[email protected] Mr. Adam Smith

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 06 Apr 2014 17:32:29 -0700
Received: from smtp3web.tin.it ([212.216.176.237]:48069)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1WWxU9-0005Be-4J
for ; Sun, 06 Apr 2014 17:32:29 -0700
Received: from feu12 (10.192.64.22) by smtp3web.tin.it (8.6.060.28)
id 51F13D0106BCE530; Mon, 7 Apr 2014 02:31:24 +0200
Received: from (46.108.108.240) by webmailvtin.alice.it; Mon, 7 Apr 2014 02:31:24 +0200
Message-ID: <[email protected]>
Date: Mon, 7 Apr 2014 02:31:24 +0200 (CEST)
From: "Mr. Adam Smith" <[email protected]>
Reply-To: [email protected]
Subject: Good News
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_25964_22713843.1396830684666"
X-Originating-IP: 46.108.108.240
X-Spam-Status: No, score=6.3
X-Spam-Score: 63
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Good News Finally, united Nation has given instructions to
the CEO BANK to release your Inheritance fund to you via ATM card, which
contents sum of($4.8USD)has been approved by the F.S.A directors of UNITED
BANK, Note that the shipment of your ATM CARD will be taken care of by the
UNITED BANK FOR AFRICA, so you will not have to pay, [...]

Content analysis details: (6.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gmavit[at]tin.it)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[212.216.176.237 listed in list.dnswl.org]
1.9 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
[46.108.108.240 listed in dnsbl.sorbs.net]
0.0 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4999]
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: NO

------=_Part_25964_22713843.1396830684666
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Good News
Finally, united Nation has given instructions to the CEO BANK to release your Inheritance fund to you via ATM card, which contents sum of($4.8USD)has been approved by the F.S.A directors of UNITED BANK, Note that the shipment of your ATM CARD will be taken care of by the UNITED BANK FOR AFRICA,
so you will not have to pay,

Furthermore our attorney will go to the inland revenue tax office to obtain a
letter of administration tax clearance approval on your behalf from high Court.
Fill in the required blanket bellow with your current information to avoid
wrong transfer.
Your name:.............
Your current address:.............
Your Age:....................
Direct phone number:........
Please we required it very urgent and correct.

Contact [email protected]
Tel:+229 68623482
Best Regard
Mr. Adam Smith

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 21 Apr 2014 13:41:20 -0700
Received: from smtp1web.tin.it ([212.216.176.195]:52291)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1WcL1f-0006lc-OR
for ; Mon, 21 Apr 2014 13:41:20 -0700
Received: from feu20 (10.192.64.30) by smtp1web.tin.it (8.6.060.28)
id 51F13BA908C20832; Mon, 21 Apr 2014 22:40:23 +0200
Received: from (194.44.203.73) by webmailcommunicator.alice.it; Mon, 21 Apr 2014 22:40:23 +0200
Message-ID: <[email protected]>
Date: Mon, 21 Apr 2014 22:40:23 +0200 (CEST)
From: "Mr. David White" <[email protected]>
Reply-To: [email protected]
Subject: Attention!!!
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 194.44.203.73
X-Spam-Status: No, score=6.3
X-Spam-Score: 63
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Attention!!! We stopped sending your money since 2013 because
of spam emails you were receiving from people that claim to be western union.
We were confused about this so we have tried and have arrested some of them.
[...]

Content analysis details: (6.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(shuroz[at]tin.it)
0.0 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[194.44.203.73 listed in dnsbl.sorbs.net]
1.9 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[212.216.176.195 listed in list.dnswl.org]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4999]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO

Attention!!!
We stopped sending your money since 2013 because of spam emails you
were receiving from people that claim to be western union. We were
confused about this so we have tried and have arrested some of them.

Now the situation has cooled down and we have started sending money to
the whole people concerned. The new arrangement is that what you will
receive everyday is $4,500.00 and what you will pay everyday to receive
this fund is $55 everyday, but this is the begining so you can go
ahead and pay whatever you have at hand to receive it so that when you
receive the first payment you will be able to pay $55 everyday. Your
first payment has already been sent, this is the MTCN;6075130869 track
it, but you cannot pick it till you send any amount as I told you.
I wait to hear from you immediately because it is very urgent.

Email:
Best Regard’s,
Mr. David White