by buried under 419s
Sat Aug 25, 2012 8:26 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 25 Aug 2012 17:00:24 -0700
Received: from mailhost.nmt.edu ([129.138.4.52]:59998)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1T5QHA-0004K2-Du
for ; Sat, 25 Aug 2012 17:00:24 -0700
Received: from localhost (spamhost4 [129.138.4.146])
by localhost.localdomain (Postfix) with ESMTP id 18C18253A9C;
Sat, 25 Aug 2012 17:59:53 -0600 (MDT)
X-Virus-Scanned: by amavisd-new-2.6.4 (20090625) (RHEL AS) at nmt.edu
Received: from mailhost.nmt.edu ([129.138.4.52])
by localhost (spamhost6.nmt.edu [129.138.4.146]) (amavisd-new, port 10024)
with ESMTP id g9f4ylNXv7Xa; Sat, 25 Aug 2012 17:59:52 -0600 (MDT)
Received: by mailhost.nmt.edu (Postfix, from userid 48)
id 5664C253A23; Sat, 25 Aug 2012 17:59:47 -0600 (MDT)
Received: from 199.58.84.52
(SquirrelMail authenticated user dcandela)
by webmail.nmt.edu with HTTP;
Sun, 26 Aug 2012 01:59:47 +0200 (CEST)
Message-ID: <[email protected]>
Date: Sun, 26 Aug 2012 01:59:47 +0200 (CEST)
Subject: Notice
From: "David Jones" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-18.el4
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=2.8
X-Spam-Score: 28
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am a straight forward person and this is the same way I
would like for you to respond to this email. I am an accountant in UK. There
is an account opened since 1999 dormant since 2001, Investigations revealed
the owner is dead without a benefactor. I am contacting you regarding a transfer
to your name. Contact me for further information if interested. This is real
David Jones [...]
Content analysis details: (2.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jones.d8180[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jones.d8180[at]gmail.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4994]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
I am a straight forward person and this is the same way I would like for
you to respond to this email. I am an accountant in UK. There is an
account opened since 1999 dormant since 2001, Investigations revealed the
owner is dead without a benefactor. I am contacting you regarding a
transfer to your name. Contact me for further information if interested.
This is real
David Jones
Envelope-to:
Delivery-date: Sat, 25 Aug 2012 17:00:24 -0700
Received: from mailhost.nmt.edu ([129.138.4.52]:59998)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1T5QHA-0004K2-Du
for ; Sat, 25 Aug 2012 17:00:24 -0700
Received: from localhost (spamhost4 [129.138.4.146])
by localhost.localdomain (Postfix) with ESMTP id 18C18253A9C;
Sat, 25 Aug 2012 17:59:53 -0600 (MDT)
X-Virus-Scanned: by amavisd-new-2.6.4 (20090625) (RHEL AS) at nmt.edu
Received: from mailhost.nmt.edu ([129.138.4.52])
by localhost (spamhost6.nmt.edu [129.138.4.146]) (amavisd-new, port 10024)
with ESMTP id g9f4ylNXv7Xa; Sat, 25 Aug 2012 17:59:52 -0600 (MDT)
Received: by mailhost.nmt.edu (Postfix, from userid 48)
id 5664C253A23; Sat, 25 Aug 2012 17:59:47 -0600 (MDT)
Received: from 199.58.84.52
(SquirrelMail authenticated user dcandela)
by webmail.nmt.edu with HTTP;
Sun, 26 Aug 2012 01:59:47 +0200 (CEST)
Message-ID: <[email protected]>
Date: Sun, 26 Aug 2012 01:59:47 +0200 (CEST)
Subject: Notice
From: "David Jones" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-18.el4
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=2.8
X-Spam-Score: 28
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am a straight forward person and this is the same way I
would like for you to respond to this email. I am an accountant in UK. There
is an account opened since 1999 dormant since 2001, Investigations revealed
the owner is dead without a benefactor. I am contacting you regarding a transfer
to your name. Contact me for further information if interested. This is real
David Jones [...]
Content analysis details: (2.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jones.d8180[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jones.d8180[at]gmail.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4994]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
I am a straight forward person and this is the same way I would like for
you to respond to this email. I am an accountant in UK. There is an
account opened since 1999 dormant since 2001, Investigations revealed the
owner is dead without a benefactor. I am contacting you regarding a
transfer to your name. Contact me for further information if interested.
This is real
David Jones
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces