by Reportandie
Wed Dec 19, 2012 11:18 pm
Delivered-To: [my.redacted.address]
Received: by 10.194.77.6 with SMTP id o6csp145780wjw;
Tue, 18 Dec 2012 21:36:07 -0800 (PST)
X-Received: by 10.66.83.136 with SMTP id q8mr13730063pay.83.1355895366103;
Tue, 18 Dec 2012 21:36:06 -0800 (PST)
Return-Path: <[email protected]>
Received: from ctrl.pe.kr ([112.173.18.229])
by mx.google.com with ESMTP id u7si4586104paw.272.2012.12.18.21.36.00;
Tue, 18 Dec 2012 21:36:06 -0800 (PST)
Received-SPF: neutral (google.com: 112.173.18.229 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=112.173.18.229;
Authentication-Results: mx.google.com; spf=neutral (google.com: 112.173.18.229 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by ctrl.pe.kr (Postfix, from userid 783)
id 9C711108C656; Wed, 19 Dec 2012 01:26:39 +0900 (KST)
Received: from localhost by kenihis
with SpamAssassin (version 3.2.5);
Wed, 19 Dec 2012 01:26:39 +0900
From: "efcc nigeria"<[email protected]>
Subject: *****SPAM***** FRAUD VICTIM COMPENSATION FUNDS.!!!!!!
Date: Mon, 17 Dec 2012 17:30:49 +0400
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on kenihis
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.8 required=5.0 tests=ALL_TRUSTED,
FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_MESSAGE,
MILLION_USD,MIME_HTML_ONLY,MISSING_HEADERS,MISSING_MID,SUBJ_ALL_CAPS,
US_DOLLARS_3 autolearn=unavailable version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_50D0993F.35C6078D"
Message-Id: <[email protected]>
Spam detection software, running on the system "kenihis", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
admin for details.
Content preview: l am Mr. Ibrahim Lamorde Charmain of Economic and Financial
Crimes Commission (EFCC) OF THE FEDERAL REPUBLIC OF NIGERIA. This is to officially
inform you that we have verified your contract file presently on my desk,
and I found out that you have not received your payment due to your lack
of co-operation and not fulfilling the obligations giving to you in respect
to your contract payment.Secondly, you are hereby advised to stop dealing
with some non-officials in the bank as this is an illegal act and will have
to stop if you so wish to receive your payment After the Board of directors'
meeting held in Abuja,we have resolved in finding a solution to your problem.
We have arranged your paymentthrough our ATM CARD PAYMENT CENTRE in Europe,
America,Africa and Asia Pacific,This is part of an instruction/mandate passed
by the Senate in respect to overseas contract payment and debt re-scheduling.
[...]
Content analysis details: (10.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.4 ALL_TRUSTED Passed through trusted hosts only via SMTP
0.0 MISSING_MID Missing Message-Id: header
1.8 SUBJ_ALL_CAPS Subject is all capitals
1.6 MISSING_HEADERS Missing To: header
1.8 MILLION_USD BODY: Talks about millions of dollars
1.2 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
noname.eml noname.eml
3K View Download
Received: by 10.194.77.6 with SMTP id o6csp145780wjw;
Tue, 18 Dec 2012 21:36:07 -0800 (PST)
X-Received: by 10.66.83.136 with SMTP id q8mr13730063pay.83.1355895366103;
Tue, 18 Dec 2012 21:36:06 -0800 (PST)
Return-Path: <[email protected]>
Received: from ctrl.pe.kr ([112.173.18.229])
by mx.google.com with ESMTP id u7si4586104paw.272.2012.12.18.21.36.00;
Tue, 18 Dec 2012 21:36:06 -0800 (PST)
Received-SPF: neutral (google.com: 112.173.18.229 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=112.173.18.229;
Authentication-Results: mx.google.com; spf=neutral (google.com: 112.173.18.229 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by ctrl.pe.kr (Postfix, from userid 783)
id 9C711108C656; Wed, 19 Dec 2012 01:26:39 +0900 (KST)
Received: from localhost by kenihis
with SpamAssassin (version 3.2.5);
Wed, 19 Dec 2012 01:26:39 +0900
From: "efcc nigeria"<[email protected]>
Subject: *****SPAM***** FRAUD VICTIM COMPENSATION FUNDS.!!!!!!
Date: Mon, 17 Dec 2012 17:30:49 +0400
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on kenihis
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.8 required=5.0 tests=ALL_TRUSTED,
FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_MESSAGE,
MILLION_USD,MIME_HTML_ONLY,MISSING_HEADERS,MISSING_MID,SUBJ_ALL_CAPS,
US_DOLLARS_3 autolearn=unavailable version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_50D0993F.35C6078D"
Message-Id: <[email protected]>
Spam detection software, running on the system "kenihis", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
admin for details.
Content preview: l am Mr. Ibrahim Lamorde Charmain of Economic and Financial
Crimes Commission (EFCC) OF THE FEDERAL REPUBLIC OF NIGERIA. This is to officially
inform you that we have verified your contract file presently on my desk,
and I found out that you have not received your payment due to your lack
of co-operation and not fulfilling the obligations giving to you in respect
to your contract payment.Secondly, you are hereby advised to stop dealing
with some non-officials in the bank as this is an illegal act and will have
to stop if you so wish to receive your payment After the Board of directors'
meeting held in Abuja,we have resolved in finding a solution to your problem.
We have arranged your paymentthrough our ATM CARD PAYMENT CENTRE in Europe,
America,Africa and Asia Pacific,This is part of an instruction/mandate passed
by the Senate in respect to overseas contract payment and debt re-scheduling.
[...]
Content analysis details: (10.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.4 ALL_TRUSTED Passed through trusted hosts only via SMTP
0.0 MISSING_MID Missing Message-Id: header
1.8 SUBJ_ALL_CAPS Subject is all capitals
1.6 MISSING_HEADERS Missing To: header
1.8 MILLION_USD BODY: Talks about millions of dollars
1.2 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
noname.eml noname.eml
3K View Download