Sample Adelphia Spam
Posted by Dave Yadallee on
From - Sun Jun 24 12:48:52 2007
X-Account-Key: account2
X-UIDL: *T""!C&N!!4$D"!f_*"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
Received: from doctor.nl2k.ab.ca
by doctor.nl2k.ab.ca (8.14.1/8.14.1) with ESMTP id l5OCewbM009466
for; Sun, 24 Jun 2007 06:41:03 -0600 (MDT)
Received: (from root@localhost)
by doctor.nl2k.ab.ca (8.14.1/8.14.1/Submit) id l5OCewbq009465
for dave@doctor.nl2k.ab.ca; Sun, 24 Jun 2007 06:40:58 -0600 (MDT)
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Sun, 24 Jun 2007 06:40:58 -0600
Resent-Message-ID: <20070624124058.GC2059@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from mta9.adelphia.net
by doctor.nl2k.ab.ca (8.14.1/8.14.1) with ESMTP id l5O1R5BC028048
for; Sat, 23 Jun 2007 19:27:19 -0600 (MDT)
X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org
Received: from web35 ([68.168.75.142]) by mta9.adelphia.net
(InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP
id <20070624012657.CXYZ6326.mta9.adelphia.net@web35>;
Sat, 23 Jun 2007 21:26:57 -0400
Message-ID: <248049.1182648417907.JavaMail.root@web35>
Date: Sat, 23 Jun 2007 18:26:57 -0700
From: "sgtjarvisreeves008@yahoo.com.cn"
Reply-To: sgtjarvisreeves008@yahoo.com.cn
Subject: {Spam?} HELLO!
X-Priority: 3 (Normal)
Sensitivity: Normal
X-NetKnow-InComing-4.61.3-1-MailScanner: Found to be clean, Found to be clean
X-NetKnow-InComing-4.61.3-1-MailScanner-SpamCheck: spam, SORBS-DNSBL,
SORBS-SPAM, RFC-IGNORANT-POSTMASTER, RFC-IGNORANT-ABUSE,
SpamAssassin (not cached, score=2.348, required 1,
BOTNET_SERVERWORDS 0.00, MISSING_HEADERS 1.58, RDNS_NONE 0.10,
URG_BIZ 0.67)
X-NetKnow-InComing-4.61.3-1-MailScanner-SpamScore: ss
X-Spam-Status: Yes, No
X-NetKnow-InComing-4.61.3-1-MailScanner-Information: Please contact the ISP for more information
X-NetKnow-InComing-4.61.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca
X-UIDL: *T""!C&N!!4$D"!f_*"!
X-Antivirus: AVG for E-mail 7.5.472 [269.9.6/862]
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=utf-8
--
Hello Pal,
I hope my email meets you well. I am in need of your assistance. My name is Sgt Jarvis Reeves. I am a military attache with the Engineering unit here in Ba'qubah Iraq for the united state, we have about $25 Million dollars that we want to move out of the country. My partners and I need a good partner someone we can trust to actualize this venture.The money is from oil proceeds and legal.But we are moving it through diplomatic means to your house directly or a safe and secured location of your choice using diplomatic courier services.But can we trust you? Once the funds get to you, you take your 40% out
and keep our own 60%. Your own part of this deal is to find a safe place where the funds can be sent to. Our own part is sending it to you. If you are interested I will furnish you with more details,Awaitingyoururgentresponse.sgtjarvisreeves008@yahoo.com.cn
Your Buddy. Sgt Jarvis Reeves
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.472 / Virus Database: 269.9.6/862 - Release Date: 6/22/2007 3:04 PM
FRom Our logs:
gzcat /var/log/maillog.0.gz | egrep 248049.1182648417907.JavaMail.root@web35
Jun 23 19:27:20 doctor sendmail[28047]: l5O1R5wK028047: from=, size=1506, class=0, nrcpts=1, msgid=<248049.1182648417907.JavaMail.root@web35>, proto=ESMTP, daemon=MTA, relay=mta9.adelphia.net [68.168.78.199]
Jun 23 19:27:20 doctor sendmail[28048]: l5O1R5BC028048: from=, size=1506, class=0, nrcpts=1, msgid=<248049.1182648417907.JavaMail.root@web35>, proto=ESMTP, daemon=MTA, relay=mta9.adelphia.net [68.168.78.199]
whois 68.168.78.199
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 68.168.78.199
connected to whois.arin.net [192.149.252.44:43] ...
Road Runner HoldCo LLC COUDERSPORT-1 (NET-68-168-64-0-1)
68.168.64.0 - 68.168.95.255
Adelphia 68168640-Z14 (NET-68-168-64-0-2)
68.168.64.0 - 68.168.79.255
# ARIN WHOIS database, last updated 2007-06-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
X-Account-Key: account2
X-UIDL: *T""!C&N!!4$D"!f_*"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
Received: from doctor.nl2k.ab.ca
by doctor.nl2k.ab.ca (8.14.1/8.14.1) with ESMTP id l5OCewbM009466
for
Received: (from root@localhost)
by doctor.nl2k.ab.ca (8.14.1/8.14.1/Submit) id l5OCewbq009465
for dave@doctor.nl2k.ab.ca; Sun, 24 Jun 2007 06:40:58 -0600 (MDT)
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Sun, 24 Jun 2007 06:40:58 -0600
Resent-Message-ID: <20070624124058.GC2059@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from mta9.adelphia.net
by doctor.nl2k.ab.ca (8.14.1/8.14.1) with ESMTP id l5O1R5BC028048
for
X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org
Received: from web35 ([68.168.75.142]) by mta9.adelphia.net
(InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP
id <20070624012657.CXYZ6326.mta9.adelphia.net@web35>;
Sat, 23 Jun 2007 21:26:57 -0400
Message-ID: <248049.1182648417907.JavaMail.root@web35>
Date: Sat, 23 Jun 2007 18:26:57 -0700
From: "sgtjarvisreeves008@yahoo.com.cn"
Reply-To: sgtjarvisreeves008@yahoo.com.cn
Subject: {Spam?} HELLO!
X-Priority: 3 (Normal)
Sensitivity: Normal
X-NetKnow-InComing-4.61.3-1-MailScanner: Found to be clean, Found to be clean
X-NetKnow-InComing-4.61.3-1-MailScanner-SpamCheck: spam, SORBS-DNSBL,
SORBS-SPAM, RFC-IGNORANT-POSTMASTER, RFC-IGNORANT-ABUSE,
SpamAssassin (not cached, score=2.348, required 1,
BOTNET_SERVERWORDS 0.00, MISSING_HEADERS 1.58, RDNS_NONE 0.10,
URG_BIZ 0.67)
X-NetKnow-InComing-4.61.3-1-MailScanner-SpamScore: ss
X-Spam-Status: Yes, No
X-NetKnow-InComing-4.61.3-1-MailScanner-Information: Please contact the ISP for more information
X-NetKnow-InComing-4.61.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca
X-UIDL: *T""!C&N!!4$D"!f_*"!
X-Antivirus: AVG for E-mail 7.5.472 [269.9.6/862]
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=utf-8
--
Hello Pal,
I hope my email meets you well. I am in need of your assistance. My name is Sgt Jarvis Reeves. I am a military attache with the Engineering unit here in Ba'qubah Iraq for the united state, we have about $25 Million dollars that we want to move out of the country. My partners and I need a good partner someone we can trust to actualize this venture.The money is from oil proceeds and legal.But we are moving it through diplomatic means to your house directly or a safe and secured location of your choice using diplomatic courier services.But can we trust you? Once the funds get to you, you take your 40% out
and keep our own 60%. Your own part of this deal is to find a safe place where the funds can be sent to. Our own part is sending it to you. If you are interested I will furnish you with more details,Awaitingyoururgentresponse.sgtjarvisreeves008@yahoo.com.cn
Your Buddy. Sgt Jarvis Reeves
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.472 / Virus Database: 269.9.6/862 - Release Date: 6/22/2007 3:04 PM
FRom Our logs:
gzcat /var/log/maillog.0.gz | egrep 248049.1182648417907.JavaMail.root@web35
Jun 23 19:27:20 doctor sendmail[28047]: l5O1R5wK028047: from=
Jun 23 19:27:20 doctor sendmail[28048]: l5O1R5BC028048: from=
whois 68.168.78.199
BW whois 3.4 by Bill Weinman (http://whois.bw.org/)
Copyright 1999-2003 William E. Weinman
Request: 68.168.78.199
connected to whois.arin.net [192.149.252.44:43] ...
Road Runner HoldCo LLC COUDERSPORT-1 (NET-68-168-64-0-1)
68.168.64.0 - 68.168.95.255
Adelphia 68168640-Z14 (NET-68-168-64-0-2)
68.168.64.0 - 68.168.79.255
# ARIN WHOIS database, last updated 2007-06-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.