#382850 by buried under 419s
Fri Mar 15, 2019 9:52 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id cOYUK/uSi1z+cwAAjbubUg
for <; Fri, 15 Mar 2019 04:56:43 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 15 Mar 2019 04:56:43 -0700
Received: from s16.unlim.com ([91.236.118.177]:45094)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1h4lS2-0007i2-KV
for ; Fri, 15 Mar 2019 04:56:43 -0700
Received: from [45.35.196.147] (port=58345 helo=User)
by s16.unlim.com with esmtpa (Exim 4.91)
(envelope-from <[email protected]>)
id 1h4lR5-0005oX-IB; Fri, 15 Mar 2019 13:55:39 +0200
Reply-To: <[email protected]>
From: "Mr Kenneth Wesley Inspection Agent"<[email protected]>
Date: Fri, 15 Mar 2019 04:55:44 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - s16.unlim.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - activolt.ua
X-Get-Message-Sender-Via: s16.unlim.com: authenticated_id: [email protected]
X-Authenticated-Sender: s16.unlim.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=22.5
X-Spam-Score: 225
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: My Friend I am Mr Kenneth Wesley, Chief Inspection
Agent United Nations Inspection Unit at Dallas/Fort Worth International Airport
Tx, USA, On routine investigation, I discovered this forfeited consignment
with your name on the bill of entry. On an extensive inspection the Value
of the cash stuffed consignment was not declared but assumed approximately
$8.5 Million USD. The Consignment was forfeited because of false declaration
by the Consignee and the delivery officers' inability to pay the Non Inspection
fee (NI). The Consignment was originally declared as personal effect while
the real content is cash money. Call me or sms text +1 936-666-4527 or email
me now if you are still interested in receiving your consignment boxes. Regards,
Mr Kenneth Wesley Inspection Agent [...]
Content analysis details: (22.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 MILLION_USD BODY: Talks about millions of dollars
1.6 NSL_RCVD_HELO_USER Received from HELO User
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(howardgeorge763[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.6 MISSING_MID Missing Message-Id: header
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
2.2 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** My Subject: Please focus and receive your delivering to your resident
Attn: My Friend
I am Mr Kenneth Wesley, Chief Inspection Agent United Nations Inspection Unit at
Dallas/Fort Worth International Airport Tx, USA, On routine investigation, I
discovered this forfeited consignment with your name on the bill of entry. On an
extensive inspection the Value of the cash stuffed consignment was not declared but
assumed approximately $8.5 Million USD.
The Consignment was forfeited because of false declaration by the Consignee and the
delivery officers' inability to pay the Non Inspection fee (NI). The Consignment was
originally declared as personal effect while the real content is cash money.
Call me or sms text +1 936-666-4527 or email me now if you are still interested in
receiving your consignment boxes.
Regards,
Mr Kenneth Wesley
Inspection Agent
Delivered-To:
Received: from
by with LMTP id cOYUK/uSi1z+cwAAjbubUg
for <; Fri, 15 Mar 2019 04:56:43 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 15 Mar 2019 04:56:43 -0700
Received: from s16.unlim.com ([91.236.118.177]:45094)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1h4lS2-0007i2-KV
for ; Fri, 15 Mar 2019 04:56:43 -0700
Received: from [45.35.196.147] (port=58345 helo=User)
by s16.unlim.com with esmtpa (Exim 4.91)
(envelope-from <[email protected]>)
id 1h4lR5-0005oX-IB; Fri, 15 Mar 2019 13:55:39 +0200
Reply-To: <[email protected]>
From: "Mr Kenneth Wesley Inspection Agent"<[email protected]>
Date: Fri, 15 Mar 2019 04:55:44 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - s16.unlim.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - activolt.ua
X-Get-Message-Sender-Via: s16.unlim.com: authenticated_id: [email protected]
X-Authenticated-Sender: s16.unlim.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=22.5
X-Spam-Score: 225
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: My Friend I am Mr Kenneth Wesley, Chief Inspection
Agent United Nations Inspection Unit at Dallas/Fort Worth International Airport
Tx, USA, On routine investigation, I discovered this forfeited consignment
with your name on the bill of entry. On an extensive inspection the Value
of the cash stuffed consignment was not declared but assumed approximately
$8.5 Million USD. The Consignment was forfeited because of false declaration
by the Consignee and the delivery officers' inability to pay the Non Inspection
fee (NI). The Consignment was originally declared as personal effect while
the real content is cash money. Call me or sms text +1 936-666-4527 or email
me now if you are still interested in receiving your consignment boxes. Regards,
Mr Kenneth Wesley Inspection Agent [...]
Content analysis details: (22.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 MILLION_USD BODY: Talks about millions of dollars
1.6 NSL_RCVD_HELO_USER Received from HELO User
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(howardgeorge763[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.6 MISSING_MID Missing Message-Id: header
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
2.2 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** My Subject: Please focus and receive your delivering to your resident
Attn: My Friend
I am Mr Kenneth Wesley, Chief Inspection Agent United Nations Inspection Unit at
Dallas/Fort Worth International Airport Tx, USA, On routine investigation, I
discovered this forfeited consignment with your name on the bill of entry. On an
extensive inspection the Value of the cash stuffed consignment was not declared but
assumed approximately $8.5 Million USD.
The Consignment was forfeited because of false declaration by the Consignee and the
delivery officers' inability to pay the Non Inspection fee (NI). The Consignment was
originally declared as personal effect while the real content is cash money.
Call me or sms text +1 936-666-4527 or email me now if you are still interested in
receiving your consignment boxes.
Regards,
Mr Kenneth Wesley
Inspection Agent
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces