by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id E23VB/QSgVmYCwAAjbubUg
for <>; Tue, 01 Aug 2017 16:47:00 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 01 Aug 2017 16:47:00 -0700
Received: from [208.117.45.190] (port=44960 helo=vps.biztalkweb.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dcgsG-0000lO-1l
for ; Tue, 01 Aug 2017 16:46:59 -0700
Received: from [::1] (port=58884 helo=[208.117.45.190])
by vps.biztalkweb.com with esmtpa (Exim 4.87)
(envelope-from <[email protected]>)
id 1dcgrO-0000EL-Bd; Tue, 01 Aug 2017 19:45:58 -0400
Received: from 197.242.119.53 ([197.242.119.53])
(SquirrelMail authenticated user [email protected])
by 208.117.45.190 with HTTP;
Tue, 1 Aug 2017 19:45:58 -0400
Message-ID: <[email protected]>
Date: Tue, 1 Aug 2017 19:45:58 -0400
From: "FRED WILLIAMS" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.5.2 [SVN]
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps.biztalkweb.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: vps.biztalkweb.com: authenticated_id: [email protected]
X-Authenticated-Sender: vps.biztalkweb.com: [email protected]
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I am diplomat Fred Williams, mandated to deliver your consignment
to you in your country of residence and I am currently at Dreams Hotel Nashville
International Airport Tennessee United States of America. [...]
Content analysis details: (15.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 MISSING_HEADERS Missing To: header
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(careisu98[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(careisuu[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** INFORMATION
I am diplomat Fred Williams, mandated to deliver your consignment to you
in your country of residence and I am currently at Dreams Hotel Nashville
International Airport Tennessee United States of America.
The consignment you were made the beneficiary of these funds by a
benefactor whose details will be revealed to you after handling over the
consignment to you in accordance with the agreement I signed with the
benefactor when he enlisted my assistance in delivering the funds to you.
I am presently at Nashville International Airport Tennessee United States
of America. and before i can deliver the consignment (funds) to you, you
have to reconfirm the following information so as to ensure that your
details corresponds with the documents and delivery details i have here
with me.
However you are to send me the below information to enable me deliver your
consignment to your door step and to avoid any wrong delivery of your
consignment.
Full Name:
Full Home Address:
Direct Phone Number:
Driver's License
Occupation:
Best Regards
Dip. Fred Williams
Diplomat
Delivered-To:
Received: from
by (Dovecot) with LMTP id E23VB/QSgVmYCwAAjbubUg
for <>; Tue, 01 Aug 2017 16:47:00 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 01 Aug 2017 16:47:00 -0700
Received: from [208.117.45.190] (port=44960 helo=vps.biztalkweb.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dcgsG-0000lO-1l
for ; Tue, 01 Aug 2017 16:46:59 -0700
Received: from [::1] (port=58884 helo=[208.117.45.190])
by vps.biztalkweb.com with esmtpa (Exim 4.87)
(envelope-from <[email protected]>)
id 1dcgrO-0000EL-Bd; Tue, 01 Aug 2017 19:45:58 -0400
Received: from 197.242.119.53 ([197.242.119.53])
(SquirrelMail authenticated user [email protected])
by 208.117.45.190 with HTTP;
Tue, 1 Aug 2017 19:45:58 -0400
Message-ID: <[email protected]>
Date: Tue, 1 Aug 2017 19:45:58 -0400
From: "FRED WILLIAMS" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.5.2 [SVN]
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps.biztalkweb.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: vps.biztalkweb.com: authenticated_id: [email protected]
X-Authenticated-Sender: vps.biztalkweb.com: [email protected]
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I am diplomat Fred Williams, mandated to deliver your consignment
to you in your country of residence and I am currently at Dreams Hotel Nashville
International Airport Tennessee United States of America. [...]
Content analysis details: (15.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 MISSING_HEADERS Missing To: header
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(careisu98[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(careisuu[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** INFORMATION
I am diplomat Fred Williams, mandated to deliver your consignment to you
in your country of residence and I am currently at Dreams Hotel Nashville
International Airport Tennessee United States of America.
The consignment you were made the beneficiary of these funds by a
benefactor whose details will be revealed to you after handling over the
consignment to you in accordance with the agreement I signed with the
benefactor when he enlisted my assistance in delivering the funds to you.
I am presently at Nashville International Airport Tennessee United States
of America. and before i can deliver the consignment (funds) to you, you
have to reconfirm the following information so as to ensure that your
details corresponds with the documents and delivery details i have here
with me.
However you are to send me the below information to enable me deliver your
consignment to your door step and to avoid any wrong delivery of your
consignment.
Full Name:
Full Home Address:
Direct Phone Number:
Driver's License
Occupation:
Best Regards
Dip. Fred Williams
Diplomat
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

