#141211 by Reportandie
Sat Dec 22, 2012 4:52 pm
Delivered-To: [my.redacted.address]
Received: by 10.194.23.98 with SMTP id l2csp31040wjf;
Thu, 20 Dec 2012 14:30:38 -0800 (PST)
X-Received: by 10.236.117.73 with SMTP id i49mr10802632yhh.26.1356042637998;
Thu, 20 Dec 2012 14:30:37 -0800 (PST)
Return-Path: <[email protected]>
Received: from roughcloud.amerinoc.com (roughcloud.amerinoc.com. [64.6.105.190])
by mx.google.com with ESMTPS id t29si4353153anh.108.2012.12.20.14.29.23
(version=TLSv1/SSLv3 cipher=OTHER);
Thu, 20 Dec 2012 14:30:37 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 64.6.105.190 as permitted sender) client-ip=64.6.105.190;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning [email protected] does not designate 64.6.105.190 as permitted sender) [email protected]
Received: from mail by roughcloud.amerinoc.com with spam-scanned (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1Tloc1-001FGV-NV; Thu, 20 Dec 2012 14:29:09 -0800
Received: from localhost by roughcloud.amerinoc.com
with SpamAssassin (version 3.3.2);
Thu, 20 Dec 2012 14:29:09 -0800
From: Andrew <[email protected]>
To: [redacted]
Subject: WRITE ME BACK
Date: Thu, 20 Dec 2012 22:23:27 +0000
Message-Id: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
roughcloud.amerinoc.com
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.3 required=5.0 tests=ADVANCE_FEE_2_NEW_FORM,
ADVANCE_FEE_3_NEW,ADVANCE_FEE_3_NEW_FORM,ADVANCE_FEE_4_NEW,
ADVANCE_FEE_4_NEW_FORM,ALL_TRUSTED,FILL_THIS_FORM,FILL_THIS_FORM_LONG,
FORM_FRAUD_3,FORM_FRAUD_5,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,
FREEMAIL_REPLYTO,SUBJ_ALL_CAPS shortcircuit=no autolearn=no version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_50D39135.630D0F01"
Spam detection software, running on the system "roughcloud.amerinoc.com
", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: -- RESOLUTION CABINET OF LAWYERS, WEST AFRICAN COMMITTEE OF
COMMERCE,ACCRA, GHANA. Hello HAVE YOU AT ANY TIME SENT MONEY TO ANYONE YOU
WERE NOT SUPPOSED TO? HAVE YOU EVER SENT MONEY TO ANYONE OUTSIDE YOUR COUNTRY
FOR ANY REASON? HAVE YOU AT ANY TIME SENT MONEY THROUGH A WIRE TRANSFER SERVICE
E.G MONEY GRAM OR WESTERN UNION? [...]
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(lxlw70[at]blumail.org
)
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (lxlw70[at]blumail.org
)
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.6 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.5 FILL_THIS_FORM_LONG Fill in a form with personal information
0.2 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.7 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.4 FORM_FRAUD_3 Fill a form and several fraud phrases
---------- Forwarded message ----------
From: Andrew <[email protected]>
To: <[email protected]>
Cc:
Date: Thu, 20 Dec 2012 22:23:27 +0000
Subject: WRITE ME BACK
--
RESOLUTION CABINET OF LAWYERS,
WEST AFRICAN COMMITTEE
OF COMMERCE,ACCRA,
GHANA.
Hello
HAVE YOU AT ANY TIME SENT MONEY TO ANYONE YOU WERE NOT SUPPOSED TO?
HAVE YOU EVER SENT MONEY TO ANYONE OUTSIDE YOUR COUNTRY FOR ANY REASON?
HAVE YOU AT ANY TIME SENT MONEY THROUGH A WIRE TRANSFER SERVICE E.G MONEY GRAM OR WESTERN UNION?
Ghana Police Force apprehended a criminal with a large sum of money in his possession and our government intends compensating his victims with the funds confiscated from him,and i have been mandated as the legal solicitor for the process.You are receiving this notice because we have a solution to solve your problem without stress on your part,As the head of the committee stated above i am contacting you because we found your email address associated to a link of the criminal.
You may not know the true identity of the criminal as Richard Martin but,investigations proves various identities from Europe,Africa,Australia,Asia and America were used to perpetrate his evil with female culprits involved,demanding for fees such as fees required to ship packages,fees required for documents,fees required for keys and fees demanded as Bank charge for wire transfers,if you have in anyway been a victim of the above mentioned circumstance we need your contact details such as
Name:
Phone:
Address:
Occupation and Gender sent to [email protected]
Most important a brief explanation on what exactly happened is needed to authenticate what we know.
Regards,
Barr.Daniels Andrew.
+233248452097
This e-mail communication and accompanying documents are intended only for the individual or entity to which it is addressed and may contain informations that are confidential, privileged or exempt from disclosure under applicable law. Any use of this information by individuals or entities other than the intended recipient is strictly prohibited. If you have received this communication in error, please notify me immediately and delete.
Received: by 10.194.23.98 with SMTP id l2csp31040wjf;
Thu, 20 Dec 2012 14:30:38 -0800 (PST)
X-Received: by 10.236.117.73 with SMTP id i49mr10802632yhh.26.1356042637998;
Thu, 20 Dec 2012 14:30:37 -0800 (PST)
Return-Path: <[email protected]>
Received: from roughcloud.amerinoc.com (roughcloud.amerinoc.com. [64.6.105.190])
by mx.google.com with ESMTPS id t29si4353153anh.108.2012.12.20.14.29.23
(version=TLSv1/SSLv3 cipher=OTHER);
Thu, 20 Dec 2012 14:30:37 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 64.6.105.190 as permitted sender) client-ip=64.6.105.190;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning [email protected] does not designate 64.6.105.190 as permitted sender) [email protected]
Received: from mail by roughcloud.amerinoc.com with spam-scanned (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1Tloc1-001FGV-NV; Thu, 20 Dec 2012 14:29:09 -0800
Received: from localhost by roughcloud.amerinoc.com
with SpamAssassin (version 3.3.2);
Thu, 20 Dec 2012 14:29:09 -0800
From: Andrew <[email protected]>
To: [redacted]
Subject: WRITE ME BACK
Date: Thu, 20 Dec 2012 22:23:27 +0000
Message-Id: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
roughcloud.amerinoc.com
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.3 required=5.0 tests=ADVANCE_FEE_2_NEW_FORM,
ADVANCE_FEE_3_NEW,ADVANCE_FEE_3_NEW_FORM,ADVANCE_FEE_4_NEW,
ADVANCE_FEE_4_NEW_FORM,ALL_TRUSTED,FILL_THIS_FORM,FILL_THIS_FORM_LONG,
FORM_FRAUD_3,FORM_FRAUD_5,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,
FREEMAIL_REPLYTO,SUBJ_ALL_CAPS shortcircuit=no autolearn=no version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_50D39135.630D0F01"
Spam detection software, running on the system "roughcloud.amerinoc.com
", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: -- RESOLUTION CABINET OF LAWYERS, WEST AFRICAN COMMITTEE OF
COMMERCE,ACCRA, GHANA. Hello HAVE YOU AT ANY TIME SENT MONEY TO ANYONE YOU
WERE NOT SUPPOSED TO? HAVE YOU EVER SENT MONEY TO ANYONE OUTSIDE YOUR COUNTRY
FOR ANY REASON? HAVE YOU AT ANY TIME SENT MONEY THROUGH A WIRE TRANSFER SERVICE
E.G MONEY GRAM OR WESTERN UNION? [...]
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(lxlw70[at]blumail.org
)
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (lxlw70[at]blumail.org
)
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.6 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.5 FILL_THIS_FORM_LONG Fill in a form with personal information
0.2 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.7 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.4 FORM_FRAUD_3 Fill a form and several fraud phrases
---------- Forwarded message ----------
From: Andrew <[email protected]>
To: <[email protected]>
Cc:
Date: Thu, 20 Dec 2012 22:23:27 +0000
Subject: WRITE ME BACK
--
RESOLUTION CABINET OF LAWYERS,
WEST AFRICAN COMMITTEE
OF COMMERCE,ACCRA,
GHANA.
Hello
HAVE YOU AT ANY TIME SENT MONEY TO ANYONE YOU WERE NOT SUPPOSED TO?
HAVE YOU EVER SENT MONEY TO ANYONE OUTSIDE YOUR COUNTRY FOR ANY REASON?
HAVE YOU AT ANY TIME SENT MONEY THROUGH A WIRE TRANSFER SERVICE E.G MONEY GRAM OR WESTERN UNION?
Ghana Police Force apprehended a criminal with a large sum of money in his possession and our government intends compensating his victims with the funds confiscated from him,and i have been mandated as the legal solicitor for the process.You are receiving this notice because we have a solution to solve your problem without stress on your part,As the head of the committee stated above i am contacting you because we found your email address associated to a link of the criminal.
You may not know the true identity of the criminal as Richard Martin but,investigations proves various identities from Europe,Africa,Australia,Asia and America were used to perpetrate his evil with female culprits involved,demanding for fees such as fees required to ship packages,fees required for documents,fees required for keys and fees demanded as Bank charge for wire transfers,if you have in anyway been a victim of the above mentioned circumstance we need your contact details such as
Name:
Phone:
Address:
Occupation and Gender sent to [email protected]
Most important a brief explanation on what exactly happened is needed to authenticate what we know.
Regards,
Barr.Daniels Andrew.
+233248452097
This e-mail communication and accompanying documents are intended only for the individual or entity to which it is addressed and may contain informations that are confidential, privileged or exempt from disclosure under applicable law. Any use of this information by individuals or entities other than the intended recipient is strictly prohibited. If you have received this communication in error, please notify me immediately and delete.