by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 01 Oct 2017 18:42:44 -0700
Received: from lvs55.hostinghk.com ([202.181.232.7]:50709 helo=ns21.hostinghk.com)
by sm with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dypkl-0001pc-Jm
for ; Sun, 01 Oct 2017 18:42:44 -0700
Received: (qmail 28646 invoked by uid 89); 2 Oct 2017 01:40:50 -0000
Received: from unknown (HELO User) ([email protected]@197.234.219.48)
by 0 with ESMTPA; 2 Oct 2017 01:40:49 -0000
Reply-To: <[email protected]>
From: "Mr John Morris"<[email protected]>
Date: Sun, 1 Oct 2017 18:40:48 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=17.1
X-Spam-Score: 171
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: NOTIFICATION OF YOUR PAYMENT VIA ATM VISA CARD This is to
officially inform you that we have verified your contract file Presently on
my desk Your ATM Card of $1.750.000.00 USD has been approved And was deposited
with DHL Delivery Company this morning for registration, And we agreed up
that the delivery of Your $1.750.000.00 Million USD ATM Package will take
off tomorrow morning .So contact with your full info Where your ATM card
will be delivered to, [...]
Content analysis details: (17.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.234.219.48>]
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** ATENTION
NOTIFICATION OF YOUR PAYMENT VIA ATM VISA CARD
This is to officially inform you that we have verified your contract file
Presently on my desk Your ATM Card of $1.750.000.00 USD has been approved
And was deposited with DHL Delivery Company this morning for registration,
And we agreed up that the delivery of Your $1.750.000.00 Million USD ATM
Package will take off tomorrow morning .So contact with your full info
Where your ATM card will be delivered to,
*** Your Full Name:
*** Full Address:
*** Personal Email or Fax
*** Phone number:
*** Age:
*** Gender;
*** Occupation:
*** country:
*** Scan copy of drivers licences or Passport
We shall post your ATM Card once you update us with the above info and you
shall be given a tracking number, that is, the Track and Trace number of your
parcel once it is posted to your mailing address, so as to enable you track
your parcel to know exactly when it will arrive to your mailing address.
Urgent get back to us today with your full address where your ATM card
Will be delivered to because i will not be in the office next week.
The amount in your Card is US$1.750.000.00 Million and your Pin code is: (9106).
Remain blessed as I'll be looking forward to receiving your immediate response.
Best Regards,
MR. JOHN MORRIS
Contact phone Number +229-9878-1972
Postman, Regular Mail Post Office Cotonou Benin
Envelope-to:
Delivery-date: Sun, 01 Oct 2017 18:42:44 -0700
Received: from lvs55.hostinghk.com ([202.181.232.7]:50709 helo=ns21.hostinghk.com)
by sm with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dypkl-0001pc-Jm
for ; Sun, 01 Oct 2017 18:42:44 -0700
Received: (qmail 28646 invoked by uid 89); 2 Oct 2017 01:40:50 -0000
Received: from unknown (HELO User) ([email protected]@197.234.219.48)
by 0 with ESMTPA; 2 Oct 2017 01:40:49 -0000
Reply-To: <[email protected]>
From: "Mr John Morris"<[email protected]>
Date: Sun, 1 Oct 2017 18:40:48 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=17.1
X-Spam-Score: 171
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: NOTIFICATION OF YOUR PAYMENT VIA ATM VISA CARD This is to
officially inform you that we have verified your contract file Presently on
my desk Your ATM Card of $1.750.000.00 USD has been approved And was deposited
with DHL Delivery Company this morning for registration, And we agreed up
that the delivery of Your $1.750.000.00 Million USD ATM Package will take
off tomorrow morning .So contact with your full info Where your ATM card
will be delivered to, [...]
Content analysis details: (17.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.234.219.48>]
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** ATENTION
NOTIFICATION OF YOUR PAYMENT VIA ATM VISA CARD
This is to officially inform you that we have verified your contract file
Presently on my desk Your ATM Card of $1.750.000.00 USD has been approved
And was deposited with DHL Delivery Company this morning for registration,
And we agreed up that the delivery of Your $1.750.000.00 Million USD ATM
Package will take off tomorrow morning .So contact with your full info
Where your ATM card will be delivered to,
*** Your Full Name:
*** Full Address:
*** Personal Email or Fax
*** Phone number:
*** Age:
*** Gender;
*** Occupation:
*** country:
*** Scan copy of drivers licences or Passport
We shall post your ATM Card once you update us with the above info and you
shall be given a tracking number, that is, the Track and Trace number of your
parcel once it is posted to your mailing address, so as to enable you track
your parcel to know exactly when it will arrive to your mailing address.
Urgent get back to us today with your full address where your ATM card
Will be delivered to because i will not be in the office next week.
The amount in your Card is US$1.750.000.00 Million and your Pin code is: (9106).
Remain blessed as I'll be looking forward to receiving your immediate response.
Best Regards,
MR. JOHN MORRIS
Contact phone Number +229-9878-1972
Postman, Regular Mail Post Office Cotonou Benin
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
