.129 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5002]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.1 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
2.6 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 TO_EQ_FM_HTML_ONLY To == From and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Read
Greetings,
I know you will be surprised to read my email. I got your contact from your Email domain, apart from been surprise you may be skeptical to respond due to the fact you do not know me, if you are willing to show me your honesty and trust, I think I will be able to trust and work with you. I am Mr. Francis Cullen, An auditor here in United Kingdom. I am offering you a life changing venture worth 15M British pounds. I will explain to you why this message is addressed to you in my next letter. Please indicate your interest by responding with the following. Your full name and your cell phone number for further communication.
This offer is legal.
Francis Cullen.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces