#390962 by buried under 419s
Sun Jul 07, 2019 3:32 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 07 Jul 2019 12:07:11 -0700
Received: from [120.195.194.66] (port=60265 helo=hanse-heating.com)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1hkCV9-00036H-08
for ; Sun, 07 Jul 2019 12:07:11 -0700
Received: from User ([172.16.10.254])
(envelope-sender <[email protected]>)
by 192.168.0.28 with ESMTP
for <>; Mon, 08 Jul 2019 02:59:17 +0800
Reply-To: <[email protected]>
From: "Han Socheth"<[email protected]>
Date: Mon, 8 Jul 2019 01:59:17 +0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.9
X-Spam-Score: 249
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Foreign Trade Bank of Cambodia No. 33CD, Street 169,Sangkat
Veal Vong,Khan 7 Makara, Phnom Penh,Cambodia. Greetings It will interest
you to know that I have a proposal that will be of great benefit which would
further create a financial opportunity for both of us. Most importantly,
I will need you to promise to keep whatever you learn from me between us even
if you decide not to go along with me. I will make more details available
to you on receipt of a positive response from you. [...]
Content analysis details: (24.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(socheth.han13[at]yahoo.com)
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.2 FSL_BULK_SIG Bulk signature with no Unsubscribe
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_USER From misspaced, from "User"
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.1 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** PLS. ATTEND URGENTLY
Foreign Trade Bank of Cambodia
No. 33CD, Street 169,Sangkat
Veal Vong,Khan 7 Makara,
Phnom Penh,Cambodia.
Greetings
It will interest you to know that I have a proposal that will be of great benefit
which would further create a financial opportunity for both of us. Most
importantly, I will need you to promise to keep whatever you learn from me between
us even if you decide not to go along with me. I will make more details available to
you on receipt of a positive response from you.
I anticipate your urgent respond in a shortest possible time and your maximum
cooperation for more details.
Best Regards,
Mr.Han Socheth
Board Directors
Foreign Trade Bank of Cambodia
Phnom Penh
Envelope-to:
Delivery-date: Sun, 07 Jul 2019 12:07:11 -0700
Received: from [120.195.194.66] (port=60265 helo=hanse-heating.com)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1hkCV9-00036H-08
for ; Sun, 07 Jul 2019 12:07:11 -0700
Received: from User ([172.16.10.254])
(envelope-sender <[email protected]>)
by 192.168.0.28 with ESMTP
for <>; Mon, 08 Jul 2019 02:59:17 +0800
Reply-To: <[email protected]>
From: "Han Socheth"<[email protected]>
Date: Mon, 8 Jul 2019 01:59:17 +0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.9
X-Spam-Score: 249
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Foreign Trade Bank of Cambodia No. 33CD, Street 169,Sangkat
Veal Vong,Khan 7 Makara, Phnom Penh,Cambodia. Greetings It will interest
you to know that I have a proposal that will be of great benefit which would
further create a financial opportunity for both of us. Most importantly,
I will need you to promise to keep whatever you learn from me between us even
if you decide not to go along with me. I will make more details available
to you on receipt of a positive response from you. [...]
Content analysis details: (24.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(socheth.han13[at]yahoo.com)
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.2 FSL_BULK_SIG Bulk signature with no Unsubscribe
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_USER From misspaced, from "User"
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.1 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** PLS. ATTEND URGENTLY
Foreign Trade Bank of Cambodia
No. 33CD, Street 169,Sangkat
Veal Vong,Khan 7 Makara,
Phnom Penh,Cambodia.
Greetings
It will interest you to know that I have a proposal that will be of great benefit
which would further create a financial opportunity for both of us. Most
importantly, I will need you to promise to keep whatever you learn from me between
us even if you decide not to go along with me. I will make more details available to
you on receipt of a positive response from you.
I anticipate your urgent respond in a shortest possible time and your maximum
cooperation for more details.
Best Regards,
Mr.Han Socheth
Board Directors
Foreign Trade Bank of Cambodia
Phnom Penh
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces