#339790 by buried under 419s
Wed Sep 20, 2017 12:28 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 19 Sep 2017 21:08:21 -0700
Received: from 221x116x77x251.ap221.ftth.ucom.ne.jp ([221.116.77.251]:54761 helo=mail.tobugrab.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1duWJ6-0006N7-4a
for ; Tue, 19 Sep 2017 21:08:21 -0700
Received: from User (unknown [148.244.209.99])
by mail.tobugrab.com (Postfix) with ESMTPA id C59333B76;
Wed, 20 Sep 2017 13:07:21 +0900 (JST)
Reply-To: <[email protected]>
From: "Admin"<[email protected]>
Date: Tue, 19 Sep 2017 23:07:30 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Kindly Accept & Acknowledge my Proposal! I wish to notify
you again that your name was mentioned as heir to the sum of $1,600, 000.00
US Dollar. In the last testament of our deceased client name now withheld.
We came across your profile and email while searching through genealogy database.
[...]
Content analysis details: (18.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** FYI NOTICE >
Kindly Accept & Acknowledge my Proposal!
I wish to notify you again that your name was mentioned as heir to the sum of
$1,600, 000.00 US Dollar. In the last testament of our deceased client name now
withheld. We came across your profile and email while searching through genealogy
database.
Note as the heir hunters our aim is to assist people claim their lost relative
fortune instead of the government or Bank MDS to use the money to enrich their
treasury. Please send an acknowledgment email to enable us process your inheritance
with all due verification process.
I look forward to hearing from you.
James
Representative
Envelope-to:
Delivery-date: Tue, 19 Sep 2017 21:08:21 -0700
Received: from 221x116x77x251.ap221.ftth.ucom.ne.jp ([221.116.77.251]:54761 helo=mail.tobugrab.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1duWJ6-0006N7-4a
for ; Tue, 19 Sep 2017 21:08:21 -0700
Received: from User (unknown [148.244.209.99])
by mail.tobugrab.com (Postfix) with ESMTPA id C59333B76;
Wed, 20 Sep 2017 13:07:21 +0900 (JST)
Reply-To: <[email protected]>
From: "Admin"<[email protected]>
Date: Tue, 19 Sep 2017 23:07:30 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Kindly Accept & Acknowledge my Proposal! I wish to notify
you again that your name was mentioned as heir to the sum of $1,600, 000.00
US Dollar. In the last testament of our deceased client name now withheld.
We came across your profile and email while searching through genealogy database.
[...]
Content analysis details: (18.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** FYI NOTICE >
Kindly Accept & Acknowledge my Proposal!
I wish to notify you again that your name was mentioned as heir to the sum of
$1,600, 000.00 US Dollar. In the last testament of our deceased client name now
withheld. We came across your profile and email while searching through genealogy
database.
Note as the heir hunters our aim is to assist people claim their lost relative
fortune instead of the government or Bank MDS to use the money to enrich their
treasury. Please send an acknowledgment email to enable us process your inheritance
with all due verification process.
I look forward to hearing from you.
James
Representative
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces