by buried under 419s
Wed Oct 03, 2012 11:17 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 03 Oct 2012 18:27:19 -0700
Received: from mail.djk.esdm.go.id ([203.189.89.197]:60974 helo=mail.djlpe.esdm.go.id)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TJaDd-0000lT-3S
for ; Wed, 03 Oct 2012 18:27:18 -0700
Received: (qmail 21184 invoked by uid 1010); 3 Oct 2012 16:09:02 -0000
Received: from 127.0.0.1 by mail (envelope-from <[email protected]>, uid 1008) with qmail-scanner-1.25-st-qms
(clamdscan: 0.87/1082. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
Clear:RC:1(127.0.0.1):.
Processed in 0.066846 secs); 03 Oct 2012 16:09:02 -0000
X-Antivirus-djlpe.esdm.go.id-Mail-From: [email protected] via mail
X-Antivirus-djlpe.esdm.go.id: 1.25-st-qms (Clear:RC:1(127.0.0.1):. Processed in 0.066846 secs Process 21175)
Received: from unknown (HELO 203.189.89.197) (127.0.0.1)
by mail.djlpe.esdm.go.id with SMTP; 3 Oct 2012 16:09:02 -0000
Received: from 41.71.163.203
(SquirrelMail authenticated user [email protected]);
by 203.189.89.197 with HTTP;
Wed, 3 Oct 2012 23:09:02 +0700 (WIT)
Message-ID: <[email protected]>
Date: Wed, 3 Oct 2012 23:09:02 +0700 (WIT)
From: "George Smith" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.3a
X-Mailer: SquirrelMail/1.4.3a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Beneficiary, This is to inform you of the latest development
as regards the delivery of your inheritance fund by the diplomat who is presently
at the JFK Int'l airport New York.Confirm your Full Name,Occupation, Residence
Address & Direct Telephone Numbers. [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsmth08[at]yahoo.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[203.189.89.197 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.189.89.197 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(gsmth08[at]yahoo.co.uk
)
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsmth08[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.0 MISSING_HEADERS Missing To: header
0.0 HK_SCAM_N3 BODY: HK_SCAM_N3
3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5309]
2.8 FSL_FREEMAIL_2 FSL_FREEMAIL_2
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Beneficiary
Attn: Beneficiary,
This is to inform you of the latest development as regards the delivery of
your inheritance fund by the diplomat who is presently at the JFK Int'l
airport New York.Confirm your Full Name,Occupation, Residence Address &
Direct Telephone Numbers.
Regards,
George Smith.
Envelope-to:
Delivery-date: Wed, 03 Oct 2012 18:27:19 -0700
Received: from mail.djk.esdm.go.id ([203.189.89.197]:60974 helo=mail.djlpe.esdm.go.id)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TJaDd-0000lT-3S
for ; Wed, 03 Oct 2012 18:27:18 -0700
Received: (qmail 21184 invoked by uid 1010); 3 Oct 2012 16:09:02 -0000
Received: from 127.0.0.1 by mail (envelope-from <[email protected]>, uid 1008) with qmail-scanner-1.25-st-qms
(clamdscan: 0.87/1082. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
Clear:RC:1(127.0.0.1):.
Processed in 0.066846 secs); 03 Oct 2012 16:09:02 -0000
X-Antivirus-djlpe.esdm.go.id-Mail-From: [email protected] via mail
X-Antivirus-djlpe.esdm.go.id: 1.25-st-qms (Clear:RC:1(127.0.0.1):. Processed in 0.066846 secs Process 21175)
Received: from unknown (HELO 203.189.89.197) (127.0.0.1)
by mail.djlpe.esdm.go.id with SMTP; 3 Oct 2012 16:09:02 -0000
Received: from 41.71.163.203
(SquirrelMail authenticated user [email protected]);
by 203.189.89.197 with HTTP;
Wed, 3 Oct 2012 23:09:02 +0700 (WIT)
Message-ID: <[email protected]>
Date: Wed, 3 Oct 2012 23:09:02 +0700 (WIT)
From: "George Smith" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.3a
X-Mailer: SquirrelMail/1.4.3a
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Beneficiary, This is to inform you of the latest development
as regards the delivery of your inheritance fund by the diplomat who is presently
at the JFK Int'l airport New York.Confirm your Full Name,Occupation, Residence
Address & Direct Telephone Numbers. [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsmth08[at]yahoo.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[203.189.89.197 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.189.89.197 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(gsmth08[at]yahoo.co.uk
)
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsmth08[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.0 MISSING_HEADERS Missing To: header
0.0 HK_SCAM_N3 BODY: HK_SCAM_N3
3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5309]
2.8 FSL_FREEMAIL_2 FSL_FREEMAIL_2
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Beneficiary
Attn: Beneficiary,
This is to inform you of the latest development as regards the delivery of
your inheritance fund by the diplomat who is presently at the JFK Int'l
airport New York.Confirm your Full Name,Occupation, Residence Address &
Direct Telephone Numbers.
Regards,
George Smith.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces