by buried under 419s
Thu May 24, 2012 4:43 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 24 May 2012 01:02:43 -0700
Received: from [114.31.3.18] (port=47469 helo=mail.padakhep.org)
by
with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SXT0J-0000H6-4y
for ; Thu, 24 May 2012 01:02:43 -0700
Received: from mail.padakhep.org (mail.padakhep.org [192.168.1.1])
by mail.padakhep.org (8.13.8/8.13.
with ESMTP id q4O7reKF009220;
Thu, 24 May 2012 13:53:41 +0600
Received: from 41.138.179.18
(SquirrelMail authenticated user info)
by mail.padakhep.org with HTTP;
Thu, 24 May 2012 08:55:49 +0100 (BST)
Message-ID: <[email protected]>
Date: Thu, 24 May 2012 08:55:49 +0100 (BST)
From: [email protected]
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-4.el5
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
X-yoursite-MailScanner-Information: Please contact the ISP for more information
X-yoursite-MailScanner-ID: q4O7reKF009220
X-yoursite-MailScanner: Found to be clean
X-yoursite-MailScanner-SpamCheck: spam, SpamAssassin (cached, score=9.271,
required 6, ADVANCE_FEE_1 0.00, ADVANCE_FEE_2 0.65,
ADVANCE_FEE_3 1.76, ADVANCE_FEE_4 3.04, ALL_TRUSTED -1.44,
DEAR_FRIEND 0.86, DNS_FROM_RFC_ABUSE 0.48, DNS_FROM_RFC_POST 1.44,
MISSING_HEADERS 0.19, MISSING_SUBJECT 1.34, NO_REAL_NAME 0.55,
TO_CC_NONE 0.13, URG_BIZ 0.27)
X-yoursite-MailScanner-SpamScore: sssssssss
X-yoursite-MailScanner-From: [email protected]
X-Spam-Status: Yes
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by mail.padakhep.org id q4O7reKF009220
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, I understand that through the Internet is not
the best way to link up with you because of the confidentiality which my
proposal demands due to Crisis we have in Middle East. I worked as a financial
adviser to Ben Ali. Coincidentally, an investor who is associated to the
deposed Tunisian President (Ben Ali) approached me seeking my expertise in
investing US$69 million discretely in diverse project. [...]
Content analysis details: (8.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(partnertrust11[at]yahoo.co.uk)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[114.31.3.18 listed in bb.barracudacentral.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (partnertrust11[at]yahoo.co.uk)
1.0 MISSING_HEADERS Missing To: header
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0002]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RISK_FREE No risk!
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** {Spam?} Confidential............
Dear Friend,
I understand that through the Internet is not the best way to link up with
you because of the confidentiality which my proposal demands due to Crisis
we have in Middle East.
I worked as a financial adviser to Ben Ali. Coincidentally, an investor
who is associated to the deposed Tunisian President (Ben Ali) approached
me seeking my expertise in investing US$69 million discretely in diverse
project.
I have one concern / dilemma, which is ?the origin of this investor funds
is of concern to me?. This is why I have decided to contact you for this
because my
name is already associated with our past ruler.All we need now is your
urgent assistance in claiming this fund in a very Legitimate and
confidential process.What will be your share of this funds will be put on
the table for discussion and will be agreed if it is okay for us.This
investor would like to invest this funds in profitable projects based on
your advise and will look into whatever you suggest.You might be wondering
how I got your email?I got it from a random search which I did on the
internet based on your locality.About this investor: He is a 42 years old
man. His name is Samirh, his father was the Private financial secretary to
Ben Ali (The Ousted Tunisian president).
If you would be happy to receive funding from this investor, please
indicate by return email and we can discuss on the modalities of getting
funded through this investor as I assure you of a risk free transaction.
Thank you.
Moussa Zeeva Salim.
[email protected]
Envelope-to:
Delivery-date: Thu, 24 May 2012 01:02:43 -0700
Received: from [114.31.3.18] (port=47469 helo=mail.padakhep.org)
by
with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SXT0J-0000H6-4y
for ; Thu, 24 May 2012 01:02:43 -0700
Received: from mail.padakhep.org (mail.padakhep.org [192.168.1.1])
by mail.padakhep.org (8.13.8/8.13.
with ESMTP id q4O7reKF009220;Thu, 24 May 2012 13:53:41 +0600
Received: from 41.138.179.18
(SquirrelMail authenticated user info)
by mail.padakhep.org with HTTP;
Thu, 24 May 2012 08:55:49 +0100 (BST)
Message-ID: <[email protected]>
Date: Thu, 24 May 2012 08:55:49 +0100 (BST)
From: [email protected]
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-4.el5
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
X-yoursite-MailScanner-Information: Please contact the ISP for more information
X-yoursite-MailScanner-ID: q4O7reKF009220
X-yoursite-MailScanner: Found to be clean
X-yoursite-MailScanner-SpamCheck: spam, SpamAssassin (cached, score=9.271,
required 6, ADVANCE_FEE_1 0.00, ADVANCE_FEE_2 0.65,
ADVANCE_FEE_3 1.76, ADVANCE_FEE_4 3.04, ALL_TRUSTED -1.44,
DEAR_FRIEND 0.86, DNS_FROM_RFC_ABUSE 0.48, DNS_FROM_RFC_POST 1.44,
MISSING_HEADERS 0.19, MISSING_SUBJECT 1.34, NO_REAL_NAME 0.55,
TO_CC_NONE 0.13, URG_BIZ 0.27)
X-yoursite-MailScanner-SpamScore: sssssssss
X-yoursite-MailScanner-From: [email protected]
X-Spam-Status: Yes
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by mail.padakhep.org id q4O7reKF009220
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, I understand that through the Internet is not
the best way to link up with you because of the confidentiality which my
proposal demands due to Crisis we have in Middle East. I worked as a financial
adviser to Ben Ali. Coincidentally, an investor who is associated to the
deposed Tunisian President (Ben Ali) approached me seeking my expertise in
investing US$69 million discretely in diverse project. [...]
Content analysis details: (8.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(partnertrust11[at]yahoo.co.uk)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[114.31.3.18 listed in bb.barracudacentral.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (partnertrust11[at]yahoo.co.uk)
1.0 MISSING_HEADERS Missing To: header
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0002]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RISK_FREE No risk!
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** {Spam?} Confidential............
Dear Friend,
I understand that through the Internet is not the best way to link up with
you because of the confidentiality which my proposal demands due to Crisis
we have in Middle East.
I worked as a financial adviser to Ben Ali. Coincidentally, an investor
who is associated to the deposed Tunisian President (Ben Ali) approached
me seeking my expertise in investing US$69 million discretely in diverse
project.
I have one concern / dilemma, which is ?the origin of this investor funds
is of concern to me?. This is why I have decided to contact you for this
because my
name is already associated with our past ruler.All we need now is your
urgent assistance in claiming this fund in a very Legitimate and
confidential process.What will be your share of this funds will be put on
the table for discussion and will be agreed if it is okay for us.This
investor would like to invest this funds in profitable projects based on
your advise and will look into whatever you suggest.You might be wondering
how I got your email?I got it from a random search which I did on the
internet based on your locality.About this investor: He is a 42 years old
man. His name is Samirh, his father was the Private financial secretary to
Ben Ali (The Ousted Tunisian president).
If you would be happy to receive funding from this investor, please
indicate by return email and we can discuss on the modalities of getting
funded through this investor as I assure you of a risk free transaction.
Thank you.
Moussa Zeeva Salim.
[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces