by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id ijwzBDj9ilnXSgAAjbubUg
for <>; Wed, 09 Aug 2017 05:16:56 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 09 Aug 2017 05:16:56 -0700
Received: from mogw0432.ocn.ad.jp ([118.23.109.14]:43836)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dfPut-0004yQ-EA
for ; Wed, 09 Aug 2017 05:16:55 -0700
Received: from mf-smf-ucb014.ocn.ad.jp (mf-smf-ucb014.ocn.ad.jp [153.149.227.2])
by mogw0432.ocn.ad.jp (Postfix) with ESMTP id 748662D023E;
Wed, 9 Aug 2017 21:16:09 +0900 (JST)
Received: from mf-smf-ucb014.ocn.ad.jp (mf-smf-ucb014 [153.149.227.2])
by mf-smf-ucb014.ocn.ad.jp (Postfix) with ESMTP id 5B511C05DB;
Wed, 9 Aug 2017 21:16:09 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb025 (mv-mta-ucb025.ocn.ad.jp [153.149.142.99])
by mf-smf-ucb014.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id v79CG7pq036255;
Wed, 9 Aug 2017 21:16:07 +0900
Message-Id: <[email protected]>
Received: from vcair.ocn.ne.jp ([153.149.227.166])
by ntt.pod01.mv-mta-ucb025 with
id v0Fb1v0073c2f75010FbxP; Wed, 09 Aug 2017 12:16:07 +0000
Received: from User (p343007-ipngn200403kanazawa.ishikawa.ocn.ne.jp [180.48.63.7])
by vcair.ocn.ne.jp (Postfix) with SMTP;
Wed, 9 Aug 2017 21:15:35 +0900 (JST)
Reply-To: <[email protected]>
From: "ANDERSON"<[email protected]>
Date: Wed, 9 Aug 2017 11:50:52 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=19.5
X-Spam-Score: 195
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From Dr Charles Anderson International Diplomatic Agent Hello
my friend, This is to inform you of the latest development in regards to
the delivery of your Atm Gold Visa convey through my office assigned by HSBC
Bank London on instant payment as scheduled to be paid to all beneficiaries
who are yet to receive their funds, I landed at JOHN.F KENNEDY INTERNATIONAL
AIRPORT NEW YORK where I had a stop-over by customs, now they are trying
to scan your parcel through cash-track machine to detect whether the Atm Gold
Visa contained funds. [...]
Content analysis details: (19.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[118.23.109.14 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[118.23.109.14 listed in bl.score.senderscore.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.142.99>]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(door2doordeliver12[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** THIS IS DR CHARLES ANDERSON YOUR DELIVERY AGENT VERY URGENT
From Dr Charles Anderson
International Diplomatic Agent
Hello my friend,
This is to inform you of the latest development in regards to the
delivery of your Atm Gold Visa convey through my office assigned by
HSBC Bank London on instant payment as scheduled to be paid to all
beneficiaries who are yet to receive their funds, I landed at JOHN.F
KENNEDY INTERNATIONAL AIRPORT NEW YORK where I had a stop-over by
customs, now they are trying to scan your parcel through cash-track
machine to detect whether the Atm Gold Visa contained funds.
In accordance to section 34 and 36 of the Custom sector, It's not
acceptable to bring (over US$100,000) into the United States of
America without IMMUNITY TAX CLEARANCE (ITC) because it shows that the
money is either being smuggled into the country or the source of the
funds is questionable since the Diplomat's Flight Details shows that I
came from London and they required the Immunity Tax Clearance
Certificate to prove that the funds is not links with any form of
illegality.
The Certificate will be procure in your name by the customs Authority
so that I will be allowed to complete the delivery of your Atm Gold
Visa Card to your house address.
Yours Faithfully.
Dr Charles Anderson
Int'l Diplomatic Agent.
(914) 295-2637 Text me for more information Only for Security Reason,
Delivered-To:
Received: from
by (Dovecot) with LMTP id ijwzBDj9ilnXSgAAjbubUg
for <>; Wed, 09 Aug 2017 05:16:56 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 09 Aug 2017 05:16:56 -0700
Received: from mogw0432.ocn.ad.jp ([118.23.109.14]:43836)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dfPut-0004yQ-EA
for ; Wed, 09 Aug 2017 05:16:55 -0700
Received: from mf-smf-ucb014.ocn.ad.jp (mf-smf-ucb014.ocn.ad.jp [153.149.227.2])
by mogw0432.ocn.ad.jp (Postfix) with ESMTP id 748662D023E;
Wed, 9 Aug 2017 21:16:09 +0900 (JST)
Received: from mf-smf-ucb014.ocn.ad.jp (mf-smf-ucb014 [153.149.227.2])
by mf-smf-ucb014.ocn.ad.jp (Postfix) with ESMTP id 5B511C05DB;
Wed, 9 Aug 2017 21:16:09 +0900 (JST)
Received: from ntt.pod01.mv-mta-ucb025 (mv-mta-ucb025.ocn.ad.jp [153.149.142.99])
by mf-smf-ucb014.ocn.ad.jp (Switch-3.3.4/Switch-3.3.4) with ESMTP id v79CG7pq036255;
Wed, 9 Aug 2017 21:16:07 +0900
Message-Id: <[email protected]>
Received: from vcair.ocn.ne.jp ([153.149.227.166])
by ntt.pod01.mv-mta-ucb025 with
id v0Fb1v0073c2f75010FbxP; Wed, 09 Aug 2017 12:16:07 +0000
Received: from User (p343007-ipngn200403kanazawa.ishikawa.ocn.ne.jp [180.48.63.7])
by vcair.ocn.ne.jp (Postfix) with SMTP;
Wed, 9 Aug 2017 21:15:35 +0900 (JST)
Reply-To: <[email protected]>
From: "ANDERSON"<[email protected]>
Date: Wed, 9 Aug 2017 11:50:52 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=19.5
X-Spam-Score: 195
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From Dr Charles Anderson International Diplomatic Agent Hello
my friend, This is to inform you of the latest development in regards to
the delivery of your Atm Gold Visa convey through my office assigned by HSBC
Bank London on instant payment as scheduled to be paid to all beneficiaries
who are yet to receive their funds, I landed at JOHN.F KENNEDY INTERNATIONAL
AIRPORT NEW YORK where I had a stop-over by customs, now they are trying
to scan your parcel through cash-track machine to detect whether the Atm Gold
Visa contained funds. [...]
Content analysis details: (19.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[118.23.109.14 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[118.23.109.14 listed in bl.score.senderscore.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.142.99>]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(door2doordeliver12[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** THIS IS DR CHARLES ANDERSON YOUR DELIVERY AGENT VERY URGENT
From Dr Charles Anderson
International Diplomatic Agent
Hello my friend,
This is to inform you of the latest development in regards to the
delivery of your Atm Gold Visa convey through my office assigned by
HSBC Bank London on instant payment as scheduled to be paid to all
beneficiaries who are yet to receive their funds, I landed at JOHN.F
KENNEDY INTERNATIONAL AIRPORT NEW YORK where I had a stop-over by
customs, now they are trying to scan your parcel through cash-track
machine to detect whether the Atm Gold Visa contained funds.
In accordance to section 34 and 36 of the Custom sector, It's not
acceptable to bring (over US$100,000) into the United States of
America without IMMUNITY TAX CLEARANCE (ITC) because it shows that the
money is either being smuggled into the country or the source of the
funds is questionable since the Diplomat's Flight Details shows that I
came from London and they required the Immunity Tax Clearance
Certificate to prove that the funds is not links with any form of
illegality.
The Certificate will be procure in your name by the customs Authority
so that I will be allowed to complete the delivery of your Atm Gold
Visa Card to your house address.
Yours Faithfully.
Dr Charles Anderson
Int'l Diplomatic Agent.
(914) 295-2637 Text me for more information Only for Security Reason,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
