#329336 by buried under 419s
Mon May 29, 2017 1:49 pm
Return-path: <"www."@fine.ocn.ne.jp>
Envelope-to:
Delivery-date: Mon, 29 May 2017 10:14:30 -0700
Received: from mbkd0201.ocn.ad.jp ([153.149.233.2]:51644)
by with esmtp (Exim 4.89)
(envelope-from <"www."@fine.ocn.ne.jp>)
id 1dFOFQ-0004Zz-6x
for ; Mon, 29 May 2017 10:14:29 -0700
Received: from mf-smf-ucb002.ocn.ad.jp (mf-smf-ucb002.ocn.ad.jp [153.149.227.4])
by mbkd0201.ocn.ad.jp (Postfix) with ESMTP id E57973023B5;
Tue, 30 May 2017 02:13:46 +0900 (JST)
Received: from mf-smf-ucb002.ocn.ad.jp (mf-smf-ucb002 [153.149.227.4])
by mf-smf-ucb002.ocn.ad.jp (Postfix) with ESMTP id C6029C0673;
Tue, 30 May 2017 02:13:46 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb028 (mv-mta-ucb028.ocn.ad.jp [153.149.230.162])
by mf-smf-ucb002.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id v4THDZsO012487;
Tue, 30 May 2017 02:13:42 +0900
Received: from vcwebmail.ocn.ad.jp ([153.149.227.135])
by ntt.pod01.mv-mta-ucb028 with
id SHDi1v0012vuoep01HDiCi; Mon, 29 May 2017 17:13:42 +0000
Received: from mzkstore607.ocn.ad.jp (mz-ukg607p.ocn.ad.jp [153.149.211.134])
by vcwebmail.ocn.ad.jp (Postfix) with ESMTP;
Tue, 30 May 2017 02:13:42 +0900 (JST)
Date: Tue, 30 May 2017 02:13:42 +0900 (JST)
From: "Mr robert lee" <"www."@fine.ocn.ne.jp>
Reply-To: "Mr robert lee" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [197.234.219.54]
X-Spam-Status: Yes, score=22.3
X-Spam-Score: 223
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Greetings, My name is Diplomat Robert Lee. I,m an international
diplomat delivery officer from Economic Community Of West Africa States (ECOWAS),
I just arrived La Crosse Wisconsin with your Cash consignment Box worth $4,500,000
USD. Right now I am standing at La Crosse Regional Airport as I am having
a problem to locate your nearest airport and address for finishing delivery.
[...]
Content analysis details: (22.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[153.149.233.2 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[153.149.233.2 listed in psbl.surriel.com]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[153.149.233.2 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.230.162>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[153.149.233.2 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[153.149.233.2 listed in dnsbl.sorbs.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 T_HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** Receive Your Cash Consignment Box worth $4,500,000 USD From
Diplomat Robert Lee
Greetings, My name is Diplomat Robert Lee. I,m an international diplomat delivery
officer from Economic Community Of West Africa States (ECOWAS), I just arrived La
Crosse Wisconsin with your Cash consignment Box worth $4,500,000 USD. Right now I am
standing at La Crosse Regional Airport as I am having a problem to locate your
nearest airport and address for finishing delivery.
Kindly Fill The Below Information To Avoid Wrong Delivery
Your Full Name: __________
Your Address: __________
Your Direct Tel Phone: __________
A Copy Of Your Id for identification: __________
Nearest Airport: __________
Below is my Contact details
Email: [email protected]
Phone (229) 231-9480
I am waiting now to enable me complete the trip.
Regards Robert Lee
Envelope-to:
Delivery-date: Mon, 29 May 2017 10:14:30 -0700
Received: from mbkd0201.ocn.ad.jp ([153.149.233.2]:51644)
by with esmtp (Exim 4.89)
(envelope-from <"www."@fine.ocn.ne.jp>)
id 1dFOFQ-0004Zz-6x
for ; Mon, 29 May 2017 10:14:29 -0700
Received: from mf-smf-ucb002.ocn.ad.jp (mf-smf-ucb002.ocn.ad.jp [153.149.227.4])
by mbkd0201.ocn.ad.jp (Postfix) with ESMTP id E57973023B5;
Tue, 30 May 2017 02:13:46 +0900 (JST)
Received: from mf-smf-ucb002.ocn.ad.jp (mf-smf-ucb002 [153.149.227.4])
by mf-smf-ucb002.ocn.ad.jp (Postfix) with ESMTP id C6029C0673;
Tue, 30 May 2017 02:13:46 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb028 (mv-mta-ucb028.ocn.ad.jp [153.149.230.162])
by mf-smf-ucb002.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id v4THDZsO012487;
Tue, 30 May 2017 02:13:42 +0900
Received: from vcwebmail.ocn.ad.jp ([153.149.227.135])
by ntt.pod01.mv-mta-ucb028 with
id SHDi1v0012vuoep01HDiCi; Mon, 29 May 2017 17:13:42 +0000
Received: from mzkstore607.ocn.ad.jp (mz-ukg607p.ocn.ad.jp [153.149.211.134])
by vcwebmail.ocn.ad.jp (Postfix) with ESMTP;
Tue, 30 May 2017 02:13:42 +0900 (JST)
Date: Tue, 30 May 2017 02:13:42 +0900 (JST)
From: "Mr robert lee" <"www."@fine.ocn.ne.jp>
Reply-To: "Mr robert lee" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [197.234.219.54]
X-Spam-Status: Yes, score=22.3
X-Spam-Score: 223
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Greetings, My name is Diplomat Robert Lee. I,m an international
diplomat delivery officer from Economic Community Of West Africa States (ECOWAS),
I just arrived La Crosse Wisconsin with your Cash consignment Box worth $4,500,000
USD. Right now I am standing at La Crosse Regional Airport as I am having
a problem to locate your nearest airport and address for finishing delivery.
[...]
Content analysis details: (22.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[153.149.233.2 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[153.149.233.2 listed in psbl.surriel.com]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[153.149.233.2 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.230.162>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[153.149.233.2 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[153.149.233.2 listed in dnsbl.sorbs.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 T_HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** Receive Your Cash Consignment Box worth $4,500,000 USD From
Diplomat Robert Lee
Greetings, My name is Diplomat Robert Lee. I,m an international diplomat delivery
officer from Economic Community Of West Africa States (ECOWAS), I just arrived La
Crosse Wisconsin with your Cash consignment Box worth $4,500,000 USD. Right now I am
standing at La Crosse Regional Airport as I am having a problem to locate your
nearest airport and address for finishing delivery.
Kindly Fill The Below Information To Avoid Wrong Delivery
Your Full Name: __________
Your Address: __________
Your Direct Tel Phone: __________
A Copy Of Your Id for identification: __________
Nearest Airport: __________
Below is my Contact details
Email: [email protected]
Phone (229) 231-9480
I am waiting now to enable me complete the trip.
Regards Robert Lee
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces