#324075 by buried under 419s
Sat Apr 01, 2017 11:29 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 01 Apr 2017 19:33:13 -0700
Received: from mail.agentur-rauhes-haus.de ([213.209.114.107]:35503)
by with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1cuVKI-0000Bh-U7
for ; Sat, 01 Apr 2017 19:33:13 -0700
Received: from ARH-EXC.arh-hamburg.lan (192.168.22.45) by
ARH-EXC.arh-hamburg.lan (192.168.22.45) with Microsoft SMTP Server (TLS) id
15.0.995.29; Sat, 1 Apr 2017 23:44:31 +0200
Received: from User (192.168.22.252) by ARH-EXC.arh-hamburg.lan
(192.168.22.45) with Microsoft SMTP Server id 15.0.995.29 via Frontend
Transport; Sat, 1 Apr 2017 23:44:19 +0200
Reply-To: <[email protected]>
From: Mr.Scott Forney <[email protected]>
Date: Sat, 1 Apr 2017 22:44:02 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 170330-1, 03/30/2017), Outbound message
X-Antivirus-Status: Clean
Message-ID: <[email protected]>
To: Undisclosed recipients:;
X-Spam-Status: Yes, score=20.5
X-Spam-Score: 205
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ATTN DEAR: WE FINALLY CONCLUDED TO EFFECT YOUR PAYMENT OF
$3.500,000.00 USD VIA MONEY GRAM OFFICE BENIN REPUBLIC THIS MORNING BASED
ON THE MEETING HELD IN PRESIDENTIAL OFFICE AS THE BEST AND EASIER WAY FOR
YOU TO CASH YOUR FUNDS IN ANY MONEY GRAM OFFICE NEAR IN YOUR CITY, WELL BASED
ON OUR AGREEMENT WITH MONEY GRAM DIRECTOR JOSEPH EZE, YOUR TRANSFER WILL
START IMMEDIATELY YOU CONTACTED THEM. [...]
Content analysis details: (20.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[213.209.114.107 listed in list.dnswl.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[213.209.114.107 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40un.org;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[213.209.114.107 listed in dnsbl.sorbs.net]
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** ATTN MY DEAR:
ATTN DEAR:
WE FINALLY CONCLUDED TO EFFECT YOUR PAYMENT OF $3.500,000.00 USD VIA MONEY GRAM
OFFICE BENIN REPUBLIC THIS MORNING BASED ON THE MEETING HELD IN PRESIDENTIAL OFFICE
AS THE BEST AND EASIER WAY FOR YOU TO CASH YOUR FUNDS IN ANY MONEY GRAM OFFICE NEAR
IN YOUR CITY, WELL BASED ON OUR AGREEMENT WITH MONEY GRAM DIRECTOR JOSEPH EZE, YOUR
TRANSFER WILL START IMMEDIATELY YOU CONTACTED THEM.
CONTACT THE MONEY GRAM OFFICE BENIN REPUBLIC WITH ALL YOUR INFORMATION SUCH AS FOLLOW:
YOUR NAME......
YOUR HOME ADDRESS......
YOUR COUNTY/CITY.....
YOUR AGE/SEX.....
YOUR DIRECT PHONE NUMBER......
YOUR ID COPY.....
YOUR OCCUPATION.....
MONEY GRAM OFFICE:
DIR, JOSEPH EZE
TEL: +229-98759377
E-mail: [email protected]
BEST REGARDS,
Mr.Scott Forney
Envelope-to:
Delivery-date: Sat, 01 Apr 2017 19:33:13 -0700
Received: from mail.agentur-rauhes-haus.de ([213.209.114.107]:35503)
by with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1cuVKI-0000Bh-U7
for ; Sat, 01 Apr 2017 19:33:13 -0700
Received: from ARH-EXC.arh-hamburg.lan (192.168.22.45) by
ARH-EXC.arh-hamburg.lan (192.168.22.45) with Microsoft SMTP Server (TLS) id
15.0.995.29; Sat, 1 Apr 2017 23:44:31 +0200
Received: from User (192.168.22.252) by ARH-EXC.arh-hamburg.lan
(192.168.22.45) with Microsoft SMTP Server id 15.0.995.29 via Frontend
Transport; Sat, 1 Apr 2017 23:44:19 +0200
Reply-To: <[email protected]>
From: Mr.Scott Forney <[email protected]>
Date: Sat, 1 Apr 2017 22:44:02 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 170330-1, 03/30/2017), Outbound message
X-Antivirus-Status: Clean
Message-ID: <[email protected]>
To: Undisclosed recipients:;
X-Spam-Status: Yes, score=20.5
X-Spam-Score: 205
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ATTN DEAR: WE FINALLY CONCLUDED TO EFFECT YOUR PAYMENT OF
$3.500,000.00 USD VIA MONEY GRAM OFFICE BENIN REPUBLIC THIS MORNING BASED
ON THE MEETING HELD IN PRESIDENTIAL OFFICE AS THE BEST AND EASIER WAY FOR
YOU TO CASH YOUR FUNDS IN ANY MONEY GRAM OFFICE NEAR IN YOUR CITY, WELL BASED
ON OUR AGREEMENT WITH MONEY GRAM DIRECTOR JOSEPH EZE, YOUR TRANSFER WILL
START IMMEDIATELY YOU CONTACTED THEM. [...]
Content analysis details: (20.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[213.209.114.107 listed in list.dnswl.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[213.209.114.107 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40un.org;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[213.209.114.107 listed in dnsbl.sorbs.net]
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** ATTN MY DEAR:
ATTN DEAR:
WE FINALLY CONCLUDED TO EFFECT YOUR PAYMENT OF $3.500,000.00 USD VIA MONEY GRAM
OFFICE BENIN REPUBLIC THIS MORNING BASED ON THE MEETING HELD IN PRESIDENTIAL OFFICE
AS THE BEST AND EASIER WAY FOR YOU TO CASH YOUR FUNDS IN ANY MONEY GRAM OFFICE NEAR
IN YOUR CITY, WELL BASED ON OUR AGREEMENT WITH MONEY GRAM DIRECTOR JOSEPH EZE, YOUR
TRANSFER WILL START IMMEDIATELY YOU CONTACTED THEM.
CONTACT THE MONEY GRAM OFFICE BENIN REPUBLIC WITH ALL YOUR INFORMATION SUCH AS FOLLOW:
YOUR NAME......
YOUR HOME ADDRESS......
YOUR COUNTY/CITY.....
YOUR AGE/SEX.....
YOUR DIRECT PHONE NUMBER......
YOUR ID COPY.....
YOUR OCCUPATION.....
MONEY GRAM OFFICE:
DIR, JOSEPH EZE
TEL: +229-98759377
E-mail: [email protected]
BEST REGARDS,
Mr.Scott Forney
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces