[email protected] MR. MATT KENNEDY

[buried under 419s]

Return-path: <"dhl.delivering."@alpha.ocn.ne.jp>
Envelope-to:
Delivery-date: Sun, 09 Apr 2017 07:02:05 -0700
Received: from mbkd0334.ocn.ad.jp ([153.149.236.35]:46240)
by with esmtp (Exim 4.88)
(envelope-from <"dhl.delivering."@alpha.ocn.ne.jp>)
id 1cxDPm-0005yx-OA
for ; Sun, 09 Apr 2017 07:02:04 -0700
Received: from mf-smf-ucb013.ocn.ad.jp (mf-smf-ucb013.ocn.ad.jp [153.149.228.232])
by mbkd0334.ocn.ad.jp (Postfix) with ESMTP id 462AC108538B;
Sun, 9 Apr 2017 23:01:21 +0900 (JST)
Received: from mf-smf-ucb013.ocn.ad.jp (mf-smf-ucb013 [153.149.228.232])
by mf-smf-ucb013.ocn.ad.jp (Postfix) with ESMTP id 256BCA00238;
Sun, 9 Apr 2017 23:01:21 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb021 (mv-mta-ucb021.ocn.ad.jp [153.149.142.84])
by mf-smf-ucb013.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id v39E14Qr051006;
Sun, 9 Apr 2017 23:01:16 +0900
Received: from vcwebmail.ocn.ad.jp ([153.149.227.133])
by ntt.pod01.mv-mta-ucb021 with
id 6E1G1v0022tKTyH01E1G47; Sun, 09 Apr 2017 14:01:16 +0000
Received: from mzcstore292.ocn.ad.jp (mz-fcb292p.ocn.ad.jp [180.37.202.229])
by vcwebmail.ocn.ad.jp (Postfix) with ESMTP;
Sun, 9 Apr 2017 23:01:16 +0900 (JST)
Date: Sun, 9 Apr 2017 23:01:16 +0900 (JST)
From: "MR. MATT KENNEDY" <"dhl.delivering."@alpha.ocn.ne.jp>
Reply-To: "MR. MATT KENNEDY" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [130.117.171.236]
X-Spam-Status: Yes, score=22.1
X-Spam-Score: 221
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "m",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Attention Dear Beneficiary: I Just received a call from Mr.
David S White, the Director Of IMF Monitoring FUND in Benin Republic that
your $15.2 Million USD cash payment ATM CARD which we have sent to you but
it returned back due to wrong address provided, Reconfirm to us with your
full details to enable us deliver your ATM package to your doorstep without
any delay. Please note that it will only cost you the delivery fee. to have
this Card Delivered to your Doorstep, [...]

Content analysis details: (22.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dhl.courier.company898[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.236.35>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[153.149.236.35 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[153.149.236.35 listed in bb.barracudacentral.org]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[153.149.236.35 listed in bl.mailspike.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[153.149.236.35 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 T_HK_NAME_MR_MRS No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Attention Dear Beneficiary:


Attention Dear Beneficiary:

I Just received a call from Mr. David S White, the Director Of IMF Monitoring FUND
in Benin Republic that your $15.2 Million USD cash payment ATM CARD which we have
sent to you but it returned back due to wrong address provided, Reconfirm to us with
your full details to enable us deliver your ATM package to your doorstep without any
delay. Please note that it will only cost you the delivery fee. to have this Card
Delivered to your Doorstep,

Your full name......................
Your current address................
Your phone number...................
Your country........................

YOUR FREE TO CALL THIS NUMBER +229-6268-6553
MR. MATT KENNEDY,
MANAGER, DHL FOREIGN DELIVERY SECTION
EMAIL( [email protected] )