[email protected] Mr.John Kess

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 21 Apr 2011 02:37:33 -0700
Received: from [190.6.205.3] (helo=mail.sulanet.hn)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QCqKK-0006l5-Ll
for ; Thu, 21 Apr 2011 02:37:33 -0700
Received-PRA: none (mail.sulanet.hn: domain of [email protected] does not designate permitted sender hosts)
Received-SPF: none (mail.sulanet.hn: domain of [email protected] does not designate permitted sender hosts)
Received: from (mail.sulanet.hn [190.6.205.3]) by webshield.sulanet.net with smtp
id 4971_fa82dcc6_6bfa_11e0_bce0_00188b3345cd;
Thu, 21 Apr 2011 03:37:30 -0600
MIME-version: 1.0
Content-type: multipart/alternative;
boundary="Boundary_(ID_EK84Oj8wlGMytZz4kx19HQ)"
Received: from sulanet.hn ([127.0.0.1])
by mail.sulanet.hn (Servidor ESMTP - SULANET)
with ESMTP id <[email protected]> for m;
Thu, 21 Apr 2011 03:37:24 -0600 (CST)
Received: from [190.6.205.3] by mail.sulanet.hn (mshttpd); Thu,
21 Apr 2011 10:37:23 +0100
From: Sicarga Sicarga <[email protected]>
Bcc:
Reply-to: [email protected]
Message-id: <[email protected]>
Date: Thu, 21 Apr 2011 10:37:23 +0100
X-Mailer: Servicio Http - SULANET
Content-language: en
X-Accept-Language: en
Priority: normal
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=10.1
X-Spam-Score: 101
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Sir/Madam, Are you in search of a loan? search no more and
contact Mr.John Kess via e-mail: [email protected] for a loan...
Sir/Madam, [...]
Content analysis details: (10.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[190.6.205.3 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[190.6.205.3 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4377]
1.8 MISSING_SUBJECT Missing Subject: header
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
X-Spam-Flag: YES

This is a multi-part message in MIME format.

--Boundary_(ID_EK84Oj8wlGMytZz4kx19HQ)
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: quoted-printable
Content-disposition: inline



Sir/Madam,

Are you in search of a loan? search no more and contact Mr.John Kess via e-mail: [email protected] for a loan...

The following e-mail addresses also belong to the same scammer:

[email protected] (John Berry)
[email protected] (Mario West)
[email protected] (Mark Dinta)
[email protected] (Mike Joseph)
[email protected] (Correy Vincent)

The following are if not aliases used by the same scammer, close associates of his:
[email protected] (Emma Terry)
[email protected] (Miss Violet)
[email protected] (Eddy Kind)

He asks for payments to be made to Anuge Imonmion at Rohit House, Abuja, Nigeria.
In the past he has also used the name Morgan Lam.