#337269 by buried under 419s
Mon Aug 21, 2017 9:50 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 21 Aug 2017 04:11:40 -0700
Received: from sonic311-16.consmr.mail.bf2.yahoo.com ([74.6.131.126]:44926)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1djkcJ-0000FA-R1
for m; Mon, 21 Aug 2017 04:11:40 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=swbell.net; s=s2048; t=1503313854; bh=/sXJrtLNX/prns8qRASwoMTPkfraR3iti6JLfg/E/9I=; h=Date:From:Reply-To:Subject:References:From:Subject; b=E8wJI9ghksp0llWUGbuH6WNJLcSrSPRtkYA0BAhsZ+rHGzStZvWAXGKo3rYH50fvFEX1W5kBinoU+4jHSXWANGfecMyK0xfLAwmG9+qq79vVpn9oh4Mtq1oE3rbQxfzR8wB9URg2K98RwA0K0DVxO0+jZo8VsrfiDsg6kvRfWf3mOKV4O513YWjdTNyOcpZjxS0K180sfsvy7hXSZ4Oz7hHzGGytwQATwV6uhjwUW+1ZyTk3C+XflSBwWhtKZq5DtRpGcQyOyKxTRAsNJUlf93qoTZUT7JeePLge1GfFLpLTXHkOWfYL34YuVqaCCkpwahD1S6okMUGJSslhB/oA8A==
X-YMail-OSG: scpiYm8VM1nxChdS7nSnuKFN2hi1xa8xsO.hoy9WQGMidM7soTJBFrCxdryLULf
_sTpVSMOo0EkvTnlsFCGK8TJ4E5T9Yg6APJhtZ2LoYSyHZkXe.kRt1J6Yf3XdpxJO4YkOhDMVrZk
Zi0iNBKk9a3dmMAHMcAjN8.c9mdLsZBLZDCR6QzQKlodeku0M_F4GqrhS9fBYDUzqLdXgzX8eGKI
YJWXfFYhp6Wac7p9tylCwif0GSGoz7yijKmJVn.Tz3iT8noao3lVp75EIbFCJbGZjQrEklxyBcKr
01YE3_0IR6O8z8Lh8jv9aY6GmsVW0CT_WJulndA1bPvYwJrNsFFfuxgbrRJMp_ng1kPoz94Pvu6b
NJQJO8ZRCYaw7adOZBniwpwRQAkoByXY.KxwuZBJ.pi_EsNG2xboIuG2XrTCgZUqMhINOozUhXm_
3LEQ8IA8LGMBZKA9GsUc-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.bf2.yahoo.com with HTTP; Mon, 21 Aug 2017 11:10:54 +0000
Date: Mon, 21 Aug 2017 11:10:50 +0000 (UTC)
From: Eric Brown <[email protected]>
Reply-To: Eric Brown <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.10391 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:19.0) Gecko/20100101 Firefox/19.0
Content-Length: 778
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Att: In a recent meeting held with the newly FBI Director
concerning debt reconciliation, this is to inform you that we have agreed
to release your fund worth ($5 Million) which will come via ATM CARD as instructed
from our headquarter by Andrew McCabe, Director of the Federal Bureau of
Investigation (FBI). However, the below information is needed as to enable
the profiling of your ATM CARD and its delivery to you: [...]
Content analysis details: (11.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.6.131.126 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrdonberry20077[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.6.131.126 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.3 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** RELEASE OF YOUR FUND AS INSTRUCTED BY THE FBI .
Att:
In a recent meeting held with the newly FBI Director concerning debt reconciliation,
this is to inform you that we have agreed to release your fund worth ($5 Million)
which will come via ATM CARD as instructed from our headquarter by Andrew McCabe,
Director of the Federal Bureau of Investigation (FBI). However, the below
information is needed as to enable the profiling of your ATM CARD and its delivery
to you:
Full Name:
Country;
Age:
Cell Phone Number:
Address:
Underneath is the contact information of appointed dispatch person whom you are to
forward the above requested details:
Contact Person: Mr.Berry Don.
Email: [email protected]
Once we receive this information, we will proceed without delay.
Thank you.
Mr. Eric Brown.
FBI Representative.
Envelope-to:
Delivery-date: Mon, 21 Aug 2017 04:11:40 -0700
Received: from sonic311-16.consmr.mail.bf2.yahoo.com ([74.6.131.126]:44926)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1djkcJ-0000FA-R1
for m; Mon, 21 Aug 2017 04:11:40 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=swbell.net; s=s2048; t=1503313854; bh=/sXJrtLNX/prns8qRASwoMTPkfraR3iti6JLfg/E/9I=; h=Date:From:Reply-To:Subject:References:From:Subject; b=E8wJI9ghksp0llWUGbuH6WNJLcSrSPRtkYA0BAhsZ+rHGzStZvWAXGKo3rYH50fvFEX1W5kBinoU+4jHSXWANGfecMyK0xfLAwmG9+qq79vVpn9oh4Mtq1oE3rbQxfzR8wB9URg2K98RwA0K0DVxO0+jZo8VsrfiDsg6kvRfWf3mOKV4O513YWjdTNyOcpZjxS0K180sfsvy7hXSZ4Oz7hHzGGytwQATwV6uhjwUW+1ZyTk3C+XflSBwWhtKZq5DtRpGcQyOyKxTRAsNJUlf93qoTZUT7JeePLge1GfFLpLTXHkOWfYL34YuVqaCCkpwahD1S6okMUGJSslhB/oA8A==
X-YMail-OSG: scpiYm8VM1nxChdS7nSnuKFN2hi1xa8xsO.hoy9WQGMidM7soTJBFrCxdryLULf
_sTpVSMOo0EkvTnlsFCGK8TJ4E5T9Yg6APJhtZ2LoYSyHZkXe.kRt1J6Yf3XdpxJO4YkOhDMVrZk
Zi0iNBKk9a3dmMAHMcAjN8.c9mdLsZBLZDCR6QzQKlodeku0M_F4GqrhS9fBYDUzqLdXgzX8eGKI
YJWXfFYhp6Wac7p9tylCwif0GSGoz7yijKmJVn.Tz3iT8noao3lVp75EIbFCJbGZjQrEklxyBcKr
01YE3_0IR6O8z8Lh8jv9aY6GmsVW0CT_WJulndA1bPvYwJrNsFFfuxgbrRJMp_ng1kPoz94Pvu6b
NJQJO8ZRCYaw7adOZBniwpwRQAkoByXY.KxwuZBJ.pi_EsNG2xboIuG2XrTCgZUqMhINOozUhXm_
3LEQ8IA8LGMBZKA9GsUc-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.bf2.yahoo.com with HTTP; Mon, 21 Aug 2017 11:10:54 +0000
Date: Mon, 21 Aug 2017 11:10:50 +0000 (UTC)
From: Eric Brown <[email protected]>
Reply-To: Eric Brown <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.10391 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:19.0) Gecko/20100101 Firefox/19.0
Content-Length: 778
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Att: In a recent meeting held with the newly FBI Director
concerning debt reconciliation, this is to inform you that we have agreed
to release your fund worth ($5 Million) which will come via ATM CARD as instructed
from our headquarter by Andrew McCabe, Director of the Federal Bureau of
Investigation (FBI). However, the below information is needed as to enable
the profiling of your ATM CARD and its delivery to you: [...]
Content analysis details: (11.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.6.131.126 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrdonberry20077[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.6.131.126 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.3 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** RELEASE OF YOUR FUND AS INSTRUCTED BY THE FBI .
Att:
In a recent meeting held with the newly FBI Director concerning debt reconciliation,
this is to inform you that we have agreed to release your fund worth ($5 Million)
which will come via ATM CARD as instructed from our headquarter by Andrew McCabe,
Director of the Federal Bureau of Investigation (FBI). However, the below
information is needed as to enable the profiling of your ATM CARD and its delivery
to you:
Full Name:
Country;
Age:
Cell Phone Number:
Address:
Underneath is the contact information of appointed dispatch person whom you are to
forward the above requested details:
Contact Person: Mr.Berry Don.
Email: [email protected]
Once we receive this information, we will proceed without delay.
Thank you.
Mr. Eric Brown.
FBI Representative.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces