by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 21 Aug 2018 02:55:06 -0700
Received: from 78-88-129-177.internet58.com.br ([177.129.88.78]:52777 helo=srv01.lumacdo.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fs3NN-0005T9-KH
for ; Tue, 21 Aug 2018 02:55:06 -0700
Received: from static-108-29-37-168.nycmny.fios.verizon.net ([108.29.37.168] helo=User)
by srv01.lumacdo.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1fs3MB-0004Ut-Dr; Tue, 21 Aug 2018 06:53:47 -0300
Reply-To: <[email protected]>
From: "BEN WILLSON"<[email protected]>
Date: Tue, 21 Aug 2018 05:53:42 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=32.5
X-Spam-Score: 325
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear May God Bless You abundantly. I am in need of your
assistance but I do not know how trust worthy you are; I want to make a donation
to the poor and needy through you. My name is Ben Wilson andI am an American
citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer. [...]
Content analysis details: (32.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.129.88.78 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.129.88.78>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[177.129.88.78 listed in bl.score.senderscore.com]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(wilsonben1968[at]yandex.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsafia5[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsafia5[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.6 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** May God Bless You abundantly.
My Dear
May God Bless You abundantly.
I am in need of your assistance but I do not know how trust worthy you are; I want
to make a donation to the poor and needy through you. My name is Ben Wilson andI am
an American citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer.
I have since lost my ability to talk and my Doctors have told me that I have only a
few months to live and I am very much worried about my health condition which is
getting bad day by day. But I know that my redeemer blivet, he is a merciful God and
he can decide to keep me longer than expected.
Before I became ill, I kept US$ 7.5 Million in a long-term deposit account in a
finance company in London which I wanted to invest into long term business
venture.Now that it has become obviously clear that I will not survive this cancer
sickness, it is really unfortunate that I have to end my life so short. However, I
have decided that I must give my wealth to the poor and needy just for assistance.
if you can be trusted, I will like to leave the funds under your care so that you
can utilize it by taking care of those in dare need of help. Mostly, if you can
donate to motherless, widows, less privileged and hurricane
victims, I will highly appreciate it.
Please, kindly reply to me urgently with your full name and address, occupation,
religion, including your direct telephone number so that I can give you more
information. I will continue to pray about it until I hear from you. Legal documents
relating to the deposit of the funds in London will also be made available to
you.Until I hear from you, may the Almighty God continue to bless you and give you
the wisdom on how to utilize the funds when finally released to you.
Yours sincerely,
Mr Ben Wilson
Envelope-to:
Delivery-date: Tue, 21 Aug 2018 02:55:06 -0700
Received: from 78-88-129-177.internet58.com.br ([177.129.88.78]:52777 helo=srv01.lumacdo.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fs3NN-0005T9-KH
for ; Tue, 21 Aug 2018 02:55:06 -0700
Received: from static-108-29-37-168.nycmny.fios.verizon.net ([108.29.37.168] helo=User)
by srv01.lumacdo.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1fs3MB-0004Ut-Dr; Tue, 21 Aug 2018 06:53:47 -0300
Reply-To: <[email protected]>
From: "BEN WILLSON"<[email protected]>
Date: Tue, 21 Aug 2018 05:53:42 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=32.5
X-Spam-Score: 325
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: My Dear May God Bless You abundantly. I am in need of your
assistance but I do not know how trust worthy you are; I want to make a donation
to the poor and needy through you. My name is Ben Wilson andI am an American
citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer. [...]
Content analysis details: (32.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.129.88.78 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.129.88.78>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[177.129.88.78 listed in bl.score.senderscore.com]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(wilsonben1968[at]yandex.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsafia5[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsafia5[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.6 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** May God Bless You abundantly.
My Dear
May God Bless You abundantly.
I am in need of your assistance but I do not know how trust worthy you are; I want
to make a donation to the poor and needy through you. My name is Ben Wilson andI am
an American citizen, I live in London . Right now, I am in the hospital, I have been
undergoing treatment for esophageal cancer.
I have since lost my ability to talk and my Doctors have told me that I have only a
few months to live and I am very much worried about my health condition which is
getting bad day by day. But I know that my redeemer blivet, he is a merciful God and
he can decide to keep me longer than expected.
Before I became ill, I kept US$ 7.5 Million in a long-term deposit account in a
finance company in London which I wanted to invest into long term business
venture.Now that it has become obviously clear that I will not survive this cancer
sickness, it is really unfortunate that I have to end my life so short. However, I
have decided that I must give my wealth to the poor and needy just for assistance.
if you can be trusted, I will like to leave the funds under your care so that you
can utilize it by taking care of those in dare need of help. Mostly, if you can
donate to motherless, widows, less privileged and hurricane
victims, I will highly appreciate it.
Please, kindly reply to me urgently with your full name and address, occupation,
religion, including your direct telephone number so that I can give you more
information. I will continue to pray about it until I hear from you. Legal documents
relating to the deposit of the funds in London will also be made available to
you.Until I hear from you, may the Almighty God continue to bless you and give you
the wisdom on how to utilize the funds when finally released to you.
Yours sincerely,
Mr Ben Wilson
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
