From: “ROBIN WHITE & CO. CHAMBERS”<email@example.com>
Subject: WAITING FOR YOUR CANDID RESPONSE
Date: Tue, 29 Jan 2013 17:43:37 +0100
This is a multi-part message in MIME format.
Content-Type: text/plain; charset=iso-8859-1
Spam detection software, running on the system “roughcloud.amerinoc.com”, has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn’t spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ROBIN WHITE & CO. CHAMBERS (Legal practitioners, Will, Finance
& Probate Solicitor) Campden Hill House, 192-196 Campden Hill Road, London
W8 7TH. [...]
Content analysis details: (56.5 points, 5.0 required)
pts rule name description
—- ———————- ————————————————–
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
2.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
2.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
1.2 MISSING_HEADERS Missing To: header
2.5 MILLION_USD BODY: Talks about millions of dollars
1.6 HK_SCAM_N3 BODY: HK_SCAM_N3
2.8 HK_SCAM_N2 BODY: HK_SCAM_N2
2.6 DEAR_FRIEND BODY: Dear Friend? That’s not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.3 FSL_UA FSL_UA
0.6 FORGED_OUTLOOK_TAGS Outlook can’t send HTML in this format
0.1 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge… sums of money
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FROM_MISSP_NO_TO From misspaced, To missing
1.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 FORGED_OUTLOOK_HTML Outlook can’t send HTML message only
1.7 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 DECEASED_NO_ML Dead not via mailing list
3.4 RISK_FREE No risk!
3.6 FROM_MISSPACED From: missing whitespace
2.4 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.6 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.6 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.5 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
0.6 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.2 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.7 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
1.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.3 ADVANCE_FEE_5_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.1 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.6 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
1.7 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.4 FORM_FRAUD_3 Fill a form and several fraud phrases
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Received: from [220.127.116.11] (helo=User)
by roughcloud.amerinoc.com with esmtpa (Exim 4.80.1)
id 1U0EHi-003zPe-0K; Tue, 29 Jan 2013 08:44:03 -0800
From: “ROBIN WHITE & CO. CHAMBERS”
Subject: WAITING FOR YOUR CANDID RESPONSE
Date: Tue, 29 Jan 2013 17:43:37 +0100
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
ROBIN WHITE & CO. CHAMBERS
(Legal practitioners, Will, Finance & Probate Solicitor)
Campden Hill House, 192-196 Campden Hill Road, London W8 7TH.
Phone Number: +44 702-403-9852 Or +44 702-403-1718
I am Barrister Robin White, a Legal practitioner here in London and I wish to solicit your assistance in a deal that involves reasonable amount of money. This deal by virtue of its nature must be utterly confidential and top secret. Though I know that transaction of this magnitude will make any one apprehensive and worried, but I am assuring you that this will be done under a legitimate arrangement that will protect both of us from any breach of the law.
Like I stated above, I am a Legal practitioner here in London and I came to know you in my private search for a reliable and reputable Business Person/individual that can handle this confidential deal with me, which requires maximum confidence and trust from both sides.
I had a client by name Mr. Paul Louis Halley who was one of the richest man in France but does most of his business in London. He was into several business before his umtimely death by air crash. This website will give you comprehensive picture of what I am talking about ( http://newswww.bbc.net.uk/2/hi/uk_news/england/oxfordshire/4537663.stm ). My client who died along with his lovely wife deposited the Sum of $31.7 Million (Thirty One million, Seven Hundred Thousand United States Dollars Only) with a bank here in London.
During the bank audit exercise, the bank discovered my late client’s deposit as an unclaimed credit balance, hence issued me a notice to provide any relatives of my client otherwise they will have the account closed and the fund confiscated. I have made several inquiries to his high commission to locate my client’s extended relatives, but all my efforts proved abortive, I then decided to trace his relatives or family member over the internet, and hence I found you as my instinct convinces me that you will be a trustworthy and honest business partner and I decided to contact you to assist me in repatriating my late client’s deposit before it got confiscated or declared unserviceable by the Financial institution where the fund is lodged.
I now seek your permission to present you as my deceased client relative and have you stand as the Next of Kin to my deceased client so that the funds of $31.7 Million (Thirty One million, Seven Hundred Thousand United States Dollars Only ) can be released and paid into your account as the beneficiary and next of kin.
I will provide all necessary legal documents that can be used to back up your claim. Please get in touch with me immediately if you are interested to assist me and send to me your contact address, and direct telephone number, then I will commence work in your name. Be informed that this transaction is risk free otherwise my chambers will not contact you because it is against our ethics. Please acknowledge receipt of this message in acceptance of our mutual business endeavor by furnishing me with the followings;
1. YOUR FULL NAME
2) YOUR CONTACT ADDRESS
3) DIRECT TELEPHONE AND FAX NUMBERS
6) MARITAL STATUS
These requirements will enable us file letters of claim to the appropriate departments for necessary approvals in your favor. Call me as soon as you receive this message for further clarification.
Looking forward to your prompt response.
BARR. ROBIN WHITE (Esq).
Phone Number: +44 702-403-9852
Or +44 702-403-1718