#330931 by buried under 419s
Fri Jun 16, 2017 11:08 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 16 Jun 2017 05:14:01 -0700
Received: from [83.242.139.67] (port=51440 helo=smtpa.comstar.ru)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dLq8T-0000iY-5v
for ; Fri, 16 Jun 2017 05:14:01 -0700
Received: from User (unknown [199.180.116.13])
(Authenticated sender: [email protected])
by smtpa.comstar.ru (Postfix) with ESMTP id 11F532256A;
Fri, 16 Jun 2017 14:32:21 +0400 (MSD)
Reply-To: <[email protected]>
From: "Hon. Duro James"<[email protected]>
Date: Fri, 16 Jun 2017 01:32:27 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=55.9
X-Spam-Score: 559
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello Good Morning, My name is Hon. Duro James, i have a beneficial
business transaction that i will like to embark with you, please kindly indicate
your interest via a prompt response so that i can tell you give you more
details [...]
Content analysis details: (55.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 NSL_RCVD_FROM_USER Received from User
1.9 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[83.242.139.67 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[83.242.139.67 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?83.242.139.67>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[83.242.139.67 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(durojaiyej[at]yahoo.com)
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[83.242.139.67 listed in bl.mailspike.net]
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(duroj75[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
3.4 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.5 FROM_MISSP_USER From misspaced, from "User"
1.5 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.5 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
4.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.0 FROM_MISSPACED From: missing whitespace
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** INFORMATION.
Hello Good Morning,
My name is Hon. Duro James, i have a beneficial business transaction that i will
like to embark with you,
please kindly indicate your interest via a prompt response so that i can tell you
give you more details
regarding the transaction.
Yours Faithfully,
Hon. Duro James
Envelope-to:
Delivery-date: Fri, 16 Jun 2017 05:14:01 -0700
Received: from [83.242.139.67] (port=51440 helo=smtpa.comstar.ru)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dLq8T-0000iY-5v
for ; Fri, 16 Jun 2017 05:14:01 -0700
Received: from User (unknown [199.180.116.13])
(Authenticated sender: [email protected])
by smtpa.comstar.ru (Postfix) with ESMTP id 11F532256A;
Fri, 16 Jun 2017 14:32:21 +0400 (MSD)
Reply-To: <[email protected]>
From: "Hon. Duro James"<[email protected]>
Date: Fri, 16 Jun 2017 01:32:27 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=55.9
X-Spam-Score: 559
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello Good Morning, My name is Hon. Duro James, i have a beneficial
business transaction that i will like to embark with you, please kindly indicate
your interest via a prompt response so that i can tell you give you more
details [...]
Content analysis details: (55.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 NSL_RCVD_FROM_USER Received from User
1.9 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[83.242.139.67 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[83.242.139.67 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?83.242.139.67>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[83.242.139.67 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(durojaiyej[at]yahoo.com)
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[83.242.139.67 listed in bl.mailspike.net]
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(duroj75[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
3.4 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.5 FROM_MISSP_USER From misspaced, from "User"
1.5 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.5 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
4.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.0 FROM_MISSPACED From: missing whitespace
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** INFORMATION.
Hello Good Morning,
My name is Hon. Duro James, i have a beneficial business transaction that i will
like to embark with you,
please kindly indicate your interest via a prompt response so that i can tell you
give you more details
regarding the transaction.
Yours Faithfully,
Hon. Duro James
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces