#391297 by buried under 419s
Wed Jul 10, 2019 9:33 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 10 Jul 2019 17:05:08 -0700
Received: from [129.213.104.50] (port=33558 helo=zimbracloudsuite.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hlMaA-0007Bj-MQ
for ; Wed, 10 Jul 2019 17:05:08 -0700
Received: from localhost (localhost [127.0.0.1])
by zimbracloudsuite.com (Postfix) with ESMTP id 3B2F32D9BE5
for <>; Wed, 10 Jul 2019 23:59:58 +0000 (UTC)
Received: from zimbracloudsuite.com ([127.0.0.1])
by localhost (localhost [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id nizgp4eIs1Mf for <>;
Wed, 10 Jul 2019 23:59:58 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
by zimbracloudsuite.com (Postfix) with ESMTP id 319A62DC096
for <>; Wed, 10 Jul 2019 23:55:10 +0000 (UTC)
X-Virus-Scanned: amavisd-new at zmc.com
Received: from zimbracloudsuite.com ([127.0.0.1])
by localhost (localhost [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id neIZLyXyYlPg for <>;
Wed, 10 Jul 2019 23:55:10 +0000 (UTC)
Received: from [37.49.230.212] (unknown [192.168.10.1])
by zimbracloudsuite.com (Postfix) with ESMTP id D4F1F2DADD9
for <>; Wed, 10 Jul 2019 23:52:57 +0000 (UTC)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To:
From: "Mr.Charles Juntikka, LLP" <[email protected]>
Date: Thu, 11 Jul 2019 01:52:53 +0200
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=31.4
X-Spam-Score: 314
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary. THIS IS FOR YOUR ATTENTION. We wish to notify
you again that you were listed as a beneficiary to the total sum of US10,600,000.00
Million (Ten Million Six Hundred Thousand United States Dollars) in the codicil
and last testament of the deceased. (Name now withheld since this is our
second letter to you). [...]
Content analysis details: (31.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.0 MILLION_USD BODY: Talks about millions of dollars
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[129.213.104.50 listed in psbl.surriel.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(charlesjka[at]lawyer.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=c ... er.com;ip=
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[129.213.104.50 listed in bl.score.senderscore.com]
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 SPOOFED_FREEMAIL_NO_RDNS From T_SPOOFED_FREEMAIL and no rDNS
2.2 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
1.2 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Second Letter (Another Notice)
Dear Beneficiary.
THIS IS FOR YOUR ATTENTION.
We wish to notify you again that you were listed as a beneficiary to the total sum
of US10,600,000.00 Million (Ten Million Six Hundred Thousand United States Dollars)
in the codicil and last testament of the deceased. (Name now withheld since this is
our second letter to you).
We contacted you based on the fact you bear same surname with the deceased man which
makes you eligible to the inheritance. All the legal papers will be processed in
your name.
In your acceptance of this deal, we request that you kindly forward to us your
details such as; your current telephone and a forwarding address to enable us file
necessary documents at our high court probate division for the release of this sum
of money.
Please contact me on this address: [email protected] for further details.
Yours Faithfully,
Charles Juntikka, LLP.
Envelope-to:
Delivery-date: Wed, 10 Jul 2019 17:05:08 -0700
Received: from [129.213.104.50] (port=33558 helo=zimbracloudsuite.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hlMaA-0007Bj-MQ
for ; Wed, 10 Jul 2019 17:05:08 -0700
Received: from localhost (localhost [127.0.0.1])
by zimbracloudsuite.com (Postfix) with ESMTP id 3B2F32D9BE5
for <>; Wed, 10 Jul 2019 23:59:58 +0000 (UTC)
Received: from zimbracloudsuite.com ([127.0.0.1])
by localhost (localhost [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id nizgp4eIs1Mf for <>;
Wed, 10 Jul 2019 23:59:58 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
by zimbracloudsuite.com (Postfix) with ESMTP id 319A62DC096
for <>; Wed, 10 Jul 2019 23:55:10 +0000 (UTC)
X-Virus-Scanned: amavisd-new at zmc.com
Received: from zimbracloudsuite.com ([127.0.0.1])
by localhost (localhost [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id neIZLyXyYlPg for <>;
Wed, 10 Jul 2019 23:55:10 +0000 (UTC)
Received: from [37.49.230.212] (unknown [192.168.10.1])
by zimbracloudsuite.com (Postfix) with ESMTP id D4F1F2DADD9
for <>; Wed, 10 Jul 2019 23:52:57 +0000 (UTC)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To:
From: "Mr.Charles Juntikka, LLP" <[email protected]>
Date: Thu, 11 Jul 2019 01:52:53 +0200
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=31.4
X-Spam-Score: 314
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary. THIS IS FOR YOUR ATTENTION. We wish to notify
you again that you were listed as a beneficiary to the total sum of US10,600,000.00
Million (Ten Million Six Hundred Thousand United States Dollars) in the codicil
and last testament of the deceased. (Name now withheld since this is our
second letter to you). [...]
Content analysis details: (31.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.0 MILLION_USD BODY: Talks about millions of dollars
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[129.213.104.50 listed in psbl.surriel.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(charlesjka[at]lawyer.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=c ... er.com;ip=
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[129.213.104.50 listed in bl.score.senderscore.com]
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 SPOOFED_FREEMAIL_NO_RDNS From T_SPOOFED_FREEMAIL and no rDNS
2.2 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
1.2 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Second Letter (Another Notice)
Dear Beneficiary.
THIS IS FOR YOUR ATTENTION.
We wish to notify you again that you were listed as a beneficiary to the total sum
of US10,600,000.00 Million (Ten Million Six Hundred Thousand United States Dollars)
in the codicil and last testament of the deceased. (Name now withheld since this is
our second letter to you).
We contacted you based on the fact you bear same surname with the deceased man which
makes you eligible to the inheritance. All the legal papers will be processed in
your name.
In your acceptance of this deal, we request that you kindly forward to us your
details such as; your current telephone and a forwarding address to enable us file
necessary documents at our high court probate division for the release of this sum
of money.
Please contact me on this address: [email protected] for further details.
Yours Faithfully,
Charles Juntikka, LLP.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces