by buried under 419s
Mon Jul 23, 2012 11:13 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 23 Jul 2012 19:25:03 -0700
Received: from mailout3.t-com.hr ([195.29.150.125]:60482)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1StUo2-0006bY-9y
for ; Mon, 23 Jul 2012 19:25:03 -0700
Received: from ls405.t-com.hr (mailout3.t-com.hr [195.29.150.125])
by mailout3.t-com.hr (Postfix) with ESMTP id 699F53992CE;
Tue, 24 Jul 2012 04:03:46 +0200 (CEST)
Received: from ls265.t-com.hr (ls265.t-com.hr [195.29.150.93])
by ls405.t-com.hr (Postfix) with ESMTP id 4A9AF6987A5;
Tue, 24 Jul 2012 04:03:46 +0200 (CEST)
Received: from ls265.t-com.hr (localhost.localdomain [127.0.0.1])
by ls265.t-com.hr (Qmlai) with ESMTP id 3DF32211026A;
Tue, 24 Jul 2012 04:03:46 +0200 (CEST)
X-Envelope-Sender: [email protected]
Received: from User (unknown [41.190.3.161])
by ls265.t-com.hr (Qmali) with ESMTP id 9DF4C20B02B6;
Tue, 24 Jul 2012 04:00:51 +0200 (CEST)
Reply-To: <[email protected]>
From: "Private Post"<[email protected]>
Date: Tue, 24 Jul 2012 03:12:18 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 120723-2, 07/23/2012), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-TM-AS-Product-Ver: IMSS-7.1.0.1224-6.8.0.1017-19060.003
X-TM-AS-Result: Yes-80.805-10.0-31-1
X-imss-scan-details: Yes-80.805-10.0-31-1
X-TM-AS-User-Approved-Sender: No
X-Spam-Status: Yes, score=17.4
X-Spam-Score: 174
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings, I am a banker with bank of china. I have an interesting
business proposal for you that will be of immense benefit to both of us.
Although this may be hard for you to believe, we stand to gain 11.5million
USD between us in a matter of days. Please grant me the benefit of doubt
and hear me out. [...]
Content analysis details: (17.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.190.3.161 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[195.29.150.125 listed in list.dnswl.org]
3.1 HK_SCAM_S7 BODY: HK_SCAM_S7
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5559]
0.0 FSL_UA FSL_UA
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_URI From misspaced, has URI
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Subject: ***SPAM*** Private matters!
Greetings,
I am a banker with bank of china. I have an interesting business proposal for you that will be of immense benefit to both of us. Although this may be hard for you to believe, we stand to gain 11.5million USD between us in a matter of days. Please grant me the benefit of doubt and hear me out.
Most importantly, I will need you to promise to keep whatever you learn from me between us even if you decide not to go along with me. I will make more details available to you on receipt of a positive response from you. Do contact me only at my private email address: [email protected]
Warm regards from China
Envelope-to:
Delivery-date: Mon, 23 Jul 2012 19:25:03 -0700
Received: from mailout3.t-com.hr ([195.29.150.125]:60482)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1StUo2-0006bY-9y
for ; Mon, 23 Jul 2012 19:25:03 -0700
Received: from ls405.t-com.hr (mailout3.t-com.hr [195.29.150.125])
by mailout3.t-com.hr (Postfix) with ESMTP id 699F53992CE;
Tue, 24 Jul 2012 04:03:46 +0200 (CEST)
Received: from ls265.t-com.hr (ls265.t-com.hr [195.29.150.93])
by ls405.t-com.hr (Postfix) with ESMTP id 4A9AF6987A5;
Tue, 24 Jul 2012 04:03:46 +0200 (CEST)
Received: from ls265.t-com.hr (localhost.localdomain [127.0.0.1])
by ls265.t-com.hr (Qmlai) with ESMTP id 3DF32211026A;
Tue, 24 Jul 2012 04:03:46 +0200 (CEST)
X-Envelope-Sender: [email protected]
Received: from User (unknown [41.190.3.161])
by ls265.t-com.hr (Qmali) with ESMTP id 9DF4C20B02B6;
Tue, 24 Jul 2012 04:00:51 +0200 (CEST)
Reply-To: <[email protected]>
From: "Private Post"<[email protected]>
Date: Tue, 24 Jul 2012 03:12:18 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 120723-2, 07/23/2012), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-TM-AS-Product-Ver: IMSS-7.1.0.1224-6.8.0.1017-19060.003
X-TM-AS-Result: Yes-80.805-10.0-31-1
X-imss-scan-details: Yes-80.805-10.0-31-1
X-TM-AS-User-Approved-Sender: No
X-Spam-Status: Yes, score=17.4
X-Spam-Score: 174
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings, I am a banker with bank of china. I have an interesting
business proposal for you that will be of immense benefit to both of us.
Although this may be hard for you to believe, we stand to gain 11.5million
USD between us in a matter of days. Please grant me the benefit of doubt
and hear me out. [...]
Content analysis details: (17.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.190.3.161 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[195.29.150.125 listed in list.dnswl.org]
3.1 HK_SCAM_S7 BODY: HK_SCAM_S7
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5559]
0.0 FSL_UA FSL_UA
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_URI From misspaced, has URI
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Subject: ***SPAM*** Private matters!
Greetings,
I am a banker with bank of china. I have an interesting business proposal for you that will be of immense benefit to both of us. Although this may be hard for you to believe, we stand to gain 11.5million USD between us in a matter of days. Please grant me the benefit of doubt and hear me out.
Most importantly, I will need you to promise to keep whatever you learn from me between us even if you decide not to go along with me. I will make more details available to you on receipt of a positive response from you. Do contact me only at my private email address: [email protected]
Warm regards from China
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces