[email protected] MS. CAROLINE OWEN

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 07 Jul 2012 14:16:35 -0700
Received: from hercules.telkomsa.net ([196.25.211.23]:44391)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SncMi-000591-5w
for ; Sat, 07 Jul 2012 14:16:35 -0700
Received: from localhost (localhost [127.0.0.1])
by hercules.telkomsa.net (Postfix) with ESMTP id 6A63642B4E0;
Sat, 7 Jul 2012 20:51:58 +0200 (SAST)
X-Virus-Scanned: amavisd-new at hercules.telkomsa.net
Received: from hercules.telkomsa.net ([127.0.0.1])
by localhost (hercules.telkomsa.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id rJu8RC4wiQ9V; Sat, 7 Jul 2012 20:51:58 +0200 (SAST)
Received: from User (unknown [217.218.249.151])
by hercules.telkomsa.net (Postfix) with ESMTPA id CBA1D6B7F13;
Thu, 5 Jul 2012 07:46:41 +0200 (SAST)
Reply-To: <[email protected]>
From: "MS. CAROLINE OWEN"<[email protected]>
Date: Wed, 4 Jul 2012 22:47:24 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=14.5
X-Spam-Score: 145
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Attn: Dear Friend I am Ms Caroline Owen. A computer scientist
with Central Bank of Nigeria. I am 26 years old, a british citizen just started
work with CBN, I came across your file which was marked X and your released
disk painted RED, Itook time to study it and found out that you have paid
VIRTUALLY all fees and certificate but the fund has not been release to you.
The most annoying thing is that they cannot tell you the truth that on no
account will they ever release the fund to you. [...]

Content analysis details: (14.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?217.218.249.151>]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[217.218.249.151 listed in dnsbl.sorbs.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[196.25.211.23 listed in list.dnswl.org]
0.0 FSL_UA FSL_UA
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FUND IS SAVE

Attn: Dear Friend


I am Ms Caroline Owen. A computer scientist with Central Bank of Nigeria. I
am 26 years old, a british citizen just started work with CBN, I came
across your file which was marked X and your released disk painted
RED, Itook time to study it and found out that you have paid VIRTUALLY
all fees and certificate but the fund has not been release to you. The
most annoying thing is that they cannot tell you the truth that on no
account will they ever release the fund to you.



Please this is like a Mafia setting in Nigeria; you may not understand it
because you are not a Nigerian. The only thing I will need to release this
fund is a special HARD DISK we call it HD120 GIG. I will buy two of it,
recopy your information, destroy the previous one, and punch the computer to
reflect in your bank within 24 hours



I will clean up the tracer and destroy your file, after which I will run
away from Nigeria to meet with you. If you are interested. Do get in touch
with me immediately, You should send to me your convenient tell/fax numbers
for easy communications and also re confirm your banking details, so that
there won't be any mistake.


for phone converstion,please call me on 2348136890036


Regards,
Ms Caroline Owen