by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 11 Jun 2017 13:46:08 -0700
Received: from [115.79.202.115] (port=55183 helo=tlmail.toungloong.local)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dK9kJ-00052K-Qb
for ; Sun, 11 Jun 2017 13:46:08 -0700
Received: from User ([94.158.70.1] RDNS failed) by tlmail.toungloong.local with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 12 Jun 2017 03:44:54 +0700
Reply-To: <[email protected]>
From: "Capt.Glen Darrell"<[email protected]>
Date: Sun, 11 Jun 2017 21:44:02 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 11 Jun 2017 20:44:56.0483 (UTC) FILETIME=[95C54730:01D2E2F3]
X-Spam-Status: Yes, score=44.2
X-Spam-Score: 442
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam, I am sorry to encroach into your privacy in
this manner, I found you listed in the Trade Center Chambers of Commerce
directory here in Iraq and I find it pleasurable to offer you my partnership
in business. [...]
Content analysis details: (44.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
2.0 KAM_DEAR_SOMEBODY BODY: Message that does not know who to address
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[115.79.202.115 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?94.158.70.1>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[115.79.202.115 listed in zen.spamhaus.org]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
2.8 FOUND_YOU I found you...
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.6 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Partnership On Trust.202
Dear Sir/Madam,
I am sorry to encroach into your privacy in this manner, I
found you listed in the Trade Center Chambers of Commerce
directory here in Iraq and I find it pleasurable to offer
you my partnership in business.
I only pray at this time that your address is still valid. I
want to solicit your attention to receive money on my
behalf.
I am CAPT Glen Darrell, an officer in the USA Army and also
a West Point Graduate presently serving in the Military with
the 82nd Air Borne Division Peace keeping force.
I am on the move to Afghanistan and i really need your help
in assisting me with the safe keeping of two military trunk
boxes. I hope you can be trusted? Kindly view for your
record: http://news.bbc.co.uk/2/hi/7444083.stm.
If you can be trusted, I will explain further when i get
a response from you.
Nevertheless, reconfirm the following to me as follows and
please ensure to reply via my private e-mail address:
[email protected]
1.Name:
2.Address:
3.Telephone:
4.Copy of drivers license:
Thanks for your cooperation, God bless you and America !!
Best Regards,
Capt. Glen Darrell.
Envelope-to:
Delivery-date: Sun, 11 Jun 2017 13:46:08 -0700
Received: from [115.79.202.115] (port=55183 helo=tlmail.toungloong.local)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dK9kJ-00052K-Qb
for ; Sun, 11 Jun 2017 13:46:08 -0700
Received: from User ([94.158.70.1] RDNS failed) by tlmail.toungloong.local with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 12 Jun 2017 03:44:54 +0700
Reply-To: <[email protected]>
From: "Capt.Glen Darrell"<[email protected]>
Date: Sun, 11 Jun 2017 21:44:02 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 11 Jun 2017 20:44:56.0483 (UTC) FILETIME=[95C54730:01D2E2F3]
X-Spam-Status: Yes, score=44.2
X-Spam-Score: 442
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam, I am sorry to encroach into your privacy in
this manner, I found you listed in the Trade Center Chambers of Commerce
directory here in Iraq and I find it pleasurable to offer you my partnership
in business. [...]
Content analysis details: (44.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
2.0 KAM_DEAR_SOMEBODY BODY: Message that does not know who to address
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[115.79.202.115 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?94.158.70.1>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[115.79.202.115 listed in zen.spamhaus.org]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
2.8 FOUND_YOU I found you...
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.6 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Partnership On Trust.202
Dear Sir/Madam,
I am sorry to encroach into your privacy in this manner, I
found you listed in the Trade Center Chambers of Commerce
directory here in Iraq and I find it pleasurable to offer
you my partnership in business.
I only pray at this time that your address is still valid. I
want to solicit your attention to receive money on my
behalf.
I am CAPT Glen Darrell, an officer in the USA Army and also
a West Point Graduate presently serving in the Military with
the 82nd Air Borne Division Peace keeping force.
I am on the move to Afghanistan and i really need your help
in assisting me with the safe keeping of two military trunk
boxes. I hope you can be trusted? Kindly view for your
record: http://news.bbc.co.uk/2/hi/7444083.stm.
If you can be trusted, I will explain further when i get
a response from you.
Nevertheless, reconfirm the following to me as follows and
please ensure to reply via my private e-mail address:
[email protected]
1.Name:
2.Address:
3.Telephone:
4.Copy of drivers license:
Thanks for your cooperation, God bless you and America !!
Best Regards,
Capt. Glen Darrell.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

