by Reportandie
Sun May 05, 2013 2:07 am
Delivered-To: [my.redacted.address]
Received: by 10.64.18.17 with SMTP id s17csp58870ied;
Sat, 27 Apr 2013 07:22:54 -0700 (PDT)
X-Received: by 10.194.3.14 with SMTP id 14mr83265150wjy.2.1367072574040;
Sat, 27 Apr 2013 07:22:54 -0700 (PDT)
Return-Path: <[email protected]>
Received: from alfa.infoexpress.pl (alfa.infoexpress.pl. [213.25.185.5])
by mx.google.com with ESMTPS id t4si22677603eeg.230.2013.04.27.07.22.45
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 27 Apr 2013 07:22:54 -0700 (PDT)
Received-SPF: neutral (google.com: 213.25.185.5 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=213.25.185.5;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 213.25.185.5 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from [198.50.161.210] (helo=User)
by alfa.infoexpress.pl with esmtpa (Exim 4.71)
(envelope-from <[email protected]>)
id 1UW64f-00054j-Ff; Sat, 27 Apr 2013 16:26:02 +0200
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "FRB DIPLOMATIC DELIVERY"<[email protected]>
Subject: DELIVERY
Date: Sat, 27 Apr 2013 22:22:22 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 40.7
X-Spam_score_int: 407
X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "alfa.infoexpress.pl", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTN: BENEFICIARY, THE DIPLOMAT JUST ARRIVED BRISBANE,QUEENSLAND
WITH YOUR CONSIGNMENT WORTH $1.500,000 MILLION USD, GO NOW AND SEND $140
VIA WESTERN UNION MONEY TRANSFER AND GET BACK TO ME WITH THE INFORMATION'S
OF THE PAYMENT, THE DIPLOMAT IS NOW IN [...]
Content analysis details: (40.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.1 NSL_RCVD_HELO_USER Received from HELO User
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
1.0 MISSING_HEADERS Missing To: header
3.2 MILLION_USD BODY: Talks about millions of dollars
3.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
4.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
3.8 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
2.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
3.7 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
2.0 FROM_MISSPACED From: missing whitespace
0.4 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
ATTN: BENEFICIARY,
THE DIPLOMAT JUST ARRIVED BRISBANE,QUEENSLAND WITH YOUR CONSIGNMENT WORTH $1.500,000 MILLION USD, GO NOW AND SEND $140 VIA
WESTERN UNION MONEY TRANSFER AND GET BACK TO ME WITH THE INFORMATION'S OF THE PAYMENT, THE DIPLOMAT IS NOW IN
BRISBANE,QUEENSLAND, CALL THE DIPLOMAT NOW: +61739111354 I NEED YOU TO DO THIS AS QUICKLY AS POSSIBLE. BELOW ARE THE WESTERN
UNION DETAILS BELOW:
WESTERN UNION DETAILS BELOW:
NAME: GARLAND LARSON
STREET ADDRESS1: 923 G STREET
CITY/TOWN: RUPERT
STATE/PROVINCE/REGION: ID
POST CODE: 83350
COUNTRY: UNITED STATES
TEXT QUESTION: WHAT FOR.
TEXT ANSWER: DELIVERY.
SEND INFORMATION'S OF THE PAYMENT AS SOON AS YOU SEND THE MONEY. THE DIPLOMAT WILL BE ON HIS WAY TO YOUR HOME ADDRESS AT YOUR
DOORSTEP TODAY.
CALL THE DIPLOMAT ON HIS TELEPHONE NUMBER: +61739111354
DIPLOMAT JERRY WHITE.
+61739111354 (Australia)
Received: by 10.64.18.17 with SMTP id s17csp58870ied;
Sat, 27 Apr 2013 07:22:54 -0700 (PDT)
X-Received: by 10.194.3.14 with SMTP id 14mr83265150wjy.2.1367072574040;
Sat, 27 Apr 2013 07:22:54 -0700 (PDT)
Return-Path: <[email protected]>
Received: from alfa.infoexpress.pl (alfa.infoexpress.pl. [213.25.185.5])
by mx.google.com with ESMTPS id t4si22677603eeg.230.2013.04.27.07.22.45
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sat, 27 Apr 2013 07:22:54 -0700 (PDT)
Received-SPF: neutral (google.com: 213.25.185.5 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=213.25.185.5;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 213.25.185.5 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from [198.50.161.210] (helo=User)
by alfa.infoexpress.pl with esmtpa (Exim 4.71)
(envelope-from <[email protected]>)
id 1UW64f-00054j-Ff; Sat, 27 Apr 2013 16:26:02 +0200
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "FRB DIPLOMATIC DELIVERY"<[email protected]>
Subject: DELIVERY
Date: Sat, 27 Apr 2013 22:22:22 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 40.7
X-Spam_score_int: 407
X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "alfa.infoexpress.pl", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTN: BENEFICIARY, THE DIPLOMAT JUST ARRIVED BRISBANE,QUEENSLAND
WITH YOUR CONSIGNMENT WORTH $1.500,000 MILLION USD, GO NOW AND SEND $140
VIA WESTERN UNION MONEY TRANSFER AND GET BACK TO ME WITH THE INFORMATION'S
OF THE PAYMENT, THE DIPLOMAT IS NOW IN [...]
Content analysis details: (40.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.1 NSL_RCVD_HELO_USER Received from HELO User
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
1.0 MISSING_HEADERS Missing To: header
3.2 MILLION_USD BODY: Talks about millions of dollars
3.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
4.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
3.8 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
2.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
3.7 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
2.0 FROM_MISSPACED From: missing whitespace
0.4 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
ATTN: BENEFICIARY,
THE DIPLOMAT JUST ARRIVED BRISBANE,QUEENSLAND WITH YOUR CONSIGNMENT WORTH $1.500,000 MILLION USD, GO NOW AND SEND $140 VIA
WESTERN UNION MONEY TRANSFER AND GET BACK TO ME WITH THE INFORMATION'S OF THE PAYMENT, THE DIPLOMAT IS NOW IN
BRISBANE,QUEENSLAND, CALL THE DIPLOMAT NOW: +61739111354 I NEED YOU TO DO THIS AS QUICKLY AS POSSIBLE. BELOW ARE THE WESTERN
UNION DETAILS BELOW:
WESTERN UNION DETAILS BELOW:
NAME: GARLAND LARSON
STREET ADDRESS1: 923 G STREET
CITY/TOWN: RUPERT
STATE/PROVINCE/REGION: ID
POST CODE: 83350
COUNTRY: UNITED STATES
TEXT QUESTION: WHAT FOR.
TEXT ANSWER: DELIVERY.
SEND INFORMATION'S OF THE PAYMENT AS SOON AS YOU SEND THE MONEY. THE DIPLOMAT WILL BE ON HIS WAY TO YOUR HOME ADDRESS AT YOUR
DOORSTEP TODAY.
CALL THE DIPLOMAT ON HIS TELEPHONE NUMBER: +61739111354
DIPLOMAT JERRY WHITE.
+61739111354 (Australia)