by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 04 Apr 2013 06:33:45 -0700
Received: from smtp301.alice.it ([82.57.200.117]:40825)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1UNkIQ-0005Zh-Ox
for ; Thu, 04 Apr 2013 06:33:45 -0700
Received: from feu9-alice (82.57.204.64) by smtp301.alice.it (8.6.058.01)
id 50AA5364090C7EC0; Thu, 4 Apr 2013 15:31:53 +0200
Received: from (41.79.217.117) by alicemail.rossoalice.alice.it; Thu, 4 Apr 2013 15:31:53 +0200
Message-ID: <[email protected]>
Date: Thu, 4 Apr 2013 15:31:53 +0200 (CEST)
From: "RON HEWITT." <[email protected]>
Reply-To: [email protected]
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_15019_2926741.1365082313419"
X-Originating-IP: 41.79.217.117
X-Spam-Status: Yes, score=16.3
X-Spam-Score: 163
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I have registered the ATM MASTER CARD with DHL COMPANY this
morning as we agreed and the delivery will take off tomorrow morning based
on my agreement with DHL Director SIR MARK UBA phone: +22995637019. MOST
IMPORTANT: reconfirm your Full Name, home address and your phone number(s)
to him then contact him via the following email: {[email protected]}
I will not be reached till June 20th, 2013. Your amount in the Card is US$3.5Million
and the Pincode of your ATM CARD is: {0609} [...]
Content analysis details: (16.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(fedekoky[at]alice.it)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[82.57.200.117 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dhlshippingcompany1[at]yahoo.co.jp
)
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4989]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.1 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
4.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Beneficiary, Your Atm Card
------=_Part_15019_2926741.1365082313419
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
I have registered the ATM MASTER CARD with DHL COMPANY this morning as we agreed and the delivery will take off tomorrow morning based on my agreement with DHL Director SIR MARK UBA phone: +22995637019. MOST IMPORTANT: reconfirm your Full Name, home address and your phone number(s) to him then contact him via the following email: { [email protected] } I will not be reached till June 20th, 2013. Your amount in the Card is US$3.5Million and the Pincode of your ATM CARD is: {0609}
Thanks
Ron Hewitt
Envelope-to:
Delivery-date: Thu, 04 Apr 2013 06:33:45 -0700
Received: from smtp301.alice.it ([82.57.200.117]:40825)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1UNkIQ-0005Zh-Ox
for ; Thu, 04 Apr 2013 06:33:45 -0700
Received: from feu9-alice (82.57.204.64) by smtp301.alice.it (8.6.058.01)
id 50AA5364090C7EC0; Thu, 4 Apr 2013 15:31:53 +0200
Received: from (41.79.217.117) by alicemail.rossoalice.alice.it; Thu, 4 Apr 2013 15:31:53 +0200
Message-ID: <[email protected]>
Date: Thu, 4 Apr 2013 15:31:53 +0200 (CEST)
From: "RON HEWITT." <[email protected]>
Reply-To: [email protected]
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_15019_2926741.1365082313419"
X-Originating-IP: 41.79.217.117
X-Spam-Status: Yes, score=16.3
X-Spam-Score: 163
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I have registered the ATM MASTER CARD with DHL COMPANY this
morning as we agreed and the delivery will take off tomorrow morning based
on my agreement with DHL Director SIR MARK UBA phone: +22995637019. MOST
IMPORTANT: reconfirm your Full Name, home address and your phone number(s)
to him then contact him via the following email: {[email protected]}
I will not be reached till June 20th, 2013. Your amount in the Card is US$3.5Million
and the Pincode of your ATM CARD is: {0609} [...]
Content analysis details: (16.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(fedekoky[at]alice.it)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[82.57.200.117 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dhlshippingcompany1[at]yahoo.co.jp
)
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4989]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.1 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
4.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Beneficiary, Your Atm Card
------=_Part_15019_2926741.1365082313419
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
I have registered the ATM MASTER CARD with DHL COMPANY this morning as we agreed and the delivery will take off tomorrow morning based on my agreement with DHL Director SIR MARK UBA phone: +22995637019. MOST IMPORTANT: reconfirm your Full Name, home address and your phone number(s) to him then contact him via the following email: { [email protected] } I will not be reached till June 20th, 2013. Your amount in the Card is US$3.5Million and the Pincode of your ATM CARD is: {0609}
Thanks
Ron Hewitt
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
