by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 31 Oct 2017 07:28:16 -0700
Received: from mail.superfish.pl ([78.133.189.54]:46824)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1e9XWY-00012F-Kp
for ; Tue, 31 Oct 2017 07:28:16 -0700
Received: from User (unknown [41.138.89.227])
by mail.superfish.pl (Postfix) with ESMTPA id 421C712CDB92;
Tue, 31 Oct 2017 12:33:31 +0100 (CET)
Reply-To: <[email protected]>
From: "MRS ROSALING BRUCE"<[email protected]>
Date: Mon, 30 Oct 2017 23:41:59 -1200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=24.5
X-Spam-Score: 245
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention:Beneficiary This message is from Federal ministry
of finance Benin Republic, we are to let you know that we have finally concluded
with UBA Bank Benin to release your full compensation payment of $4.5Million
US Dollars to you through Money Gram and you will be receiving the sum of
$5000.00 us dollars daily and First payment has been sent: Reference: to
you, [...]
Content analysis details: (24.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[78.133.189.54 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[78.133.189.54 listed in dnsbl.sorbs.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(moneygramheadquater001[at]gmail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... ks.org;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[78.133.189.54 listed in bb.barracudacentral.org]
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE No description available.
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Your $5000 was sent today
Attention:Beneficiary
This message is from Federal ministry of finance Benin Republic, we are to let you
know that we have finally concluded with UBA Bank Benin to release your full
compensation payment of $4.5Million US Dollars to you through Money Gram and you
will be receiving the sum of $5000.00 us dollars daily and First payment has been
sent: Reference: to you,
The Money Gram office stated that you will be receiving your funds at the maximum
rate of $5000.00 us dollars daily until you receive the total sum of $4.5 Million US
Dollars completely. You are also requested to re-confirm your address to them to
avoid any wrong transfer:
CONTACT HIM WITH YOUR FULL INFORMATION
Your name..................
Country..................
Phone no..............
Address/city................
A COPY YOUR ID.......................
Age/sex..................
Contact:Mr Paul William
Tele:..+22998931356
Contact .Mr Paul William,immediately through his phone# or send email for him to
give you Sender Name & Question and Answer to pick up your money today and let me
know when you confirm it all.
Thank you,
MRS ROSALING BRUCE
Envelope-to:
Delivery-date: Tue, 31 Oct 2017 07:28:16 -0700
Received: from mail.superfish.pl ([78.133.189.54]:46824)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1e9XWY-00012F-Kp
for ; Tue, 31 Oct 2017 07:28:16 -0700
Received: from User (unknown [41.138.89.227])
by mail.superfish.pl (Postfix) with ESMTPA id 421C712CDB92;
Tue, 31 Oct 2017 12:33:31 +0100 (CET)
Reply-To: <[email protected]>
From: "MRS ROSALING BRUCE"<[email protected]>
Date: Mon, 30 Oct 2017 23:41:59 -1200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=24.5
X-Spam-Score: 245
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention:Beneficiary This message is from Federal ministry
of finance Benin Republic, we are to let you know that we have finally concluded
with UBA Bank Benin to release your full compensation payment of $4.5Million
US Dollars to you through Money Gram and you will be receiving the sum of
$5000.00 us dollars daily and First payment has been sent: Reference: to
you, [...]
Content analysis details: (24.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[78.133.189.54 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[78.133.189.54 listed in dnsbl.sorbs.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(moneygramheadquater001[at]gmail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... ks.org;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[78.133.189.54 listed in bb.barracudacentral.org]
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE No description available.
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Your $5000 was sent today
Attention:Beneficiary
This message is from Federal ministry of finance Benin Republic, we are to let you
know that we have finally concluded with UBA Bank Benin to release your full
compensation payment of $4.5Million US Dollars to you through Money Gram and you
will be receiving the sum of $5000.00 us dollars daily and First payment has been
sent: Reference: to you,
The Money Gram office stated that you will be receiving your funds at the maximum
rate of $5000.00 us dollars daily until you receive the total sum of $4.5 Million US
Dollars completely. You are also requested to re-confirm your address to them to
avoid any wrong transfer:
CONTACT HIM WITH YOUR FULL INFORMATION
Your name..................
Country..................
Phone no..............
Address/city................
A COPY YOUR ID.......................
Age/sex..................
Contact:Mr Paul William
Tele:..+22998931356
Contact .Mr Paul William,immediately through his phone# or send email for him to
give you Sender Name & Question and Answer to pick up your money today and let me
know when you confirm it all.
Thank you,
MRS ROSALING BRUCE
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
