From - Fri Aug 09 17:50:24 2013

X-Account-Key: account1

X-UIDL: 000023254f5d9180

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Aug 2013 15:54:15 -0600

Received: from smtp.webindustrie.fr ([217.71.112.120])

by doctor.nl2k.ab.ca with esmtp (Exim 4.80.1)

(envelope-from )

id 1V7udH-00077M-Re

for dave@doctor.nl2k.ab.ca; Fri, 09 Aug 2013 15:54:14 -0600

Received: from brodelec.fr (LLagny-156-34-27-152.w80-14.abo.wanadoo.fr [80.14.207.152])

by smtp.webindustrie.fr (Postfix) with ESMTPA id EDE69338DB3;

Fri, 9 Aug 2013 23:52:25 +0200 (CEST)

Received: from User ([24.238.106.251]) by brodelec.fr with Microsoft SMTPSVC(6.0.3790.3959);

Fri, 9 Aug 2013 23:52:25 +0200

From: "Kristine Jones"

Subject: Re-confirm your bank details

Date: Fri, 9 Aug 2013 23:52:41 +0200

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

X-OriginalArrivalTime: 09 Aug 2013 21:52:25.0504 (UTC) FILETIME=[BC075A00:01CE954A]

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Good day, I have been instructed by your customer to effect

a WIRE Transfer to your Bank Account. I noticed that there were irregularities

in the bank details I received. [...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.6 SARE_FREE_WEBM_ZCom01 Sender used free email account - may be spammer

2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URIs: ecg.org.au]

0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.7 SARE_URGBIZ BODY: Contains urgent matter

0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} Re-confirm your bank details



Good day,





I have been instructed by your customer to effect a WIRE Transfer to your Bank Account.





I noticed that there were irregularities in the bank details I received.





I have tried to contact your customer but could not reach him on phone,





so I decided to contact you so you can confirm if the attached Bank details corresponds to the one I was given.

View Your Bank Details

I do not want to make mistake and pay into a bank account which is not yours.





I will be waiting for your urgent reply.







Thanks with regards









---------------------





Pacific Exchange Company


Shop 72, Ground Floor, Chung King Mansion,


36-44 Nathan Road, T.S.T, Kowloon, H.K.


Tel: (852) 2724-4981


Fax: (852) 2724-4331


Email: info@pacificexco.com

From - Thu Jul 18 12:12:11 2013

X-Account-Key: account1

X-UIDL: 00001f1a4f5d9180

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Jul 2013 12:08:45 -0600

Received: from root by doctor.nl2k.ab.ca with local (Exim 4.80.1)

(envelope-from )

id 1UzscP-0005lN-Rz

for dave@doctor.nl2k.ab.ca; Thu, 18 Jul 2013 12:07:57 -0600

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Thu, 18 Jul 2013 12:07:57 -0600

Resent-Message-ID: <20130718180757.GA21796@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

Received: from onewbx1p.orange.at ([81.3.220.4])

by doctor.nl2k.ab.ca with esmtp (Exim 4.80.1)

(envelope-from )

id 1UzrTb-0000HI-8V

for doctor@doctor.nl2k.ab.ca; Thu, 18 Jul 2013 10:54:51 -0600

Received: from User (046-220-058-241.dyn.orange.at [46.220.58.241])

by onewbx1p.orange.at (8.14.4+Sun/8.13.7) with SMTP id r6IGsYsO021515;

Thu, 18 Jul 2013 18:54:35 +0200 (MEST)

Message-Id: <201307181654.r6IGsYsO021515@onewbx1p.orange.at>

Reply-To:

From: "Eng. Michael Scott"

Subject: l Need your Help.

Date: Thu, 18 Jul 2013 09:54:41 -0700

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2800.1081

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081

X-Spam_score: 6.9

X-Spam_score_int: 69

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Dear Friend, Greetings, I really wish to have you as a good

friend and also wish to entrust some funds in your care, I have already sent

the fund out of Iraq. I need your sincere and truthful friendship. My name

is Eng Michael Scott, I am an american citizen working with Royal dutch Shell

in Majnoon oil field Basra in Iraq [...]



Content analysis details: (6.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.0 RCVD_IN_SPAMCANNIBAL RBL: Received via a relay in SpamCannibal

[81.3.220.4 listed in bl.spamcannibal.org]

0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} l Need your Help.

Dear Friend,

Greetings, I really wish to have you as a good friend and also wish to entrust some funds in your care, I have already sent the fund out of Iraq. I need your sincere and truthful friendship. My name is Eng Michael Scott, I am an american citizen working with Royal dutch Shell in Majnoon oil field Basra in Iraq

I have $6.5 Million US dollars that I successfully moved out of the country. I need a good partner, someone I can trust. It is oil business money we did with Iraqi citizens worth 45 million US dollars, but the 6.5 million us dollars stated is my share on the business and its legal. I have successfully moved the funds out of Iraq as family valuables with the help of Universal WORLD TRUST security Company through their branch in Middle East.

 

Can I Trust You Immediately these funds get to you,you take your 30% out and keep my own 70%. Your own part of this deal is to find a safe place where my part of the funds will be until i am back from Iraq and meet with you for discussions on how I can investment my own part, but I have more interest on real estate or any other profitable investmen

 

But the whole process is simple and we must keep a low profile at all times. I look forward to your reply and co-operation, and I thank you in advance as I anticipate your co-operation

 

Eng Michael Scott

From - Sun Mar 16 11:54:03 2008

X-Account-Key: account2

X-UIDL: 8?j!!2l^!!*\i!!i)W"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206100332.95831@9DH2Ptz9KhjQIygINf5FQQ

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2GBq7PY017048

for ; Sun, 16 Mar 2008 05:52:12 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2GBq7R8017047

for dave@doctor.nl2k.ab.ca; Sun, 16 Mar 2008 05:52:07 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Sun, 16 Mar 2008 05:52:07 -0600

Resent-Message-ID: <20080316115207.GB12842@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206083585.28435@VUr27ZZS5/K15+CUYlmbFQ

Received: from ACayenne-106-1-10-22.w90-31.abo.wanadoo.fr

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2G7CmMP017934

for ; Sun, 16 Mar 2008 01:13:03 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Message-ID: <000801c88735$30922640$16791f5a@home90de27578e>

From: "samio ecker"

To: postmaster@healthcareandrehab.com

Subject: {?} Great sex starts with this

Date: Sun, 16 Mar 2008 08:13:09 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--------=_NextPart_000_0004_01C8873D.92568E40"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.3138

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.3-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=21.961, required 5,

HTML_MESSAGE 0.00, NO_RELAYS -0.00, URIBL_AB_SURBL 5.00,

URIBL_BLACK 1.96, URIBL_JP_SURBL 5.00, URIBL_OB_SURBL 5.00,

URIBL_SC_SURBL 5.00)

X-NetKnow-InComing-4.67.3-1-MailScanner-SpamScore: sssssssssssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m2GBq7PY017048

X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: 8?j!!2l^!!*\i!!i)W"!





----------=_NextPart_000_0004_01C8873D.92568E40

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



I love how women say I look huge, they used to laugh at the size of my tool.





http://www.ryutopo.com/

Give your gay partner a shock

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.





----------=_NextPart_000_0004_01C8873D.92568E40

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

I love how women say I look huge, they use=

d to=20

laugh at the size of my tool.

 

 

href=3D"http://www.ryutopo.com/">http://www.ryutopo.com/

Give your gay partner a=20

shock

--=20


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.





----------=_NextPart_000_0004_01C8873D.92568E40--

From - Sat Mar 15 12:14:56 2008

X-Account-Key: account2

X-UIDL: %`J"!U"D!!p)T!!X>;"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1205938370.36784@69AGOeBw1FXOHpXOYjCxVA

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2EEpSxb022388

for ; Fri, 14 Mar 2008 08:51:33 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2EEpRQK022385

for dave@doctor.nl2k.ab.ca; Fri, 14 Mar 2008 08:51:27 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Fri, 14 Mar 2008 08:51:27 -0600

Resent-Message-ID: <20080314145127.GE17434@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1205913174.16745@iRUBlVnPkt1oxHj//X/xBA

Received: from LSt-Amand-152-33-53-36.w217-128.abo.wanadoo.fr

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2E7qIU6007161

for ; Fri, 14 Mar 2008 01:52:51 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Message-ID: <000401c885a8$024a2ba4$068568b5@dmpjdm>

From: "gavriel wen-mei"

To:

Subject: {?} shelley

Date: Fri, 14 Mar 2008 06:05:05 +0000

MIME-Version: 1.0

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.3138

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

X-Null-Tag: 53e91083ba882acfec08dd1645fdac78

X-Null-Tag: 94e21426742dd7b85de8b28855db30b2

X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean, Found to be clean

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m2EEpSxb022388

X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: %`J"!U"D!!p)T!!X>;"!



see albumamende but angry





--

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.