by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 27 Sep 2015 15:10:28 -0700
Received: from mail-am1hn0254.outbound.protection.outlook.com ([157.56.112.254]:53462 helo=emea01-am1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1ZgK9G-0001uc-Rg
for ; Sun, 27 Sep 2015 15:10:28 -0700
Received: from BN1BFFO11FD014.protection.gbl (10.174.64.30) by
AM1FFO11HUB024.protection.gbl (10.174.65.127) with Microsoft SMTP Server
(TLS) id 15.1.274.4; Sun, 27 Sep 2015 22:21:46 +0000
Authentication-Results: spf=softfail (sender IP is 220.157.160.138)
smtp.mailfrom=gmail.com; ; dkim=none (message not signed)
header.d=none;; dmarc=fail action=none
header.from=gmail.com;
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
gmail.com discourages use of 220.157.160.138 as permitted sender)
Received: from hp-70ex2k7.okonet.local (220.157.160.138) by
BN1BFFO11FD014.mail.protection.outlook.com (10.58.144.77) with Microsoft SMTP
Server (TLS) id 15.1.274.4 via Frontend Transport; Sun, 27 Sep 2015 22:21:43
+0000
Received: from ALRMT.ALNEWDOM.local (69.3.0.250) by hp-70Ex2k7.okonet.local
(192.168.100.70) with Microsoft SMTP Server (TLS) id 8.1.436.0; Mon, 28 Sep
2015 07:16:57 +0900
Content-Type: multipart/alternative; boundary="===============1523853632=="
MIME-Version: 1.0
To: Recipients <[email protected]>
From: <[email protected]>
Date: Sun, 27 Sep 2015 18:16:54 -0400
Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-EOPAttributedMessage: 0
X-Matching-Connectors: 130878661045075266;(d90da011-fd67-4806-e38e-08d0e9d96e88);()
X-Microsoft-Exchange-Diagnostics: 1;BN1BFFO11FD014;1:Rxu7ZD8Kr2rWxqwxNA77DFVI302kVatjqHJWyyK6J+yu04zmrm6Vmf0XIpq3JRK6dND77l9jNc12w609itutOre6MB+R/m5zYh5roCqr1i+4NqWtOKjdmuk6Ak1+bnYAfCgxgoIJLkPob8hRXdJ/F20UCT1QdkGQNsyYMP+DHMZAOrhYnfNoMo5UmibYM8aXF7kgvPQBrb36HBoONxa3wCUHgx74p7YsSgnfkS08+ldrUWI47lKKqwNKEyl+0OFjTj6KUPDzgRtMGsVAX3TQwD8Ip1/Qey9C6rBXRXeInms5p827SjnLs9Lfllyyk0+5PUDxiirVrU1YEb4JEKzZa+JfT4ID5q5NU4XcgaD3MGDTwaERj9XZdUwlNLlkHJE+7F2QNlpgaOCJzdScvvJzNloGCvzfttRo1sYt8jafCPI1HsHRgC0XQeC4pTvwAF01288rynA2kR7DYTg6SZb4KQ==
X-Forefront-Antispam-Report:
CIP:220.157.160.138;CTRY:JP;IPV:NLI;EFV:NLI;SFV:SPM;SFS
;DIR:OUT;SFP:1501;SCL:9;SRVR:AM1FFO11HUB024;H:hp-70ex2k7.okonet.local;FPR:;SPF:SoftFail;PTR:s160138.ppp.asahi-net.or.jp;MX:1;A:1;LANG:en;
X-Microsoft-Exchange-Diagnostics:
1;AM1FFO11HUB024;2:0is3GYH8pWjanKLJbvI0EBsos5kMSvHpr74zKwrUgd0zLzrNwUt1vwiHn2Fv+3N2lTbaQKv38B/FsS6coPy1fBBJ4gh1P9l+G1cyf5gxxPORI55z1dl94+3l4C7dw0o0rc1OTgKlGc8k4DURx8DCN2oIMVZ/nQ/OkQFElTOEev4=;3:rMnEFlnrRcIGYb1UQ8gnwa9ZXwYT1zXK8hrOoMsoQ/Ehk8KkZ58I7GabOKUfVXf0rm8umOt9JQrcSECvFJAXmcP/ObVB3+X+xyS2CyiVMaozT+DktRkBgHPRDTE7kYt/ntdG/QKhq/YTCIDteD/Hl0NhUH62/Yf4FsbFoU7yKYDb/aaCNGhPOjvqj+JXqy57r/ZvAXPGVRCJN8liO/cH50QGHu5FeSMiVvxHQyDpn8georzmLbpKcymM2roLHCwb;25:yQA98cKh0iGWjtqJN6u/Ib71kYfh9VNClzDF0YwwpheaJaz+39Ps+4otV6RCjrsebYv5oJuAvOmDFMFV7BxdOwu/KwZf7M5fY4fi+GsvSqXt30AGNP8bCKWwokaZg653K55BPE8Gw8PhhW0XH+6Ntn5ZMHEqkbCHiFwVOYnaksxjuixMtMdxjRHK5VAKOfRsE8oBzIWN46RcMw8NMXI5In7qa7m2zWDbE3f2uvlfOaadYAX6DAg3yxpagM78qGd5AgyTLu7Y6qc8ZEu6GMGzwg==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AM1FFO11HUB024;
X-Microsoft-Antispam-PRVS:
<AM1FFO11HUB0245BBA6FDF967E56CD1302C1400@AM1FFO11HUB024.protection.gbl>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(601004)(2401047)(5005006)(8121501046)(520078)(3002001);SRVR:AM1FFO11HUB024;BCL:0;PCL:0;RULEID:(400006);SRVR:AM1FFO11HUB024;
X-Microsoft-Exchange-Diagnostics:
1;AM1FFO11HUB024;4:kMWbVnueWOraOQnDDxSvIBq9quUuJ4o+dO3UEgAMU+nyDPGf+JBc/yWX5FBh9AB4lzq/Ej40+B2KUFNRjY3SfJZJkoPd0OBz7K8YZo3NOvmjVmwNBe8eNKptgRIyqzLOe8nh3WUXLULXRAT38628GSnTMP36kzp7bDMIGAT0rCk1YWa2dj7VV5M0qSGXYCWrveP+V8/0BI8l03Ozfy5qRte9p1pSpQ/sZFHttAwtQANajnNl31zNC0lV02vSwEi+jF6KILcSUaCS6EZCb+AW6Gwh3UVNBqg6Bu2aH1qReGwGNJnb3l4Q8y65H9FYOIPMtPcmXBrvxDtvHgQ356n7KogX9I9jmu/JRtKJXslhXxI=
X-Forefront-PRVS: 07126E493C
X-Microsoft-Exchange-Diagnostics:
=?us-ascii?Q?1;AM1FFO11HUB024;23:pmgT/PRQRhdeHwGKefSeYgzFxjAftPohboafA0kI?=
=?us-ascii?Q?zd+Yv+Ii89P9XwVbHNeUCLRpoSkjQKVJDfuDxenQ4mEuhiXXTe0QxMPKYncq?=
=?us-ascii?Q?PpaVMNYtAylL1ivfGt9DaXTLzm5by7bHCSw6OVTkctjLi6gyv4rTBt9igzbU?=
=?us-ascii?Q?awL9q6CoqEfYMWkeC35N5+cEk7lXnH89h2Le8i4qH+nCfPdzcY6WG0GAbvsC?=
=?us-ascii?Q?68njRV/ZMxiAvKkzl0eHrOv0j5QVqvOUUCk7MFXYVtlngHNGpJATGsr9RlCY?=
=?us-ascii?Q?6lCoHmXma7bSLllo7eeQM2ZmQ0P6OT8qHkY8E5xbl6PIR3ePYDTHwZavsj5k?=
=?us-ascii?Q?vnHqDp/da5AcBzoTeNquNKAd+A4CjPqP0lWf/Bmh4TGe7QLhuhS6TkD0SXLW?=
=?us-ascii?Q?C9exBodZe9lelVTMWfcCoJD+wTaUaVbghbG0g5VGqNj1RyqtZr2+rEY0htCQ?=
=?us-ascii?Q?hnWKCh61DAYdrFIlAmdrh5k2WIvBsH2RVze86nNPcnC+E2SDpZ6kE0/jmkZh?=
=?us-ascii?Q?Ob6exLfRekeDrTjwDJoj6100PLjQmBQXUuk440aookjIEC7AcqojwWmCVX3z?=
=?us-ascii?Q?7iWsKIbEpx4XJa2IK6dHn413fFC8fGDbcjgSa8E5CUV+fRvc/WPgbBM8ZMhX?=
=?us-ascii?Q?7UEBdLTwKgGwO+HY3uc9x3wWdOO/72Wgce74kRvKTa0aUo67NYkaBzBSVDiR?=
=?us-ascii?Q?ZYWvUTHJXrmgJc/JlKm83e4o7lf85LxOJ4bS8DtbiiLaHPRPEX0YFr/58kTC?=
=?us-ascii?Q?eRghyx/Q5gK6EYiLMkYcSjuukweLcLRYDQmsNleAcOwo6XRNw7ZhnRbGRYkX?=
=?us-ascii?Q?/8LzESiis1qxZNSwxe6SNDq86iClRnKhpRYCU0iA/LDYTAduzkZXs0H5iwm2?=
=?us-ascii?Q?3Fm0v5XaLdX1GmGQkDxV65EvxuXLDUzeVu6kj4aMrgZlikpZCdxdDiRVyztE?=
=?us-ascii?Q?lOdsOkuMSKNQibWMTW66mDuYLGQVfsMw5hEAnHA3JipMqwDLYTMRZODQRLyx?=
=?us-ascii?Q?eCR2WFRceJeCk95yNbuLAFNTrKfofaefEP4cIIwDTNbg865qXgFpDl6Qkn3t?=
=?us-ascii?Q?/HvrB9VRvRDf/CwFIKg9b9eTPYZiemV+OlhgP++efB3Me4oJdpPkecSRXa6f?=
=?us-ascii?Q?yZoLVfSpNtS960NAHOIA3ysTXngJhFsEwTSw321DtOvQKxiwUJslId5xzKeI?=
=?us-ascii?Q?wPPNyOdiZTq8zCPsfPVmx6LCOBHfMFNk8HddwxCif0ebluymgh3YjvnJU+U0?=
=?us-ascii?Q?PX/YoWmPhqmASDLLI6hvVdQvUIBgFBdJM8+0TaP7kzRTwZzj603sJ17uxpI9?=
=?us-ascii?Q?3XOUUDji4/LTPqzROXvdnsaRprP429S9WosjVIAgWD7J0sIyqOwGMomxPvUN?=
=?us-ascii?Q?SdBPJBfrvIA4ghHylPvxuY/NHVrrnAAkVZOke/5lQdbnrHtIgWUF+c0Of/iY?=
=?us-ascii?Q?MtVOzQ8yIEDM1+oUSZu9+ujXAmETw0+uxfwmjMwKxuMbppBukzaM?=
X-Microsoft-Exchange-Diagnostics:
1;AM1FFO11HUB024;5:HLky6zC/FYC4tRRYKrHwXryeid3z19BJtWd8/WWp3zy6Zvqy8nBCohXD9m2poKHiPeBoJckL+WsX6sjz6q4FKhrHTMXWO6u5kFMmE0H/p82zjx8IQOhTseM6OcWLmWSu4DtFtPDqIldWrMFl5UvMxqpcUm67gd5M0obisipajbA=;24:gX9eiQKtxxpfd2B7g2GblUemp9S6jKxAiS9PyDJrjmkV/s1UelfMg14JKGP111a2rrnlhUKNf5O3XNXC6ZejoA==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Sep 2015 22:21:43.3063
(UTC)
X-MS-Exchange-CrossTenant-Id: 5afe0b00-7697-4969-b663-5eab37d5f47e
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5afe0b00-7697-4969-b663-5eab37d5f47e;Ip=[220.157.160.138];Helo=[hp-70ex2k7.okonet.local]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM1FFO11HUB024
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, I'm happy to inform you about my success in getting
the fund transferred to a Swiss Account with the cooperation of a new partner
from Paraguay who is an international business man. Due to your effort, sincerity,
courage and trust worthiness you showed, I want to compensate you and show
my gratitude to you with the sum of $2,000,000USD (Two million united state
dollars) I have authorized the Finance House where I deposited the money
to issue you international certified bank draft cashable at your bank. Presently
I'm in Paraguay for investment projects with my own share of the total sum.
Meanwhile, I did not forget your past efforts and attempts to assist me in
transferring those funds despite the fact that it failed us some how. My
dear friend, I will like you to contact the CEO in charge of the finance house
for the collection of this international certified bank draft. The name of
the person with your Cheque is MR. JOSEPH AYALA COMPENSATION AND FINANCE
HOUSE HEAD OFFICE CONTACT: [email protected] Ask him to send to you the
total $2,000,000USD (Two million united state dollars) which I kept for your
compensation for all the past efforts and attempts to assist me in this matter.
I appreciated your efforts at that time very much, so feel free and get in
touch with the CEO of the finance house MR.JOSEPH AYALA and instructed on
to send the amount to you. Please do let me know immediately you receive
it so that we can share the joy after all the suffering at that time. At the
moment, I am very busy here because of the investment projects which I and
the new partner are having at hand. Remember that I had forwarded instruction
to to the CEO of the finance house on your behalf to receive that money,
so get in touch with him and he will send the amount to you without delay.
Finally, my sincere advice to you as a christian is that you should endeavour
to pay your tithe to a bible believing church when you get the money. Sincerely
DIANE JONES Dear Friend, I'm happy to inform you about my success in [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.5 AXB_X_FF_SEZ_S Forefront sez this is spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[157.56.112.254 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(dianejones[at]gmail.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
2.1 HK_SCAM_N8 BODY: HK_SCAM_N8
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5005]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.3 COMPENSATION "Compensation"
3.1 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FUND1
Dear Friend, I'm happy to inform you about my success in getting the fund transferred to a Swiss Account with the cooperation of a new partner from Paraguay who is an international business man. Due to your effort, sincerity, courage and trust worthiness you showed, I want to compensate you and show my gratitude to you with the sum of $2,000,000USD (Two million united state dollars) I have authorized the Finance House where I deposited the money to issue you international certified bank draft cashable at your bank. Presently I'm in Paraguay for investment projects with my own share of the total sum. Meanwhile, I did not forget your past efforts and attempts to assist me in transferring those funds despite the fact that it failed us some how. My dear friend, I will like you to contact the CEO in charge of the finance house for the collection of this international certified bank draft. The name of the person with your Cheque is MR. JOSEPH AYALA COMPENSATION AND FINANCE HOUSE HEAD OFFICE CONTACT: [email protected] Ask him to send to you the total $2,000,000USD (Two million united state dollars) which I kept for your compensation for all the past efforts and attempts to assist me in this matter. I appreciated your efforts at that time very much, so feel free and get in touch with the CEO of the finance house MR.JOSEPH AYALA and instructed on to send the amount to you. Please do let me know immediately you receive it so that we can share the joy after all the suffering at that time. At the moment, I am very busy here because of the investment projects which I and the new partner are having at hand. Remember that I had forwarded instruction to to the CEO of the finance house on your behalf to receive that money, so get in touch with him and he will send the amount to you without delay. Finally, my sincere advice to you as a christian is that you should endeavour to pay your tithe to a bible believing church when you get the money. Sincerely DIANE JONES
Envelope-to:
Delivery-date: Sun, 27 Sep 2015 15:10:28 -0700
Received: from mail-am1hn0254.outbound.protection.outlook.com ([157.56.112.254]:53462 helo=emea01-am1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1ZgK9G-0001uc-Rg
for ; Sun, 27 Sep 2015 15:10:28 -0700
Received: from BN1BFFO11FD014.protection.gbl (10.174.64.30) by
AM1FFO11HUB024.protection.gbl (10.174.65.127) with Microsoft SMTP Server
(TLS) id 15.1.274.4; Sun, 27 Sep 2015 22:21:46 +0000
Authentication-Results: spf=softfail (sender IP is 220.157.160.138)
smtp.mailfrom=gmail.com; ; dkim=none (message not signed)
header.d=none;; dmarc=fail action=none
header.from=gmail.com;
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
gmail.com discourages use of 220.157.160.138 as permitted sender)
Received: from hp-70ex2k7.okonet.local (220.157.160.138) by
BN1BFFO11FD014.mail.protection.outlook.com (10.58.144.77) with Microsoft SMTP
Server (TLS) id 15.1.274.4 via Frontend Transport; Sun, 27 Sep 2015 22:21:43
+0000
Received: from ALRMT.ALNEWDOM.local (69.3.0.250) by hp-70Ex2k7.okonet.local
(192.168.100.70) with Microsoft SMTP Server (TLS) id 8.1.436.0; Mon, 28 Sep
2015 07:16:57 +0900
Content-Type: multipart/alternative; boundary="===============1523853632=="
MIME-Version: 1.0
To: Recipients <[email protected]>
From: <[email protected]>
Date: Sun, 27 Sep 2015 18:16:54 -0400
Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-EOPAttributedMessage: 0
X-Matching-Connectors: 130878661045075266;(d90da011-fd67-4806-e38e-08d0e9d96e88);()
X-Microsoft-Exchange-Diagnostics: 1;BN1BFFO11FD014;1:Rxu7ZD8Kr2rWxqwxNA77DFVI302kVatjqHJWyyK6J+yu04zmrm6Vmf0XIpq3JRK6dND77l9jNc12w609itutOre6MB+R/m5zYh5roCqr1i+4NqWtOKjdmuk6Ak1+bnYAfCgxgoIJLkPob8hRXdJ/F20UCT1QdkGQNsyYMP+DHMZAOrhYnfNoMo5UmibYM8aXF7kgvPQBrb36HBoONxa3wCUHgx74p7YsSgnfkS08+ldrUWI47lKKqwNKEyl+0OFjTj6KUPDzgRtMGsVAX3TQwD8Ip1/Qey9C6rBXRXeInms5p827SjnLs9Lfllyyk0+5PUDxiirVrU1YEb4JEKzZa+JfT4ID5q5NU4XcgaD3MGDTwaERj9XZdUwlNLlkHJE+7F2QNlpgaOCJzdScvvJzNloGCvzfttRo1sYt8jafCPI1HsHRgC0XQeC4pTvwAF01288rynA2kR7DYTg6SZb4KQ==
X-Forefront-Antispam-Report:
CIP:220.157.160.138;CTRY:JP;IPV:NLI;EFV:NLI;SFV:SPM;SFS
;DIR:OUT;SFP:1501;SCL:9;SRVR:AM1FFO11HUB024;H:hp-70ex2k7.okonet.local;FPR:;SPF:SoftFail;PTR:s160138.ppp.asahi-net.or.jp;MX:1;A:1;LANG:en;
X-Microsoft-Exchange-Diagnostics:
1;AM1FFO11HUB024;2:0is3GYH8pWjanKLJbvI0EBsos5kMSvHpr74zKwrUgd0zLzrNwUt1vwiHn2Fv+3N2lTbaQKv38B/FsS6coPy1fBBJ4gh1P9l+G1cyf5gxxPORI55z1dl94+3l4C7dw0o0rc1OTgKlGc8k4DURx8DCN2oIMVZ/nQ/OkQFElTOEev4=;3:rMnEFlnrRcIGYb1UQ8gnwa9ZXwYT1zXK8hrOoMsoQ/Ehk8KkZ58I7GabOKUfVXf0rm8umOt9JQrcSECvFJAXmcP/ObVB3+X+xyS2CyiVMaozT+DktRkBgHPRDTE7kYt/ntdG/QKhq/YTCIDteD/Hl0NhUH62/Yf4FsbFoU7yKYDb/aaCNGhPOjvqj+JXqy57r/ZvAXPGVRCJN8liO/cH50QGHu5FeSMiVvxHQyDpn8georzmLbpKcymM2roLHCwb;25:yQA98cKh0iGWjtqJN6u/Ib71kYfh9VNClzDF0YwwpheaJaz+39Ps+4otV6RCjrsebYv5oJuAvOmDFMFV7BxdOwu/KwZf7M5fY4fi+GsvSqXt30AGNP8bCKWwokaZg653K55BPE8Gw8PhhW0XH+6Ntn5ZMHEqkbCHiFwVOYnaksxjuixMtMdxjRHK5VAKOfRsE8oBzIWN46RcMw8NMXI5In7qa7m2zWDbE3f2uvlfOaadYAX6DAg3yxpagM78qGd5AgyTLu7Y6qc8ZEu6GMGzwg==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AM1FFO11HUB024;
X-Microsoft-Antispam-PRVS:
<AM1FFO11HUB0245BBA6FDF967E56CD1302C1400@AM1FFO11HUB024.protection.gbl>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(601004)(2401047)(5005006)(8121501046)(520078)(3002001);SRVR:AM1FFO11HUB024;BCL:0;PCL:0;RULEID:(400006);SRVR:AM1FFO11HUB024;
X-Microsoft-Exchange-Diagnostics:
1;AM1FFO11HUB024;4:kMWbVnueWOraOQnDDxSvIBq9quUuJ4o+dO3UEgAMU+nyDPGf+JBc/yWX5FBh9AB4lzq/Ej40+B2KUFNRjY3SfJZJkoPd0OBz7K8YZo3NOvmjVmwNBe8eNKptgRIyqzLOe8nh3WUXLULXRAT38628GSnTMP36kzp7bDMIGAT0rCk1YWa2dj7VV5M0qSGXYCWrveP+V8/0BI8l03Ozfy5qRte9p1pSpQ/sZFHttAwtQANajnNl31zNC0lV02vSwEi+jF6KILcSUaCS6EZCb+AW6Gwh3UVNBqg6Bu2aH1qReGwGNJnb3l4Q8y65H9FYOIPMtPcmXBrvxDtvHgQ356n7KogX9I9jmu/JRtKJXslhXxI=
X-Forefront-PRVS: 07126E493C
X-Microsoft-Exchange-Diagnostics:
=?us-ascii?Q?1;AM1FFO11HUB024;23:pmgT/PRQRhdeHwGKefSeYgzFxjAftPohboafA0kI?=
=?us-ascii?Q?zd+Yv+Ii89P9XwVbHNeUCLRpoSkjQKVJDfuDxenQ4mEuhiXXTe0QxMPKYncq?=
=?us-ascii?Q?PpaVMNYtAylL1ivfGt9DaXTLzm5by7bHCSw6OVTkctjLi6gyv4rTBt9igzbU?=
=?us-ascii?Q?awL9q6CoqEfYMWkeC35N5+cEk7lXnH89h2Le8i4qH+nCfPdzcY6WG0GAbvsC?=
=?us-ascii?Q?68njRV/ZMxiAvKkzl0eHrOv0j5QVqvOUUCk7MFXYVtlngHNGpJATGsr9RlCY?=
=?us-ascii?Q?6lCoHmXma7bSLllo7eeQM2ZmQ0P6OT8qHkY8E5xbl6PIR3ePYDTHwZavsj5k?=
=?us-ascii?Q?vnHqDp/da5AcBzoTeNquNKAd+A4CjPqP0lWf/Bmh4TGe7QLhuhS6TkD0SXLW?=
=?us-ascii?Q?C9exBodZe9lelVTMWfcCoJD+wTaUaVbghbG0g5VGqNj1RyqtZr2+rEY0htCQ?=
=?us-ascii?Q?hnWKCh61DAYdrFIlAmdrh5k2WIvBsH2RVze86nNPcnC+E2SDpZ6kE0/jmkZh?=
=?us-ascii?Q?Ob6exLfRekeDrTjwDJoj6100PLjQmBQXUuk440aookjIEC7AcqojwWmCVX3z?=
=?us-ascii?Q?7iWsKIbEpx4XJa2IK6dHn413fFC8fGDbcjgSa8E5CUV+fRvc/WPgbBM8ZMhX?=
=?us-ascii?Q?7UEBdLTwKgGwO+HY3uc9x3wWdOO/72Wgce74kRvKTa0aUo67NYkaBzBSVDiR?=
=?us-ascii?Q?ZYWvUTHJXrmgJc/JlKm83e4o7lf85LxOJ4bS8DtbiiLaHPRPEX0YFr/58kTC?=
=?us-ascii?Q?eRghyx/Q5gK6EYiLMkYcSjuukweLcLRYDQmsNleAcOwo6XRNw7ZhnRbGRYkX?=
=?us-ascii?Q?/8LzESiis1qxZNSwxe6SNDq86iClRnKhpRYCU0iA/LDYTAduzkZXs0H5iwm2?=
=?us-ascii?Q?3Fm0v5XaLdX1GmGQkDxV65EvxuXLDUzeVu6kj4aMrgZlikpZCdxdDiRVyztE?=
=?us-ascii?Q?lOdsOkuMSKNQibWMTW66mDuYLGQVfsMw5hEAnHA3JipMqwDLYTMRZODQRLyx?=
=?us-ascii?Q?eCR2WFRceJeCk95yNbuLAFNTrKfofaefEP4cIIwDTNbg865qXgFpDl6Qkn3t?=
=?us-ascii?Q?/HvrB9VRvRDf/CwFIKg9b9eTPYZiemV+OlhgP++efB3Me4oJdpPkecSRXa6f?=
=?us-ascii?Q?yZoLVfSpNtS960NAHOIA3ysTXngJhFsEwTSw321DtOvQKxiwUJslId5xzKeI?=
=?us-ascii?Q?wPPNyOdiZTq8zCPsfPVmx6LCOBHfMFNk8HddwxCif0ebluymgh3YjvnJU+U0?=
=?us-ascii?Q?PX/YoWmPhqmASDLLI6hvVdQvUIBgFBdJM8+0TaP7kzRTwZzj603sJ17uxpI9?=
=?us-ascii?Q?3XOUUDji4/LTPqzROXvdnsaRprP429S9WosjVIAgWD7J0sIyqOwGMomxPvUN?=
=?us-ascii?Q?SdBPJBfrvIA4ghHylPvxuY/NHVrrnAAkVZOke/5lQdbnrHtIgWUF+c0Of/iY?=
=?us-ascii?Q?MtVOzQ8yIEDM1+oUSZu9+ujXAmETw0+uxfwmjMwKxuMbppBukzaM?=
X-Microsoft-Exchange-Diagnostics:
1;AM1FFO11HUB024;5:HLky6zC/FYC4tRRYKrHwXryeid3z19BJtWd8/WWp3zy6Zvqy8nBCohXD9m2poKHiPeBoJckL+WsX6sjz6q4FKhrHTMXWO6u5kFMmE0H/p82zjx8IQOhTseM6OcWLmWSu4DtFtPDqIldWrMFl5UvMxqpcUm67gd5M0obisipajbA=;24:gX9eiQKtxxpfd2B7g2GblUemp9S6jKxAiS9PyDJrjmkV/s1UelfMg14JKGP111a2rrnlhUKNf5O3XNXC6ZejoA==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Sep 2015 22:21:43.3063
(UTC)
X-MS-Exchange-CrossTenant-Id: 5afe0b00-7697-4969-b663-5eab37d5f47e
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=5afe0b00-7697-4969-b663-5eab37d5f47e;Ip=[220.157.160.138];Helo=[hp-70ex2k7.okonet.local]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM1FFO11HUB024
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, I'm happy to inform you about my success in getting
the fund transferred to a Swiss Account with the cooperation of a new partner
from Paraguay who is an international business man. Due to your effort, sincerity,
courage and trust worthiness you showed, I want to compensate you and show
my gratitude to you with the sum of $2,000,000USD (Two million united state
dollars) I have authorized the Finance House where I deposited the money
to issue you international certified bank draft cashable at your bank. Presently
I'm in Paraguay for investment projects with my own share of the total sum.
Meanwhile, I did not forget your past efforts and attempts to assist me in
transferring those funds despite the fact that it failed us some how. My
dear friend, I will like you to contact the CEO in charge of the finance house
for the collection of this international certified bank draft. The name of
the person with your Cheque is MR. JOSEPH AYALA COMPENSATION AND FINANCE
HOUSE HEAD OFFICE CONTACT: [email protected] Ask him to send to you the
total $2,000,000USD (Two million united state dollars) which I kept for your
compensation for all the past efforts and attempts to assist me in this matter.
I appreciated your efforts at that time very much, so feel free and get in
touch with the CEO of the finance house MR.JOSEPH AYALA and instructed on
to send the amount to you. Please do let me know immediately you receive
it so that we can share the joy after all the suffering at that time. At the
moment, I am very busy here because of the investment projects which I and
the new partner are having at hand. Remember that I had forwarded instruction
to to the CEO of the finance house on your behalf to receive that money,
so get in touch with him and he will send the amount to you without delay.
Finally, my sincere advice to you as a christian is that you should endeavour
to pay your tithe to a bible believing church when you get the money. Sincerely
DIANE JONES Dear Friend, I'm happy to inform you about my success in [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.5 AXB_X_FF_SEZ_S Forefront sez this is spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[157.56.112.254 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(dianejones[at]gmail.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
2.1 HK_SCAM_N8 BODY: HK_SCAM_N8
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5005]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.3 COMPENSATION "Compensation"
3.1 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FUND1
Dear Friend, I'm happy to inform you about my success in getting the fund transferred to a Swiss Account with the cooperation of a new partner from Paraguay who is an international business man. Due to your effort, sincerity, courage and trust worthiness you showed, I want to compensate you and show my gratitude to you with the sum of $2,000,000USD (Two million united state dollars) I have authorized the Finance House where I deposited the money to issue you international certified bank draft cashable at your bank. Presently I'm in Paraguay for investment projects with my own share of the total sum. Meanwhile, I did not forget your past efforts and attempts to assist me in transferring those funds despite the fact that it failed us some how. My dear friend, I will like you to contact the CEO in charge of the finance house for the collection of this international certified bank draft. The name of the person with your Cheque is MR. JOSEPH AYALA COMPENSATION AND FINANCE HOUSE HEAD OFFICE CONTACT: [email protected] Ask him to send to you the total $2,000,000USD (Two million united state dollars) which I kept for your compensation for all the past efforts and attempts to assist me in this matter. I appreciated your efforts at that time very much, so feel free and get in touch with the CEO of the finance house MR.JOSEPH AYALA and instructed on to send the amount to you. Please do let me know immediately you receive it so that we can share the joy after all the suffering at that time. At the moment, I am very busy here because of the investment projects which I and the new partner are having at hand. Remember that I had forwarded instruction to to the CEO of the finance house on your behalf to receive that money, so get in touch with him and he will send the amount to you without delay. Finally, my sincere advice to you as a christian is that you should endeavour to pay your tithe to a bible believing church when you get the money. Sincerely DIANE JONES
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
