by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id SCtqE7KSJVsHBgAAjbubUg
for <>; Sat, 16 Jun 2018 15:44:02 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 16 Jun 2018 15:44:02 -0700
Received: from smtp-client-5c0.tachyon.net.id ([101.255.0.44]:38645)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fUJvJ-0000OC-JN
for ; Sat, 16 Jun 2018 15:44:02 -0700
Received: from localhost (localhost [127.0.0.1])
by smtp-client-5.tachyon.net.id (Postfix) with ESMTP id 55047242CEF
for <>; Sun, 17 Jun 2018 05:43:14 +0700 (WIB)
X-Virus-Scanned: Debian amavisd-new at smptclient-3.tachyon.net.id
X-Spam-Level: *****
Authentication-Results: smtp-client-5.tachyon.net.id (amavisd-new);
dkim=pass (1024-bit key) header.d=bintangbarutama.co.id
Received: from smtp-client-5.tachyon.net.id ([127.0.0.1])
by localhost (smtp-client-5.tachyon.net.id [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id lOtAXTgcFnwI for <>;
Sun, 17 Jun 2018 05:43:10 +0700 (WIB)
Received: from ns4.tachyon.net.id (ns4.tachyon.net.id [101.255.0.6])
by smtp-client-5.tachyon.net.id (Postfix) with ESMTPS id B93D2242CF0
for <>; Sun, 17 Jun 2018 05:43:08 +0700 (WIB)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=bintangbarutama.co.id; s=default; h=Message-ID:Reply-To:Subject:To:From:
Date:Content-Transfer-Encoding:Content-Type:MIME-Version:Sender:Cc:Content-ID
:Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:
Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:
List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=Uci1BVjxnB7x74/YZ6u48Jgj12KW75HfuNzojH+w+zg=; b=ea8hgfQU4590+feATvMvFTa5xD
bsDkRVIKas7z4nZrSQBBd5zxahi/CKHrKzH3vWedAvvVtCqARq7inT+vXFUcWjoezRnI1DqPALBVl
qAf7tbd95B+UIspuUEP6kxJS8jsR5jl/dMytMeTwrgIAUPGTeFR2rSLRi1sLux5PLDaM=;
Received: from [::1] (port=34898 helo=ns4.tachyon.net.id)
by ns4.tachyon.net.id with esmtpa (Exim 4.91)
(envelope-from <[email protected]>)
id 1fTqGZ-0006r0-Jo; Fri, 15 Jun 2018 22:03:55 +0700
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Fri, 15 Jun 2018 22:03:54 +0700
From: [email protected]
To: undisclosed-recipients:;
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.3.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns4.tachyon.net.id
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - bintangbarutama.co.id
X-Get-Message-Sender-Via: ns4.tachyon.net.id: authenticated_id: [email protected]
X-Authenticated-Sender: ns4.tachyon.net.id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=10.6
X-Spam-Score: 106
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beloved My name is Richard Meddings, i work with Standard
Chartered Bank London UK. Our bank is in procession to make a transfer of
5000 pounds to you as an interest payment of your main fund deposited in
our bank. we are going to use money gram system of transfer to post it to
you, and it will have two secret numbers [...]
Content analysis details: (10.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** reply
Dear Beloved
My name is Richard Meddings, i work with Standard Chartered Bank London
UK. Our bank is in procession to make a transfer of 5000 pounds to you
as an interest
payment of your main fund deposited in our bank. we are going to use
money gram system of transfer to post it to you, and it will have two
secret numbers
with the same name.
Our procedure is that you will pay administrative charge of 300 pounds
for us to release this payment immediately. please kindly show us your
interest. call me or send me Sms 447-452-3052-06.
Thank you
Mr. Richard Meddings
department
[email protected]
Fax: +44 (0)20 7710 393
Delivered-To:
Received: from
by with LMTP id SCtqE7KSJVsHBgAAjbubUg
for <>; Sat, 16 Jun 2018 15:44:02 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 16 Jun 2018 15:44:02 -0700
Received: from smtp-client-5c0.tachyon.net.id ([101.255.0.44]:38645)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fUJvJ-0000OC-JN
for ; Sat, 16 Jun 2018 15:44:02 -0700
Received: from localhost (localhost [127.0.0.1])
by smtp-client-5.tachyon.net.id (Postfix) with ESMTP id 55047242CEF
for <>; Sun, 17 Jun 2018 05:43:14 +0700 (WIB)
X-Virus-Scanned: Debian amavisd-new at smptclient-3.tachyon.net.id
X-Spam-Level: *****
Authentication-Results: smtp-client-5.tachyon.net.id (amavisd-new);
dkim=pass (1024-bit key) header.d=bintangbarutama.co.id
Received: from smtp-client-5.tachyon.net.id ([127.0.0.1])
by localhost (smtp-client-5.tachyon.net.id [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id lOtAXTgcFnwI for <>;
Sun, 17 Jun 2018 05:43:10 +0700 (WIB)
Received: from ns4.tachyon.net.id (ns4.tachyon.net.id [101.255.0.6])
by smtp-client-5.tachyon.net.id (Postfix) with ESMTPS id B93D2242CF0
for <>; Sun, 17 Jun 2018 05:43:08 +0700 (WIB)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=bintangbarutama.co.id; s=default; h=Message-ID:Reply-To:Subject:To:From:
Date:Content-Transfer-Encoding:Content-Type:MIME-Version:Sender:Cc:Content-ID
:Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:
Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:
List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=Uci1BVjxnB7x74/YZ6u48Jgj12KW75HfuNzojH+w+zg=; b=ea8hgfQU4590+feATvMvFTa5xD
bsDkRVIKas7z4nZrSQBBd5zxahi/CKHrKzH3vWedAvvVtCqARq7inT+vXFUcWjoezRnI1DqPALBVl
qAf7tbd95B+UIspuUEP6kxJS8jsR5jl/dMytMeTwrgIAUPGTeFR2rSLRi1sLux5PLDaM=;
Received: from [::1] (port=34898 helo=ns4.tachyon.net.id)
by ns4.tachyon.net.id with esmtpa (Exim 4.91)
(envelope-from <[email protected]>)
id 1fTqGZ-0006r0-Jo; Fri, 15 Jun 2018 22:03:55 +0700
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Fri, 15 Jun 2018 22:03:54 +0700
From: [email protected]
To: undisclosed-recipients:;
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.3.3
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns4.tachyon.net.id
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - bintangbarutama.co.id
X-Get-Message-Sender-Via: ns4.tachyon.net.id: authenticated_id: [email protected]
X-Authenticated-Sender: ns4.tachyon.net.id: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=10.6
X-Spam-Score: 106
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beloved My name is Richard Meddings, i work with Standard
Chartered Bank London UK. Our bank is in procession to make a transfer of
5000 pounds to you as an interest payment of your main fund deposited in
our bank. we are going to use money gram system of transfer to post it to
you, and it will have two secret numbers [...]
Content analysis details: (10.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** reply
Dear Beloved
My name is Richard Meddings, i work with Standard Chartered Bank London
UK. Our bank is in procession to make a transfer of 5000 pounds to you
as an interest
payment of your main fund deposited in our bank. we are going to use
money gram system of transfer to post it to you, and it will have two
secret numbers
with the same name.
Our procedure is that you will pay administrative charge of 300 pounds
for us to release this payment immediately. please kindly show us your
interest. call me or send me Sms 447-452-3052-06.
Thank you
Mr. Richard Meddings
department
[email protected]
Fax: +44 (0)20 7710 393
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
