by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 13 Oct 2017 18:50:25 -0700
Received: from offroad-led.ru ([193.124.181.234]:58558)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e3Bap-0005O0-Pk
for ; Fri, 13 Oct 2017 18:50:25 -0700
Received: from 69.57.93.66.dsl.static.nccray.com ([69.57.93.66] helo=User)
by offroad-led.ru with esmtpa (Exim 4.89)
(envelope-from <[email protected]>)
id 1e3BZo-0006Gl-K9; Sat, 14 Oct 2017 04:49:21 +0300
Reply-To: <[email protected]>
From: "MaJor Elizabeth DiCampli"<[email protected]>
To: [email protected]
Date: Fri, 13 Oct 2017 20:49:08 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: Avast (VPS 171013-6, 10/13/2017), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
Sender: [email protected]
X-Spam-Status: Yes, score=21.9
X-Spam-Score: 219
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: MaJor Elizabeth DiCampli Nurse Corps Officer at United States
Army Assignment Under United Nation Syria Chapter [...]
Content analysis details: (21.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[69.57.93.66 listed in zen.spamhaus.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[193.124.181.234 listed in bb.barracudacentral.org]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.4 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_REMOTE_IMAGE Message contains an external image
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** CAN I TRUST YOU?
MaJor Elizabeth DiCampli
Nurse Corps Officer at United States Army
Assignment Under United Nation Syria Chapter
San Diego State University-California State University
My name is Major Elizabeth DiCampli. Am on Assignment with United Nation Syria
Chapter. I live in Hawaii USA. Despite we have not meet face to face i still have a
confident trust on you and i believe in your assistant. Am on a special assignment
with United Nation here in Syria . I need your help and it will benefit both of us.
My Squad here in Syria rescued the son of the Syrian Prime Minister from the hand of
the Taliban's here in Syria . The Prime minister gave us a cash reward my own share
of the money is $950,000 Dollars. And i want to trust you so that i can send the
money out from here because is not safe staying with me here.
The bank where we camp is not working because of the crisis here if you are watching
CNN you will understand what i mean. Can i trust you? If you capable to help me
receive this money I will give you 30% of the total amount.I want to be sure if you
are capable no matter what it takes. I have make all the necessary arrangement on
the means of moving it out safely. Can i trust you? Please get back to me on the
email immediately for security reasons.
Regards
Major Elizabeth Dicampli
Direct Email: [email protected]
Envelope-to:
Delivery-date: Fri, 13 Oct 2017 18:50:25 -0700
Received: from offroad-led.ru ([193.124.181.234]:58558)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e3Bap-0005O0-Pk
for ; Fri, 13 Oct 2017 18:50:25 -0700
Received: from 69.57.93.66.dsl.static.nccray.com ([69.57.93.66] helo=User)
by offroad-led.ru with esmtpa (Exim 4.89)
(envelope-from <[email protected]>)
id 1e3BZo-0006Gl-K9; Sat, 14 Oct 2017 04:49:21 +0300
Reply-To: <[email protected]>
From: "MaJor Elizabeth DiCampli"<[email protected]>
To: [email protected]
Date: Fri, 13 Oct 2017 20:49:08 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: Avast (VPS 171013-6, 10/13/2017), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
Sender: [email protected]
X-Spam-Status: Yes, score=21.9
X-Spam-Score: 219
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: MaJor Elizabeth DiCampli Nurse Corps Officer at United States
Army Assignment Under United Nation Syria Chapter [...]
Content analysis details: (21.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[69.57.93.66 listed in zen.spamhaus.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[193.124.181.234 listed in bb.barracudacentral.org]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.4 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_REMOTE_IMAGE Message contains an external image
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** CAN I TRUST YOU?
MaJor Elizabeth DiCampli
Nurse Corps Officer at United States Army
Assignment Under United Nation Syria Chapter
San Diego State University-California State University
My name is Major Elizabeth DiCampli. Am on Assignment with United Nation Syria
Chapter. I live in Hawaii USA. Despite we have not meet face to face i still have a
confident trust on you and i believe in your assistant. Am on a special assignment
with United Nation here in Syria . I need your help and it will benefit both of us.
My Squad here in Syria rescued the son of the Syrian Prime Minister from the hand of
the Taliban's here in Syria . The Prime minister gave us a cash reward my own share
of the money is $950,000 Dollars. And i want to trust you so that i can send the
money out from here because is not safe staying with me here.
The bank where we camp is not working because of the crisis here if you are watching
CNN you will understand what i mean. Can i trust you? If you capable to help me
receive this money I will give you 30% of the total amount.I want to be sure if you
are capable no matter what it takes. I have make all the necessary arrangement on
the means of moving it out safely. Can i trust you? Please get back to me on the
email immediately for security reasons.
Regards
Major Elizabeth Dicampli
Direct Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
