by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 24 Sep 2017 01:47:46 -0700
Received: from smtp2.blueweb.co.kr ([222.239.223.233]:44283)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dw2Zk-0007Ze-91
for ; Sun, 24 Sep 2017 01:47:46 -0700
Received: from web-59.blueweb.co.kr (web-59.blueweb.co.kr [211.202.2.59])
by smtp2.blueweb.co.kr (8.13.8/8.13.
with ESMTP id v8O8fm4O010331;
Sun, 24 Sep 2017 17:41:49 +0900
Received: from User (web-59.blueweb.co.kr [127.0.0.1])
by web-59.blueweb.co.kr (8.13.8/8.13. with SMTP id v8O8f8Ls004589;
Sun, 24 Sep 2017 17:41:11 +0900
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "MARTINS"<[email protected]>
Date: Sun, 24 Sep 2017 01:41:48 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=28.1
X-Spam-Score: 281
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: This is official notice to you that your (25,9 MILLION
US DOLLARS) which was sent for over one month now was returned. I know that
you have been [...]
Content analysis details: (28.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[222.239.223.233 listed in psbl.surriel.com]
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=b ... 0vp.pl;ip=]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[222.239.223.233 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[222.239.223.233 listed in dnsbl.sorbs.net]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION DEAR
Attn:
This is official notice to you that your (25,9 MILLION US DOLLARS) which
was sent for over one month now was returned. I know that you have been
waiting for the arrival of your CONSIGNMENT, it is unfortunate that
it was returned this week due to wrong address which was provide by your
representative (MRS.ROSEMARY STUART). And the same Women came again and
trying to make us believe that you are dead and even explained that you
entered into an agreement with her, to help you in receiving your
(CONSIGNMENT). So did you sign any Deed of Assignment in favor of
(MRS.ROSEMARY STUART) thereby making her the current beneficiary,
In view of this development, you are requested to confirm to us if you are
alive and also furnish us with your full Information,
YOUR FULL NAME ____
YOUR ADDRESS____
YOUR AGE______
YOUR CITY_______
YOUR STATE_____
YOUR CURRENT OCCUPATION___
YOUR HOME PHONE_______
YOUR CELL PHONE_____
YOUR GENDER_______
A COPY OF YOUR IDENTIFICATION _____ to enable us deliver this CONSIGNMENT
to your door step:
Respectfully submitted,
Barrister M.Collins
Envelope-to:
Delivery-date: Sun, 24 Sep 2017 01:47:46 -0700
Received: from smtp2.blueweb.co.kr ([222.239.223.233]:44283)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dw2Zk-0007Ze-91
for ; Sun, 24 Sep 2017 01:47:46 -0700
Received: from web-59.blueweb.co.kr (web-59.blueweb.co.kr [211.202.2.59])
by smtp2.blueweb.co.kr (8.13.8/8.13.
with ESMTP id v8O8fm4O010331;Sun, 24 Sep 2017 17:41:49 +0900
Received: from User (web-59.blueweb.co.kr [127.0.0.1])
by web-59.blueweb.co.kr (8.13.8/8.13.
with SMTP id v8O8f8Ls004589;Sun, 24 Sep 2017 17:41:11 +0900
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "MARTINS"<[email protected]>
Date: Sun, 24 Sep 2017 01:41:48 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=28.1
X-Spam-Score: 281
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: This is official notice to you that your (25,9 MILLION
US DOLLARS) which was sent for over one month now was returned. I know that
you have been [...]
Content analysis details: (28.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[222.239.223.233 listed in psbl.surriel.com]
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=b ... 0vp.pl;ip=]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[222.239.223.233 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[222.239.223.233 listed in dnsbl.sorbs.net]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION DEAR
Attn:
This is official notice to you that your (25,9 MILLION US DOLLARS) which
was sent for over one month now was returned. I know that you have been
waiting for the arrival of your CONSIGNMENT, it is unfortunate that
it was returned this week due to wrong address which was provide by your
representative (MRS.ROSEMARY STUART). And the same Women came again and
trying to make us believe that you are dead and even explained that you
entered into an agreement with her, to help you in receiving your
(CONSIGNMENT). So did you sign any Deed of Assignment in favor of
(MRS.ROSEMARY STUART) thereby making her the current beneficiary,
In view of this development, you are requested to confirm to us if you are
alive and also furnish us with your full Information,
YOUR FULL NAME ____
YOUR ADDRESS____
YOUR AGE______
YOUR CITY_______
YOUR STATE_____
YOUR CURRENT OCCUPATION___
YOUR HOME PHONE_______
YOUR CELL PHONE_____
YOUR GENDER_______
A COPY OF YOUR IDENTIFICATION _____ to enable us deliver this CONSIGNMENT
to your door step:
Respectfully submitted,
Barrister M.Collins
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
