by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 01 Jan 2017 11:18:24 -0800
Received: from [119.59.122.109] (port=60422 helo=mail.localhost.com)
by with esmtp (Exim 4.87)
(envelope-from <[email protected]>)
id 1cNldq-0004Cr-8o
for ; Sun, 01 Jan 2017 11:18:24 -0800
Received: from User ([197.234.219.73]) by localhost.com with MailEnable ESMTP; Sun, 1 Jan 2017 19:18:01 +0000
Reply-To: <[email protected]>
From: "Agent Edward Williams"<[email protected]>
Date: Sun, 1 Jan 2017 11:17:15 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 170101-0, 01/01/2017), Outbound message
X-Antivirus-Status: Clean
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=21.7
X-Spam-Score: 217
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Unpaid Beneficiary, It's my pleasure to inform you
that after our Board of Directors meetings with the Ministry of Foreign Affairs
we have concluded to release your Overdue Inheritance Funds Worth US$2.8
Million via our service Money Gram Remittance. [...]
Content analysis details: (21.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[119.59.122.109 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(fareastinfo[at]uymail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(moneygramoffice091[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_USER From misspaced, from "User"
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attention Unpaid Beneficiary,
Attention Unpaid Beneficiary,
It's my pleasure to inform you that after our Board of Directors meetings
with the Ministry of Foreign Affairs we have concluded to release your
Overdue Inheritance Funds Worth US$2.8 Million via our service Money Gram
Remittance.
Moreover based on our agreement with the Ministry of Foreign Affairs you
will be receiving US$5,000 on a daily basis until your total payments Worth
US$2.8 Million is completely transferred.
Meanwhile you are required to provide the below details accordingly:
1) Your Full Name:
2) Your Full Address:
3) Phone Number:
Furthermore you are required to send US$85 which will enable our authority
the Ministry of Finance signs the Funds Release Order We are waiting for
your urgent respond to enable us commence with this project.
Use this info to send the $85 through Money Gram Store.
Receiver name: Samuel Boko
Country: Benin Republic
City: Cotonou
Amount: $85.
j
Yours in Service
Agent Edward Williams
Tel: +229 98435508
General Manager Money Gram
Envelope-to:
Delivery-date: Sun, 01 Jan 2017 11:18:24 -0800
Received: from [119.59.122.109] (port=60422 helo=mail.localhost.com)
by with esmtp (Exim 4.87)
(envelope-from <[email protected]>)
id 1cNldq-0004Cr-8o
for ; Sun, 01 Jan 2017 11:18:24 -0800
Received: from User ([197.234.219.73]) by localhost.com with MailEnable ESMTP; Sun, 1 Jan 2017 19:18:01 +0000
Reply-To: <[email protected]>
From: "Agent Edward Williams"<[email protected]>
Date: Sun, 1 Jan 2017 11:17:15 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 170101-0, 01/01/2017), Outbound message
X-Antivirus-Status: Clean
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=21.7
X-Spam-Score: 217
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Unpaid Beneficiary, It's my pleasure to inform you
that after our Board of Directors meetings with the Ministry of Foreign Affairs
we have concluded to release your Overdue Inheritance Funds Worth US$2.8
Million via our service Money Gram Remittance. [...]
Content analysis details: (21.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[119.59.122.109 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(fareastinfo[at]uymail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(moneygramoffice091[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_USER From misspaced, from "User"
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attention Unpaid Beneficiary,
Attention Unpaid Beneficiary,
It's my pleasure to inform you that after our Board of Directors meetings
with the Ministry of Foreign Affairs we have concluded to release your
Overdue Inheritance Funds Worth US$2.8 Million via our service Money Gram
Remittance.
Moreover based on our agreement with the Ministry of Foreign Affairs you
will be receiving US$5,000 on a daily basis until your total payments Worth
US$2.8 Million is completely transferred.
Meanwhile you are required to provide the below details accordingly:
1) Your Full Name:
2) Your Full Address:
3) Phone Number:
Furthermore you are required to send US$85 which will enable our authority
the Ministry of Finance signs the Funds Release Order We are waiting for
your urgent respond to enable us commence with this project.
Use this info to send the $85 through Money Gram Store.
Receiver name: Samuel Boko
Country: Benin Republic
City: Cotonou
Amount: $85.
j
Yours in Service
Agent Edward Williams
Tel: +229 98435508
General Manager Money Gram
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
