by buried under 419s
Wed Dec 26, 2012 9:13 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 26 Dec 2012 16:38:13 -0800
Received: from [190.15.193.30] (port=46083 helo=nomadesoft.com.ar)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1To1UB-0000gF-N5
for ; Wed, 26 Dec 2012 16:38:13 -0800
Received: (qmail 415 invoked from network); 23 Dec 2012 21:22:08 -0000
Received: from localhost (HELO www.nomadesoft.com.ar) ([email protected])
by localhost with SMTP; 23 Dec 2012 21:22:08 -0000
Received: from 41.211.206.33
(SquirrelMail authenticated user jfernandez)
by www.nomadesoft.com.ar with HTTP;
Sun, 23 Dec 2012 18:22:08 -0300 (ART)
Message-ID: <[email protected]>
Date: Sun, 23 Dec 2012 18:22:08 -0300 (ART)
From: "STEVE PARK." <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.4
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Diplomat Steve Park, I just arrived at Miami International
Airport to deliver your ATM Card containing your overdue payment of $1.5
Million dollars. You are number 34 on my list of beneficiaries from the US/Canada.
Kindly get back to me with your full address, and phone number, contact Email:
([email protected]) I just have 5 days to spend before I head to Asia
and Australia for other deliveries. Thank You. [...]
Content analysis details: (16.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(stevepark6[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(stevepark956[at]yahoo.com
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (stevepark6[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.4 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR OVERDUE PAYMENT OF $1.5 MELLION IS READY FOR DELIVERY:
I am Diplomat Steve Park, I just arrived at Miami International Airport
to deliver your ATM Card containing your overdue payment of $1.5 Million
dollars. You are number 34 on my list of beneficiaries from the
US/Canada. Kindly get back to me with your full address, and phone
number, contact Email: ( [email protected] ) I just have 5 days to
spend before I head to Asia and Australia for other deliveries. Thank
You.
Sincerely,
Steve Park.
Envelope-to:
Delivery-date: Wed, 26 Dec 2012 16:38:13 -0800
Received: from [190.15.193.30] (port=46083 helo=nomadesoft.com.ar)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1To1UB-0000gF-N5
for ; Wed, 26 Dec 2012 16:38:13 -0800
Received: (qmail 415 invoked from network); 23 Dec 2012 21:22:08 -0000
Received: from localhost (HELO www.nomadesoft.com.ar) ([email protected])
by localhost with SMTP; 23 Dec 2012 21:22:08 -0000
Received: from 41.211.206.33
(SquirrelMail authenticated user jfernandez)
by www.nomadesoft.com.ar with HTTP;
Sun, 23 Dec 2012 18:22:08 -0300 (ART)
Message-ID: <[email protected]>
Date: Sun, 23 Dec 2012 18:22:08 -0300 (ART)
From: "STEVE PARK." <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.4
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I am Diplomat Steve Park, I just arrived at Miami International
Airport to deliver your ATM Card containing your overdue payment of $1.5
Million dollars. You are number 34 on my list of beneficiaries from the US/Canada.
Kindly get back to me with your full address, and phone number, contact Email:
([email protected]) I just have 5 days to spend before I head to Asia
and Australia for other deliveries. Thank You. [...]
Content analysis details: (16.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(stevepark6[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(stevepark956[at]yahoo.com
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (stevepark6[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.4 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR OVERDUE PAYMENT OF $1.5 MELLION IS READY FOR DELIVERY:
I am Diplomat Steve Park, I just arrived at Miami International Airport
to deliver your ATM Card containing your overdue payment of $1.5 Million
dollars. You are number 34 on my list of beneficiaries from the
US/Canada. Kindly get back to me with your full address, and phone
number, contact Email: ( [email protected] ) I just have 5 days to
spend before I head to Asia and Australia for other deliveries. Thank
You.
Sincerely,
Steve Park.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces