by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 09 Aug 2017 14:39:56 -0700
Received: from smtp4.gov.ns.ca ([198.166.215.122]:37783 helo=ni45.cio.gov.ns.ca)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dfYhn-0001QC-09
for ; Wed, 09 Aug 2017 14:39:55 -0700
X-ASG-Debug-ID: 1502314750-0463c26ade37d50001-TxaM9A
Received: from exchange.gov.ns.ca (as435.prov.gov.ns.ca [10.250.106.15]) by ni45.cio.gov.ns.ca with ESMTP id ouygchz0QlzNTB8P (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 09 Aug 2017 18:39:10 -0300 (ADT)
X-Barracuda-Envelope-From: [email protected]
Received: from AS442.prov.gov.ns.ca (10.250.106.22) by AS435.prov.gov.ns.ca
(10.250.106.15) with Microsoft SMTP Server (TLS) id 14.3.319.2; Wed, 9 Aug
2017 18:39:09 -0300
Received: from AS440.prov.gov.ns.ca ([fe80::b1c6:5d47
1aec]) by
AS442.prov.gov.ns.ca ([fe80::adc9:abf9:a329:c145%22]) with mapi id
14.03.0319.002; Wed, 9 Aug 2017 18:39:09 -0300
From: "Ngu, William" <[email protected]>
Subject:
Thread-Index: AdMRV+6gWCOJux0yQBWQ1vqc2rCN8w==
Date: Wed, 9 Aug 2017 21:39:08 +0000
Message-ID: <[email protected]>
Accept-Language: en-US, en-CA
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.250.106.250]
Content-Type: multipart/alternative;
boundary="_000_2189D95EF6F0354BB89ABDA24C997290C3142E34AS440provgovnsc_"
MIME-Version: 1.0
To: Undisclosed recipients:;
X-Barracuda-Connect: as435.prov.gov.ns.ca[10.250.106.15]
X-Barracuda-Start-Time: 1502314750
X-Barracuda-Encrypted: ECDHE-RSA-AES256-SHA
X-Barracuda-URL: https://198.166.215.122:443/cgi-mod/mark.cgi
X-Barracuda-Scan-Msg-Size: 753
X-Virus-Scanned: by bsmtpd at cio.gov.ns.ca
X-Barracuda-BRTS-Status: 1
X-Barracuda-Spam-Score: 3.80
X-Barracuda-Spam-Status: No, SCORE=3.80 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=BSF_SC7_SA440_FFEDEXF, HTML_MESSAGE, MAILTO_TO_SPAM_ADDR, MISSING_SUBJECT, MISSING_SUBJECT_2
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.41794
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
0.00 HTML_MESSAGE BODY: HTML included in message
0.00 MAILTO_TO_SPAM_ADDR Includes a link to a likely spammer email
0.01 MISSING_SUBJECT Missing Subject: header
1.28 MISSING_SUBJECT_2 Missing Subject: header
2.50 BSF_SC7_SA440_FFEDEXF Custom Rule SA440_FFEDEXF
X-Spam-Status: No, score=3.7
X-Spam-Score: 37
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Your cashier's check Contact Email: [email protected] Your
cashier's check Contact Email: [email protected] [...]
Content analysis details: (3.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9988]
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[198.166.215.122 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
X-Spam-Flag: NO
Your cashier's check Contact Email: [email protected]
Envelope-to:
Delivery-date: Wed, 09 Aug 2017 14:39:56 -0700
Received: from smtp4.gov.ns.ca ([198.166.215.122]:37783 helo=ni45.cio.gov.ns.ca)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dfYhn-0001QC-09
for ; Wed, 09 Aug 2017 14:39:55 -0700
X-ASG-Debug-ID: 1502314750-0463c26ade37d50001-TxaM9A
Received: from exchange.gov.ns.ca (as435.prov.gov.ns.ca [10.250.106.15]) by ni45.cio.gov.ns.ca with ESMTP id ouygchz0QlzNTB8P (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 09 Aug 2017 18:39:10 -0300 (ADT)
X-Barracuda-Envelope-From: [email protected]
Received: from AS442.prov.gov.ns.ca (10.250.106.22) by AS435.prov.gov.ns.ca
(10.250.106.15) with Microsoft SMTP Server (TLS) id 14.3.319.2; Wed, 9 Aug
2017 18:39:09 -0300
Received: from AS440.prov.gov.ns.ca ([fe80::b1c6:5d47
AS442.prov.gov.ns.ca ([fe80::adc9:abf9:a329:c145%22]) with mapi id
14.03.0319.002; Wed, 9 Aug 2017 18:39:09 -0300
From: "Ngu, William" <[email protected]>
Subject:
Thread-Index: AdMRV+6gWCOJux0yQBWQ1vqc2rCN8w==
Date: Wed, 9 Aug 2017 21:39:08 +0000
Message-ID: <[email protected]>
Accept-Language: en-US, en-CA
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [10.250.106.250]
Content-Type: multipart/alternative;
boundary="_000_2189D95EF6F0354BB89ABDA24C997290C3142E34AS440provgovnsc_"
MIME-Version: 1.0
To: Undisclosed recipients:;
X-Barracuda-Connect: as435.prov.gov.ns.ca[10.250.106.15]
X-Barracuda-Start-Time: 1502314750
X-Barracuda-Encrypted: ECDHE-RSA-AES256-SHA
X-Barracuda-URL: https://198.166.215.122:443/cgi-mod/mark.cgi
X-Barracuda-Scan-Msg-Size: 753
X-Virus-Scanned: by bsmtpd at cio.gov.ns.ca
X-Barracuda-BRTS-Status: 1
X-Barracuda-Spam-Score: 3.80
X-Barracuda-Spam-Status: No, SCORE=3.80 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=BSF_SC7_SA440_FFEDEXF, HTML_MESSAGE, MAILTO_TO_SPAM_ADDR, MISSING_SUBJECT, MISSING_SUBJECT_2
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.41794
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
0.00 HTML_MESSAGE BODY: HTML included in message
0.00 MAILTO_TO_SPAM_ADDR Includes a link to a likely spammer email
0.01 MISSING_SUBJECT Missing Subject: header
1.28 MISSING_SUBJECT_2 Missing Subject: header
2.50 BSF_SC7_SA440_FFEDEXF Custom Rule SA440_FFEDEXF
X-Spam-Status: No, score=3.7
X-Spam-Score: 37
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Your cashier's check Contact Email: [email protected] Your
cashier's check Contact Email: [email protected] [...]
Content analysis details: (3.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9988]
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[198.166.215.122 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
X-Spam-Flag: NO
Your cashier's check Contact Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

