by buried under 419s
Sun Aug 05, 2012 7:42 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 05 Aug 2012 04:13:03 -0700
Received: from [202.215.179.164] (port=57005 helo=server.gtr-sns.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SxylY-00065w-RT
for ; Sun, 05 Aug 2012 04:13:03 -0700
Received: from rrcs-97-79-27-27.se.biz.rr.com ([97.79.27.27]:55555 helo=User)
by server.gtr-sns.com with esmtpa (Exim 4.77)
(envelope-from <[email protected]>)
id 1SxylF-0002yG-Aq; Sun, 05 Aug 2012 20:12:41 +0900
Reply-To: <[email protected]>
From: "Capt.Anita George"<[email protected]>
Date: Sun, 5 Aug 2012 06:12:28 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.gtr-sns.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - mail.com
X-Spam-Status: Yes, score=16.1
X-Spam-Score: 161
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings, I know you will be surprised to read my email.
I got your contact from your Email domain, apart from being surprise you may
be skeptical to reply me because based on what is happening on the internet
world, one has to be very careful because a lot of scammers are out there
to scam innocent citizens and this has made it very difficult for people
to believe anything that comes through the internet but this is a different
case. [...]
Content analysis details: (16.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.215.179.164 listed in psbl.surriel.com]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(anitageorge145[at]mail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<xxlmanitaus65[at]yahoo.co.jp>
)
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... roject.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (anitageorge145[at]mail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
1.1 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.5 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_URI From misspaced, has URI
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Message From Capt. Anita George
Greetings,
I know you will be surprised to read my email. I got your contact from your Email domain, apart from being surprise you may be skeptical to reply me because based on what is happening on the internet world, one has to be very careful because a lot of scammers are out there to scam innocent citizens and this has made it very difficult for people to believe anything that comes through the internet but this is a different case.
lf you are willing to show me your honesty and trust, I think I will be able to trust and work with you. I am an American and you should be rest assured that I cannot be invovled in scam
My name is Capt. Anita George , a member of the U.S. ARMY USARPAC MedicalTeam, which was deployed to Iraq at the beginning of the war in Iraq. Although the war has ended, for me to proved this to you, see the site below for more information,
http://www.huffingtonpost.com/2011/12/3 ... 76330.html
http://dailycaller.com/2011/12/27/as-ir ... -imminent/
But I refused to come along with them inrespective of the fact that the war has ended. The reason for this is that I deposited two consignment boxes with a security company in Iraq. As a result of this, I have to escape and stayed behind to make sure that I am able to get these boxes out before coming to America, knowingly, that if I am able to get this done I will live a better life. Please, I want this to be between me and you Since I am at large.
To Prove my sincererity, you are not sending me any money. Because most of this scam is about sending money.
Though, I would like to hold back some informations for security reasons for now until you have found time to visit the BBC website stated below to enable you have an insight into what I intend sharing with you, believing that it would be of your desired interest one-way or the other.
http://news.bbc.co.uk/2/hi/middle_east/2988455.stm
http://news.bbc.co.uk/2/hi/middle_east/2988455.stm
http://www.jonathanforeman.com/military ... chest.html
http://www.voanews.com/burmese/archive/ ... 20-1-1.cfm (VOA NEWS)
Also, could you get back to me having visited the above website to enable us discuss in a more clarifying manner to the best of your understanding. I must say that I'm very uncomfortable sending this message to you without knowing truly if you would misconstrue the importance and decides to go public. In this regards, I will not hold back to say that the essence of this message is strictly for mutual benefit between you and I and nothing more.
I will be vivid and coherent in my next message in this regards, meanwhile, could you send me an email confirming that you have visited the site and that you have understood my intentions? I would like you to get back to me with with the following informations;
1. Full Name
2. Address
3. Occupation
4. Age
I do not need your telephone number because I cannot call you, we can only communicate through email.
I will await your reply via my email.
Thanks,
Best Regards
Capt. Anita George
Envelope-to:
Delivery-date: Sun, 05 Aug 2012 04:13:03 -0700
Received: from [202.215.179.164] (port=57005 helo=server.gtr-sns.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1SxylY-00065w-RT
for ; Sun, 05 Aug 2012 04:13:03 -0700
Received: from rrcs-97-79-27-27.se.biz.rr.com ([97.79.27.27]:55555 helo=User)
by server.gtr-sns.com with esmtpa (Exim 4.77)
(envelope-from <[email protected]>)
id 1SxylF-0002yG-Aq; Sun, 05 Aug 2012 20:12:41 +0900
Reply-To: <[email protected]>
From: "Capt.Anita George"<[email protected]>
Date: Sun, 5 Aug 2012 06:12:28 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.gtr-sns.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - mail.com
X-Spam-Status: Yes, score=16.1
X-Spam-Score: 161
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Greetings, I know you will be surprised to read my email.
I got your contact from your Email domain, apart from being surprise you may
be skeptical to reply me because based on what is happening on the internet
world, one has to be very careful because a lot of scammers are out there
to scam innocent citizens and this has made it very difficult for people
to believe anything that comes through the internet but this is a different
case. [...]
Content analysis details: (16.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.215.179.164 listed in psbl.surriel.com]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(anitageorge145[at]mail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<xxlmanitaus65[at]yahoo.co.jp>
)
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... roject.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (anitageorge145[at]mail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
1.1 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.5 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_URI From misspaced, has URI
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Message From Capt. Anita George
Greetings,
I know you will be surprised to read my email. I got your contact from your Email domain, apart from being surprise you may be skeptical to reply me because based on what is happening on the internet world, one has to be very careful because a lot of scammers are out there to scam innocent citizens and this has made it very difficult for people to believe anything that comes through the internet but this is a different case.
lf you are willing to show me your honesty and trust, I think I will be able to trust and work with you. I am an American and you should be rest assured that I cannot be invovled in scam
My name is Capt. Anita George , a member of the U.S. ARMY USARPAC MedicalTeam, which was deployed to Iraq at the beginning of the war in Iraq. Although the war has ended, for me to proved this to you, see the site below for more information,
http://www.huffingtonpost.com/2011/12/3 ... 76330.html
http://dailycaller.com/2011/12/27/as-ir ... -imminent/
But I refused to come along with them inrespective of the fact that the war has ended. The reason for this is that I deposited two consignment boxes with a security company in Iraq. As a result of this, I have to escape and stayed behind to make sure that I am able to get these boxes out before coming to America, knowingly, that if I am able to get this done I will live a better life. Please, I want this to be between me and you Since I am at large.
To Prove my sincererity, you are not sending me any money. Because most of this scam is about sending money.
Though, I would like to hold back some informations for security reasons for now until you have found time to visit the BBC website stated below to enable you have an insight into what I intend sharing with you, believing that it would be of your desired interest one-way or the other.
http://news.bbc.co.uk/2/hi/middle_east/2988455.stm
http://news.bbc.co.uk/2/hi/middle_east/2988455.stm
http://www.jonathanforeman.com/military ... chest.html
http://www.voanews.com/burmese/archive/ ... 20-1-1.cfm (VOA NEWS)
Also, could you get back to me having visited the above website to enable us discuss in a more clarifying manner to the best of your understanding. I must say that I'm very uncomfortable sending this message to you without knowing truly if you would misconstrue the importance and decides to go public. In this regards, I will not hold back to say that the essence of this message is strictly for mutual benefit between you and I and nothing more.
I will be vivid and coherent in my next message in this regards, meanwhile, could you send me an email confirming that you have visited the site and that you have understood my intentions? I would like you to get back to me with with the following informations;
1. Full Name
2. Address
3. Occupation
4. Age
I do not need your telephone number because I cannot call you, we can only communicate through email.
I will await your reply via my email.
Thanks,
Best Regards
Capt. Anita George
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces