#386549 by buried under 419s
Fri May 24, 2019 8:40 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id yKx6C+QM6FwXSgAAjbubUg
for <>; Fri, 24 May 2019 08:25:24 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 24 May 2019 08:25:24 -0700
Received: from relay1-e1.triacom.ua ([217.76.192.204]:33407)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hUC4Q-0004vJ-KE
for ; Fri, 24 May 2019 08:25:24 -0700
Received: from [109.237.92.167] (helo=User)
by relay.triacom.ua with smtp (Exim 4.91)
(envelope-from <[email protected]>)
id 1hUC3Q-0000eg-Lk; Fri, 24 May 2019 18:24:21 +0300
Reply-To: <[email protected]>
From: "ANNA BLAIR"<[email protected]>
Date: Fri, 24 May 2019 16:24:16 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.7
X-Spam-Score: 247
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear Friend, Let me first of all inform you, I got your
email address from a mail Directory and decided to mail you for a permission
to go ahead. I am Mrs. Anna Blair from United Kingdom, married to Dr. Anthony
R. Blair who worked with Texaco Oil Company in Malaysia before he died in
a plane crash on his way to a Board meeting. My Husband and I were married
but without any children. Since his death I decided not to re-marry and presently
I am 79 Years old. When my late husband was Alive he deposited the sum of
$11.5M. (Eleven Million Five Hundred Thousand U.S. Dollars) with a Bank.
[...]
Content analysis details: (24.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.4 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?109.237.92.167>]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[109.237.92.167 listed in zen.spamhaus.org]
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/,
medium trust
[217.76.192.204 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(annanthonyblair[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mblair872[at]yahoo.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
1.1 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Hope i can trust you
My Dear Friend,
Let me first of all inform you, I got your email address from a mail Directory and
decided to mail you for a permission to go ahead. I am
Mrs. Anna Blair from United Kingdom, married to Dr. Anthony R. Blair who worked with
Texaco Oil Company in Malaysia before he died in a plane
crash on his way to a Board meeting. My Husband and I were married but without any
children. Since his death I decided not to re-marry and
presently I am 79 Years old. When my late husband was Alive he deposited the sum of
$11.5M. (Eleven Million Five Hundred Thousand U.S. Dollars)
with a Bank.
Presently this money is still with the Bank and the management just Wrote me as the
beneficiary to come forward to receive the money or
rather Issue a letter of authority to somebody to receive it on my behalf. I am
presently in a hospital where I have been undergoing
treatment Cancer of the lungs. I have since lost my ability to talk and my doctors
have told me that I have only a few months to live so I think
the best thing to do is to use the money for charity purposes.
I want a person who is trustworthy that I will make the beneficiary of my late
Husband's Fund deposited with the bank so that the person can
get the money and utilize 70% of this money to fund churches, orphanages and widows
around the world.
As soon as I receive your reply I shall give you the contact details of the Bank. I
will also issue you a letter of authority that will prove
you as the new beneficiary of this fund.Please assure me that you will act
accordingly as I stated here in and Keep this contact confidential
till such a time this funds get to your Custody. This is to ensure that nothing
jeopardizes my last wish on earth.
I await your urgent reply.
Regards,
Mrs. Anna Blair.
Delivered-To:
Received: from
by with LMTP id yKx6C+QM6FwXSgAAjbubUg
for <>; Fri, 24 May 2019 08:25:24 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 24 May 2019 08:25:24 -0700
Received: from relay1-e1.triacom.ua ([217.76.192.204]:33407)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hUC4Q-0004vJ-KE
for ; Fri, 24 May 2019 08:25:24 -0700
Received: from [109.237.92.167] (helo=User)
by relay.triacom.ua with smtp (Exim 4.91)
(envelope-from <[email protected]>)
id 1hUC3Q-0000eg-Lk; Fri, 24 May 2019 18:24:21 +0300
Reply-To: <[email protected]>
From: "ANNA BLAIR"<[email protected]>
Date: Fri, 24 May 2019 16:24:16 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.7
X-Spam-Score: 247
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear Friend, Let me first of all inform you, I got your
email address from a mail Directory and decided to mail you for a permission
to go ahead. I am Mrs. Anna Blair from United Kingdom, married to Dr. Anthony
R. Blair who worked with Texaco Oil Company in Malaysia before he died in
a plane crash on his way to a Board meeting. My Husband and I were married
but without any children. Since his death I decided not to re-marry and presently
I am 79 Years old. When my late husband was Alive he deposited the sum of
$11.5M. (Eleven Million Five Hundred Thousand U.S. Dollars) with a Bank.
[...]
Content analysis details: (24.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.4 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?109.237.92.167>]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[109.237.92.167 listed in zen.spamhaus.org]
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/,
medium trust
[217.76.192.204 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(annanthonyblair[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mblair872[at]yahoo.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
1.1 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Hope i can trust you
My Dear Friend,
Let me first of all inform you, I got your email address from a mail Directory and
decided to mail you for a permission to go ahead. I am
Mrs. Anna Blair from United Kingdom, married to Dr. Anthony R. Blair who worked with
Texaco Oil Company in Malaysia before he died in a plane
crash on his way to a Board meeting. My Husband and I were married but without any
children. Since his death I decided not to re-marry and
presently I am 79 Years old. When my late husband was Alive he deposited the sum of
$11.5M. (Eleven Million Five Hundred Thousand U.S. Dollars)
with a Bank.
Presently this money is still with the Bank and the management just Wrote me as the
beneficiary to come forward to receive the money or
rather Issue a letter of authority to somebody to receive it on my behalf. I am
presently in a hospital where I have been undergoing
treatment Cancer of the lungs. I have since lost my ability to talk and my doctors
have told me that I have only a few months to live so I think
the best thing to do is to use the money for charity purposes.
I want a person who is trustworthy that I will make the beneficiary of my late
Husband's Fund deposited with the bank so that the person can
get the money and utilize 70% of this money to fund churches, orphanages and widows
around the world.
As soon as I receive your reply I shall give you the contact details of the Bank. I
will also issue you a letter of authority that will prove
you as the new beneficiary of this fund.Please assure me that you will act
accordingly as I stated here in and Keep this contact confidential
till such a time this funds get to your Custody. This is to ensure that nothing
jeopardizes my last wish on earth.
I await your urgent reply.
Regards,
Mrs. Anna Blair.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces