[email protected] Dip. Laurence Weiss

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id ve4sDKY6B1l8GQAAjbubUg
for <>; Mon, 01 May 2017 06:39:50 -0700
Return-path: <>
Envelope-to:
Delivery-date: Mon, 01 May 2017 06:39:50 -0700
Received: from nsstlmta10p.bpe.bigpond.com ([203.38.21.10]:42003)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1d5BYJ-0001ft-Ir
for ; Mon, 01 May 2017 06:39:49 -0700
Received: from smtp.telstra.com ([10.10.24.4])
by nsstlfep10p-svc.bpe.nexus.telstra.com.au with ESMTP
id <20170501133904.CYWB1617.nsstlfep10p-svc.bpe.nexus.telstra.com.au@smtp.telstra.com>;
Mon, 1 May 2017 23:39:04 +1000
X-RG-Spam: Suspect
X-Junkmail-Premium-Raw: score=76/85,refid=2.7.2:2017.5.1.124816:17:76.835,ip=203.45.55.206,rules=__RECEIVED_FROM_USER,
__HAS_REPLYTO, __FRAUD_WEBMAIL_REPLYTO, __HAS_FROM,
__RUS_SUBJ_ALL_UCASE_1251, __RUS_SUBJ_ALL_UCASE_KOI8R, __SUBJ_ALPHA_END,
DATE_TZ_NA, __MIME_VERSION, __CT, __CHARSET_IS_CP1251, __CTYPE_HTML,
__CTYPE_IS_HTML, __CTE, __HAS_X_PRIORITY, __HAS_MSMAIL_PRI, __HAS_X_MAILER,
USER_AGENT_OE, __OUTLOOK_MUA_1, __USER_AGENT_MS_GENERIC, __HAS_MSGID,
__SANE_MSGID, __TO_MALFORMED_3, TO_UNDISCLOSED_RECIPIENTS, __STOCK_PHRASE_24,
__PHISH_PHRASE1_A, __FRAUD_CONTACT_NAME, __FRAUD_INYOURCOUNTRY,
__FRAUD_CONTACT_ADDY, __C230066_P5, __INT_PROD_LOC, __HAS_HTML,
__HTML_TAG_DIV, HTML_NO_HTTP, BODY_SIZE_1300_1399, BODYTEXTH_SIZE_10000_LESS,
__MIME_TEXT_H1, __MIME_HTML, __MIME_HTML_ONLY, __TAG_EXISTS_HTML,
__SXL_FUR_ERROR_SERVFAIL[206.55.45.203.fur.jap1.sophosxl.com],
__SXL_RIP_ERROR_SERVFAIL[9.215.236.87.rip.jap1.sophosxl.com],
__SXL_SIG_ERROR_SERVFAIL[fdefce0c3876fe3732cf5f7e87093e41.sig.jap1.sophosxl.com],
__SXL_URI_ERROR_SERVFAIL[tradechem.com.au.uri.jap1.sophosxl.com],
__SXL_SIGV2_ERROR_SERVFAIL[021a018ce295a6d37bc93be4bdd45730.sigv2.jap1.sophosxl.com],
HTML_50_70, CHARSET_W1251_NOT_CYRILLIC, BODY_SIZE_5000_LESS, __FRAUD_WEBMAIL,
WEBMAIL_REPLYTO_NOT_FROM, __OUTLOOK_MUA, FRAUD_WEBMAIL_R_NOT_F,
__FRAUD_COMMON, NO_URI_FOUND, NO_CTA_URI_FOUND, CTYPE_JUST_HTML,
MULTIPLE_RCPTS, __PHISH_SPEAR_STRUCTURE_1, BODY_SIZE_2000_LESS,
__PHISH_SPEAR_STRUCTURE_2, __MIME_TEXT_H, FORGED_MUA_OUTLOOK,
REPLYTO_FROM_DIFF_ADDY, NO_URI_HTTPS, CHARSET_CYRILLIC_NO_CYRILLIC,
BODY_SIZE_7000_LESS, FRAUD_RCVD_FROM_USER_CYRILLIC
X-RG-Spam: Suspect
Received: from mail.tradechem.com.au (203.45.55.206) by smtp.telstra.com (9.0.019.015-1)
id 58C94D6B14A88E4D; Mon, 1 May 2017 23:39:02 +1000
Received: from User (87.236.215.9) by mail.tradechem.com.au (10.0.1.4) with
Microsoft SMTP Server id 8.1.436.0; Mon, 1 May 2017 23:37:36 +1000
Reply-To: <[email protected]>
From: Laurence Weiss <[email protected]>
Date: Mon, 1 May 2017 06:37:34 -0700
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID:
<9b2db1b2-9307-4996-915d-756aeb0ec76a@TRADECHEMSBS.tradechem.local>
To: Undisclosed recipients:;
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: I am diplomat Laurence Weiss, mandated to deliver your consignment
to you in your country of residence and I am currently at Nashville International
Airport Tennessee United States of America. I am presently at Nashville International
Airport Tennessee United States of America. and before i can deliver the
consignment (funds) to you, you have to reconfirm the following information
so as to ensure that your details corresponds with the documents and delivery
details i have here with me [...]

Content analysis details: (12.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.38.21.10 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(careisu98[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** DETAILS OF YOUR CONSIGNMENT old

I am diplomat Laurence Weiss, mandated to deliver your consignment to you in your
country of residence and I am currently at Nashville International Airport Tennessee
United States of America.





I am presently at Nashville International Airport Tennessee United States of
America. and before i can deliver the consignment (funds) to you, you have to
reconfirm the following information so as to ensure that your details corresponds
with the documents and delivery details i have here with me





Full Name:

Full Home Address:

Direct Phone Number:





You are to call me on this number +1 615 732 5526





Dip. Laurence Weiss