by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 08 Jan 2018 01:10:52 -0800
Received: from ns1.franweb.net.br ([138.0.233.2]:35186 helo=srv01.franweb.net.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eYTSF-0000eF-HX
for ; Mon, 08 Jan 2018 01:10:52 -0800
Received: from 66.83.62.83.nw.nuvox.net ([66.83.62.83] helo=User)
by srv01.franweb.net.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1eYTQu-0005wN-9Z; Mon, 08 Jan 2018 07:09:28 -0200
Reply-To: <[email protected]>
From: "WILLSON BEN"<[email protected]>
Date: Mon, 8 Jan 2018 04:07:09 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=54.9
X-Spam-Score: 549
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear , May God Bless You abundantly. I am in need of your
assistance but I do not know how trust worthy you are; I want to make a donation
to the poor and needy through you. My name is Ben Wilson andI am an American
citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer. [...]
Content analysis details: (54.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N3 BODY: No description available.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 KAM_NUMSUBJECT Subject ends in numbers
2.8 NSL_RCVD_HELO_USER Received from HELO User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[138.0.233.2 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[138.0.233.2 listed in psbl.surriel.com]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[138.0.233.2 listed in bl.mailspike.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[138.0.233.2 listed in zen.spamhaus.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsafia5[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsafia5[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(wilsonben911[at]yandex.com)
1.0 MISSING_HEADERS Missing To: header
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.1 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.3 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.2 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.4 FORM_FRAUD_3 Fill a form and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** VERY BEST REGARDS 8 th/1//2018
My Dear ,
May God Bless You abundantly.
I am in need of your assistance but I do not know how trust worthy you are; I want
to make a donation to the poor and needy through you. My name is Ben Wilson andI am
an American citizen, I live in London . Right now, I am in the hospital, I have
been undergoing treatment for esophageal cancer.
I have since lost my ability to talk and my Doctors have told me that I have only a
few months to live and I am very much worried about my health condition which is
getting bad day by day. But I know that my redeemer liveth, he is a merciful God
and he can decide to keep me longer than expected.
Before I became ill, I kept US$ 7.5 Million in a long-term deposit account in a
finance company in London which I wanted to invest into long term business
venture.Now that it has become obviously clear that I will not survive this cancer
sickness, it is really unfortunate that I have to end my life so short.
However, I have decided that I must give my wealth to the poor and needy just for
assistance. if you can be trusted, I will like to leave the funds under your care
so that you can utilize it by taking care of those in dare need of help. Mostly, if
you can donate to motherless, widows, less privileged and hurricane
victims, I will highly appreciate it.
Please, kindly reply to me urgently with your full name and address, occupation,
religion, including your direct telephone number so that I can give you more
information. I will continue to pray about it until I hear from you. Legal
documents relating to the deposit of the funds in London will also be made
available to you.
Until I hear from you, may the Almighty God continue to bless you and give you the
wisdom on how to utilize the funds when finally released to you.
Yours sincerely,
Mr Ben Wilson
Envelope-to:
Delivery-date: Mon, 08 Jan 2018 01:10:52 -0800
Received: from ns1.franweb.net.br ([138.0.233.2]:35186 helo=srv01.franweb.net.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eYTSF-0000eF-HX
for ; Mon, 08 Jan 2018 01:10:52 -0800
Received: from 66.83.62.83.nw.nuvox.net ([66.83.62.83] helo=User)
by srv01.franweb.net.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1eYTQu-0005wN-9Z; Mon, 08 Jan 2018 07:09:28 -0200
Reply-To: <[email protected]>
From: "WILLSON BEN"<[email protected]>
Date: Mon, 8 Jan 2018 04:07:09 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=54.9
X-Spam-Score: 549
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear , May God Bless You abundantly. I am in need of your
assistance but I do not know how trust worthy you are; I want to make a donation
to the poor and needy through you. My name is Ben Wilson andI am an American
citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer. [...]
Content analysis details: (54.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N3 BODY: No description available.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 KAM_NUMSUBJECT Subject ends in numbers
2.8 NSL_RCVD_HELO_USER Received from HELO User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[138.0.233.2 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[138.0.233.2 listed in psbl.surriel.com]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[138.0.233.2 listed in bl.mailspike.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[138.0.233.2 listed in zen.spamhaus.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsafia5[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsafia5[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(wilsonben911[at]yandex.com)
1.0 MISSING_HEADERS Missing To: header
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.1 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.3 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.2 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.4 FORM_FRAUD_3 Fill a form and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** VERY BEST REGARDS 8 th/1//2018
My Dear ,
May God Bless You abundantly.
I am in need of your assistance but I do not know how trust worthy you are; I want
to make a donation to the poor and needy through you. My name is Ben Wilson andI am
an American citizen, I live in London . Right now, I am in the hospital, I have
been undergoing treatment for esophageal cancer.
I have since lost my ability to talk and my Doctors have told me that I have only a
few months to live and I am very much worried about my health condition which is
getting bad day by day. But I know that my redeemer liveth, he is a merciful God
and he can decide to keep me longer than expected.
Before I became ill, I kept US$ 7.5 Million in a long-term deposit account in a
finance company in London which I wanted to invest into long term business
venture.Now that it has become obviously clear that I will not survive this cancer
sickness, it is really unfortunate that I have to end my life so short.
However, I have decided that I must give my wealth to the poor and needy just for
assistance. if you can be trusted, I will like to leave the funds under your care
so that you can utilize it by taking care of those in dare need of help. Mostly, if
you can donate to motherless, widows, less privileged and hurricane
victims, I will highly appreciate it.
Please, kindly reply to me urgently with your full name and address, occupation,
religion, including your direct telephone number so that I can give you more
information. I will continue to pray about it until I hear from you. Legal
documents relating to the deposit of the funds in London will also be made
available to you.
Until I hear from you, may the Almighty God continue to bless you and give you the
wisdom on how to utilize the funds when finally released to you.
Yours sincerely,
Mr Ben Wilson
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
