[email protected] Mr.John Philip

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Sep 2012 23:06:57 -0700
Received: from elasmtp-kukur.atl.sa.earthlink.net ([209.86.89.65]:58031)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TEwO6-0007S3-Qn
for ; Thu, 20 Sep 2012 23:06:57 -0700
Received: from [196.32.158.34] (helo=User)
by elasmtp-kukur.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <[email protected]>)
id 1TEwO1-0000kK-OD; Fri, 21 Sep 2012 02:06:50 -0400
Reply-To: <[email protected]>
From: "PHILIP"<[email protected]>
Date: Fri, 21 Sep 2012 07:06:51 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-ELNK-Trace: 1f7afcf5b0b1555f2cac0ef49fe8950974bf435c0eb9d478ed5d7ba1447d5e12b618818e3920c7cc660b582bd1b8aac6350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 196.32.158.34
X-Spam-Status: Yes, score=19.7
X-Spam-Score: 197
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hello Dear I am Attorney John Philip a Civil Lawyer. I have
a client that wishes to invest her financial estate in your Country. This
requires a private arrangement though the details of this transaction will
be furnished to you only if youindicate your interest in this proposal. We
have all the legal documentation to back up the transaction, besides we have
worked out the modalities to ensure a smooth and risk free transfer. [...]


Content analysis details: (19.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(johnphilip0824[at]yahoo.co.jp)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.86.89.65 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[196.32.158.34 listed in dnsbl.sorbs.net]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<johnphilip2467[at]yahoo.co.jp>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (johnphilip0824[at]yahoo.co.jp)
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
1.9 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 RISK_FREE No risk!
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.1 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
2.9 FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** HELLO

Hello Dear

I am Attorney John Philip a Civil Lawyer. I have a client that wishes to invest her financial estate in your
Country. This requires a private arrangement though the details of this transaction will be furnished to you only if
youindicate your interest in this proposal. We have all the legal documentation to back up the transaction,
besides we have worked out the modalities to ensure a smooth and risk free transfer.

We are willing to offer you 20% of the total fund and additional 10% on return on investment (ROI), the fund in question is quite large. All correspondences
will be via email for now. I am expecting to hear from you, if you are willing to do the business with us to send your response to my private email address:


Thanks for reading through.

Yours Faithfully,

Mr.John Philip

Suspended by Yahoo Japan
[email protected]
354 go ahead