by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 25 Aug 2017 19:36:20 -0700
Received: from [138.185.148.10] (port=37162 helo=srv01.planetacyber.psi.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dlQxO-0005fV-VF
for ; Fri, 25 Aug 2017 19:36:20 -0700
Received: from 66.83.62.83.nw.nuvox.net ([66.83.62.83] helo=User)
by srv01.planetacyber.psi.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1dlQwB-0006vI-EM; Fri, 25 Aug 2017 23:35:03 -0300
Reply-To: <[email protected]>
From: "TONY MARSHALL"<[email protected]>
Date: Fri, 25 Aug 2017 22:33:10 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=25.9
X-Spam-Score: 259
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear , May God Bless You abundantly. I am in need of your
assistance but I do not know how trust worthy you are; I want to make a donation
to the poor and needy through you. My name is Tony Marshall and I am an American
citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer. [...]
Content analysis details: (25.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(tony.marshall55[at]yahoo.be)
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[138.185.148.10 listed in bb.barracudacentral.org]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(engdavidgodsn[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[138.185.148.10 listed in dnsbl.sorbs.net]
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** May God Bless You abundantly.25/08/2017
My Dear ,
May God Bless You abundantly.
I am in need of your assistance but I do not know how trust worthy you are; I want
to make a donation to the poor and needy through you. My name is Tony Marshall and
I am an American citizen, I live in London . Right now, I am in the hospital, I
have been undergoing treatment for esophageal cancer.
I have since lost my ability to talk and my Doctors have told me that I have only a
few months to live and I am very much worried about my health condition which is
getting bad day by day. But I know that my redeemer liveth, he is a merciful God and
he can decide to keep me longer than expected.
Before I became ill, I kept US$ 7.5 Million in a long-term deposit account in a
finance company in London which I wanted to invest into long term business venture.
Now that it has become obviously clear that I will not survive this cancer sickness,
it is really unfortunate that I have to end my life so short.
However, I have decided that I must give my wealth to the poor and needy just for
assistance. if you can be trusted, I will like to leave the funds under your care so
that you can utilize it by taking care of those in dare need of help.
Mostly, if you can donate to motherless, widows, less privileged and hurricane
victims, I will highly appreciate it.
Please, kindly reply to me urgently with your full name and address, occupation,
religion, including your direct telephone number so that I can give you more
information. I will continue to pray about it until I hear from you. Legal documents
relating to the deposit of the funds in Canada will also be made available to you.
Until I hear from you, may the Almighty God continue to bless you and give you the
wisdom on how to utilize the funds when finally released to you.
Yours sincerely,
Mr Tony Marshall
Envelope-to:
Delivery-date: Fri, 25 Aug 2017 19:36:20 -0700
Received: from [138.185.148.10] (port=37162 helo=srv01.planetacyber.psi.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dlQxO-0005fV-VF
for ; Fri, 25 Aug 2017 19:36:20 -0700
Received: from 66.83.62.83.nw.nuvox.net ([66.83.62.83] helo=User)
by srv01.planetacyber.psi.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1dlQwB-0006vI-EM; Fri, 25 Aug 2017 23:35:03 -0300
Reply-To: <[email protected]>
From: "TONY MARSHALL"<[email protected]>
Date: Fri, 25 Aug 2017 22:33:10 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=25.9
X-Spam-Score: 259
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear , May God Bless You abundantly. I am in need of your
assistance but I do not know how trust worthy you are; I want to make a donation
to the poor and needy through you. My name is Tony Marshall and I am an American
citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer. [...]
Content analysis details: (25.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(tony.marshall55[at]yahoo.be)
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[138.185.148.10 listed in bb.barracudacentral.org]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(engdavidgodsn[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[138.185.148.10 listed in dnsbl.sorbs.net]
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** May God Bless You abundantly.25/08/2017
My Dear ,
May God Bless You abundantly.
I am in need of your assistance but I do not know how trust worthy you are; I want
to make a donation to the poor and needy through you. My name is Tony Marshall and
I am an American citizen, I live in London . Right now, I am in the hospital, I
have been undergoing treatment for esophageal cancer.
I have since lost my ability to talk and my Doctors have told me that I have only a
few months to live and I am very much worried about my health condition which is
getting bad day by day. But I know that my redeemer liveth, he is a merciful God and
he can decide to keep me longer than expected.
Before I became ill, I kept US$ 7.5 Million in a long-term deposit account in a
finance company in London which I wanted to invest into long term business venture.
Now that it has become obviously clear that I will not survive this cancer sickness,
it is really unfortunate that I have to end my life so short.
However, I have decided that I must give my wealth to the poor and needy just for
assistance. if you can be trusted, I will like to leave the funds under your care so
that you can utilize it by taking care of those in dare need of help.
Mostly, if you can donate to motherless, widows, less privileged and hurricane
victims, I will highly appreciate it.
Please, kindly reply to me urgently with your full name and address, occupation,
religion, including your direct telephone number so that I can give you more
information. I will continue to pray about it until I hear from you. Legal documents
relating to the deposit of the funds in Canada will also be made available to you.
Until I hear from you, may the Almighty God continue to bless you and give you the
wisdom on how to utilize the funds when finally released to you.
Yours sincerely,
Mr Tony Marshall
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
