[email protected] Mr. Proulx Claude

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id EJt0IXN/c1v1FQAAjbubUg
for <>; Tue, 14 Aug 2018 18:18:43 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 14 Aug 2018 18:18:43 -0700
Received: from smtp.starhub.net.sg ([203.116.2.144]:55719 helo=kbsmtao147.starhub.net.sg)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fpkSP-0001SA-DL
for ; Tue, 14 Aug 2018 18:18:43 -0700
Message-Id: <91c81c$[email protected]>
Received: from unknown (HELO User) ([101.127.217.238])
by kbsmtao147.starhub.net.sg with SMTP; 15 Aug 2018 08:02:08 +0800
Reply-To: <[email protected]>
Date: Wed, 15 Aug 2018 02:17:57 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=26.1
X-Spam-Score: 261
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Congratulation, There is compensation payment in the amount of US$600,000.00
directed in cash and credited to file WUT/0323112344/18 approved to you the
owner of this email address. Western Union is using this measure to compensate
all those that have one way or the other been scammed, used Western Union
service over the years or help fight scam on the internet. [...]

Content analysis details: (26.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[203.116.2.144 listed in list.dnswl.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[203.116.2.144 listed in bl.score.senderscore.com]
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=w ... on.com;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
3.5 FROM_MISSP_PHISH Malformed, claims to be from financial organization
- possible phish
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.9 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES


Welcome to Western Union
Send Money Worldwide

Congratulation,

There is compensation payment in the amount of US$600,000.00
directed in cash and credited to file WUT/0323112344/18 approved
to you the owner of this email address. Western Union is using this
measure to compensate all those that have one way or the other
been scammed, used Western Union service over the years or help
fight scam on the internet.

Your US$600.000.00 compensation payment will be paid in US$6,000.00
batch through Western union until your total compensation payment is
completed. Your first US$6,000.00 payment have been approved and
can be tracked and confirmed with the details listed below..

https://www.westernunion.com
MTCN: 6831032067
Sender:Cerne D. Michael
Question:Month?
Answer:August
Amount:US$6,000

However, you are requested to send the sum of US$95 to have
your name updated and activated on the western union payment
database and to also enable you start receiving your daily US$6,000
batch payment. Kindly send the US$95 with the details below and
ensure not to expose these MTCN numbers to anybody else.

Receiver : Chinedu P. Onuorah
Address :4 Walter Carrington Crescent, Lagos- Nigeria
Amount :$95
MTCN :

As soon as the $95 fee is confirmed receipt, we will activate your
MTCN # and notify you to pick up your $6,000 payment from any
western union outlet within. Please note: you need to go with your
passport or any valid means of identification.

Thanks,
Mr. Proulx Claude

+1-647-797-8977