Eric Yeboah <[email protected]>

Header Analysis Quick Report<br>Originating IP: 199.204.253.212<br>Originating ISP: Jumpline<br> City: Columbus<br>Country of Origin: United States<br>* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.70.126.40 with SMTP id mv8csp38303pdb;
Sun, 19 Jan 2014 22:42:05 -0800 (PST)
X-Received: by 10.50.73.231 with SMTP id o7mr10785379igv.8.1390200124849;
Sun, 19 Jan 2014 22:42:04 -0800 (PST)
Return-Path: <[email protected]>
Received: from r8-chicago.webserversystems.com (r8-chicago.webserversystems.com. [184.154.1.124])
by mx.google.com with ESMTPS id lo5si43693icc.149.2014.01.19.22.42.04
for <snipped>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Sun, 19 Jan 2014 22:42:04 -0800 (PST)
Received-SPF: neutral (google.com: 184.154.1.124 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=184.154.1.124;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 184.154.1.124 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from s212.n253.n204.n199.static.myhostcenter.com ([199.204.253.212]:53835 helo=freedomtrailed.com)
by r8-chicago.webserversystems.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1W58Yd-0007xq-Kn
for <snipped>; Mon, 20 Jan 2014 00:42:04 -0600
Received: from localhost ([127.0.0.1] helo=cpanel07.myhostcenter.com)
by cpanel07.myhostcenter.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1W58TN-000C8D-JA; Mon, 20 Jan 2014 01:36:37 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Mon, 20 Jan 2014 01:36:37 -0500
From: Eric Yeboah <[email protected]>
To: undisclosed-recipients:;
Reply-To: <[email protected]>
Mail-Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/0.6
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cpanel07.myhostcenter.com
X-AntiAbuse: Original Domain - scamwarners.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - freedomtrailed.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=10.3
X-Spam-Score: 103
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "r8-chicago.webserversystems.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Dear Sir, I have a principal, an ex Minister and a top government
official before the collapse of Ex President Laurent Gbagbo regime which
took place on April 2011 when he was arrested in Cote d' Ivoire. The man is
now residing in Accra Ghana with his family as a refugee and he is currently
seeking for an overseas confidentiality partner to facilitate the movement/
transfer of a considerable amount of money which he deposited here in Ghana
to be invested in the overseas partner's country or business. [...]

Content analysis details: (10.3 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?199.204.253.212>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<info.yeboah014[at]yahoo.fr>
)
1.1 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** Investment Proposal!!
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - r8-chicago.webserversystems.com
X-AntiAbuse: Original Domain - <snipped>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - freedomtrailed.com
X-Get-Message-Sender-Via: r8-chicago.webserversystems.com: none
X-Source:
X-Source-Args:
X-Source-Dir:

Dear Sir,

I have a principal, an ex Minister and a top government official before the collapse of Ex President Laurent Gbagbo regime which took place on April 2011 when he was arrested in Cote d' Ivoire. The man is now residing in Accra Ghana with his family as a refugee and he is currently seeking for an overseas confidentiality partner to facilitate the movement/ transfer of a considerable amount of money which he deposited here in Ghana to be invested in the overseas partner's country or business.

The funds are of clean and legitimate origin, earned from private commission from contracts, royalties and exploration rights.

Contact me for more details if you can be of any help.

Thanks


Eric Yeboah