by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 25 Oct 2017 05:12:16 -0700
Received: from [131.72.116.10] (port=44922 helo=srv01.altoweb.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e7KXe-0000Cz-Pl
for ; Wed, 25 Oct 2017 05:12:16 -0700
Received: from 66.83.62.83.nw.nuvox.net ([66.83.62.83] helo=User)
by srv01.altoweb.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1e7KW8-0005DS-Cj; Wed, 25 Oct 2017 10:10:40 -0200
Reply-To: <[email protected]>
From: "BEN WILLSON"<[email protected]>
Date: Wed, 25 Oct 2017 08:08:15 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=26.1
X-Spam-Score: 261
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear , May God Bless You abundantly. I am in need of your
assistance but I do not know how trust worthy you are; I want to make a donation
to the poor and needy through you. My name is Ben Wilson andI am an American
citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer. [...]
Content analysis details: (26.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.5 KAM_NUMSUBJECT Subject ends in numbers
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[131.72.116.10 listed in bb.barracudacentral.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(wilsonben911[at]yandex.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsafia5[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsafia5[at]gmail.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** .May God Bless You abundantly.25/10/2017
My Dear ,
May God Bless You abundantly.
I am in need of your assistance but I do not know how trust worthy you are; I want
to make a donation to the poor and needy through you. My name is Ben Wilson andI am
an American citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer.
I have since lost my ability to talk and my Doctors have told me that I have only a
few months to live and I am very much worried about my health condition which is
getting bad day by day. But I know that my redeemer liveth, he is a merciful God and
he can decide to keep me longer than expected.
Before I became ill, I kept US$ 7.5 Million in a long-term deposit account in a
finance company in London which I wanted to invest into long term business
venture.Now that it has become obviously clear that I will not survive this cancer
sickness, it is really unfortunate that I have to end my life so short.
However, I have decided that I must give my wealth to the poor and needy just for
assistance. if you can be trusted, I will like to leave the funds under your care so
that you can utilize it by taking care of those in dare need of help. Mostly, if you
can donate to motherless, widows, less privileged and hurricane
victims, I will highly appreciate it.
Please, kindly reply to me urgently with your full name and address, occupation,
religion, including your direct telephone number so that I can give you more
information. I will continue to pray about it until I hear from you. Legal documents
relating to the deposit of the funds in London will also be made available to you.
Until I hear from you, may the Almighty God continue to bless you and give you the
wisdom on how to utilize the funds when finally released to you.
Yours sincerely,
Mr Ben Wilson
Envelope-to:
Delivery-date: Wed, 25 Oct 2017 05:12:16 -0700
Received: from [131.72.116.10] (port=44922 helo=srv01.altoweb.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e7KXe-0000Cz-Pl
for ; Wed, 25 Oct 2017 05:12:16 -0700
Received: from 66.83.62.83.nw.nuvox.net ([66.83.62.83] helo=User)
by srv01.altoweb.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1e7KW8-0005DS-Cj; Wed, 25 Oct 2017 10:10:40 -0200
Reply-To: <[email protected]>
From: "BEN WILLSON"<[email protected]>
Date: Wed, 25 Oct 2017 08:08:15 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=26.1
X-Spam-Score: 261
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear , May God Bless You abundantly. I am in need of your
assistance but I do not know how trust worthy you are; I want to make a donation
to the poor and needy through you. My name is Ben Wilson andI am an American
citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer. [...]
Content analysis details: (26.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.5 KAM_NUMSUBJECT Subject ends in numbers
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[131.72.116.10 listed in bb.barracudacentral.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(wilsonben911[at]yandex.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsafia5[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsafia5[at]gmail.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** .May God Bless You abundantly.25/10/2017
My Dear ,
May God Bless You abundantly.
I am in need of your assistance but I do not know how trust worthy you are; I want
to make a donation to the poor and needy through you. My name is Ben Wilson andI am
an American citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer.
I have since lost my ability to talk and my Doctors have told me that I have only a
few months to live and I am very much worried about my health condition which is
getting bad day by day. But I know that my redeemer liveth, he is a merciful God and
he can decide to keep me longer than expected.
Before I became ill, I kept US$ 7.5 Million in a long-term deposit account in a
finance company in London which I wanted to invest into long term business
venture.Now that it has become obviously clear that I will not survive this cancer
sickness, it is really unfortunate that I have to end my life so short.
However, I have decided that I must give my wealth to the poor and needy just for
assistance. if you can be trusted, I will like to leave the funds under your care so
that you can utilize it by taking care of those in dare need of help. Mostly, if you
can donate to motherless, widows, less privileged and hurricane
victims, I will highly appreciate it.
Please, kindly reply to me urgently with your full name and address, occupation,
religion, including your direct telephone number so that I can give you more
information. I will continue to pray about it until I hear from you. Legal documents
relating to the deposit of the funds in London will also be made available to you.
Until I hear from you, may the Almighty God continue to bless you and give you the
wisdom on how to utilize the funds when finally released to you.
Yours sincerely,
Mr Ben Wilson
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
