by buried under 419s
Mon Nov 19, 2012 4:03 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 19 Nov 2012 10:57:03 -0800
Received: from mail.unsch.edu.pe ([200.121.72.190]:34549 helo=unsch.edu.pe)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TaWWj-00049Y-KP
for ; Mon, 19 Nov 2012 10:57:03 -0800
Received: (qmail 22413 invoked by uid 453); 15 Nov 2012 11:56:22 -0000
X-Virus-Checked: Checked by ClamAV on unsch.edu.pe
Received: from localhost (HELO localhost) (127.0.0.1)
by unsch.edu.pe (qpsmtpd/0.40) with ESMTP; Thu, 15 Nov 2012 06:56:21 -0500
Received: from 197.255.175.104 ([197.255.175.104]) by 200.121.72.190 (Horde
Framework) with HTTP; Thu, 15 Nov 2012 06:56:20 -0500
Message-ID: <[email protected]>
Date: Thu, 15 Nov 2012 06:56:20 -0500
Disposition-Notification-To: [email protected]
From: AHMED USMAN <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_1eg2iuwhulb4"
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) 4.3.3
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: Friend, I know this letter will come to you as
a surprise knowing that we have not meet each other face to face. My name
are Ahmed Usman the personal assistance to President Hosni Mubarak formal
president of Egypt who resigned from office after eighteen days of mass protects
by the people of Egypt. [...]
Content analysis details: (15.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrahmdusman[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?200.121.72.190>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[200.121.72.190 listed in zen.spamhaus.org]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[200.121.72.190 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.121.72.190 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4999]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.4 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT
This message is in MIME format.
--=_1eg2iuwhulb4
Content-Type: text/plain;
charset=ISO-8859-1
Content-Description: Plaintext Version of Message
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Attention: Friend,
I know this letter will come to you as a surprise knowing that we have
not meet each other face to face. My name are Ahmed Usman the personal
assistance to President Hosni Mubarak formal president of Egypt who
resigned from office after eighteen days of mass protects by the
people of Egypt.
My reason of contacting you is that I want to set up a business
venture oversea and I am looking for a trustworthy person that will
help me set up the business and I don?t want my name to be used in the
setting up of the business. Note I have set aside the sum of Seven
Million Five Hundred Thousand United States Dollars (US$7.5M) for this
project. And after my search for a credible and trust worthy person to
help me I decided to contact you.
Please kindly confirm your willingness to help me so that I will
forward all the details in respect to this project to you. Do reply to
my private email which is [email protected]
Thanks and remain bless,
Ahmed Usman.
Envelope-to:
Delivery-date: Mon, 19 Nov 2012 10:57:03 -0800
Received: from mail.unsch.edu.pe ([200.121.72.190]:34549 helo=unsch.edu.pe)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TaWWj-00049Y-KP
for ; Mon, 19 Nov 2012 10:57:03 -0800
Received: (qmail 22413 invoked by uid 453); 15 Nov 2012 11:56:22 -0000
X-Virus-Checked: Checked by ClamAV on unsch.edu.pe
Received: from localhost (HELO localhost) (127.0.0.1)
by unsch.edu.pe (qpsmtpd/0.40) with ESMTP; Thu, 15 Nov 2012 06:56:21 -0500
Received: from 197.255.175.104 ([197.255.175.104]) by 200.121.72.190 (Horde
Framework) with HTTP; Thu, 15 Nov 2012 06:56:20 -0500
Message-ID: <[email protected]>
Date: Thu, 15 Nov 2012 06:56:20 -0500
Disposition-Notification-To: [email protected]
From: AHMED USMAN <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_1eg2iuwhulb4"
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) 4.3.3
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: Friend, I know this letter will come to you as
a surprise knowing that we have not meet each other face to face. My name
are Ahmed Usman the personal assistance to President Hosni Mubarak formal
president of Egypt who resigned from office after eighteen days of mass protects
by the people of Egypt. [...]
Content analysis details: (15.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrahmdusman[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?200.121.72.190>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[200.121.72.190 listed in zen.spamhaus.org]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[200.121.72.190 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.121.72.190 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4999]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.4 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT
This message is in MIME format.
--=_1eg2iuwhulb4
Content-Type: text/plain;
charset=ISO-8859-1
Content-Description: Plaintext Version of Message
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Attention: Friend,
I know this letter will come to you as a surprise knowing that we have
not meet each other face to face. My name are Ahmed Usman the personal
assistance to President Hosni Mubarak formal president of Egypt who
resigned from office after eighteen days of mass protects by the
people of Egypt.
My reason of contacting you is that I want to set up a business
venture oversea and I am looking for a trustworthy person that will
help me set up the business and I don?t want my name to be used in the
setting up of the business. Note I have set aside the sum of Seven
Million Five Hundred Thousand United States Dollars (US$7.5M) for this
project. And after my search for a credible and trust worthy person to
help me I decided to contact you.
Please kindly confirm your willingness to help me so that I will
forward all the details in respect to this project to you. Do reply to
my private email which is [email protected]
Thanks and remain bless,
Ahmed Usman.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces