by buried under 419s
Return-path: <"www."@cap.ocn.ne.jp>
Envelope-to:
Delivery-date: Sun, 14 May 2017 07:58:50 -0700
Received: from mbkd0105.ocn.ad.jp ([153.149.230.6]:55817)
by with esmtp (Exim 4.89)
(envelope-from <"www."@cap.ocn.ne.jp>)
id 1d9uyt-0001fq-Sq
for ; Sun, 14 May 2017 07:58:50 -0700
Received: from mf-smf-ucb016.ocn.ad.jp (mf-smf-ucb016.ocn.ad.jp [153.149.231.3])
by mbkd0105.ocn.ad.jp (Postfix) with ESMTP id 14A31D01399;
Sun, 14 May 2017 23:58:06 +0900 (JST)
Received: from mf-smf-ucb016.ocn.ad.jp (mf-smf-ucb016 [153.149.231.3])
by mf-smf-ucb016.ocn.ad.jp (Postfix) with ESMTP id E8BA210061F;
Sun, 14 May 2017 23:58:05 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb020 (mv-mta-ucb020.ocn.ad.jp [153.149.142.83])
by mf-smf-ucb016.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id v4EEvI34063560;
Sun, 14 May 2017 23:58:01 +0900
Received: from vcwebmail.ocn.ad.jp ([153.149.227.165])
by ntt.pod01.mv-mta-ucb020 with
id LEy11v0033akymp01Ey1d2; Sun, 14 May 2017 14:58:01 +0000
Received: from mzcstore332.ocn.ad.jp (mz-fcb332p.ocn.ad.jp [180.37.198.133])
by vcwebmail.ocn.ad.jp (Postfix) with ESMTP;
Sun, 14 May 2017 23:58:01 +0900 (JST)
Date: Sun, 14 May 2017 23:58:01 +0900 (JST)
From: Mr Richard Maxwell <"www."@cap.ocn.ne.jp>
Reply-To: Mr Richard Maxwell <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [41.138.89.217]
X-Spam-Status: Yes, score=26.5
X-Spam-Score: 265
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: This is to inform you that the America Embassy
office was instructed to transfer your fund $6.5,million U.S Dollars compensating
all the SCAM VICTIMS, and your email was found as one of the VICTIMS by the
America security leading team and America$B!G(Bs representative officers.
So between today the 5th of may till 11th Of may 2017 you will be receiving
the sum of $5,000.00 dollars per day. However be informed that we have already
sent the $5,000.00 dollars this morning to avoid cancellation of your payment,
remaining the total sum of $6.5 million You have only six hours to Call#
this office upon the receipt of this email the maximum amount you will be
receiving per day $B!H(Bstarting from today is $5,000.00 and the Money Transfer
Control Number of today is below. [...]
Content analysis details: (26.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[153.149.230.6 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[153.149.230.6 listed in bb.barracudacentral.org]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[153.149.230.6 listed in bl.mailspike.net]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[153.149.230.6 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.142.83>]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(richardmaxwell00[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FIRST PAYMENT OF $5,000
Attention:
This is to inform you that the America Embassy office was instructed to transfer
your fund $6.5,million U.S Dollars compensating all the SCAM VICTIMS, and your
email was found as one of the VICTIMS by the America security leading team and
America’s representative officers. So between today the 5th of may till 11th
Of may 2017 you will be receiving the sum of $5,000.00 dollars per day. However be
informed that we have already sent the $5,000.00 dollars this morning to avoid
cancellation of your payment, remaining the total sum of $6.5 million
You have only six hours to Call# this office upon the receipt of this email the
maximum amount you will be receiving per day “starting from today is
$5,000.00 and the Money Transfer Control Number of today is below.
NOTE: The sent $5,000.00 is on-held because of the instruction from US
Embassy’s Delegates, they asked us to place it on hold by requesting the
(Clean Bill Record Certificate) in order to fulfill all necessary obligation to
avoid any hitches while sending you the payment through money gram money transfer,
the necessary obligation i mean here is to obtain the (Clean Bill Record
Certificate).
Below is the information of today, you may not be able to track it in our website
www.money gram, because the obligation has not been carried out. We haven’t
affected it online for security reasons, to avoid hackers stealing the money online.
track your first payment of $5000 to the information blow
Track it with this link: https://secure.moneygram.com/ track
Sender Name:...Isaiah....
last name...... Ike
Amount:............ $5,000.00
MTCN ............ 69133972
We need the below details from you, to enable us fully activate the payment to your
name for it to reflect in your country's money gram branch office, and to update our
file records:
1. Your Full Names:....................
2. Postal Address:.....................
3. Phone Number:.......................
4. Cell Numbers:...................... .
5. Email Address:......................
6. Sex:.......................... ......
7. Age:.......................... ......
8. Occupation: ........................
9. Nationality:.................. ......
Furthermore you are advised to call us as the instruction was passed that within
6hours without hearing from you, Consider your payment canceled. Number to call is
the below listed managing director's office of the release order Call#:
+22999962029. Email them via ([email protected]
) (WWW.money gram) immediately!!!
Thanks
Mr. Richard Maxwell
money gram office benin republic.)
Envelope-to:
Delivery-date: Sun, 14 May 2017 07:58:50 -0700
Received: from mbkd0105.ocn.ad.jp ([153.149.230.6]:55817)
by with esmtp (Exim 4.89)
(envelope-from <"www."@cap.ocn.ne.jp>)
id 1d9uyt-0001fq-Sq
for ; Sun, 14 May 2017 07:58:50 -0700
Received: from mf-smf-ucb016.ocn.ad.jp (mf-smf-ucb016.ocn.ad.jp [153.149.231.3])
by mbkd0105.ocn.ad.jp (Postfix) with ESMTP id 14A31D01399;
Sun, 14 May 2017 23:58:06 +0900 (JST)
Received: from mf-smf-ucb016.ocn.ad.jp (mf-smf-ucb016 [153.149.231.3])
by mf-smf-ucb016.ocn.ad.jp (Postfix) with ESMTP id E8BA210061F;
Sun, 14 May 2017 23:58:05 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb020 (mv-mta-ucb020.ocn.ad.jp [153.149.142.83])
by mf-smf-ucb016.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id v4EEvI34063560;
Sun, 14 May 2017 23:58:01 +0900
Received: from vcwebmail.ocn.ad.jp ([153.149.227.165])
by ntt.pod01.mv-mta-ucb020 with
id LEy11v0033akymp01Ey1d2; Sun, 14 May 2017 14:58:01 +0000
Received: from mzcstore332.ocn.ad.jp (mz-fcb332p.ocn.ad.jp [180.37.198.133])
by vcwebmail.ocn.ad.jp (Postfix) with ESMTP;
Sun, 14 May 2017 23:58:01 +0900 (JST)
Date: Sun, 14 May 2017 23:58:01 +0900 (JST)
From: Mr Richard Maxwell <"www."@cap.ocn.ne.jp>
Reply-To: Mr Richard Maxwell <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
X-Originating-IP: [41.138.89.217]
X-Spam-Status: Yes, score=26.5
X-Spam-Score: 265
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: This is to inform you that the America Embassy
office was instructed to transfer your fund $6.5,million U.S Dollars compensating
all the SCAM VICTIMS, and your email was found as one of the VICTIMS by the
America security leading team and America$B!G(Bs representative officers.
So between today the 5th of may till 11th Of may 2017 you will be receiving
the sum of $5,000.00 dollars per day. However be informed that we have already
sent the $5,000.00 dollars this morning to avoid cancellation of your payment,
remaining the total sum of $6.5 million You have only six hours to Call#
this office upon the receipt of this email the maximum amount you will be
receiving per day $B!H(Bstarting from today is $5,000.00 and the Money Transfer
Control Number of today is below. [...]
Content analysis details: (26.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[153.149.230.6 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[153.149.230.6 listed in bb.barracudacentral.org]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[153.149.230.6 listed in bl.mailspike.net]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[153.149.230.6 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.142.83>]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(richardmaxwell00[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FIRST PAYMENT OF $5,000
Attention:
This is to inform you that the America Embassy office was instructed to transfer
your fund $6.5,million U.S Dollars compensating all the SCAM VICTIMS, and your
email was found as one of the VICTIMS by the America security leading team and
America’s representative officers. So between today the 5th of may till 11th
Of may 2017 you will be receiving the sum of $5,000.00 dollars per day. However be
informed that we have already sent the $5,000.00 dollars this morning to avoid
cancellation of your payment, remaining the total sum of $6.5 million
You have only six hours to Call# this office upon the receipt of this email the
maximum amount you will be receiving per day “starting from today is
$5,000.00 and the Money Transfer Control Number of today is below.
NOTE: The sent $5,000.00 is on-held because of the instruction from US
Embassy’s Delegates, they asked us to place it on hold by requesting the
(Clean Bill Record Certificate) in order to fulfill all necessary obligation to
avoid any hitches while sending you the payment through money gram money transfer,
the necessary obligation i mean here is to obtain the (Clean Bill Record
Certificate).
Below is the information of today, you may not be able to track it in our website
www.money gram, because the obligation has not been carried out. We haven’t
affected it online for security reasons, to avoid hackers stealing the money online.
track your first payment of $5000 to the information blow
Track it with this link: https://secure.moneygram.com/ track
Sender Name:...Isaiah....
last name...... Ike
Amount:............ $5,000.00
MTCN ............ 69133972
We need the below details from you, to enable us fully activate the payment to your
name for it to reflect in your country's money gram branch office, and to update our
file records:
1. Your Full Names:....................
2. Postal Address:.....................
3. Phone Number:.......................
4. Cell Numbers:...................... .
5. Email Address:......................
6. Sex:.......................... ......
7. Age:.......................... ......
8. Occupation: ........................
9. Nationality:.................. ......
Furthermore you are advised to call us as the instruction was passed that within
6hours without hearing from you, Consider your payment canceled. Number to call is
the below listed managing director's office of the release order Call#:
+22999962029. Email them via ([email protected]
) (WWW.money gram) immediately!!!
Thanks
Mr. Richard Maxwell
money gram office benin republic.)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

