[email protected] Mr. Peter Alexandra,

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 18 May 2017 16:38:17 -0700
Received: from mail.vus-etsc.edu.vn ([123.30.64.100]:55791 helo=FML-400E.vus-etsc.edu.vn)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dBUzj-0004Az-OS
for ; Thu, 18 May 2017 16:38:17 -0700
Received: from User ([104.193.9.129])
(user=[email protected] mech=LOGIN bits=0)
by FML-400E.vus-etsc.edu.vn with ESMTP id v4INYgw8030227-v4INYgwA030227;
Fri, 19 May 2017 06:34:44 +0700
Message-Id: <201705182334.v4INYgw8030227-v4INYgwA030227@FML-400E.vus-etsc.edu.vn>
Reply-To: <[email protected]>
From: "Peter Alexandra"<[email protected]>
Date: Thu, 18 May 2017 16:34:56 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-FEAS-AUTH-USER: [email protected]
X-Spam-Status: Yes, score=33.0
X-Spam-Score: 330
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: ExxonMobil House Ermyn Way Leatherhead Surrey, KT22 8UX.
Dear Sir/Madam I am Mr. Peter Alexandra, representing the operation and corporate
affairs in contract related matters of Exxon [...]

Content analysis details: (33.0 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
2.0 KAM_DEAR_SOMEBODY BODY: Message that does not know who to address
1.1 KAM_COUK Scoring .co.uk emails higher due to poor registry security.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[123.30.64.100 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?123.30.64.100>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[123.30.64.100 listed in psbl.surriel.com]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[123.30.64.100 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(alexandrapeter14[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** RE........REPLY


ExxonMobil House
Ermyn Way
Leatherhead
Surrey, KT22 8UX.

Dear Sir/Madam

I am Mr. Peter Alexandra, representing the operation and corporate affairs in
contract related matters of Exxon

Mobil in London (http://www.exxonmobil.com). Exxon Mobil is one of the World
Largest oil producing and

Management Company with over 1.2 Trillion pounds Capital contract Investment.

As a senior operational and corporate affairs representative of Exxon Mobil that
handle contract related matters,

I successfully over invoiced a contract few years back which is not known by anybody
and, I need your full

cooperation and partnership to re-profile this contract funds amounting to US$12.2M
to your name as the

contractor that executed this contract in Asia few years.

The fund will be paid to you through a Finance Company where it is presently
deposited as soon as the filing and

documentation process is concluded in your name because the contract was executed by
Exxon Mobil United Kingdom

in Asia.

Most importantly, you will be required to fill your data's stated below to enable me
arrange legal documents that

will proof you as a sole contractor with EXXON MOBIL:

(1). Stand as the beneficiary / contractor with Exxon Mobil to receive the funds as
I will present you before the

firm with legal documents.

(2). Receive the funds into a business/personal bank account in your country.

(3). At the completion of this transaction, the sharing rates shall be 60% for me,
40% for you.

(4) Full Names;
(5) Contact Address:
(6) Direct Telephone No:
(7) Occupation:
(8) Age and Marital Status:
(9) Means of Identification:

Note: Do not contact my office number or company email for security reasons. Get
back to me as soon as possible

For more details about the funds.

Best Regards.
Mr. Peter Alexandra,
Operation and Corporate Affairs Officer
ExxonMobil London