by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id qO1eJMlSPVtRKgAAjbubUg
for <>; Wed, 04 Jul 2018 16:05:45 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 04 Jul 2018 16:05:45 -0700
Received: from raxtupfw.com ([133.18.169.80]:33046 helo=mail.fuberh.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1faqqF-0002nt-PS
for ; Wed, 04 Jul 2018 16:05:45 -0700
Received: from User (localhost [127.0.0.1])
by mail.fuberh.com (Postfix) with SMTP id 076C72A7F70;
Thu, 5 Jul 2018 03:35:36 +0900 (JST)
Reply-To: <[email protected]>
From: "BRYAN ELLIS"<[email protected]>
Date: Wed, 4 Jul 2018 19:36:15 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=40.3
X-Spam-Score: 403
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, My name is Barrister Bryan Ellis, My client Mrs.
Anna Blair) have contacted you sometime ago to Assist her secure the release
of her fund with a bank and used it for charity purpose, Though you were
not able to assists her conclude the transaction completely due to some personal
reasons known to you. I'm happy to inform you about our success in getting
those Funds transferred under the assistance and cooperation of a new partner
Haiti who is also handling the charity works on her behalf. [...]
Content analysis details: (40.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 MILLION_USD BODY: Talks about millions of dollars
3.1 HK_SCAM_N8 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[133.18.169.80 listed in psbl.surriel.com]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[133.18.169.80 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(bryanchamber.lawfirm[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?133.18.169.80>]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 MONEY_BARRISTER Lots of money from a UK lawyer
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.8 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.3 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
1.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** Compensation from Mrs. Anna Blair
Dear Friend,
My name is Barrister Bryan Ellis, My client Mrs. Anna Blair) have contacted you
sometime ago to Assist her secure the release of her fund with a bank and used it
for charity purpose, Though you were not able to assists her conclude the
transaction completely due to some personal reasons known to you. I'm happy to
inform you about our success in getting those Funds transferred under the assistance
and cooperation of a new partner Haiti who is also handling the charity works on her
behalf.
Well I have been waiting for you since then to contact me for your Compensation of
$3M Million United States Dollars which was mapped out for you by Mrs. Anna before
she passes away, but I did not hear from you since that time. I had to go and
deposit your compensation processed in ATM Card and Registered to GLOBAL FREIGHT
CARGO & LOGISTIC SERVICE, And now am out of the country for a 3 Months Course and
will not come back till the end of the year.
What you have to do now as a matter of urgency is to contact the Courier company
Dispatch manager Mr. John Henry with below information as soon as possible to know
when and how long it will take them deliver your compensation package to you because
Of demurage/activation of the Card. For your information, I have paid for the
Delivery Charges and Clearance Certificate Fee of the ATM showing that it is not a
Drug Money or meant to sponsor Terrorism attack in any Country.
The only money you will send to the Courier company dispatch manager to deliver your
package directly to your postal Address in your country is (USD$155.00) only being
Security Keeping Fee of your package. Again, do not be deceived by anybody to pay
any other additional money except USD$155.00. We would have paid that but they said
no because they do not know when you will be contacting them in case of incurring
more demurrage costs.
You have To contact the Courier company dispatch manager now for the delivery of
your ATM CARD With (Reg.Code; #8RRCFED)on the below information;
Contact Person: Mr John Henry
Email: [email protected]
BELOW IS THE INFORMATION TO SEND THE MONEY TO THEM THROUGH MONEY GRAM.
1.RECEIVER NAME... CHIGOZIE OSWARD REUBEN
2.COUNTRY ... NIGERIA.
3.CITY ... LAGOS.
4.TEST QUESTION...HONEST
5. ANSWER ... TRUST.
6. AMOUNT .... $155.00
Finally, make sure that you re-confirm your Postal address........and Direct
Telephone number......... to them to avoid any mistake in Delivery and Ask them to
give you the tracking number after you might have paid the security keeping fee to
them and the parcel dispatched to enable you track your Package and know when it
will get to your address. I Repeat again; try to contact them immediately you
receive this mail to avoid any further delay. You should also let me know through
email as soon as you receive your ATM Card with access pin code for withdrawal
therein.
Yours Faithfully,
Barr. Bryan Ellis.
Delivered-To:
Received: from
by with LMTP id qO1eJMlSPVtRKgAAjbubUg
for <>; Wed, 04 Jul 2018 16:05:45 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 04 Jul 2018 16:05:45 -0700
Received: from raxtupfw.com ([133.18.169.80]:33046 helo=mail.fuberh.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1faqqF-0002nt-PS
for ; Wed, 04 Jul 2018 16:05:45 -0700
Received: from User (localhost [127.0.0.1])
by mail.fuberh.com (Postfix) with SMTP id 076C72A7F70;
Thu, 5 Jul 2018 03:35:36 +0900 (JST)
Reply-To: <[email protected]>
From: "BRYAN ELLIS"<[email protected]>
Date: Wed, 4 Jul 2018 19:36:15 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=40.3
X-Spam-Score: 403
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, My name is Barrister Bryan Ellis, My client Mrs.
Anna Blair) have contacted you sometime ago to Assist her secure the release
of her fund with a bank and used it for charity purpose, Though you were
not able to assists her conclude the transaction completely due to some personal
reasons known to you. I'm happy to inform you about our success in getting
those Funds transferred under the assistance and cooperation of a new partner
Haiti who is also handling the charity works on her behalf. [...]
Content analysis details: (40.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 MILLION_USD BODY: Talks about millions of dollars
3.1 HK_SCAM_N8 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[133.18.169.80 listed in psbl.surriel.com]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[133.18.169.80 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(bryanchamber.lawfirm[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?133.18.169.80>]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 MONEY_BARRISTER Lots of money from a UK lawyer
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.8 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.3 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
1.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** Compensation from Mrs. Anna Blair
Dear Friend,
My name is Barrister Bryan Ellis, My client Mrs. Anna Blair) have contacted you
sometime ago to Assist her secure the release of her fund with a bank and used it
for charity purpose, Though you were not able to assists her conclude the
transaction completely due to some personal reasons known to you. I'm happy to
inform you about our success in getting those Funds transferred under the assistance
and cooperation of a new partner Haiti who is also handling the charity works on her
behalf.
Well I have been waiting for you since then to contact me for your Compensation of
$3M Million United States Dollars which was mapped out for you by Mrs. Anna before
she passes away, but I did not hear from you since that time. I had to go and
deposit your compensation processed in ATM Card and Registered to GLOBAL FREIGHT
CARGO & LOGISTIC SERVICE, And now am out of the country for a 3 Months Course and
will not come back till the end of the year.
What you have to do now as a matter of urgency is to contact the Courier company
Dispatch manager Mr. John Henry with below information as soon as possible to know
when and how long it will take them deliver your compensation package to you because
Of demurage/activation of the Card. For your information, I have paid for the
Delivery Charges and Clearance Certificate Fee of the ATM showing that it is not a
Drug Money or meant to sponsor Terrorism attack in any Country.
The only money you will send to the Courier company dispatch manager to deliver your
package directly to your postal Address in your country is (USD$155.00) only being
Security Keeping Fee of your package. Again, do not be deceived by anybody to pay
any other additional money except USD$155.00. We would have paid that but they said
no because they do not know when you will be contacting them in case of incurring
more demurrage costs.
You have To contact the Courier company dispatch manager now for the delivery of
your ATM CARD With (Reg.Code; #8RRCFED)on the below information;
Contact Person: Mr John Henry
Email: [email protected]
BELOW IS THE INFORMATION TO SEND THE MONEY TO THEM THROUGH MONEY GRAM.
1.RECEIVER NAME... CHIGOZIE OSWARD REUBEN
2.COUNTRY ... NIGERIA.
3.CITY ... LAGOS.
4.TEST QUESTION...HONEST
5. ANSWER ... TRUST.
6. AMOUNT .... $155.00
Finally, make sure that you re-confirm your Postal address........and Direct
Telephone number......... to them to avoid any mistake in Delivery and Ask them to
give you the tracking number after you might have paid the security keeping fee to
them and the parcel dispatched to enable you track your Package and know when it
will get to your address. I Repeat again; try to contact them immediately you
receive this mail to avoid any further delay. You should also let me know through
email as soon as you receive your ATM Card with access pin code for withdrawal
therein.
Yours Faithfully,
Barr. Bryan Ellis.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
