#386428 by buried under 419s
Thu May 23, 2019 9:00 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id yDJXMHh85lwkegAAjbubUg
for <>; Thu, 23 May 2019 03:56:56 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 23 May 2019 03:56:56 -0700
Received: from [124.217.227.71] (port=49732 helo=server9212.pnbdevt.com)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hTlP4-00087z-Lg
for ; Thu, 23 May 2019 03:56:56 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=pnbdevt.com
; s=default; h=Message-ID:Reply-To:Subject:To:From:Date:
Content-Transfer-Encoding:Content-Type:MIME-Version;
bh=NpsNg8zBH4GjzdM40Dwhczx1Hi2feSfbJhUA3Sgza+8=; b=mQWvHkwbxDt5X8N1J+WQpmnYsV
LVmxTASevDCtPV+SYHIC4KiBk7cqc4gxmh4Gty0qHGfeKKE01JOLZ+Im6V5rOuJw2rMGJyXH+LUBx
CPlZz+FOh5Il9OCHacUUhGeKTlg7JvgB0hg+7cXyi7NXuGLBoZJ2fWvf94C1+3pabtJyjQRHtmm4f
CQsKlx2S39Zp7nahRp5kJ/BSe5yx7FwRM/bjuSKNUTq6UsToyDmlTkA9tu3vyDlvgwGXEE0LLfeO/
n2aYbm3XE5IMTpWqRtiCQEo88zV7aRxQ/STz7l+aQVsMgC2zrhk71XLisx2x2sYSh6vHgUElzIto1
DVAY4gZA==;
Received: from [::1] (port=51925 helo=webmail.pnbdevt.com)
by server9212.pnbdevt.com with esmtpa (Exim 4.86_1)
(envelope-from <[email protected]>)
id 1hTlOD-0005h6-QD; Thu, 23 May 2019 18:56:01 +0800
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Thu, 23 May 2019 18:56:01 +0800
From: Mr Stewart Douglas <[email protected]>
To: undisclosed-recipients:;
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.0.6
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server9212.pnbdevt.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - pnbdevt.com
X-Get-Message-Sender-Via: server9212.pnbdevt.com: authenticated_id: [email protected]
X-Authenticated-Sender: server9212.pnbdevt.com: [email protected]
X-Spam-Status: Yes, score=14.6
X-Spam-Score: 146
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- Dear Sir/Madam Your claim funds sum amount $8 Million United
state dollars has been approved to be delivered to you through diplomatic
immunity payment with the help of the diplomat Mr Joseph Steven Romo currently
in Phoenix Arizona USA. [...]
Content analysis details: (14.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 T_HK_NAME_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.0 FORM_FRAUD Fill a form and a fraud phrase
1.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Your Funds luggage Delivery
--
Dear Sir/Madam
Your claim funds sum amount $8 Million United state dollars has been
approved to be delivered to you through diplomatic immunity payment with
the help of the diplomat Mr Joseph Steven Romo currently in Phoenix
Arizona USA.
Name : Mr Joseph Steven Romo
Cell: +1-602-598-2449
Email: [email protected]
Get in-touch with him via email and sms text message and get back to me
asap.
Mr Stewart Douglas
Delivered-To:
Received: from
by with LMTP id yDJXMHh85lwkegAAjbubUg
for <>; Thu, 23 May 2019 03:56:56 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 23 May 2019 03:56:56 -0700
Received: from [124.217.227.71] (port=49732 helo=server9212.pnbdevt.com)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hTlP4-00087z-Lg
for ; Thu, 23 May 2019 03:56:56 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=pnbdevt.com
; s=default; h=Message-ID:Reply-To:Subject:To:From:Date:
Content-Transfer-Encoding:Content-Type:MIME-Version;
bh=NpsNg8zBH4GjzdM40Dwhczx1Hi2feSfbJhUA3Sgza+8=; b=mQWvHkwbxDt5X8N1J+WQpmnYsV
LVmxTASevDCtPV+SYHIC4KiBk7cqc4gxmh4Gty0qHGfeKKE01JOLZ+Im6V5rOuJw2rMGJyXH+LUBx
CPlZz+FOh5Il9OCHacUUhGeKTlg7JvgB0hg+7cXyi7NXuGLBoZJ2fWvf94C1+3pabtJyjQRHtmm4f
CQsKlx2S39Zp7nahRp5kJ/BSe5yx7FwRM/bjuSKNUTq6UsToyDmlTkA9tu3vyDlvgwGXEE0LLfeO/
n2aYbm3XE5IMTpWqRtiCQEo88zV7aRxQ/STz7l+aQVsMgC2zrhk71XLisx2x2sYSh6vHgUElzIto1
DVAY4gZA==;
Received: from [::1] (port=51925 helo=webmail.pnbdevt.com)
by server9212.pnbdevt.com with esmtpa (Exim 4.86_1)
(envelope-from <[email protected]>)
id 1hTlOD-0005h6-QD; Thu, 23 May 2019 18:56:01 +0800
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Thu, 23 May 2019 18:56:01 +0800
From: Mr Stewart Douglas <[email protected]>
To: undisclosed-recipients:;
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.0.6
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server9212.pnbdevt.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - pnbdevt.com
X-Get-Message-Sender-Via: server9212.pnbdevt.com: authenticated_id: [email protected]
X-Authenticated-Sender: server9212.pnbdevt.com: [email protected]
X-Spam-Status: Yes, score=14.6
X-Spam-Score: 146
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- Dear Sir/Madam Your claim funds sum amount $8 Million United
state dollars has been approved to be delivered to you through diplomatic
immunity payment with the help of the diplomat Mr Joseph Steven Romo currently
in Phoenix Arizona USA. [...]
Content analysis details: (14.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 T_HK_NAME_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.0 FORM_FRAUD Fill a form and a fraud phrase
1.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Your Funds luggage Delivery
--
Dear Sir/Madam
Your claim funds sum amount $8 Million United state dollars has been
approved to be delivered to you through diplomatic immunity payment with
the help of the diplomat Mr Joseph Steven Romo currently in Phoenix
Arizona USA.
Name : Mr Joseph Steven Romo
Cell: +1-602-598-2449
Email: [email protected]
Get in-touch with him via email and sms text message and get back to me
asap.
Mr Stewart Douglas
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces