#378217 by buried under 419s
Tue Dec 11, 2018 10:36 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 10 Dec 2018 23:09:42 -0800
Received: from [47.23.129.46] (port=54408 helo=AFEAP02.pmi.local)
by s with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gWcAX-0005zp-GO
for ; Mon, 10 Dec 2018 23:09:42 -0800
Received: from User ([37.49.224.143]) by AFEAP02.pmi.local with Microsoft SMTPSVC(7.5.7601.17514);
Mon, 10 Dec 2018 18:16:07 -0500
Reply-To: <[email protected]>
From: "Williams-whaite"<[email protected]>
Date: Mon, 10 Dec 2018 15:16:07 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 10 Dec 2018 23:16:08.0003 (UTC) FILETIME=[54C6A130:01D490DE]
X-Spam-Status: Yes, score=35.1
X-Spam-Score: 351
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Re: Your Outstanding Payment notification 2018 Attn: Dear
Beneficiary How are you doing today? [...]
Content analysis details: (35.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.5 KAM_NUMSUBJECT Subject ends in numbers
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[47.23.129.46 listed in bl.score.senderscore.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=lee%40lee.org;ip=]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(cooper9075[at]yahoo.com.hk)
1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.6 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.0 FORM_FRAUD Fill a form and a fraud phrase
2.3 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Your Outstanding Payment notification 2018
Re: Your Outstanding Payment notification 2018
Attn: Dear Beneficiary
How are you doing today?
I am delighted to inform you that arrangement has been made with Bank of America to
release your outstanding payment sum of $10.3 Million dollars, right now your
payment files has being transfer to BOA Bank for immediate attention. In a nutshell,
Charles Bloom of Bank of America will assist you, ensure that you receive your
payment as soon as possible, therefore contacts him through the information below:
Mr. Charles Bloom
City: Chicago Illinois U.S.A.
Call or Text me: +1(914)801-864
Email: [email protected]
Meanwhile, a surprising message was address to my office this morning confirmed that
you are dead, that you died last week of ghastly motor accident, I do not believe
the story because an attempt has been made severally to divert this funds since
approval for payment into another account but I always decline to append my
signature hence this message to you. However, kindly reconfirm your full names SUCH
AS:
Home/ office address and mobile phone number and ID CARD or travel passport for
clarification and verification. Address to above named person.
Mr. William C White
Envelope-to:
Delivery-date: Mon, 10 Dec 2018 23:09:42 -0800
Received: from [47.23.129.46] (port=54408 helo=AFEAP02.pmi.local)
by s with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gWcAX-0005zp-GO
for ; Mon, 10 Dec 2018 23:09:42 -0800
Received: from User ([37.49.224.143]) by AFEAP02.pmi.local with Microsoft SMTPSVC(7.5.7601.17514);
Mon, 10 Dec 2018 18:16:07 -0500
Reply-To: <[email protected]>
From: "Williams-whaite"<[email protected]>
Date: Mon, 10 Dec 2018 15:16:07 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 10 Dec 2018 23:16:08.0003 (UTC) FILETIME=[54C6A130:01D490DE]
X-Spam-Status: Yes, score=35.1
X-Spam-Score: 351
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Re: Your Outstanding Payment notification 2018 Attn: Dear
Beneficiary How are you doing today? [...]
Content analysis details: (35.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.5 KAM_NUMSUBJECT Subject ends in numbers
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[47.23.129.46 listed in bl.score.senderscore.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=lee%40lee.org;ip=]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(cooper9075[at]yahoo.com.hk)
1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.6 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.0 FORM_FRAUD Fill a form and a fraud phrase
2.3 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Your Outstanding Payment notification 2018
Re: Your Outstanding Payment notification 2018
Attn: Dear Beneficiary
How are you doing today?
I am delighted to inform you that arrangement has been made with Bank of America to
release your outstanding payment sum of $10.3 Million dollars, right now your
payment files has being transfer to BOA Bank for immediate attention. In a nutshell,
Charles Bloom of Bank of America will assist you, ensure that you receive your
payment as soon as possible, therefore contacts him through the information below:
Mr. Charles Bloom
City: Chicago Illinois U.S.A.
Call or Text me: +1(914)801-864
Email: [email protected]
Meanwhile, a surprising message was address to my office this morning confirmed that
you are dead, that you died last week of ghastly motor accident, I do not believe
the story because an attempt has been made severally to divert this funds since
approval for payment into another account but I always decline to append my
signature hence this message to you. However, kindly reconfirm your full names SUCH
AS:
Home/ office address and mobile phone number and ID CARD or travel passport for
clarification and verification. Address to above named person.
Mr. William C White
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces