#389488 by buried under 419s
Thu Jun 20, 2019 9:08 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 2Je/FmSbC106OgAAjbubUg
for <>; Thu, 20 Jun 2019 07:42:44 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Jun 2019 07:42:44 -0700
Received: from cloud.pozzibuono.com ([173.237.185.91]:38124)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hdyGx-0003rr-Bm
for ; Thu, 20 Jun 2019 07:42:44 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=maveq.com.py; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=p8WgxfLLiAW72euxSyNkabuI3994Y9KAQ/HrhWboZM4=; b=i0/YsZp6G4HHt0+/G0SxqOnwez
m6jC77YqnXI8sdT0YGLWXXChq8NFqtovi8fKFT0svKP/oQZ2wkRt67KB96mSYumlrNjfTpY9Yj6Yf
CY7mWaOdZTgYl6hb7oyA/a2PiCJO/SzArMN6HG49iHK+Fresr/cC+ViO8Pnk72oJvJ46iwG7CkYOu
s4WxwseVr0VKdpPRPIEF4hKGohLwZBrsRY7/Zb6NxgEhUcyVvklq87ofREotTDUVSvXn1Okk6npMJ
6XNR216CSWrvppW9HWZWeWhtJZBHiUGStT4Tn1rszgyr9avdSiDltcrNL4Zg2fykJGX2v2YMm22S1
gwqatsyw==;
Received: from [216.176.190.165] (port=38848 helo=uznews.infoupply.com)
by cloud.pozzibuono.com with esmtpa (Exim 4.92)
(envelope-from <[email protected]>)
id 1hdyGI-00037z-Hr; Thu, 20 Jun 2019 14:42:02 +0000
Reply-To: <[email protected]>
From: "Mr Stewart Douglas"<[email protected]>
Date: Thu, 20 Jun 2019 07:42:37 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.pozzibuono.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - maveq.com.py
X-Get-Message-Sender-Via: cloud.pozzibuono.com: authenticated_id: [email protected]
X-Authenticated-Sender: cloud.pozzibuono.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=26.4
X-Spam-Score: 264
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good Day! I am contacting you regarding a special cargo that
has been abandoned here at our warehouse for over a period of 2 years and
when scanned, it revealed an undisclosed sum of money in it. From my findings,
the cargo originated from Europe and the content was not declared as money
by the consignor in order to avoid diversion by the shipping agent, and also
failure to pay the special cargo non-inspection fee of US$1500.00 I strongly
believe the box will contain about US$2.7 million or more. [...]
Content analysis details: (26.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 HK_NAME_MR_MRS No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.6 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** In my private search for a reliable person
Good Day!
I am contacting you regarding a special cargo that has been abandoned here at our
warehouse for over a period of 2 years and when scanned, it revealed an undisclosed
sum of money in it. From my findings, the cargo originated from Europe and the
content was not declared as money by the consignor in order to avoid diversion by
the shipping agent, and also failure to pay the special cargo non-inspection fee of
US$1500.00 I strongly believe the box will contain about US$2.7 million or more.
In my private search for a reliable person, my proposal now is to present you as the
recipient of the cargo since the shipper has abandoned it which is a possibility due
to the fact it has been abandoned for a period whereby a new beneficiary can be
presented to the clearance department for claim and also my position at this
shipping service. Alternatively, I can personally bring it myself and then we share
the total money in the box equally.
(1) Full Names, (2) Residential Address, (3) Phone Numbers, (4) Fax Numbers: (5)
Email Address, (6) Nationality, (7) Sex, (8) Age, (9) Occupation.
Regards,
Mr.Stewart Douglas
Delivered-To:
Received: from
by with LMTP id 2Je/FmSbC106OgAAjbubUg
for <>; Thu, 20 Jun 2019 07:42:44 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Jun 2019 07:42:44 -0700
Received: from cloud.pozzibuono.com ([173.237.185.91]:38124)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hdyGx-0003rr-Bm
for ; Thu, 20 Jun 2019 07:42:44 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=maveq.com.py; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=p8WgxfLLiAW72euxSyNkabuI3994Y9KAQ/HrhWboZM4=; b=i0/YsZp6G4HHt0+/G0SxqOnwez
m6jC77YqnXI8sdT0YGLWXXChq8NFqtovi8fKFT0svKP/oQZ2wkRt67KB96mSYumlrNjfTpY9Yj6Yf
CY7mWaOdZTgYl6hb7oyA/a2PiCJO/SzArMN6HG49iHK+Fresr/cC+ViO8Pnk72oJvJ46iwG7CkYOu
s4WxwseVr0VKdpPRPIEF4hKGohLwZBrsRY7/Zb6NxgEhUcyVvklq87ofREotTDUVSvXn1Okk6npMJ
6XNR216CSWrvppW9HWZWeWhtJZBHiUGStT4Tn1rszgyr9avdSiDltcrNL4Zg2fykJGX2v2YMm22S1
gwqatsyw==;
Received: from [216.176.190.165] (port=38848 helo=uznews.infoupply.com)
by cloud.pozzibuono.com with esmtpa (Exim 4.92)
(envelope-from <[email protected]>)
id 1hdyGI-00037z-Hr; Thu, 20 Jun 2019 14:42:02 +0000
Reply-To: <[email protected]>
From: "Mr Stewart Douglas"<[email protected]>
Date: Thu, 20 Jun 2019 07:42:37 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.pozzibuono.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - maveq.com.py
X-Get-Message-Sender-Via: cloud.pozzibuono.com: authenticated_id: [email protected]
X-Authenticated-Sender: cloud.pozzibuono.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=26.4
X-Spam-Score: 264
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good Day! I am contacting you regarding a special cargo that
has been abandoned here at our warehouse for over a period of 2 years and
when scanned, it revealed an undisclosed sum of money in it. From my findings,
the cargo originated from Europe and the content was not declared as money
by the consignor in order to avoid diversion by the shipping agent, and also
failure to pay the special cargo non-inspection fee of US$1500.00 I strongly
believe the box will contain about US$2.7 million or more. [...]
Content analysis details: (26.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 HK_NAME_MR_MRS No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.6 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** In my private search for a reliable person
Good Day!
I am contacting you regarding a special cargo that has been abandoned here at our
warehouse for over a period of 2 years and when scanned, it revealed an undisclosed
sum of money in it. From my findings, the cargo originated from Europe and the
content was not declared as money by the consignor in order to avoid diversion by
the shipping agent, and also failure to pay the special cargo non-inspection fee of
US$1500.00 I strongly believe the box will contain about US$2.7 million or more.
In my private search for a reliable person, my proposal now is to present you as the
recipient of the cargo since the shipper has abandoned it which is a possibility due
to the fact it has been abandoned for a period whereby a new beneficiary can be
presented to the clearance department for claim and also my position at this
shipping service. Alternatively, I can personally bring it myself and then we share
the total money in the box equally.
(1) Full Names, (2) Residential Address, (3) Phone Numbers, (4) Fax Numbers: (5)
Email Address, (6) Nationality, (7) Sex, (8) Age, (9) Occupation.
Regards,
Mr.Stewart Douglas
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces