by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 06 Aug 2017 10:12:43 -0700
Received: from mail.health.kiev.ua ([193.26.3.10]:55480)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1deP6W-0001DG-Hw
for ; Sun, 06 Aug 2017 10:12:43 -0700
X-Virus-Scanned: amavisd-new at health.kiev.ua
Received: from [192.168.8.101] ([154.118.14.116])
(authenticated bits=0)
by mail.health.kiev.ua (8.13.8/8.13.
with ESMTP id v76H3JMV084788;
Sun, 6 Aug 2017 20:11:15 +0300 (EEST)
(envelope-from [email protected])
Message-Id: <[email protected]>
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr. Femi Brown" <[email protected]>
Date: Sun, 06 Aug 2017 18:10:53 +0100
Reply-To: [email protected]
X-Antivirus: Avast (VPS 170806-0, 08/06/2017), Outbound message
X-Antivirus-Status: Clean
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0.1 (mail.health.kiev.ua [193.26.3.10]); Sun, 06 Aug 2017 20:11:49 +0300 (EEST)
X-Spam-Status: Yes, score=18.3
X-Spam-Score: 183
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This mail is been writing to you because we have come to understand
that you have lost a lot of money all because you want to receive your fund
well note that all that have been put to a stop as the federal government
of Nigeria has promised to assist you with the sum of $5million in other
to compensate you and all you have to do is fill the below information s.
[...]
Content analysis details: (18.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[193.26.3.10 listed in bb.barracudacentral.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=o ... 881.de;ip=]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(willzzmk01[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FUND TRANSFER ::::::
This mail is been writing to you because we have come to understand that
you have lost a lot of money all because you want to receive your fund
well note that all that have been put to a stop as the federal government of
Nigeria has promised to assist you with the sum of $5million in other to
compensate you and all you have to do is fill the below information s.
1 full name
2 home phone and cell phone number
3 occupation
4 amount that was lost by you
Send this and get back at once.
Warm regards
Femi
---
Envelope-to:
Delivery-date: Sun, 06 Aug 2017 10:12:43 -0700
Received: from mail.health.kiev.ua ([193.26.3.10]:55480)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1deP6W-0001DG-Hw
for ; Sun, 06 Aug 2017 10:12:43 -0700
X-Virus-Scanned: amavisd-new at health.kiev.ua
Received: from [192.168.8.101] ([154.118.14.116])
(authenticated bits=0)
by mail.health.kiev.ua (8.13.8/8.13.
with ESMTP id v76H3JMV084788;Sun, 6 Aug 2017 20:11:15 +0300 (EEST)
(envelope-from [email protected])
Message-Id: <[email protected]>
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr. Femi Brown" <[email protected]>
Date: Sun, 06 Aug 2017 18:10:53 +0100
Reply-To: [email protected]
X-Antivirus: Avast (VPS 170806-0, 08/06/2017), Outbound message
X-Antivirus-Status: Clean
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0.1 (mail.health.kiev.ua [193.26.3.10]); Sun, 06 Aug 2017 20:11:49 +0300 (EEST)
X-Spam-Status: Yes, score=18.3
X-Spam-Score: 183
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: This mail is been writing to you because we have come to understand
that you have lost a lot of money all because you want to receive your fund
well note that all that have been put to a stop as the federal government
of Nigeria has promised to assist you with the sum of $5million in other
to compensate you and all you have to do is fill the below information s.
[...]
Content analysis details: (18.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[193.26.3.10 listed in bb.barracudacentral.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=o ... 881.de;ip=]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(willzzmk01[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FUND TRANSFER ::::::
This mail is been writing to you because we have come to understand that
you have lost a lot of money all because you want to receive your fund
well note that all that have been put to a stop as the federal government of
Nigeria has promised to assist you with the sum of $5million in other to
compensate you and all you have to do is fill the below information s.
1 full name
2 home phone and cell phone number
3 occupation
4 amount that was lost by you
Send this and get back at once.
Warm regards
Femi
---
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
