by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 4I2jOTRYZloJEAAAjbubUg
for <>; Mon, 22 Jan 2018 13:31:32 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 22 Jan 2018 13:31:32 -0800
Received: from trinity.org.ua ([193.227.207.106]:24454)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1edjgh-00013i-AQ
for ; Mon, 22 Jan 2018 13:31:32 -0800
Received: from User (trinity.org.ua [127.0.0.1])
by trinity.org.ua (Postfix) with SMTP id E1E723AA35B1;
Mon, 22 Jan 2018 22:32:40 +0200 (EET)
Reply-To: <[email protected]>
From: "Ken Morris"<[email protected]>
Date: Mon, 22 Jan 2018 22:30:43 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=23.3
X-Spam-Score: 233
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "\",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir/Ma, We write to inform you that your package with
No.-35461121, Allocation No: 674699 Password No: 489336, Pin Code No: 55674
and your Certificate of Merit Payment No: 208, Released Code No: 9901; Immediate
Telex confirmation No:-0014678; Secret Code No: XWTN084. has been in Customs
facility custody waiting for resolutions of the clearance to further the
delivery to your delivery address by the delivery Agent who came all the way
from Africa.We have been waiting for you to contact us regarding your consignment
box which the agent suppose to deliver to you which was on hold by USA Customs
Department and they are requesting for clearance certificate which will be
obtain from the origination of the consignment box before it will be released
from the Customs to the delivery agent to complete the delivery. [...]
Content analysis details: (23.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(kenmorris1000[at]hotmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ken[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
3.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** CONSIGNMENT
Attn: Sir/Ma,
We write to inform you that your package with No.-35461121, Allocation No: 674699
Password No: 489336, Pin Code No: 55674 and your Certificate of Merit Payment No:
208, Released Code No: 9901; Immediate Telex confirmation No:-0014678; Secret Code
No: XWTN084. has been in Customs facility custody waiting for resolutions of the
clearance to further the delivery to your delivery address by the delivery Agent who
came all the way from Africa.We have been waiting for you to contact us regarding
your consignment box which the agent suppose to deliver to you which was on hold by
USA Customs Department and they are requesting for clearance certificate which will
be obtain from the origination of the consignment box before it will be released
from the Customs to the delivery agent to complete the delivery.
After the phone call we made several months ago with you and to the US Customs
Authority, it was resolved that the delivery of your consignment to your address
must be complete within Three (3) working days upon your compliance to our
directives; You should send the sum of $850 to obtain the needed clearance
certificate.
The clearance charges which was initially on the high price has been cut down by the
US considering the poor economic situations that make it difficult for the middle
class citizens to meet up with the clearance of their entitlement. We will upon the
confirmation of your clearing charge and proceed with the delivery.
Ken Morris
From the Inspection Unit
Jefferson County International Airport.
Address: Port Townsend,WA 98368,United States
Tel: 206-400-9417
Delivered-To:
Received: from
by with LMTP id 4I2jOTRYZloJEAAAjbubUg
for <>; Mon, 22 Jan 2018 13:31:32 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 22 Jan 2018 13:31:32 -0800
Received: from trinity.org.ua ([193.227.207.106]:24454)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1edjgh-00013i-AQ
for ; Mon, 22 Jan 2018 13:31:32 -0800
Received: from User (trinity.org.ua [127.0.0.1])
by trinity.org.ua (Postfix) with SMTP id E1E723AA35B1;
Mon, 22 Jan 2018 22:32:40 +0200 (EET)
Reply-To: <[email protected]>
From: "Ken Morris"<[email protected]>
Date: Mon, 22 Jan 2018 22:30:43 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=23.3
X-Spam-Score: 233
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "\",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir/Ma, We write to inform you that your package with
No.-35461121, Allocation No: 674699 Password No: 489336, Pin Code No: 55674
and your Certificate of Merit Payment No: 208, Released Code No: 9901; Immediate
Telex confirmation No:-0014678; Secret Code No: XWTN084. has been in Customs
facility custody waiting for resolutions of the clearance to further the
delivery to your delivery address by the delivery Agent who came all the way
from Africa.We have been waiting for you to contact us regarding your consignment
box which the agent suppose to deliver to you which was on hold by USA Customs
Department and they are requesting for clearance certificate which will be
obtain from the origination of the consignment box before it will be released
from the Customs to the delivery agent to complete the delivery. [...]
Content analysis details: (23.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(kenmorris1000[at]hotmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ken[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
3.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** CONSIGNMENT
Attn: Sir/Ma,
We write to inform you that your package with No.-35461121, Allocation No: 674699
Password No: 489336, Pin Code No: 55674 and your Certificate of Merit Payment No:
208, Released Code No: 9901; Immediate Telex confirmation No:-0014678; Secret Code
No: XWTN084. has been in Customs facility custody waiting for resolutions of the
clearance to further the delivery to your delivery address by the delivery Agent who
came all the way from Africa.We have been waiting for you to contact us regarding
your consignment box which the agent suppose to deliver to you which was on hold by
USA Customs Department and they are requesting for clearance certificate which will
be obtain from the origination of the consignment box before it will be released
from the Customs to the delivery agent to complete the delivery.
After the phone call we made several months ago with you and to the US Customs
Authority, it was resolved that the delivery of your consignment to your address
must be complete within Three (3) working days upon your compliance to our
directives; You should send the sum of $850 to obtain the needed clearance
certificate.
The clearance charges which was initially on the high price has been cut down by the
US considering the poor economic situations that make it difficult for the middle
class citizens to meet up with the clearance of their entitlement. We will upon the
confirmation of your clearing charge and proceed with the delivery.
Ken Morris
From the Inspection Unit
Jefferson County International Airport.
Address: Port Townsend,WA 98368,United States
Tel: 206-400-9417
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
