[email protected] Mr. James L. Williams

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 14 May 2012 10:12:19 -0700
Received: from ip245.net-a.elogic.it ([213.92.102.245]:57404 helo=houlin04.farm.elogic.it)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1STyog-0005Um-UF
for ; Mon, 14 May 2012 10:12:19 -0700
Received: from houlin04.farm.elogic.it (localhost [127.0.0.1])
by houlin04.farm.elogic.it (8.14.3/8.14.3/Debian-5+lenny1) with ESMTP id q4EHC9kW025261
for <>; Mon, 14 May 2012 19:12:11 +0200
Received: (from www-data@localhost)
by houlin04.farm.elogic.it (8.14.3/8.14.3/Submit) id q4EHC9NG025229;
Mon, 14 May 2012 19:12:09 +0200
Date: Mon, 14 May 2012 19:12:09 +0200
Message-Id: <[email protected]>
To:
From: "Mr. James L. Williams" <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=14.4
X-Spam-Score: 144
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hello, I have contacted you because I have sent you the first
transfer of $5000 from your winning funds total amount of $1.5Million USD.
Therefore you need to contact Western Union agent Mr. John Michael, to give
you the transfer payment information and Western Union MTCN immediately you
call or email him. [...]

Content analysis details: (14.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(c_peoplepc[at]yahoo.com)
1.2 RCVD_IN_NJABL_SPAM RBL: NJABL: sender is confirmed spam source
[213.92.102.245 listed in combined.njabl.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[213.92.102.245 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[213.92.102.245 listed in bb.barracudacentral.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4588]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT OF $5.000.00

Hello,

I have contacted you because I have sent you the first transfer of $5000 from your winning funds total amount of $1.5Million USD. Therefore you need to contact Western Union agent Mr. John Michael, to give you the transfer payment information and Western Union MTCN immediately you call or email him.

Western Union Agent: Mr. John Michael,
Email: [email protected]
Office#: +229 99476913

Please try to contact him immediately for him to furnish you with the WU MTCN information to you and remember to indicate the registration Code Number: EB-2237 to him, when contacting or calling him, He will be sending you $5000. 00 daily as per our board meeting discussion with him.

Do get in touch with me once you have gotten the transfer completely thank you.

Sincerely,
Mr. James L. Williams
IMF Managing Director
www.imf.com