[email protected] Lawrence Nnamdi

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 20 Jul 2013 10:00:21 -0700
Received: from smtp1web.tin.it ([212.216.176.195]:48314)
with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1V0aW4-0001a8-1o
; Sat, 20 Jul 2013 10:00:21 -0700
Received: from feu3 (10.192.64.13) by smtp1web.tin.it (8.6.060.26)
id 51DD363500DEA1B7; Sat, 20 Jul 2013 18:59:46 +0200
Received: from (119.167.231.73) by webmailvtin.alice.it; Sat, 20 Jul 2013 18:59:46 +0200
Message-ID: <[email protected]>
Date: Sat, 20 Jul 2013 18:59:46 +0200 (CEST)
From: "Mr, Lawrence Nnamdi" <[email protected]>
Reply-To: [email protected]
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_75140_17592327.1374339586431"
X-Originating-IP: 119.167.231.73
X-Spam-Status: Yes, score=7.7
X-Spam-Score: 77
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hello we have deposited your $6.5M usd to the Western Union
Office to be transferring to you $5,000 usd per daily contact the Western
Union with bellow information and give them your information, Full Beneficiary
name======== Country and Address============== Tel phone============ [...]


Content analysis details: (7.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(umberto.sorrentino[at]tin.it)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[212.216.176.195 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(western_u85[at]yahoo.com
)
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** the western union information to you as

------=_Part_75140_17592327.1374339586431
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

Hello we have deposited your $6.5M usd to the Western Union Office to
be transferring to you $5,000 usd per daily contact the Western Union
with bellow information and give them your information,

Full Beneficiary name========
Country and Address==============
Tel phone============

Contact:Mr.CHRIS PATRICK
Email ( [email protected] )
Phone +229 66873450

Regards
Lawrence Nnamdi