#337059 by buried under 419s
Thu Aug 17, 2017 8:29 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 17 Aug 2017 13:46:21 -0700
Received: from [201.234.75.29] (port=58099 helo=correo.museonacional.gov.co)
by with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1diRgJ-000828-BL
for ; Thu, 17 Aug 2017 13:46:20 -0700
Received: from User (41.142.252.183) by MNCS06.domain-mnc.tcb (192.168.7.2)
with Microsoft SMTP Server id 14.3.123.3; Thu, 17 Aug 2017 15:42:17 -0500
Reply-To: <[email protected]>
From: "Mr.Eric M. Thorson" <[email protected]>
Date: Thu, 17 Aug 2017 21:47:51 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
Received-SPF: PermError (MNCS06.domain-mnc.tcb: domain of [email protected]
used an invalid SPF mechanism)
X-Spam-Status: Yes, score=28.4
X-Spam-Score: 284
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: U.S. Department Of The Treasury 1500 Pennsylvania Avenue,
NW Washington D.C. 20220 USA. NOTE: If you received this message in your
SPAM/JUNK folder, that is because of the restrictions implemented by your
Internet Service Provider. We urge you to treat it genuine urgency...... [...]
Content analysis details: (28.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 BILLION_DOLLARS BODY: Talks about lots of money
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[201.234.75.29 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[201.234.75.29 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.142.252.183>]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[201.234.75.29 listed in dnsbl.sorbs.net]
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[201.234.75.29 listed in bl.score.senderscore.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** U.S. Department Of The Treasury
U.S. Department Of The Treasury
1500 Pennsylvania Avenue, NW
Washington D.C. 20220 USA.
NOTE: If you received this message in your SPAM/JUNK folder, that is because of the
restrictions implemented by your Internet Service Provider.
We urge you to treat it genuine urgency......
This is to bring to your notice that you have a registered ATM CARD of ($2.5MILLION
DOLLARS) available for pickup with DIAMOND EXPRESS COURIER customer service with
registration code (9665776). Please Contact us with your delivery information:
1. Your Full Name................
2. Your Telephone No..........
3. Your Country................
4. Your Home Address........
DIAMOND EXPRESS COURIER
Name: Mr.David Reetz
E-mail: [email protected]
The Insurance & Delivery fee has been completely footed. You are hereby required
to ONLY pay a Security Keeping fee of $250 only. Please indicate the registration
Number as stated above while providing them with your Address and Phone number
for your delivery.
Best Regards
Mr.Eric M. Thorson
U.S. Department Of The Treasury
________________________________
Conozca toda la programación educativa y cultural del Museo Nacional de Colombia en:
http://www.museonacional.gov.co/Paginas/calendar.aspx
Síganos en Twitter: @museonacionalco https://twitter.com/museonacionalco
Facebook: /museonacionaldecolombiahttps://www.facebook.com/museonacionaldecolombia
Visite la página web del Programa Fortalecimiento de Museos
www.museoscolombianos.gov.co
________________________________
CONFIDENCIALIDAD. Este mensaje y sus documentos anexos son confidenciales y
dirigidos exclusivamente a los destinatarios de los mismos. Si por error, ha
recibido este mensaje y no es el destinatario, por favor, notifíqueselo al remitente
y no use, informe, distribuya, imprima, copie o difunda este mensaje por ningún
medio. El Museo Nacional de Colombia no asume responsabilidad legal por el contenido
de este mensaje. Cualquier opinión manifestada pertenece sólo al autor y no
representa necesariamente la opinión de la firma salvo que expresamente se
especifique lo contrario. Las imágenes y textos adjuntos están protegidos por la ley
de derechos de autor; su utilización es meramente informativa. Por consiguiente su
publicación o reproducción debe tener autorización expresa del Museo Nacional de
Colombia. Gracias
CONFIDENTIALITY. This message and any attached files are confidential. They are for
the intended recipients only. If an error has misdirected this e-mail to you,
please, notify the author and do not use, disclose, distribute, copy, print or relay
this e-mail. The National Museum of Colombia does not accept legal responsibility
for the contents of this message. Any views or opinions presented are solely those
of the author and do not necessarily represent those of the firm unless otherwise
specifically. The images and texts attached are protected by the copyright law; its
use is strictly informational. Therefore its publication or reproduction requires
explicit authorization of the National Museum of Colombia. Thank you
Por favor considere su responsabilidad ambiental antes de imprimir este correo
electrónico.
Envelope-to:
Delivery-date: Thu, 17 Aug 2017 13:46:21 -0700
Received: from [201.234.75.29] (port=58099 helo=correo.museonacional.gov.co)
by with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1diRgJ-000828-BL
for ; Thu, 17 Aug 2017 13:46:20 -0700
Received: from User (41.142.252.183) by MNCS06.domain-mnc.tcb (192.168.7.2)
with Microsoft SMTP Server id 14.3.123.3; Thu, 17 Aug 2017 15:42:17 -0500
Reply-To: <[email protected]>
From: "Mr.Eric M. Thorson" <[email protected]>
Date: Thu, 17 Aug 2017 21:47:51 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
Received-SPF: PermError (MNCS06.domain-mnc.tcb: domain of [email protected]
used an invalid SPF mechanism)
X-Spam-Status: Yes, score=28.4
X-Spam-Score: 284
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: U.S. Department Of The Treasury 1500 Pennsylvania Avenue,
NW Washington D.C. 20220 USA. NOTE: If you received this message in your
SPAM/JUNK folder, that is because of the restrictions implemented by your
Internet Service Provider. We urge you to treat it genuine urgency...... [...]
Content analysis details: (28.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 BILLION_DOLLARS BODY: Talks about lots of money
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[201.234.75.29 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[201.234.75.29 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.142.252.183>]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[201.234.75.29 listed in dnsbl.sorbs.net]
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[201.234.75.29 listed in bl.score.senderscore.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** U.S. Department Of The Treasury
U.S. Department Of The Treasury
1500 Pennsylvania Avenue, NW
Washington D.C. 20220 USA.
NOTE: If you received this message in your SPAM/JUNK folder, that is because of the
restrictions implemented by your Internet Service Provider.
We urge you to treat it genuine urgency......
This is to bring to your notice that you have a registered ATM CARD of ($2.5MILLION
DOLLARS) available for pickup with DIAMOND EXPRESS COURIER customer service with
registration code (9665776). Please Contact us with your delivery information:
1. Your Full Name................
2. Your Telephone No..........
3. Your Country................
4. Your Home Address........
DIAMOND EXPRESS COURIER
Name: Mr.David Reetz
E-mail: [email protected]
The Insurance & Delivery fee has been completely footed. You are hereby required
to ONLY pay a Security Keeping fee of $250 only. Please indicate the registration
Number as stated above while providing them with your Address and Phone number
for your delivery.
Best Regards
Mr.Eric M. Thorson
U.S. Department Of The Treasury
________________________________
Conozca toda la programación educativa y cultural del Museo Nacional de Colombia en:
http://www.museonacional.gov.co/Paginas/calendar.aspx
Síganos en Twitter: @museonacionalco https://twitter.com/museonacionalco
Facebook: /museonacionaldecolombiahttps://www.facebook.com/museonacionaldecolombia
Visite la página web del Programa Fortalecimiento de Museos
www.museoscolombianos.gov.co
________________________________
CONFIDENCIALIDAD. Este mensaje y sus documentos anexos son confidenciales y
dirigidos exclusivamente a los destinatarios de los mismos. Si por error, ha
recibido este mensaje y no es el destinatario, por favor, notifíqueselo al remitente
y no use, informe, distribuya, imprima, copie o difunda este mensaje por ningún
medio. El Museo Nacional de Colombia no asume responsabilidad legal por el contenido
de este mensaje. Cualquier opinión manifestada pertenece sólo al autor y no
representa necesariamente la opinión de la firma salvo que expresamente se
especifique lo contrario. Las imágenes y textos adjuntos están protegidos por la ley
de derechos de autor; su utilización es meramente informativa. Por consiguiente su
publicación o reproducción debe tener autorización expresa del Museo Nacional de
Colombia. Gracias
CONFIDENTIALITY. This message and any attached files are confidential. They are for
the intended recipients only. If an error has misdirected this e-mail to you,
please, notify the author and do not use, disclose, distribute, copy, print or relay
this e-mail. The National Museum of Colombia does not accept legal responsibility
for the contents of this message. Any views or opinions presented are solely those
of the author and do not necessarily represent those of the firm unless otherwise
specifically. The images and texts attached are protected by the copyright law; its
use is strictly informational. Therefore its publication or reproduction requires
explicit authorization of the National Museum of Colombia. Thank you
Por favor considere su responsabilidad ambiental antes de imprimir este correo
electrónico.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces