Now this is interesting

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Sun Mar 01, 2009 7:18 am

Quote:

Spam detection software, running on the system "dns1.kca.org.tw", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: RE:TRANSFER OF 36,759,000.00 MILLION POUNDS TO YOUR
ACCOUNT Greetings, Dear [...]

Content analysis details: (10.6 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.2 SUBJ_ALL_CAPS Subject is all capitals
0.2 MISSING_HEADERS Missing To: header
0.3 URG_BIZ BODY: Contains urgent matter
0.0 UPPERCASE_25_50 message body is 25-50% uppercase
1.8 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
0.1 TO_CC_NONE No To: or Cc: header
3.0 ADVANCE_FEE_4 Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_1 Appears to be advance fee fraud (Nigerian 419)
0.6 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
3.4 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

-----Inline-meddelelse følger-----

RE:TRANSFER OF 36,759,000.00 MILLION POUNDS TO YOUR ACCOUNT

Greetings,

Dear

Permit me to inform you of my desire of going into business relationship with you. I Come across your profile and have Decided to get in touch with you after my prayer, to see if you can help me alliviate this problem. I can't imagine how you will feel receiving a sudden letter from a remote country far away and probably from someone you are not closely related with. But all the same, I believe we do not need to be of blood relatives before we can establish cordial relationship,thanks for your understanding.

My name is MR B3N3D1CT SM1TH, and I work in the International Operation Department in a Bank here in London.I feel quite safe dealing with you in this important business.

Though, this medium (Internet) has been greatly abused, I choose to reach you through it because it still remains the fastest medium of communication. However, this correspondence is unofficial and private, and it should be treated as such. At first I will like to assure you that this transaction is 100% risk and trouble free to both parties.

WE WANT TO TRANSFER OUT MONEY FROM OUR BANK HERE IN LONDON. THE FUND FOR TRANSFER IS OF CLEAN ORIGIN. THE OWNER OF THIS ACCOUNT IS A FOREIGNER, a program leader.Until his death,

The Late Prime Minister, Mr. Rafik Hariri, has a huge investment here in the United Kingdom and all over the world, as a matter of fact he has the sum of(THIRTY SIX MILLION SEVEN HUNDRED AND FIFTY NINE THOUSAND POUNDS STERLINGS) in his account here in London which he deposited as a family valuables. The family do not know about this deposit.I was on a routine inspection that I discovered a dormant domiciliary account with a BAL. Of (THIRTY SIX MILLION SEVEN HUNDRED AND FIFTY NINE THOUSAND POUNDS STERLINGS) on further discreet investigation, I also discovered that the account holder has passed away (dead) leaving no beneficiary to the account. The bank will approve this money to any foreigner because the former operator of the a/c is a foreigner. I am certainly sure that nobody will come again for the claim of this money.

A foreigner can only claim this money with legal claims to the account Holder, therefore I need your cooperation in this transaction. I will provide all necessary information needed in order to claim this money, Hoping in God that you will never let me down now and in future.o.k! Rafik Bahaa Edine Hariri (November 1, 1944 - February 14, 2005), married to Nazek Audi Hariri, was a Lebanese self-made billionaire and business tycoon, and was five times Prime Minister of Lebanon (1992-1998 and 2000-2004) before his last resignation from office on October 20, 2004. The late Rafik Hariri died on February 14, 2005 when explosives equivalent to around 300 kg of C4 were detonated as his motorcade drove past the Saint George Hotel in the Lebanese capital, for more information please log on to {http://en.wikipedia.org/wiki/Rafik_Hariri}
AND PRIVATE WEBSITE
http://www.rhariri.com/

I WANT TO TRANSFER THIS MONEY INTO A SAFE FOREIGN ACCOUNT ABROAD BUT I DON'T KNOW ANY FOREIGNER WHOM I CAN TRUST, I KNOW THAT THIS MESSAGE WILL COME TO YOU AS A SURPRISE AS WE DON'T KNOW OURSELVES BEFORE, BUT BE SURE THAT IT IS REAL AND A GENUINE BUSINESS. I CONTACT YOU BELIEVING THAT YOU WILL NOT LET ME DOWN ONCE THE FUND GOES INTO YOUR ACCOUNT.

PLEASE IF YOU ARE NOT INTERESTED INFORM ME THAT YOU ARE NOT INTERESTED SO THAT I CAN SOUGHT FOR ANOTHER ONE THANK YOU

I expect your urgent response including your addresses, your
telephone and fax number

let me here from you urgently via private email box mrbenedictsmith at @0L.com

Thanks for expected cooperation.

Best Regards,
MR. B3N3D1CT SM1TH.
RE:TRANSFER OF 36,759,000.00 MILLION POUNDS TO YOUR ACCOUNT

Greetings,

Dear

Permit me to inform you of my desire of going into business relationship with you. I Come across your profile and have Decided to get in touch with you after my prayer, to see if you can help me alliviate this problem. I can't imagine how you will feel receiving a sudden letter from a remote country far away and probably from someone you are not closely related with. But all the same, I believe we do not need to be of blood relatives before we can establish cordial relationship,thanks for your understanding.

My name is MR BENEDICT SMITH, and I work in the International Operation Department in a Bank here in London.I feel quite safe dealing with you in this important business.

Though, this medium (Internet) has been greatly abused, I choose to reach you through it because it still remains the fastest medium of communication. However, this correspondence is unofficial and private, and it should be treated as such. At first I will like to assure you that this transaction is 100% risk and trouble free to both parties.

WE WANT TO TRANSFER OUT MONEY FROM OUR BANK HERE IN LONDON. THE FUND FOR TRANSFER IS OF CLEAN ORIGIN. THE OWNER OF THIS ACCOUNT IS A FOREIGNER, a program leader.Until his death,

The Late Prime Minister, Mr. Rafik Hariri, has a huge investment here in the United Kingdom and all over the world, as a matter of fact he has the sum of(THIRTY SIX MILLION SEVEN HUNDRED AND FIFTY NINE THOUSAND POUNDS STERLINGS) in his account here in London which he deposited as a family valuables. The family do not know about this deposit.I was on a routine inspection that I discovered a dormant domiciliary account with a BAL. Of (THIRTY SIX MILLION SEVEN HUNDRED AND FIFTY NINE THOUSAND POUNDS STERLINGS) on further discreet investigation, I also discovered that the account holder has passed away (dead) leaving no beneficiary to the account. The bank will approve this money to any foreigner because the former operator of the a/c is a foreigner. I am certainly sure that nobody will come again for the claim of this money.

A foreigner can only claim this money with legal claims to the account Holder, therefore I need your cooperation in this transaction. I will provide all necessary information needed in order to claim this money, Hoping in God that you will never let me down now and in future.o.k! Rafik Bahaa Edine Hariri (November 1, 1944 - February 14, 2005), married to Nazek Audi Hariri, was a Lebanese self-made billionaire and business tycoon, and was five times Prime Minister of Lebanon (1992-1998 and 2000-2004) before his last resignation from office on October 20, 2004. The late Rafik Hariri died on February 14, 2005 when explosives equivalent to around 300 kg of C4 were detonated as his motorcade drove past the Saint George Hotel in the Lebanese capital, for more information please log on to {http://en.wikipedia.org/wiki/Rafik_Hariri}
AND PRIVATE WEBSITE
http://www.rhariri.com/

I WANT TO TRANSFER THIS MONEY INTO A SAFE FOREIGN ACCOUNT ABROAD BUT I DON'T KNOW ANY FOREIGNER WHOM I CAN TRUST, I KNOW THAT THIS MESSAGE WILL COME TO YOU AS A SURPRISE AS WE DON'T KNOW OURSELVES BEFORE, BUT BE SURE THAT IT IS REAL AND A GENUINE BUSINESS. I CONTACT YOU BELIEVING THAT YOU WILL NOT LET ME DOWN ONCE THE FUND GOES INTO YOUR ACCOUNT.

PLEASE IF YOU ARE NOT INTERESTED INFORM ME THAT YOU ARE NOT INTERESTED SO THAT I CAN SOUGHT FOR ANOTHER ONE THANK YOU

I expect your urgent response including your addresses, your
telephone and fax number

let me here from you urgently via private email box [email protected]

Thanks for expected cooperation.

Best Regards,
MR. BENEDICT SMITH.

Baiting Guru Joined: 31 Jan 2007 Posts: 12237

Looks like a typical spam filter to me, am I missing something?

Quote:

Content analysis details: (10.6 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.2 SUBJ_ALL_CAPS Subject is all capitals
0.2 MISSING_HEADERS Missing To: header
0.3 URG_BIZ BODY: Contains urgent matter
0.0 UPPERCASE_25_50 message body is 25-50% uppercase
1.8 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
0.1 TO_CC_NONE No To: or Cc: header
3.0 ADVANCE_FEE_4 Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_1 Appears to be advance fee fraud (Nigerian 419)
0.6 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
3.4 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Posted: Sun Mar 01, 2009 7:40 am

I already posted my copy of this in Surplus. Very Happy

Baiting Guru Joined: 31 Jan 2007 Posts: 12237

What makes it so interesting?

Posted: Sun Mar 01, 2009 7:45 am

I thought the scammer posted that trying to get you to think that he is trying to save you from spam or something.

Posted: Sun Mar 01, 2009 7:47 am

I believe that message is from gmail to indicate it may be a scam or spam email. Very Happy

Baiting Guru Joined: 31 Jan 2007 Posts: 12237

That was your ISP, or Email provider screening it for spam content, and it failed.

Quote:

Content analysis details: (10.6 points, 5.0 required)

Edit: It is past your bedtime Dora. Go to bed!

Posted: Sun Mar 01, 2009 7:54 am

Well then my ISP failed miserably too. But at least mine is a very fast ISP. Wink

And I am going to bed. And I hear mom calling you.

Baiting Guru Joined: 31 Jan 2007 Posts: 12237

Quote:

Content analysis details: (10.6 points, 5.0 required)

I meant that the content failed, the ISP or Email provider passed, it caught the content and identified it as spam/scam,

Posted: Sun Mar 01, 2009 8:06 am

Oh good. Thanks for clarifying that. I was preparing to send Comcast a nasty letter. Very Happy

Posted: Sun Mar 01, 2009 11:53 am

What makes it interesting to me is that assuming you're using gmail, some other hop in the chain spam filtered the post - you'd usually expect the last hop to do so thanks to the sheer volume of mail

Also that scoring algorithm was interesting in that it identified it several ways as 419 by reading if not comprehending the message body.

But I don't think this is a particularly dense lad trying to be clever, unless it is a daring double-bluff labelling his own format as 419 Wink