by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 2OaKLvWLJlqPBgAAjbubUg
for <>; Tue, 05 Dec 2017 04:07:17 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 05 Dec 2017 04:07:17 -0800
Received: from 59-124-152-238.hinet-ip.hinet.net ([59.124.152.238]:59954 helo=jcsr3.jc01.com.tw)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eMC0E-0000RV-VM
for ; Tue, 05 Dec 2017 04:07:17 -0800
Received: from User ([182.48.67.241]) by jcsr3.jc01.com.tw with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 5 Dec 2017 20:06:27 +0800
Reply-To: <[email protected]>
From: "Mrs. Anna B"<[email protected]>
Date: Tue, 5 Dec 2017 13:06:32 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 05 Dec 2017 12:06:27.0944 (UTC) FILETIME=[7AC0AE80:01D36DC1]
X-Spam-Status: Yes, score=35.7
X-Spam-Score: 357
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear Friend, Let me first of all inform you, I got your
email address from a mail Directory and decided to mail you for a permission
to go ahead. I am Mrs. Anna Blair from United Kingdom, married to Dr. Anthony
R. Blair who worked with Texaco Oil Company in Malaysia before he died in
a plane crash on his way to a Board meeting. My Husband and I were married
but without any children. Since his death I decided not to re-marry and presently
I am 79 Years old. When my late husband was Alive he deposited the sum of
$11.5M. (Eleven Million Five Hundred Thousand U.S. Dollars) with a Bank.
[...]
Content analysis details: (35.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 TVD_RCVD_IP Message was received from an IP address
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[59.124.152.238 listed in zen.spamhaus.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[59.124.152.238 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
1.0 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.4 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.2 TO_NO_BRKTS_DYNIP To: lacks brackets and dynamic rDNS
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.1 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.1 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** I await your urgent reply.
My Dear Friend,
Let me first of all inform you, I got your email address from a mail Directory and
decided to mail you for a permission to go ahead. I am Mrs. Anna Blair from United
Kingdom, married to Dr. Anthony R. Blair who worked with Texaco Oil Company in
Malaysia before he died in a plane crash on his way to a Board meeting. My Husband
and I were married but without any children. Since his death I decided not to
re-marry and presently I am 79 Years old. When my late husband was Alive he
deposited the sum of $11.5M. (Eleven Million Five Hundred Thousand U.S. Dollars)
with a Bank.
Presently this money is still with the Bank and the management just Wrote me as the
beneficiary to come forward to receive the money or rather Issue a letter of
authority to somebody to receive it on my behalf. I am presently in a hospital where
I have been undergoing treatment Cancer of the lungs. I have since lost my ability
to talk and my doctors have told me that I have only a few months to live so I think
the best thing to do is to use the money for charity purposes.
I want a person who is trustworthy that I will make the beneficiary of my late
Husband's Fund deposited with the bank so that the person can get the money and
utilize 70% of this money to fund churches, orphanages and widows around the world.
As soon as I receive your reply I shall give you the contact details of the Bank. I
will also issue you a letter of authority that will prove you as the new beneficiary
of this fund.Please assure me that you will act accordingly as I stated here in and
Keep this contact confidential till such a time this funds get to your Custody. This
is to ensure that nothing jeopardizes my last wish on earth.
I await your urgent reply.
Regards,
Mrs. Anna Blair.
Delivered-To:
Received: from
by with LMTP id 2OaKLvWLJlqPBgAAjbubUg
for <>; Tue, 05 Dec 2017 04:07:17 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 05 Dec 2017 04:07:17 -0800
Received: from 59-124-152-238.hinet-ip.hinet.net ([59.124.152.238]:59954 helo=jcsr3.jc01.com.tw)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eMC0E-0000RV-VM
for ; Tue, 05 Dec 2017 04:07:17 -0800
Received: from User ([182.48.67.241]) by jcsr3.jc01.com.tw with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 5 Dec 2017 20:06:27 +0800
Reply-To: <[email protected]>
From: "Mrs. Anna B"<[email protected]>
Date: Tue, 5 Dec 2017 13:06:32 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 05 Dec 2017 12:06:27.0944 (UTC) FILETIME=[7AC0AE80:01D36DC1]
X-Spam-Status: Yes, score=35.7
X-Spam-Score: 357
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear Friend, Let me first of all inform you, I got your
email address from a mail Directory and decided to mail you for a permission
to go ahead. I am Mrs. Anna Blair from United Kingdom, married to Dr. Anthony
R. Blair who worked with Texaco Oil Company in Malaysia before he died in
a plane crash on his way to a Board meeting. My Husband and I were married
but without any children. Since his death I decided not to re-marry and presently
I am 79 Years old. When my late husband was Alive he deposited the sum of
$11.5M. (Eleven Million Five Hundred Thousand U.S. Dollars) with a Bank.
[...]
Content analysis details: (35.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 TVD_RCVD_IP Message was received from an IP address
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[59.124.152.238 listed in zen.spamhaus.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[59.124.152.238 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
1.0 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.4 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.2 TO_NO_BRKTS_DYNIP To: lacks brackets and dynamic rDNS
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.1 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.1 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** I await your urgent reply.
My Dear Friend,
Let me first of all inform you, I got your email address from a mail Directory and
decided to mail you for a permission to go ahead. I am Mrs. Anna Blair from United
Kingdom, married to Dr. Anthony R. Blair who worked with Texaco Oil Company in
Malaysia before he died in a plane crash on his way to a Board meeting. My Husband
and I were married but without any children. Since his death I decided not to
re-marry and presently I am 79 Years old. When my late husband was Alive he
deposited the sum of $11.5M. (Eleven Million Five Hundred Thousand U.S. Dollars)
with a Bank.
Presently this money is still with the Bank and the management just Wrote me as the
beneficiary to come forward to receive the money or rather Issue a letter of
authority to somebody to receive it on my behalf. I am presently in a hospital where
I have been undergoing treatment Cancer of the lungs. I have since lost my ability
to talk and my doctors have told me that I have only a few months to live so I think
the best thing to do is to use the money for charity purposes.
I want a person who is trustworthy that I will make the beneficiary of my late
Husband's Fund deposited with the bank so that the person can get the money and
utilize 70% of this money to fund churches, orphanages and widows around the world.
As soon as I receive your reply I shall give you the contact details of the Bank. I
will also issue you a letter of authority that will prove you as the new beneficiary
of this fund.Please assure me that you will act accordingly as I stated here in and
Keep this contact confidential till such a time this funds get to your Custody. This
is to ensure that nothing jeopardizes my last wish on earth.
I await your urgent reply.
Regards,
Mrs. Anna Blair.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
