#364544 by buried under 419s
Mon May 14, 2018 8:39 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 14 May 2018 13:42:18 -0700
Received: from [211.100.41.13] (port=37169 helo=smtprz20.163.net)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fIKIP-0005EM-FS
for ; Mon, 14 May 2018 13:42:18 -0700
Received: from User (unknown [172.24.202.28])
by club.tom18.cn (Postfix) with SMTP id 114EF17A1449;
Tue, 15 May 2018 04:40:25 +0800 (CST)
Reply-To: <[email protected]>
From: "Mr. Williams Chapman"<[email protected]>
Date: Mon, 14 May 2018 13:40:43 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=26.2
X-Spam-Score: 262
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good Day, I am Diplomat Williams Chapman from the IMF UNIT.
I am writing you this mail to notify you about the release of your consignments
funds that has been held in the IMF custody for so long. After proper scrutiny,
the new appointed Head of Department Mr. Jaime Caruana has officially granted
the release of your consignment funds to be delivered to you by the IMF diplomatic
carriage. [...]
Content analysis details: (26.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(williammiller009[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 HK_NAME_MR_MRS No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_USER From misspaced, from "User"
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 FAKE_REPLY_C No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
1.7 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Claims Reference
Good Day,
I am Diplomat Williams Chapman from the IMF UNIT. I am writing you this mail to
notify you about the release of your consignments funds that has been held in the
IMF custody for so long. After proper scrutiny, the new appointed Head of Department
Mr. Jaime Caruana has officially granted the release of your consignment funds to be
delivered to you by the IMF diplomatic carriage.
You are hereby advice to confirm your home address for the delivery of your
consignment to your door step, as i have been assigned to deliver the
consignment fund to you. Please respond via this email address(
[email protected] ) and here is my telephone number
(215) 693-3794 . I will be expecting to hear from you asap for urgent delivery.
Sincerely,
Mr. Williams Chapman.
Reply Email: [email protected]
Envelope-to:
Delivery-date: Mon, 14 May 2018 13:42:18 -0700
Received: from [211.100.41.13] (port=37169 helo=smtprz20.163.net)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fIKIP-0005EM-FS
for ; Mon, 14 May 2018 13:42:18 -0700
Received: from User (unknown [172.24.202.28])
by club.tom18.cn (Postfix) with SMTP id 114EF17A1449;
Tue, 15 May 2018 04:40:25 +0800 (CST)
Reply-To: <[email protected]>
From: "Mr. Williams Chapman"<[email protected]>
Date: Mon, 14 May 2018 13:40:43 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=26.2
X-Spam-Score: 262
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good Day, I am Diplomat Williams Chapman from the IMF UNIT.
I am writing you this mail to notify you about the release of your consignments
funds that has been held in the IMF custody for so long. After proper scrutiny,
the new appointed Head of Department Mr. Jaime Caruana has officially granted
the release of your consignment funds to be delivered to you by the IMF diplomatic
carriage. [...]
Content analysis details: (26.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(williammiller009[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 HK_NAME_MR_MRS No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_USER From misspaced, from "User"
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 FAKE_REPLY_C No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
1.7 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Claims Reference
Good Day,
I am Diplomat Williams Chapman from the IMF UNIT. I am writing you this mail to
notify you about the release of your consignments funds that has been held in the
IMF custody for so long. After proper scrutiny, the new appointed Head of Department
Mr. Jaime Caruana has officially granted the release of your consignment funds to be
delivered to you by the IMF diplomatic carriage.
You are hereby advice to confirm your home address for the delivery of your
consignment to your door step, as i have been assigned to deliver the
consignment fund to you. Please respond via this email address(
[email protected] ) and here is my telephone number
(215) 693-3794 . I will be expecting to hear from you asap for urgent delivery.
Sincerely,
Mr. Williams Chapman.
Reply Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces