by buried under 419s
Fri Apr 27, 2012 11:58 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 27 Apr 2012 20:38:41 -0700
Received: from [81.174.67.245] (port=40143 helo=fast.dotcomwa.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SNyUZ-0003vS-BQ
for ; Fri, 27 Apr 2012 20:38:41 -0700
Received: from localhost ([127.0.0.1] helo=User)
by fast.dotcomwa.com with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SNyOX-0005xt-CX; Sat, 28 Apr 2012 05:32:25 +0200
Reply-To: <[email protected]>
From: "Lt. Col. James Campbell"<[email protected]>
Date: Fri, 27 Apr 2012 22:38:26 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings to you, I know you will be surprised to read my
email. I got your contact from your email address domain server through a
private search, apart from being surprise you may be skeptical to reply me
because of what is happening on the internet world, one has to be very careful
because a lot of scammers are out there to scam innocent citizens and this
has made it very difficult for people to believe anything that comes through
the internet but this is a different case. [...]
Content analysis details: (18.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
2.0 NSL_RCVD_HELO_USER Received from HELO User
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[81.174.67.245 listed in zen.spamhaus.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4999]
0.0 FSL_UA FSL_UA
0.5 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.7 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.8 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.1 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_URI From misspaced, has URI
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** BUSSINESS INQUIRY ON A SPECIAL TRANSFER
Greetings to you,
I know you will be surprised to read my email. I got your contact from your email address domain server through a private search, apart from being surprise you may be skeptical to reply me because of what is happening on the internet world, one has to be very careful because a lot of scammers are out there to scam innocent citizens and this has made it very difficult for people to believe anything that comes through the internet but this is a different case.
lf you are willing to show me your honesty and trust in total confidence, then I will be able to work with you. I am a South African military medical doctor and my named are Lt. Col. James Campbell , a member of the U.S.Military Attache to USARPAC MedicalTeam, which was deployed to Iraq at the beginning of the war. Although the war has ended, for me to proved this to you, see the site below for more information,
http://www.huffingtonpost.com/2011/12/3 ... 76330.html
http://dailycaller.com/2011/12/27/as-ir ... -imminent/
The reason for this letter to you is that I conveyed and deposited two consignment boxes with a security company on behalf of my troop commander. Please, I want this to be between me and you due to the officers and military personnels involved who are still in active service. To prove my sincererity, you are not sending me any money. Because most of this scam is about sending money.
Though, I would like to hold back some informations for security reasons for now until you have found time to visit the BBC website stated below to enable you have an insight into what I intend sharing with you, believing that it would be of your desired interest one-way or the other.
http://news.bbc.co.uk/2/hi/middle_east/2988455.stm
http://www.jonathanforeman.com/military ... chest.html
http://www.voanews.com/burmese/archive/ ... 20-1-1.cfm (VOA NEWS)
Also, could you reply back to me having visited the above website to enable us discuss in a more clarifying manner to the best of your understanding what i require from you as a foreign partner. I must say that I'm very uncomfortable sending this message to you without knowing if you would misconstrue the importance and decide to go public.
In this regards, I will not hold back to say that the essence of this message is strictly for mutual benefit between you and I and nothing more.
I will be vivid and coherent in my next message in this regards, meanwhile, could you send me an email confirming that you have visited the site and that you have understood my intentions? I would like you to get back to me with with the following informations;
1. Full Name and Telephone number.
I will await your reply via my email.
Best Regards
Lt. Col. James Campbell
Envelope-to:
Delivery-date: Fri, 27 Apr 2012 20:38:41 -0700
Received: from [81.174.67.245] (port=40143 helo=fast.dotcomwa.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SNyUZ-0003vS-BQ
for ; Fri, 27 Apr 2012 20:38:41 -0700
Received: from localhost ([127.0.0.1] helo=User)
by fast.dotcomwa.com with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SNyOX-0005xt-CX; Sat, 28 Apr 2012 05:32:25 +0200
Reply-To: <[email protected]>
From: "Lt. Col. James Campbell"<[email protected]>
Date: Fri, 27 Apr 2012 22:38:26 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings to you, I know you will be surprised to read my
email. I got your contact from your email address domain server through a
private search, apart from being surprise you may be skeptical to reply me
because of what is happening on the internet world, one has to be very careful
because a lot of scammers are out there to scam innocent citizens and this
has made it very difficult for people to believe anything that comes through
the internet but this is a different case. [...]
Content analysis details: (18.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
2.0 NSL_RCVD_HELO_USER Received from HELO User
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[81.174.67.245 listed in zen.spamhaus.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4999]
0.0 FSL_UA FSL_UA
0.5 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.7 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.8 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.1 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_URI From misspaced, has URI
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** BUSSINESS INQUIRY ON A SPECIAL TRANSFER
Greetings to you,
I know you will be surprised to read my email. I got your contact from your email address domain server through a private search, apart from being surprise you may be skeptical to reply me because of what is happening on the internet world, one has to be very careful because a lot of scammers are out there to scam innocent citizens and this has made it very difficult for people to believe anything that comes through the internet but this is a different case.
lf you are willing to show me your honesty and trust in total confidence, then I will be able to work with you. I am a South African military medical doctor and my named are Lt. Col. James Campbell , a member of the U.S.Military Attache to USARPAC MedicalTeam, which was deployed to Iraq at the beginning of the war. Although the war has ended, for me to proved this to you, see the site below for more information,
http://www.huffingtonpost.com/2011/12/3 ... 76330.html
http://dailycaller.com/2011/12/27/as-ir ... -imminent/
The reason for this letter to you is that I conveyed and deposited two consignment boxes with a security company on behalf of my troop commander. Please, I want this to be between me and you due to the officers and military personnels involved who are still in active service. To prove my sincererity, you are not sending me any money. Because most of this scam is about sending money.
Though, I would like to hold back some informations for security reasons for now until you have found time to visit the BBC website stated below to enable you have an insight into what I intend sharing with you, believing that it would be of your desired interest one-way or the other.
http://news.bbc.co.uk/2/hi/middle_east/2988455.stm
http://www.jonathanforeman.com/military ... chest.html
http://www.voanews.com/burmese/archive/ ... 20-1-1.cfm (VOA NEWS)
Also, could you reply back to me having visited the above website to enable us discuss in a more clarifying manner to the best of your understanding what i require from you as a foreign partner. I must say that I'm very uncomfortable sending this message to you without knowing if you would misconstrue the importance and decide to go public.
In this regards, I will not hold back to say that the essence of this message is strictly for mutual benefit between you and I and nothing more.
I will be vivid and coherent in my next message in this regards, meanwhile, could you send me an email confirming that you have visited the site and that you have understood my intentions? I would like you to get back to me with with the following informations;
1. Full Name and Telephone number.
I will await your reply via my email.
Best Regards
Lt. Col. James Campbell
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces