by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 27 Oct 2017 16:43:23 -0700
Received: from smtp-out.cgp.gldn.net ([195.239.234.168]:39311)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1e8EHW-0006pm-26
for ; Fri, 27 Oct 2017 16:43:23 -0700
X-DCC-dmv.com-Metrics: mail-fe1.vimpelcom.ru 1096; bulk Body=67945 Fuz1=67951
Fuz2=many
X-Bulk-Status: Yes
X-Rspam-Metric: default; False; (-1.00/-1.00)
X-Rspam-Action: soft reject
X-Rspam-Status: No
X-Rspam-Score: -1.00 []
X-DSPAM-Result: Whitelisted
X-DSPAM-Processed: Sat Oct 28 02:42:35 2017
X-DSPAM-Confidence: 0.9903
X-DSPAM-Probability: 0.0000
X-DSPAM-Signature: 59f3c46b70134319518183
Received: from [84.38.134.22] (account [email protected] HELO IP-134-22.dataclub.eu)
by frontend1.cgp.gldn.net (CommuniGate Pro SMTP 5.4.11)
with ESMTPSA id 6556647; Sat, 28 Oct 2017 02:41:25 +0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "William Cassello" <[email protected]>
Date: Sat, 28 Oct 2017 02:42:04 +0300
Reply-To: [email protected]
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=13.3
X-Spam-Score: 133
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Funds Owner It was resolved and agreed that your Inheritance/Contract
Fund $8.3m would be released to you on a special method of payment which
tag Name Reads"SWIFT CREDIT CARD".You are adviced to re-comfirm YOUR NAME,
ADDRESS,OCCUPATION, NEXT OF KIN. PHONE AND FAX NUMBER TO CLAIM YOUR FUND.
write with this email address: [email protected] William Cassello
[...]
Content analysis details: (13.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[195.239.234.168 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[195.239.234.168 listed in dnsbl.sorbs.net]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[195.239.234.168 listed in bb.barracudacentral.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(cassellowilliam43[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RE: Your ATM Visa Card Is Now Ready.
Dear Funds Owner
It was resolved and agreed that your Inheritance/Contract Fund $8.3m would be
released to you on a special method of payment which tag Name Reads"SWIFT CREDIT
CARD".You are adviced to re-comfirm YOUR NAME, ADDRESS,OCCUPATION, NEXT OF KIN.
PHONE AND FAX NUMBER TO CLAIM YOUR FUND. write with this email address:
[email protected]
William Cassello
Envelope-to:
Delivery-date: Fri, 27 Oct 2017 16:43:23 -0700
Received: from smtp-out.cgp.gldn.net ([195.239.234.168]:39311)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1e8EHW-0006pm-26
for ; Fri, 27 Oct 2017 16:43:23 -0700
X-DCC-dmv.com-Metrics: mail-fe1.vimpelcom.ru 1096; bulk Body=67945 Fuz1=67951
Fuz2=many
X-Bulk-Status: Yes
X-Rspam-Metric: default; False; (-1.00/-1.00)
X-Rspam-Action: soft reject
X-Rspam-Status: No
X-Rspam-Score: -1.00 []
X-DSPAM-Result: Whitelisted
X-DSPAM-Processed: Sat Oct 28 02:42:35 2017
X-DSPAM-Confidence: 0.9903
X-DSPAM-Probability: 0.0000
X-DSPAM-Signature: 59f3c46b70134319518183
Received: from [84.38.134.22] (account [email protected] HELO IP-134-22.dataclub.eu)
by frontend1.cgp.gldn.net (CommuniGate Pro SMTP 5.4.11)
with ESMTPSA id 6556647; Sat, 28 Oct 2017 02:41:25 +0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "William Cassello" <[email protected]>
Date: Sat, 28 Oct 2017 02:42:04 +0300
Reply-To: [email protected]
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=13.3
X-Spam-Score: 133
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Funds Owner It was resolved and agreed that your Inheritance/Contract
Fund $8.3m would be released to you on a special method of payment which
tag Name Reads"SWIFT CREDIT CARD".You are adviced to re-comfirm YOUR NAME,
ADDRESS,OCCUPATION, NEXT OF KIN. PHONE AND FAX NUMBER TO CLAIM YOUR FUND.
write with this email address: [email protected] William Cassello
[...]
Content analysis details: (13.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[195.239.234.168 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[195.239.234.168 listed in dnsbl.sorbs.net]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[195.239.234.168 listed in bb.barracudacentral.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(cassellowilliam43[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RE: Your ATM Visa Card Is Now Ready.
Dear Funds Owner
It was resolved and agreed that your Inheritance/Contract Fund $8.3m would be
released to you on a special method of payment which tag Name Reads"SWIFT CREDIT
CARD".You are adviced to re-comfirm YOUR NAME, ADDRESS,OCCUPATION, NEXT OF KIN.
PHONE AND FAX NUMBER TO CLAIM YOUR FUND. write with this email address:
[email protected]
William Cassello
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

