by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 6ANpLZHB5VmyCAAAjbubUg
for <>; Tue, 17 Oct 2017 01:38:41 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 17 Oct 2017 01:38:41 -0700
Received: from johnny.heliohost.org ([65.19.141.67]:46530)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e4NOZ-0000Za-MF
for ; Tue, 17 Oct 2017 01:38:41 -0700
Received: from [::1] (port=58984 helo=johnny.heliohost.org)
by johnny.heliohost.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.8Cool
(envelope-from <[email protected]>)
id 1e4NNB-00040Z-KZ; Tue, 17 Oct 2017 01:37:15 -0700
Received: from 154.66.24.251 ([154.66.24.251]) by officce.heliohost.org
(Horde Framework) with HTTPS; Tue, 17 Oct 2017 01:37:13 -0700
Date: Tue, 17 Oct 2017 01:37:13 -0700
Message-ID: <20171017013713.Horde.WYDKKV_So7MZ18xQS7ZKvi3@officce.heliohost.org>
From: Director Payment Unit <[email protected]>
To:
Reply-to: [email protected]
User-Agent: Horde Application Framework 5
Content-Type: text/html; charset=utf-8
Content-Description: HTML Message
MIME-Version: 1.0
Content-Disposition: inline
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - johnny.heliohost.org
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - officce.heliohost.org
X-Get-Message-Sender-Via: johnny.heliohost.org: authenticated_id: [email protected]
X-Authenticated-Sender: johnny.heliohost.org: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn, I write to notify you that our Diplomatic Agent has
arrived at Washington D.C International Airport with your ATM Card Package.
His Name is Mr Bill Farrier .He is with your ATM CARD Package Which Contains
Your Compensation Payment worth of Ten Million Five Hundred Thousand United
State Dollars ($10.5 Million, US Dollars) From [...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[65.19.141.67 listed in bb.barracudacentral.org]
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FSL_HELO_BARE_IP_2 No description available.
0.0 LOTTO_DEPT Claims Department
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Are You Aware ??
Attn,
I write to notify you that our Diplomatic Agent has arrived at Washington D.C
International Airport with your ATM Card Package. His Name is Mr Bill Farrier .He
is
with your ATM CARD Package Which Contains Your Compensation Payment worth of Ten
Million Five Hundred Thousand United State Dollars ($10.5 Million, US Dollars) From
United Nations Fund Compensation Unit office here in Lagos Nigeria.
Email Him your address on how to reach to your door step including your phone
number. Don’t let Him know how much the package contain, try follow the
instruction as I
told you. Email him with this email address ( [email protected] )Tel
:(202) 241-2357 Reconfirm your delivering information to him now. be informed that
you
will have only $370 which is the Non-Inspection fee .
Your Name___
Your Country__
Your Address___
Your Age
Your Occupation
Your Airport
Direct Phone number__
Thanks
Barrister.Edward Zander
(DHL Nigeria )
Phone +234-8182895265
Delivered-To:
Received: from
by with LMTP id 6ANpLZHB5VmyCAAAjbubUg
for <>; Tue, 17 Oct 2017 01:38:41 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 17 Oct 2017 01:38:41 -0700
Received: from johnny.heliohost.org ([65.19.141.67]:46530)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e4NOZ-0000Za-MF
for ; Tue, 17 Oct 2017 01:38:41 -0700
Received: from [::1] (port=58984 helo=johnny.heliohost.org)
by johnny.heliohost.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.8Cool
(envelope-from <[email protected]>)
id 1e4NNB-00040Z-KZ; Tue, 17 Oct 2017 01:37:15 -0700
Received: from 154.66.24.251 ([154.66.24.251]) by officce.heliohost.org
(Horde Framework) with HTTPS; Tue, 17 Oct 2017 01:37:13 -0700
Date: Tue, 17 Oct 2017 01:37:13 -0700
Message-ID: <20171017013713.Horde.WYDKKV_So7MZ18xQS7ZKvi3@officce.heliohost.org>
From: Director Payment Unit <[email protected]>
To:
Reply-to: [email protected]
User-Agent: Horde Application Framework 5
Content-Type: text/html; charset=utf-8
Content-Description: HTML Message
MIME-Version: 1.0
Content-Disposition: inline
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - johnny.heliohost.org
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - officce.heliohost.org
X-Get-Message-Sender-Via: johnny.heliohost.org: authenticated_id: [email protected]
X-Authenticated-Sender: johnny.heliohost.org: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn, I write to notify you that our Diplomatic Agent has
arrived at Washington D.C International Airport with your ATM Card Package.
His Name is Mr Bill Farrier .He is with your ATM CARD Package Which Contains
Your Compensation Payment worth of Ten Million Five Hundred Thousand United
State Dollars ($10.5 Million, US Dollars) From [...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[65.19.141.67 listed in bb.barracudacentral.org]
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FSL_HELO_BARE_IP_2 No description available.
0.0 LOTTO_DEPT Claims Department
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Are You Aware ??
Attn,
I write to notify you that our Diplomatic Agent has arrived at Washington D.C
International Airport with your ATM Card Package. His Name is Mr Bill Farrier .He
is
with your ATM CARD Package Which Contains Your Compensation Payment worth of Ten
Million Five Hundred Thousand United State Dollars ($10.5 Million, US Dollars) From
United Nations Fund Compensation Unit office here in Lagos Nigeria.
Email Him your address on how to reach to your door step including your phone
number. Don’t let Him know how much the package contain, try follow the
instruction as I
told you. Email him with this email address ( [email protected] )Tel
:(202) 241-2357 Reconfirm your delivering information to him now. be informed that
you
will have only $370 which is the Non-Inspection fee .
Your Name___
Your Country__
Your Address___
Your Age
Your Occupation
Your Airport
Direct Phone number__
Thanks
Barrister.Edward Zander
(DHL Nigeria )
Phone +234-8182895265
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
