by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 04 Nov 2016 02:35:33 -0700
Received: from 59-120-119-143.hinet-ip.hinet.net ([59.120.119.143]:39991 helo=bigice.com.tw)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1c2auF-0004rf-SO
for ; Fri, 04 Nov 2016 02:35:33 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by bigice.com.tw (Postfix) with SMTP id 6046114C43A9
for <>; Thu, 3 Nov 2016 23:23:12 +0800 (CST)
Received: from [10.192.233.161] (unknown [197.220.169.139])
by bigice.com.tw (Postfix) with ESMTPA id B297C14C74B0
for <>; Thu, 3 Nov 2016 19:31:38 +0800 (CST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To:
From: [email protected]
Date: Thu, 03 Nov 2016 09:31:43 -0200
Reply-To: [email protected]
X-Antivirus: avast! (VPS 131016-0, 10/16/2013), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=11.9
X-Spam-Score: 119
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I wish to seek your co-operation in partnership to transfer
and re-invest (US$20.550 Million) in the any stable investment in your country,
these funds came as a result of a depository made by a foreign investor for
investment program that has remained dormant for years now, I discovered
that the account holder died without making a will on the depository. I would
like to transact this business and share the profit 50. since the beneficiary
cannot be found.I shall make more detail available if you have interest in
this offer. Sincerely. Michael [...]
Content analysis details: (11.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9988]
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zramikee[at]hotmail.com)
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[197.220.169.139 listed in dnsbl.sorbs.net]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[59.120.119.143 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.220.169.139>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[59.120.119.143 listed in zen.spamhaus.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Transfer Partnership
I wish to seek your co-operation in partnership to transfer and re-invest (US$20.550
Million) in the any stable investment in your country, these funds came as a result
of a depository made by a foreign investor for investment program that has remained
dormant for years now, I discovered that the account holder died without making a
will on the depository. I would like to transact this business and share the profit
50. since the beneficiary cannot be found.I shall make more detail available if you
have interest in this offer. Sincerely. Michael
Envelope-to:
Delivery-date: Fri, 04 Nov 2016 02:35:33 -0700
Received: from 59-120-119-143.hinet-ip.hinet.net ([59.120.119.143]:39991 helo=bigice.com.tw)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1c2auF-0004rf-SO
for ; Fri, 04 Nov 2016 02:35:33 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by bigice.com.tw (Postfix) with SMTP id 6046114C43A9
for <>; Thu, 3 Nov 2016 23:23:12 +0800 (CST)
Received: from [10.192.233.161] (unknown [197.220.169.139])
by bigice.com.tw (Postfix) with ESMTPA id B297C14C74B0
for <>; Thu, 3 Nov 2016 19:31:38 +0800 (CST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To:
From: [email protected]
Date: Thu, 03 Nov 2016 09:31:43 -0200
Reply-To: [email protected]
X-Antivirus: avast! (VPS 131016-0, 10/16/2013), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=11.9
X-Spam-Score: 119
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I wish to seek your co-operation in partnership to transfer
and re-invest (US$20.550 Million) in the any stable investment in your country,
these funds came as a result of a depository made by a foreign investor for
investment program that has remained dormant for years now, I discovered
that the account holder died without making a will on the depository. I would
like to transact this business and share the profit 50. since the beneficiary
cannot be found.I shall make more detail available if you have interest in
this offer. Sincerely. Michael [...]
Content analysis details: (11.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9988]
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zramikee[at]hotmail.com)
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[197.220.169.139 listed in dnsbl.sorbs.net]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[59.120.119.143 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.220.169.139>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[59.120.119.143 listed in zen.spamhaus.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Transfer Partnership
I wish to seek your co-operation in partnership to transfer and re-invest (US$20.550
Million) in the any stable investment in your country, these funds came as a result
of a depository made by a foreign investor for investment program that has remained
dormant for years now, I discovered that the account holder died without making a
will on the depository. I would like to transact this business and share the profit
50. since the beneficiary cannot be found.I shall make more detail available if you
have interest in this offer. Sincerely. Michael
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
