by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id zyKmBvSqvlgxNwAAjbubUg
for <>; Tue, 07 Mar 2017 04:43:32 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 07 Mar 2017 04:43:32 -0800
Received: from mail-io0-f193.google.com ([209.85.223.193]:36618)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1clESg-0003fi-JO
for ; Tue, 07 Mar 2017 04:43:31 -0800
Received: by mail-io0-f193.google.com with SMTP id 68so356719ioh.3
for <>; Tue, 07 Mar 2017 04:43:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=OOLA0c3THCAaAfuGLPQflns1SMEFwomSzoXeTK2+DIk=;
b=uFw5RajkCCkbQppe69HI9K6Pz5CqVf28yXRV8OxFYJVMETiSTQGtWOA2uQY3QwoKtW
KyEjWtGtt7RueLtBuo4HGsZ832Ovr0IiQjP2MwcEIg2fkG3ocDfUsL9ThToSeunEJ/QD
4w/jRnZY9kzwLoqFB7OFlBuCuhoFxBiQ5XczNfMrtvY1LzCQVi4ImrrGPuXsWN55q3A/
944n2UERfb3+MtIVOTj2Il4q5iaKzuJkfCD64DaaFN3QG06AhSJCNId9wK1BGixXAlpp
+eyOCRPiqIhptF91zehHTRGWwq4BIWzDKyrKYhepgJKpy+ENFfqUFpiysvja6T6iTFqh
RGuQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id
:subject:to;
bh=OOLA0c3THCAaAfuGLPQflns1SMEFwomSzoXeTK2+DIk=;
b=Px4ZFsk5apAC36pCawFaxX06M5bgVpu+j7AmIZnJVbsJuG/tCqjje4qatsvA7XWHze
kjjSc3nJsCwu8mdmdNIV7SlzRRuk0Rwtk/vtST3wKS6/mqSK7d1SJwjxilKeHo2xnTbn
/n7EeKtOJjpbvJvOgpgZcjgj0UNoILvjQ16HMx9PQiugniI1a4q8qm3IR/DjjnhlIBWD
zY/atgli1iS0w/SDTYg0FGpP6zzOj4z2n2sqxHpYUtUPlZWM6McszJE14rOmf3LueDXa
SPxXUnpft6vayECqEssb3TCegKknQxfaVbUQyRNuTd7Fn2bnIF/GE0aL0trF3W+4TnhW
PVvg==
X-Gm-Message-State: AMke39nR2UGOMqvZJjiQrBcxb8hX9QB9KPkXydYPj8tiWs8LAi7GovFgPDs9RTEWYz9nj2rdcD7zVDGxL5d9SQ==
X-Received: by 10.107.172.134 with SMTP id v128mr585206ioe.49.1488890569746;
Tue, 07 Mar 2017 04:42:49 -0800 (PST)
MIME-Version: 1.0
Received: by 10.107.141.142 with HTTP; Tue, 7 Mar 2017 04:42:49 -0800 (PST)
Reply-To: [email protected]
From: "Capt. Patrick Williams" <[email protected]>
Date: Tue, 7 Mar 2017 04:42:49 -0800
Message-ID: <CAL3joSREMij1DAR0BC0Gu+=0dxb=0=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=8.5
X-Spam-Score: 85
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beloved Friend I saw your email from searching Engine
and i decided to contact you urgent for this great opportunity between me
and you, permit me to introduce myself to you, I am a captain with the United
Nations troop Kabul Afghanistan, on war against terrorism. Based on the United
States legislative and executive decision for withdrawing troops from Afghanistan
come next year, I have been deployed to come and work in your country on
military base soonest. Our mission is to help beef up terrorist targeted states,
mostly on the war against terrorism and i will need a house for myself &
that is why I contacted you. [...]
Content analysis details: (8.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N3 BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.223.193 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.223.193 listed in dnsbl.sorbs.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (nwajesus11[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(captwilliamspatrick2[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(nwajesus11[at]gmail.com)
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.223.193 listed in wl.mailspike.net]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 KAM_ADVERT2 RAW: This is probably an unwanted commercial email...
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** From Capt. Patrick Williams US ARMY Kabul Afghanistan
Dear Beloved Friend
I saw your email from searching Engine and i decided to contact you
urgent for this great opportunity between me and you, permit me to
introduce myself to you, I am a captain with the United Nations troop
Kabul Afghanistan, on war against terrorism. Based on the United
States legislative and executive decision for withdrawing troops from
Afghanistan come next year, I have been deployed to come and work in
your country on military base soonest. Our mission is to help beef up
terrorist targeted states, mostly on the war against terrorism and i
will need a house for myself & that is why I contacted you.
On the other hand I want to inform you that I have in my possession
the sum of US$45.5Million US.D) Which I got from crude oil deal here
in Afghanistan. I deposited this money with a Red Cross agent
informing him that we are making contact for the real owner of the
money. And It is under my power to approve whoever that comes forth
for this consignment.
I want to invest the money in your state as soon as I am deployed into
your state for a good business, anyway you will advice me on that
since I am not a business person. so I need someone I could trust. If
you accepted i will be smuggle to transfer the money to your country
where you will be the beneficiary.
I am a uniformed person and I cannot be parading such an amount, so I
need to present someone to stand as the recipient. I am an American
and an intelligence officer and for that so I have a 100% authentic
means of transferring the money through diplomatic courier service. I
just need your acceptance and all is done.
Please if you are interested in this transaction I will give to you
the complete details that you need for us to carry out this
transaction successfully, i decided to find someone that is for real
and not imaginary and that is why I went to a secured web site, where
I can be sure that the person is real. I believe I can trust you.
Where we are now we can only communicate through our military
communication facilities which is secured so nobody can monitor our
emails, then I can explain in details to you will only reach you
through email, because our calls might be monitored but have to be
sure whom I am dealing with.
If you are interested please send me your personal mobile number so I
can call you for further Inquiry when I am out of our military network
am writing from a fresh email account so if you are not interested do
not reply to this email and please delete this message, if not
response after 3days I will then search for someone else.
I wait for your contact details so we can go on.I will give to you 40%
of the sum and 60% is for me. I hope I am been fair on this deal,
Get back to me with your full information:
YOUR FULL NAME.........
YOUR FULL ADDRESS....................
YOUR DIRECT TELEPHONE NUMBER........
Regards,
Capt. Patrick Williams
US ARMY
Kabul Afghanistan
Delivered-To:
Received: from
by (Dovecot) with LMTP id zyKmBvSqvlgxNwAAjbubUg
for <>; Tue, 07 Mar 2017 04:43:32 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 07 Mar 2017 04:43:32 -0800
Received: from mail-io0-f193.google.com ([209.85.223.193]:36618)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1clESg-0003fi-JO
for ; Tue, 07 Mar 2017 04:43:31 -0800
Received: by mail-io0-f193.google.com with SMTP id 68so356719ioh.3
for <>; Tue, 07 Mar 2017 04:43:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
bh=OOLA0c3THCAaAfuGLPQflns1SMEFwomSzoXeTK2+DIk=;
b=uFw5RajkCCkbQppe69HI9K6Pz5CqVf28yXRV8OxFYJVMETiSTQGtWOA2uQY3QwoKtW
KyEjWtGtt7RueLtBuo4HGsZ832Ovr0IiQjP2MwcEIg2fkG3ocDfUsL9ThToSeunEJ/QD
4w/jRnZY9kzwLoqFB7OFlBuCuhoFxBiQ5XczNfMrtvY1LzCQVi4ImrrGPuXsWN55q3A/
944n2UERfb3+MtIVOTj2Il4q5iaKzuJkfCD64DaaFN3QG06AhSJCNId9wK1BGixXAlpp
+eyOCRPiqIhptF91zehHTRGWwq4BIWzDKyrKYhepgJKpy+ENFfqUFpiysvja6T6iTFqh
RGuQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
:subject:to;
bh=OOLA0c3THCAaAfuGLPQflns1SMEFwomSzoXeTK2+DIk=;
b=Px4ZFsk5apAC36pCawFaxX06M5bgVpu+j7AmIZnJVbsJuG/tCqjje4qatsvA7XWHze
kjjSc3nJsCwu8mdmdNIV7SlzRRuk0Rwtk/vtST3wKS6/mqSK7d1SJwjxilKeHo2xnTbn
/n7EeKtOJjpbvJvOgpgZcjgj0UNoILvjQ16HMx9PQiugniI1a4q8qm3IR/DjjnhlIBWD
zY/atgli1iS0w/SDTYg0FGpP6zzOj4z2n2sqxHpYUtUPlZWM6McszJE14rOmf3LueDXa
SPxXUnpft6vayECqEssb3TCegKknQxfaVbUQyRNuTd7Fn2bnIF/GE0aL0trF3W+4TnhW
PVvg==
X-Gm-Message-State: AMke39nR2UGOMqvZJjiQrBcxb8hX9QB9KPkXydYPj8tiWs8LAi7GovFgPDs9RTEWYz9nj2rdcD7zVDGxL5d9SQ==
X-Received: by 10.107.172.134 with SMTP id v128mr585206ioe.49.1488890569746;
Tue, 07 Mar 2017 04:42:49 -0800 (PST)
MIME-Version: 1.0
Received: by 10.107.141.142 with HTTP; Tue, 7 Mar 2017 04:42:49 -0800 (PST)
Reply-To: [email protected]
From: "Capt. Patrick Williams" <[email protected]>
Date: Tue, 7 Mar 2017 04:42:49 -0800
Message-ID: <CAL3joSREMij1DAR0BC0Gu+=0dxb=0=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=8.5
X-Spam-Score: 85
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beloved Friend I saw your email from searching Engine
and i decided to contact you urgent for this great opportunity between me
and you, permit me to introduce myself to you, I am a captain with the United
Nations troop Kabul Afghanistan, on war against terrorism. Based on the United
States legislative and executive decision for withdrawing troops from Afghanistan
come next year, I have been deployed to come and work in your country on
military base soonest. Our mission is to help beef up terrorist targeted states,
mostly on the war against terrorism and i will need a house for myself &
that is why I contacted you. [...]
Content analysis details: (8.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N3 BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.223.193 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.223.193 listed in dnsbl.sorbs.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (nwajesus11[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(captwilliamspatrick2[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(nwajesus11[at]gmail.com)
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.223.193 listed in wl.mailspike.net]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.6 KAM_ADVERT2 RAW: This is probably an unwanted commercial email...
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** From Capt. Patrick Williams US ARMY Kabul Afghanistan
Dear Beloved Friend
I saw your email from searching Engine and i decided to contact you
urgent for this great opportunity between me and you, permit me to
introduce myself to you, I am a captain with the United Nations troop
Kabul Afghanistan, on war against terrorism. Based on the United
States legislative and executive decision for withdrawing troops from
Afghanistan come next year, I have been deployed to come and work in
your country on military base soonest. Our mission is to help beef up
terrorist targeted states, mostly on the war against terrorism and i
will need a house for myself & that is why I contacted you.
On the other hand I want to inform you that I have in my possession
the sum of US$45.5Million US.D) Which I got from crude oil deal here
in Afghanistan. I deposited this money with a Red Cross agent
informing him that we are making contact for the real owner of the
money. And It is under my power to approve whoever that comes forth
for this consignment.
I want to invest the money in your state as soon as I am deployed into
your state for a good business, anyway you will advice me on that
since I am not a business person. so I need someone I could trust. If
you accepted i will be smuggle to transfer the money to your country
where you will be the beneficiary.
I am a uniformed person and I cannot be parading such an amount, so I
need to present someone to stand as the recipient. I am an American
and an intelligence officer and for that so I have a 100% authentic
means of transferring the money through diplomatic courier service. I
just need your acceptance and all is done.
Please if you are interested in this transaction I will give to you
the complete details that you need for us to carry out this
transaction successfully, i decided to find someone that is for real
and not imaginary and that is why I went to a secured web site, where
I can be sure that the person is real. I believe I can trust you.
Where we are now we can only communicate through our military
communication facilities which is secured so nobody can monitor our
emails, then I can explain in details to you will only reach you
through email, because our calls might be monitored but have to be
sure whom I am dealing with.
If you are interested please send me your personal mobile number so I
can call you for further Inquiry when I am out of our military network
am writing from a fresh email account so if you are not interested do
not reply to this email and please delete this message, if not
response after 3days I will then search for someone else.
I wait for your contact details so we can go on.I will give to you 40%
of the sum and 60% is for me. I hope I am been fair on this deal,
Get back to me with your full information:
YOUR FULL NAME.........
YOUR FULL ADDRESS....................
YOUR DIRECT TELEPHONE NUMBER........
Regards,
Capt. Patrick Williams
US ARMY
Kabul Afghanistan
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

