#335140 by buried under 419s
Thu Jul 27, 2017 9:14 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 27 Jul 2017 02:46:13 -0700
Received: from [114.212.190.226] (port=64126 helo=seg.nju.edu.cn)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dafMx-0007ha-6Z
for ; Thu, 27 Jul 2017 02:46:13 -0700
Received: from User (s18993389.onlinehome-server.com [74.208.67.3])
by seg.nju.edu.cn with ESMTPA
; Thu, 27 Jul 2017 16:11:25 +0800
Message-ID: <[email protected]>
Reply-To: <[email protected]>
From: "Mrs. Karen Smith."<[email protected]>
Date: Thu, 27 Jul 2017 02:08:39 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=34.3
X-Spam-Score: 343
X-Spam-Bar: ++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: RE: CONGRATULATIONS FROM FACE BOOK! Dear Winner , We have
on January 2017, received a payment credit instruction from this FaceBook
Inc. Group and the United State president in collaboration with IMF and World
Bank to credit your account with your full funds valued at ($600,000.00 UNITED
STATES DOLLARS ) from the FaceBook Inc. Group reserve account with our bank
Standard Chartered Bank Plc, your javascript:void(0)Name was among the 20
Lucky winners who won $600.000.00USD (Six Hundred Thousand United State Dollars)
each on the Face book group promotion Award Attached to ticket number (5647600545189)
and Ref No (2551256002/244) Serial Number (55643451907). [...]
Content analysis details: (34.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[114.212.190.226 listed in bb.barracudacentral.org]
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
[114.212.190.226 listed in dnsbl.sorbs.net]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 HK_LOTTO No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 T_HK_NAME_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.5 FAKE_REPLY_C No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RE: CONGRATULATIONS FROM FACE BOOK!
RE: CONGRATULATIONS FROM FACE BOOK!
Dear Winner ,
We have on January 2017, received a payment credit instruction from this FaceBook
Inc. Group and the United State president in collaboration with IMF and World Bank
to credit your account with your full funds valued at ($600,000.00 UNITED STATES
DOLLARS ) from the FaceBook Inc. Group reserve account with our
bank Standard Chartered Bank Plc, your javascript:void(0)Name was among the 20 Lucky
winners who won $600.000.00USD (Six Hundred Thousand United State Dollars) each on
the Face book group promotion Award Attached to ticket number (5647600545189) and
Ref No (2551256002/244) Serial Number (55643451907).
The online draws was Conducted by a random selection of email you where picked by an
Advanced automated random computer search from the Face book in other To claim your
$600.000.00USD the lottery program which is a new innovation by Face book, is aimed
at saying A BIG THANK YOU to all our users for making Face book their number one
means to connect, communicate,relate and hook up with their families and friends
over the years.
1. Payment via Automatic Teller Machine: This is where you will be
sent an Automatic Teller Machine card with Pin also known as ATM card (A Master Card
would be issued). Upon receipt of your custom ATM card you will be allowed to
withdraw $10,000 per day by default and you are given the option to transfer funds
from your ATM card to your bank account.
2. Certified Cashiers Check or Bank Draft: In this case you will be sent a certified
bank draft or check signed in your favor which you will deposit in any bank for it
to be cleared within 3 to 5 working days at most depending on your
bank.
3. Online Banking ( Bank To Bank Transfer) to enable you process this operation,
$250 Dollars is Required for opening for an online banking operation, that will
enable you get access to your account Online.
Below are few list of tracking numbers you can track from FedEx website to confirm
people like you whom have successfully received their payment safely.
Name : Mrs. Jeannie Michael: FedEx Tracking Number: 504747467730
www.fedex.com/Tracking
Name : Mrs. Silvia Kim Hope: FedEx Tracking Number: 510230376793
www.fedex.com/Tracking
Name : Mr. George Willias: FedEx Tracking
You are advised to select one out of the three options on how you wish to receive
your ($600,000.00 UNITED STATES DOLLARS ), Your Online Banking Access or ATM card or
Check/Bank Draft will be shipped via Courier Shipping Company and would get to you
within 2 working days at most.For international shipping as
stated by our company We had to sign contract with Courier for bulk shipping which
makes the fees reduce from the actual $320.99 to $220.99 nothing more and no hidden
fees of any sort.
You are advised to the Department Office via the
E-mail address below: [email protected]
And provide me with the following information:
Your full Name................
Your Address:................
Occupation:................
Home/Cell Phone:.................
AGe.......................
The Department's Officer James Dunn will provide you with instructions on how you
are to make payment of the $220.99 only for the shipping of your ATM card or
Cashiers Check.
You are to adhere strictly to the instructions above for more information contact
the Department's Officer.
Remember that you are not paying any fees extra no matter what. Once again note that
the actual Courier Retail Price: $320.99 Your Price (Because of our contract
signed):is now $220.99 ($100.00 Saved!).
CONGRATULATIONS ONCE AGAIN FROM FACE BOOK!
Thanks,
Envelope-to:
Delivery-date: Thu, 27 Jul 2017 02:46:13 -0700
Received: from [114.212.190.226] (port=64126 helo=seg.nju.edu.cn)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dafMx-0007ha-6Z
for ; Thu, 27 Jul 2017 02:46:13 -0700
Received: from User (s18993389.onlinehome-server.com [74.208.67.3])
by seg.nju.edu.cn with ESMTPA
; Thu, 27 Jul 2017 16:11:25 +0800
Message-ID: <[email protected]>
Reply-To: <[email protected]>
From: "Mrs. Karen Smith."<[email protected]>
Date: Thu, 27 Jul 2017 02:08:39 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=34.3
X-Spam-Score: 343
X-Spam-Bar: ++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: RE: CONGRATULATIONS FROM FACE BOOK! Dear Winner , We have
on January 2017, received a payment credit instruction from this FaceBook
Inc. Group and the United State president in collaboration with IMF and World
Bank to credit your account with your full funds valued at ($600,000.00 UNITED
STATES DOLLARS ) from the FaceBook Inc. Group reserve account with our bank
Standard Chartered Bank Plc, your javascript:void(0)Name was among the 20
Lucky winners who won $600.000.00USD (Six Hundred Thousand United State Dollars)
each on the Face book group promotion Award Attached to ticket number (5647600545189)
and Ref No (2551256002/244) Serial Number (55643451907). [...]
Content analysis details: (34.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[114.212.190.226 listed in bb.barracudacentral.org]
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
[114.212.190.226 listed in dnsbl.sorbs.net]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 HK_LOTTO No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 KAM_LOTTO2 Highly Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 T_HK_NAME_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.5 FAKE_REPLY_C No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RE: CONGRATULATIONS FROM FACE BOOK!
RE: CONGRATULATIONS FROM FACE BOOK!
Dear Winner ,
We have on January 2017, received a payment credit instruction from this FaceBook
Inc. Group and the United State president in collaboration with IMF and World Bank
to credit your account with your full funds valued at ($600,000.00 UNITED STATES
DOLLARS ) from the FaceBook Inc. Group reserve account with our
bank Standard Chartered Bank Plc, your javascript:void(0)Name was among the 20 Lucky
winners who won $600.000.00USD (Six Hundred Thousand United State Dollars) each on
the Face book group promotion Award Attached to ticket number (5647600545189) and
Ref No (2551256002/244) Serial Number (55643451907).
The online draws was Conducted by a random selection of email you where picked by an
Advanced automated random computer search from the Face book in other To claim your
$600.000.00USD the lottery program which is a new innovation by Face book, is aimed
at saying A BIG THANK YOU to all our users for making Face book their number one
means to connect, communicate,relate and hook up with their families and friends
over the years.
1. Payment via Automatic Teller Machine: This is where you will be
sent an Automatic Teller Machine card with Pin also known as ATM card (A Master Card
would be issued). Upon receipt of your custom ATM card you will be allowed to
withdraw $10,000 per day by default and you are given the option to transfer funds
from your ATM card to your bank account.
2. Certified Cashiers Check or Bank Draft: In this case you will be sent a certified
bank draft or check signed in your favor which you will deposit in any bank for it
to be cleared within 3 to 5 working days at most depending on your
bank.
3. Online Banking ( Bank To Bank Transfer) to enable you process this operation,
$250 Dollars is Required for opening for an online banking operation, that will
enable you get access to your account Online.
Below are few list of tracking numbers you can track from FedEx website to confirm
people like you whom have successfully received their payment safely.
Name : Mrs. Jeannie Michael: FedEx Tracking Number: 504747467730
www.fedex.com/Tracking
Name : Mrs. Silvia Kim Hope: FedEx Tracking Number: 510230376793
www.fedex.com/Tracking
Name : Mr. George Willias: FedEx Tracking
You are advised to select one out of the three options on how you wish to receive
your ($600,000.00 UNITED STATES DOLLARS ), Your Online Banking Access or ATM card or
Check/Bank Draft will be shipped via Courier Shipping Company and would get to you
within 2 working days at most.For international shipping as
stated by our company We had to sign contract with Courier for bulk shipping which
makes the fees reduce from the actual $320.99 to $220.99 nothing more and no hidden
fees of any sort.
You are advised to the Department Office via the
E-mail address below: [email protected]
And provide me with the following information:
Your full Name................
Your Address:................
Occupation:................
Home/Cell Phone:.................
AGe.......................
The Department's Officer James Dunn will provide you with instructions on how you
are to make payment of the $220.99 only for the shipping of your ATM card or
Cashiers Check.
You are to adhere strictly to the instructions above for more information contact
the Department's Officer.
Remember that you are not paying any fees extra no matter what. Once again note that
the actual Courier Retail Price: $320.99 Your Price (Because of our contract
signed):is now $220.99 ($100.00 Saved!).
CONGRATULATIONS ONCE AGAIN FROM FACE BOOK!
Thanks,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces