#377633 by buried under 419s
Sat Dec 01, 2018 6:29 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id iK7zKh0IA1ytDwAAjbubUg
for <>; Sat, 01 Dec 2018 14:15:57 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 01 Dec 2018 14:15:57 -0800
Received: from sonic304-12.consmr.mail.bf2.yahoo.com ([74.6.128.35]:39043)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gTDYH-00011x-6Q
for ; Sat, 01 Dec 2018 14:15:57 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aol.fr; s=a2048; t=1543702506; bh=9dTm93lbShlXPvZ7a4h2MQDhOxe+rYawG30/PX7M2ug=; h=Date:From:Subject:References:From:Subject; b=nMRhlbULLJCLkbjuQilRy7VrmOXRrFJLdJDZXT3QBwuooaI7GFO+M4hx/R5gn/wHeplguW66x94CbGR/pBwu3PG6K/SbM07p/iHGrnp30mEOKBpvVuDC9K+03drzYbiiLAy6ZUtmYg+hRlbBJp70KTC4GROUH61cf7F8iAgeVW5S5xm1aymE2BLdxBw6U5znYqFCXBE8m9w7W/qKQkhGM+vigrQZZMNguzr+pC/G1FqiOX3PUYZd0hQ/FQvnyWPjuEyq2M8E0cW/hUIp1RZju+W0FsGmxX8bph9IiiTlaW8Q0ev9c6wF0v0YlDhZuVPrqF4TffbJDhm+0RjlhFiUuQ==
X-YMail-OSG: aPR4p4YVM1khmmb3QsqZ3EB_LafxOc7qpXb3Pr_ZB42cxVvhl4bpF_78zNm.ljn
_xgVr30d6W2wCgt70EgP8M7M20n7ZHD.83e85AUiFY7KTQJZ11RJ3ABFVcBEL8Ds4ptL.zYIiIsf
WDCmK3zvPCj8.xwwmduGVA_wXS5cDhDxGdBscy09lSKF2X8CLBNgf.dkNF22p0bSZzGtHgompmIQ
1zWn9nqVTDfPMy8lcDzqxV85gMFSaP7QtMfTA5JWjjr3.6cfrXxz7oryr22zz9b_MZPpQv_Q9xtc
r6eyZb7Icy6wQnnEcaboPKnMacc1zma21.5KbbxETdQSVgNIk0M47ZLVTeZ.E2c9XOHIvdVYXUT0
IBWA.BSBcea3kX9fnQwvHfqXsHAkoTkY7XlHvw_EVEsAGphRNGFw7chzn0jgoi5yewRdl0sMBIwH
UYG_8UenO_1f7c1vM__zpeUmYP257.PkL2X9MNfz0MR0Fuc6F7CqpoJOh8i.Mx_0USt0AL26Cevd
kBBWBP.fuKadjRhTigYy2Ll3HmakFFxLHf9HxWshJdEjpe4jARQgJU3t9qipF.nH.mdfuYx1SWjF
qeTmwYgMpGgJAnGaSpHT3jBeo1mlXRtA_N62mdZYXM0W8TrWqFtLSo1v7.SKA2kJHKUSyrdLn5ni
c5U9k9wfTW3fpXT1nlPkTOFPlMoe4eahVyO0q9My0dweuSxyohjPZOh8_bLfNLdUjNBhP8KRZgh8
RMzy7Ny_pqKi038Of7Mer2SszUPCvvPYmglui9A8GHU2al7nJp_qOpb925umiKZQjWv6wVlXyb1h
EjkQK1ssMt6uNLA7SPWx9xHO0OS88qQ6g_FPOqqrQ9Ff1mUbXwrNwVExwhcPvaHNdhGY4SQPVxXb
0vasrtauAdDhRB4FvElipEhfRa4i2QpsIyWvcXsatqEkq.sG9KDPfwd3vF_vB3raCc0IBoQMzGfe
jH7At0qj0JkDVuGdMOu1xQEi1XdlwAb92w.1i4dKg3BrTuUs.XHb9QFLxSNXeNLe7PYuIkm6n.O0
z7nbBFCGPvajCvhA1QWVx6A82NMpxwxkOrWkDKcpIqA--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.bf2.yahoo.com with HTTP; Sat, 1 Dec 2018 22:15:06 +0000
Date: Sat, 1 Dec 2018 22:15:02 +0000 (UTC)
From: Remittance Office <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_258422_1772709968.1543702502131"
References: <[email protected]>
X-Mailer: WebService/1.1.12827 aolwebmail Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36
Content-Length: 3006
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Congratulation to you my friend. How are you doing today,
i write to inform you about the good news regarding the release of your funds,be
informed that your funds has been approved and ready to be paid to you, i
want you to go now and buy me iTunes card or amazon gift card of $30 or $50
usd and wait for your funds, thats is all to pay and receive your funds nothing
more my good friend i swear with my blood. Keep me posted with the copy and
receipt of the iTunes card or amazon gift card, scratch and take photo
and send me the copy to proceed immediately today, God is Good my best friend,
hope to meet with you soon i wait. Best Regards Best Regards.Mr. David VictorManaging Director Federal
Minister Of Finance. [...]
Content analysis details: (8.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.6.128.35 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(remittanceoffice3[at]aol.fr)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (remittanceoffice3[at]aol.fr)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-Spam-Flag: YES
Subject: ***SPAM*** PAYMENT APPROVAL.
Congratulation to you my friend.
How are you doing today, i write to inform you about the good news regarding the
release of your funds,be informed that your funds has been approved and ready to be
paid to you, i want you to go now and buy me iTunes card or amazon gift card of $30
or $50 usd and wait for your funds, thats is all to pay and receive your funds
nothing more my good friend i swear with my blood.
Keep me posted with the copy and receipt of the iTunes card or amazon gift card,
scratch and take photo and send me the copy to proceed immediately today, God is
Good my best friend, hope to meet with you soon i wait.
Best Regards
Best Regards.Mr. David VictorManaging Director Federal Minister Of Finance.
Delivered-To:
Received: from
by with LMTP id iK7zKh0IA1ytDwAAjbubUg
for <>; Sat, 01 Dec 2018 14:15:57 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 01 Dec 2018 14:15:57 -0800
Received: from sonic304-12.consmr.mail.bf2.yahoo.com ([74.6.128.35]:39043)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gTDYH-00011x-6Q
for ; Sat, 01 Dec 2018 14:15:57 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aol.fr; s=a2048; t=1543702506; bh=9dTm93lbShlXPvZ7a4h2MQDhOxe+rYawG30/PX7M2ug=; h=Date:From:Subject:References:From:Subject; b=nMRhlbULLJCLkbjuQilRy7VrmOXRrFJLdJDZXT3QBwuooaI7GFO+M4hx/R5gn/wHeplguW66x94CbGR/pBwu3PG6K/SbM07p/iHGrnp30mEOKBpvVuDC9K+03drzYbiiLAy6ZUtmYg+hRlbBJp70KTC4GROUH61cf7F8iAgeVW5S5xm1aymE2BLdxBw6U5znYqFCXBE8m9w7W/qKQkhGM+vigrQZZMNguzr+pC/G1FqiOX3PUYZd0hQ/FQvnyWPjuEyq2M8E0cW/hUIp1RZju+W0FsGmxX8bph9IiiTlaW8Q0ev9c6wF0v0YlDhZuVPrqF4TffbJDhm+0RjlhFiUuQ==
X-YMail-OSG: aPR4p4YVM1khmmb3QsqZ3EB_LafxOc7qpXb3Pr_ZB42cxVvhl4bpF_78zNm.ljn
_xgVr30d6W2wCgt70EgP8M7M20n7ZHD.83e85AUiFY7KTQJZ11RJ3ABFVcBEL8Ds4ptL.zYIiIsf
WDCmK3zvPCj8.xwwmduGVA_wXS5cDhDxGdBscy09lSKF2X8CLBNgf.dkNF22p0bSZzGtHgompmIQ
1zWn9nqVTDfPMy8lcDzqxV85gMFSaP7QtMfTA5JWjjr3.6cfrXxz7oryr22zz9b_MZPpQv_Q9xtc
r6eyZb7Icy6wQnnEcaboPKnMacc1zma21.5KbbxETdQSVgNIk0M47ZLVTeZ.E2c9XOHIvdVYXUT0
IBWA.BSBcea3kX9fnQwvHfqXsHAkoTkY7XlHvw_EVEsAGphRNGFw7chzn0jgoi5yewRdl0sMBIwH
UYG_8UenO_1f7c1vM__zpeUmYP257.PkL2X9MNfz0MR0Fuc6F7CqpoJOh8i.Mx_0USt0AL26Cevd
kBBWBP.fuKadjRhTigYy2Ll3HmakFFxLHf9HxWshJdEjpe4jARQgJU3t9qipF.nH.mdfuYx1SWjF
qeTmwYgMpGgJAnGaSpHT3jBeo1mlXRtA_N62mdZYXM0W8TrWqFtLSo1v7.SKA2kJHKUSyrdLn5ni
c5U9k9wfTW3fpXT1nlPkTOFPlMoe4eahVyO0q9My0dweuSxyohjPZOh8_bLfNLdUjNBhP8KRZgh8
RMzy7Ny_pqKi038Of7Mer2SszUPCvvPYmglui9A8GHU2al7nJp_qOpb925umiKZQjWv6wVlXyb1h
EjkQK1ssMt6uNLA7SPWx9xHO0OS88qQ6g_FPOqqrQ9Ff1mUbXwrNwVExwhcPvaHNdhGY4SQPVxXb
0vasrtauAdDhRB4FvElipEhfRa4i2QpsIyWvcXsatqEkq.sG9KDPfwd3vF_vB3raCc0IBoQMzGfe
jH7At0qj0JkDVuGdMOu1xQEi1XdlwAb92w.1i4dKg3BrTuUs.XHb9QFLxSNXeNLe7PYuIkm6n.O0
z7nbBFCGPvajCvhA1QWVx6A82NMpxwxkOrWkDKcpIqA--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.bf2.yahoo.com with HTTP; Sat, 1 Dec 2018 22:15:06 +0000
Date: Sat, 1 Dec 2018 22:15:02 +0000 (UTC)
From: Remittance Office <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_258422_1772709968.1543702502131"
References: <[email protected]>
X-Mailer: WebService/1.1.12827 aolwebmail Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36
Content-Length: 3006
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Congratulation to you my friend. How are you doing today,
i write to inform you about the good news regarding the release of your funds,be
informed that your funds has been approved and ready to be paid to you, i
want you to go now and buy me iTunes card or amazon gift card of $30 or $50
usd and wait for your funds, thats is all to pay and receive your funds nothing
more my good friend i swear with my blood. Keep me posted with the copy and
receipt of the iTunes card or amazon gift card, scratch and take photo
and send me the copy to proceed immediately today, God is Good my best friend,
hope to meet with you soon i wait. Best Regards Best Regards.Mr. David VictorManaging Director Federal
Minister Of Finance. [...]
Content analysis details: (8.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.6.128.35 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(remittanceoffice3[at]aol.fr)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (remittanceoffice3[at]aol.fr)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-Spam-Flag: YES
Subject: ***SPAM*** PAYMENT APPROVAL.
Congratulation to you my friend.
How are you doing today, i write to inform you about the good news regarding the
release of your funds,be informed that your funds has been approved and ready to be
paid to you, i want you to go now and buy me iTunes card or amazon gift card of $30
or $50 usd and wait for your funds, thats is all to pay and receive your funds
nothing more my good friend i swear with my blood.
Keep me posted with the copy and receipt of the iTunes card or amazon gift card,
scratch and take photo and send me the copy to proceed immediately today, God is
Good my best friend, hope to meet with you soon i wait.
Best Regards
Best Regards.Mr. David VictorManaging Director Federal Minister Of Finance.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces