Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
by Reportandie Thu Feb 07, 2013 5:53 am
Delivered-To: [my.redacted.address]
Received: by 10.194.23.98 with SMTP id l2csp131890wjf;
Wed, 30 Jan 2013 08:07:43 -0800 (PST)
X-Received: by 10.236.156.197 with SMTP id m45mr6330803yhk.60.1359562062303;
Wed, 30 Jan 2013 08:07:42 -0800 (PST)
Return-Path: <[email protected]>
Received: from linux.acotec.com.br (linux.acotec.com.br. [200.205.89.106])
by mx.google.com with ESMTP id v44si1742572yhd.88.2013.01.30.08.07.41;
Wed, 30 Jan 2013 08:07:42 -0800 (PST)
Received-SPF: neutral (google.com: 200.205.89.106 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip0.205.89.106;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 200.205.89.106 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by linux.acotec.com.br (Postfix, from userid 105)
id 4EA6D1995AF; Wed, 30 Jan 2013 13:55:05 -0200 (BRST)
Received: from localhost by linux.acotec.com.br
with SpamAssassin (version 3.2.5);
Wed, 30 Jan 2013 13:55:05 -0200
From: "Dr. Sanusi Lamido"<[email protected]>
To: [redacted]
Subject: [SPAM] OFFICIAL LETTER FROM CBN DATED 01/30/2013...(CONTACT THR PAYING BANK)
Date: Wed, 30 Jan 2013 16:00:36 -0000
Message-Id: <[email protected]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on linux.acotec.com.br
X-Spam-Level: *****************
X-Spam-Status: Yes, score=17.6 required=6.0 tests=ADVANCE_FEE_2,ADVANCE_FEE_3,
ALL_TRUSTED,AWL,BAYES_99,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,
FORGED_OUTLOOK_TAGS,FORGED_YAHOO_RCVD,HTML_MESSAGE,MIME_HTML_ONLY,
MSOE_MID_WRONG_CASE,PYZOR_CHECK,SUBJ_ALL_CAPS autolearn=spam version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_51094259.B2E5B315"

Spam detection software, running on the system "linux.acotec.com.br", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: FROM THE DESK OF: DR. SANUSI LAMIDO GOVERNOR CENTRAL BANK
OF NIGERIA CBN COMPLEX, GARIKI ABUJA , NIGERIA [...]

Content analysis details: (17.6 points, 6.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-1.8 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
2.1 SUBJ_ALL_CAPS Subject is all capitals
2.3 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
3.7 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
-0.3 AWL AWL: From: address is in the auto white-list

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
noname.eml noname.eml
4K View Download
Advertisement

by Reportandie Thu Feb 21, 2013 9:49 pm
[email protected] bad 554 delivery error: dd Sorry your message to [email protected] cannot be delivered. Disabled

Who is online

Users browsing this forum: ClaudeBot and 20 guests