#381587 by buried under 419s
Wed Feb 13, 2019 10:20 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 12 Feb 2019 23:06:58 -0800
Received: from 230.rafmarham.org.uk ([62.172.235.230]:63108 helo=our.madebysonder.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gtodE-0004LL-NU
for ; Tue, 12 Feb 2019 23:06:57 -0800
Received: from User (unknown [185.215.151.95])
by our.madebysonder.com (Postfix) with ESMTPA id 9FE6C40C7A87;
Tue, 12 Feb 2019 19:49:17 +0000 (GMT)
Reply-To: <[email protected]>
From: "Cole Brown"<[email protected]>
Date: Tue, 12 Feb 2019 11:49:21 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=26.7
X-Spam-Score: 267
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn Friend, How are you doing today and your family ? Permit
me to inform you of my desire, I got your private email through a database
directory of your country chamber of commerce in respect of my effort searching
for a trustworthy person to assist me. [...]
Content analysis details: (26.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 NSL_RCVD_FROM_USER Received from User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?62.172.235.230>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[62.172.235.230 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[62.172.235.230 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(smithwilliams367[at]aol.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(msbr1975[at]foxmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (smithwilliams367[at]aol.com)
0.0 MILLION_USD BODY: Talks about millions of dollars
0.0 HK_SCAM_N2 BODY: No description available.
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[62.172.235.230 listed in psbl.surriel.com]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_USER From misspaced, from "User"
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** I AWAIT YOUR URGENT RESPONSE.
Attn Friend,
How are you doing today and your family ?
Permit me to inform you of my desire, I got your private email through a database
directory of your country chamber of commerce in respect of my effort searching for
a trustworthy person to assist me.
I am Cole Brown, the Head Auditing Department of (FIRST US BANK) United States of
America, I discovered a sum of $45 Million USD In an abandon dormant account
belonging a foreign client who is now deceased. Late Moises Saba Masri is a
business and a Jew from Mexico who was a victim of a helicopter crash that claim his
life and that of his family in 2010.
The link below, tell about the accident that claim the life of Mr. Moises Saba
Masri, Kindly click for your perusal.
Http://www.ynetnews.com/articles/0,7340 ... 56,00.html
The Bank have release several press conference and news alert to locate the relative
or business partner of the Deceased for the claim of his deposit, but all to no
avail.
I have also been unsuccessful in trying to locate any of the relatives of the
deceased but to no avail, hence I have decided to contact you confidentially to
present you as the Business Partner of deceased and his Beneficiary the Board of
Directors.
I will give you all the necessary details and also backup documentation to prove you
as the authentic Next of Kin/beneficiary to the deceased.so funds will be transfer
to you. I am also assuring you that I am going to protect your interest in regards
to this transaction as you will also keep this high confidential and do not disclose
that I am behind this info, I want to also assure you that this is a 100% risk free.
I have also resolve to share between us in the ratio 50/50 for both of us once the
funds finally gets to you. I intend to use the share of my own for charity work, and
to support the less privilege in my society and community.
Kindly reply me as soon as possible if you so wish to work this out with me. I will
be happy to release more detailed information to you as I await your positive
response on my private email address: [email protected]
Looking forward to hearing from you.
Sincerely,
Cole Brown.
Head of Accounting Audit Department.
FIRST U.S BANK.
Envelope-to:
Delivery-date: Tue, 12 Feb 2019 23:06:58 -0800
Received: from 230.rafmarham.org.uk ([62.172.235.230]:63108 helo=our.madebysonder.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gtodE-0004LL-NU
for ; Tue, 12 Feb 2019 23:06:57 -0800
Received: from User (unknown [185.215.151.95])
by our.madebysonder.com (Postfix) with ESMTPA id 9FE6C40C7A87;
Tue, 12 Feb 2019 19:49:17 +0000 (GMT)
Reply-To: <[email protected]>
From: "Cole Brown"<[email protected]>
Date: Tue, 12 Feb 2019 11:49:21 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=26.7
X-Spam-Score: 267
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn Friend, How are you doing today and your family ? Permit
me to inform you of my desire, I got your private email through a database
directory of your country chamber of commerce in respect of my effort searching
for a trustworthy person to assist me. [...]
Content analysis details: (26.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 NSL_RCVD_FROM_USER Received from User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?62.172.235.230>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[62.172.235.230 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[62.172.235.230 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(smithwilliams367[at]aol.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(msbr1975[at]foxmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (smithwilliams367[at]aol.com)
0.0 MILLION_USD BODY: Talks about millions of dollars
0.0 HK_SCAM_N2 BODY: No description available.
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[62.172.235.230 listed in psbl.surriel.com]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_USER From misspaced, from "User"
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** I AWAIT YOUR URGENT RESPONSE.
Attn Friend,
How are you doing today and your family ?
Permit me to inform you of my desire, I got your private email through a database
directory of your country chamber of commerce in respect of my effort searching for
a trustworthy person to assist me.
I am Cole Brown, the Head Auditing Department of (FIRST US BANK) United States of
America, I discovered a sum of $45 Million USD In an abandon dormant account
belonging a foreign client who is now deceased. Late Moises Saba Masri is a
business and a Jew from Mexico who was a victim of a helicopter crash that claim his
life and that of his family in 2010.
The link below, tell about the accident that claim the life of Mr. Moises Saba
Masri, Kindly click for your perusal.
Http://www.ynetnews.com/articles/0,7340 ... 56,00.html
The Bank have release several press conference and news alert to locate the relative
or business partner of the Deceased for the claim of his deposit, but all to no
avail.
I have also been unsuccessful in trying to locate any of the relatives of the
deceased but to no avail, hence I have decided to contact you confidentially to
present you as the Business Partner of deceased and his Beneficiary the Board of
Directors.
I will give you all the necessary details and also backup documentation to prove you
as the authentic Next of Kin/beneficiary to the deceased.so funds will be transfer
to you. I am also assuring you that I am going to protect your interest in regards
to this transaction as you will also keep this high confidential and do not disclose
that I am behind this info, I want to also assure you that this is a 100% risk free.
I have also resolve to share between us in the ratio 50/50 for both of us once the
funds finally gets to you. I intend to use the share of my own for charity work, and
to support the less privilege in my society and community.
Kindly reply me as soon as possible if you so wish to work this out with me. I will
be happy to release more detailed information to you as I await your positive
response on my private email address: [email protected]
Looking forward to hearing from you.
Sincerely,
Cole Brown.
Head of Accounting Audit Department.
FIRST U.S BANK.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces