#120273 by buried under 419s
Sat Aug 18, 2012 7:27 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 18 Aug 2012 12:35:50 -0700
Received: from [202.105.135.155] (port=33964 helo=ex-server.cpm.gd.cn)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T2onn-0004SE-NC
for ; Sat, 18 Aug 2012 12:35:50 -0700
Received: from User ([75.148.178.179]) by ex-server.cpm.gd.cn with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 19 Aug 2012 03:33:19 +0800
Reply-To: <[email protected]>
From: "US ARMY IN NEED"<[email protected]>
Date: Sat, 18 Aug 2012 14:33:35 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0065_01C2A9A6.024C4800"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 18 Aug 2012 19:33:45.0542 (UTC) FILETIME=[61E2E660:01CD7D78]
X-Spam-Status: Yes, score=15.5
X-Spam-Score: 155
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Kindly check the attachment for more details. [...]
Content analysis details: (15.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[202.105.135.155 listed in bb.barracudacentral.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<mil.camp.afghan231[at]aol.com>
)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
0.0 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
0.0 OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** I have a kind proposition for you..**08/17/2012**
This is a multi-part message in MIME format.
------=_NextPart_000_0065_01C2A9A6.024C4800
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Kindly check the attachment for more details.
Hi,I am Cpt.Joe Hall an officer of the U.S Army, and I have some items I will need to ship to you.Can you be trusted to handle some serious and confidential transactions?I am willing to share more information about this project with you,Please contact me asap.
Cpt.Hall
Envelope-to:
Delivery-date: Sat, 18 Aug 2012 12:35:50 -0700
Received: from [202.105.135.155] (port=33964 helo=ex-server.cpm.gd.cn)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T2onn-0004SE-NC
for ; Sat, 18 Aug 2012 12:35:50 -0700
Received: from User ([75.148.178.179]) by ex-server.cpm.gd.cn with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 19 Aug 2012 03:33:19 +0800
Reply-To: <[email protected]>
From: "US ARMY IN NEED"<[email protected]>
Date: Sat, 18 Aug 2012 14:33:35 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0065_01C2A9A6.024C4800"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 18 Aug 2012 19:33:45.0542 (UTC) FILETIME=[61E2E660:01CD7D78]
X-Spam-Status: Yes, score=15.5
X-Spam-Score: 155
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Kindly check the attachment for more details. [...]
Content analysis details: (15.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[202.105.135.155 listed in bb.barracudacentral.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<mil.camp.afghan231[at]aol.com>
)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
0.0 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
0.0 OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** I have a kind proposition for you..**08/17/2012**
This is a multi-part message in MIME format.
------=_NextPart_000_0065_01C2A9A6.024C4800
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Kindly check the attachment for more details.
Hi,I am Cpt.Joe Hall an officer of the U.S Army, and I have some items I will need to ship to you.Can you be trusted to handle some serious and confidential transactions?I am willing to share more information about this project with you,Please contact me asap.
Cpt.Hall
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces