#423838 by buried under 419s
Tue Feb 23, 2021 9:41 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id IAGoCa3YNGAqPgAAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 23 Feb 2021 10:27:57 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 23 Feb 2021 10:27:57 +0000
Received: from [76.72.162.38] (port=52903 helo=mail.linksline.com.sa)
by with esmtp (Exim 4.93)
(envelope-from <[email protected]>)
id 1lEUv6-000489-93
for ; Tue, 23 Feb 2021 10:27:57 +0000
X-SmarterMail-Authenticated-As: [email protected]
Received: from User (UnknownHost [208.88.199.104]) by mail.linksline.com.sa with SMTP;
Tue, 23 Feb 2021 12:38:17 +0300
Reply-To: <[email protected]>
From: "JOHN JOHNSON"<[email protected]>
Date: Tue, 23 Feb 2021 10:38:15 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=20.5
X-Spam-Score: 205
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I hope this email finds you well. I am very pleased to inform
you that Janet Yellen, The new Secretary of the Treasury has just announced
the release of your fund valued $11.5 Million Dollars after St [...]
Content analysis details: (20.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?208.88.199.104>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[76.72.162.38 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agentjj1960[at]gmail.com]
1.0 MISSING_HEADERS Missing To: header
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.5 MONEY_NOHTML Lots of money in plain text
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Good news at last
I hope this email finds you well. I am very pleased to inform you that Janet Yellen, The new Secretary of the Treasury has just announced the release of your fund valued $11.5 Million Dollars after Steven Mnuchin, the past Secretary made it impossible for you to receive it in the past. This is a golden opportunity which you cannot afford to miss.
She has made everything easy for you. You only have to take care of the storage fee of $200 after which i will proceed to your doorstep to get your fund delivered to you as the accredited agent.
I need you to get back to me immediately because I need to get this delivery completed in the morning as scheduled.
Kindly get back to me immediately.
Regards,
John Johnson.
Tel: +1 (973)-910-0292.
Delivered-To:
Received: from
by with LMTP
id IAGoCa3YNGAqPgAAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 23 Feb 2021 10:27:57 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 23 Feb 2021 10:27:57 +0000
Received: from [76.72.162.38] (port=52903 helo=mail.linksline.com.sa)
by with esmtp (Exim 4.93)
(envelope-from <[email protected]>)
id 1lEUv6-000489-93
for ; Tue, 23 Feb 2021 10:27:57 +0000
X-SmarterMail-Authenticated-As: [email protected]
Received: from User (UnknownHost [208.88.199.104]) by mail.linksline.com.sa with SMTP;
Tue, 23 Feb 2021 12:38:17 +0300
Reply-To: <[email protected]>
From: "JOHN JOHNSON"<[email protected]>
Date: Tue, 23 Feb 2021 10:38:15 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=20.5
X-Spam-Score: 205
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I hope this email finds you well. I am very pleased to inform
you that Janet Yellen, The new Secretary of the Treasury has just announced
the release of your fund valued $11.5 Million Dollars after St [...]
Content analysis details: (20.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?208.88.199.104>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[76.72.162.38 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[agentjj1960[at]gmail.com]
1.0 MISSING_HEADERS Missing To: header
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.5 MONEY_NOHTML Lots of money in plain text
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Good news at last
I hope this email finds you well. I am very pleased to inform you that Janet Yellen, The new Secretary of the Treasury has just announced the release of your fund valued $11.5 Million Dollars after Steven Mnuchin, the past Secretary made it impossible for you to receive it in the past. This is a golden opportunity which you cannot afford to miss.
She has made everything easy for you. You only have to take care of the storage fee of $200 after which i will proceed to your doorstep to get your fund delivered to you as the accredited agent.
I need you to get back to me immediately because I need to get this delivery completed in the morning as scheduled.
Kindly get back to me immediately.
Regards,
John Johnson.
Tel: +1 (973)-910-0292.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces