#322890 by buried under 419s
Mon Mar 20, 2017 8:26 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 20 Mar 2017 12:52:13 -0700
Received: from ns1.adrenalina.net.br ([179.97.95.182]:56277 helo=srv01.adrenalina.net.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1cq3Lf-0001G7-8g
for ; Mon, 20 Mar 2017 12:52:12 -0700
Received: from cpe-216-47-45-2.hcinet.net ([216.47.45.2] helo=User)
by srv01.adrenalina.net.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1cq3K5-00073I-7N; Mon, 20 Mar 2017 16:50:34 -0300
Reply-To: <[email protected]>
From: "Capt. Divine Jerry"<[email protected]>
To: [email protected]
Date: Mon, 20 Mar 2017 14:50:33 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=25.0
X-Spam-Score: 250
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From Capt. Divine Jerry. US Marine Corps stationed in Kabul,
Afghanistan. [...]
Content analysis details: (25.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[179.97.95.182 listed in dnsbl.sorbs.net]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[179.97.95.182 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[179.97.95.182 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[179.97.95.182 listed in zen.spamhaus.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(globaltrade123[at]gmail.com)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** From Capt. Divine Jerry...
From Capt. Divine Jerry.
US Marine Corps stationed in Kabul,
Afghanistan.
Dear Friend,
I am sorry to encroach into your privacy in this manner, I find it pleasurable to
offer you my partnership in business and I want to solicit your attention to receive
money on my behalf.
I am Capt Divine Jerry, an officer in the US Army, and also a West Point Graduate
presently serving in the Military with the 82nd Air Borne Division Peace keeping
force in Baghdad, Iraq. I am among the personnel that were moved to Afghanistan
from Iraq, and i really need your help in assisting me with the safe keeping of two
military trunk boxes containing cash, which has just arrived the United Kingdom from
the Iraq. I hope you can be trusted? Kindly view this news blog below for some info:
http://news.bbc.co.uk/2/hi/ 7444083.stm
If you can be trusted, I will explain further when I get a response from you.
Nevertheless, reconfirm the following to me as follows.
(a) Your full Names
(b) Your physical mailing address
(c) Your direct telephone numbers
(d) Your occupation.
Please ensure to reply immediately.
God bless you and thanks for cooperation in advance.
Best Regards,
Capt. Divine Jerry.
US Marine Corps stationed in Kabul,
Afghanistan.
Envelope-to:
Delivery-date: Mon, 20 Mar 2017 12:52:13 -0700
Received: from ns1.adrenalina.net.br ([179.97.95.182]:56277 helo=srv01.adrenalina.net.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1cq3Lf-0001G7-8g
for ; Mon, 20 Mar 2017 12:52:12 -0700
Received: from cpe-216-47-45-2.hcinet.net ([216.47.45.2] helo=User)
by srv01.adrenalina.net.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1cq3K5-00073I-7N; Mon, 20 Mar 2017 16:50:34 -0300
Reply-To: <[email protected]>
From: "Capt. Divine Jerry"<[email protected]>
To: [email protected]
Date: Mon, 20 Mar 2017 14:50:33 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=25.0
X-Spam-Score: 250
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From Capt. Divine Jerry. US Marine Corps stationed in Kabul,
Afghanistan. [...]
Content analysis details: (25.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[179.97.95.182 listed in dnsbl.sorbs.net]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[179.97.95.182 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[179.97.95.182 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[179.97.95.182 listed in zen.spamhaus.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(globaltrade123[at]gmail.com)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** From Capt. Divine Jerry...
From Capt. Divine Jerry.
US Marine Corps stationed in Kabul,
Afghanistan.
Dear Friend,
I am sorry to encroach into your privacy in this manner, I find it pleasurable to
offer you my partnership in business and I want to solicit your attention to receive
money on my behalf.
I am Capt Divine Jerry, an officer in the US Army, and also a West Point Graduate
presently serving in the Military with the 82nd Air Borne Division Peace keeping
force in Baghdad, Iraq. I am among the personnel that were moved to Afghanistan
from Iraq, and i really need your help in assisting me with the safe keeping of two
military trunk boxes containing cash, which has just arrived the United Kingdom from
the Iraq. I hope you can be trusted? Kindly view this news blog below for some info:
http://news.bbc.co.uk/2/hi/ 7444083.stm
If you can be trusted, I will explain further when I get a response from you.
Nevertheless, reconfirm the following to me as follows.
(a) Your full Names
(b) Your physical mailing address
(c) Your direct telephone numbers
(d) Your occupation.
Please ensure to reply immediately.
God bless you and thanks for cooperation in advance.
Best Regards,
Capt. Divine Jerry.
US Marine Corps stationed in Kabul,
Afghanistan.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces