by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id wGAANN4FtVs5OAAAjbubUg
for <>; Wed, 03 Oct 2018 11:09:34 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 03 Oct 2018 11:09:34 -0700
Received: from [210.50.76.235] (port=50855 helo=smtp688out8.syd.oss-core.net)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1g7laW-0003kd-Pe
for ; Wed, 03 Oct 2018 11:09:34 -0700
Message-Id: <[email protected]>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2D//wAjBbVb/90f3G8YAkKCQAMBEoIIH?=
=?us-ascii?q?kQkEhk+gkWBAIJchhiIKQ0jZXkDggwBgTUBhkGCZoVBh0ETfGo2AYEDgzMqBYN?=
=?us-ascii?q?8ERE9DwQCBAJtKEIMhGIDEAQBAQECEwQCBQoCHwEBBAEEEhECCAIBAwQGEQY5A?=
=?us-ascii?q?QQKBwUBAwYFATsBAgIBAUqCR4FoAQEWiFCbR4FLDIEQBQEXDYRbggIKGQQKfwE?=
=?us-ascii?q?OAYJzkBs1hEIJARIBgzMBIoIhgSoBgjWEBm2FSI80BgECAoFChgOFIoU2IoRAh?=
=?us-ascii?q?CsKARA7hDWWKoETAgxkcXCBbgolgV6QAxM+gT4IDAGCO4d5gj4B?=
X-IPAS-Result: =?us-ascii?q?A2D//wAjBbVb/90f3G8YAkKCQAMBEoIIHkQkEhk+gkWBAIJ?=
=?us-ascii?q?chhiIKQ0jZXkDggwBgTUBhkGCZoVBh0ETfGo2AYEDgzMqBYN8ERE9DwQCBAJtK?=
=?us-ascii?q?EIMhGIDEAQBAQECEwQCBQoCHwEBBAEEEhECCAIBAwQGEQY5AQQKBwUBAwYFATs?=
=?us-ascii?q?BAgIBAUqCR4FoAQEWiFCbR4FLDIEQBQEXDYRbggIKGQQKfwEOAYJzkBs1hEIJA?=
=?us-ascii?q?RIBgzMBIoIhgSoBgjWEBm2FSI80BgECAoFChgOFIoU2IoRAhCsKARA7hDWWKoE?=
=?us-ascii?q?TAgxkcXCBbgolgV6QAxM+gT4IDAGCO4d5gj4B?=
X-IronPort-AV: E=Sophos;i="5.54,336,1534773600";
d="scan'208,217";a="67398083"
Received: from 221.31.220.111.sta.wbroadband.net.au (HELO User) ([111.220.31.221])
by smtp688.syd.oss-core.net with SMTP; 04 Oct 2018 04:08:38 +1000
Reply-To: <[email protected]>
From: "Mr. Mohamed"<[email protected]>
Date: Wed, 3 Oct 2018 19:08:52 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=29.9
X-Spam-Score: 299
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: I am writing you on a personal note and I will want
this communication to remain between you and me, due to my position. I do
not want my sincerity and concern to turn against me and this is why i am
writing through my personal email instead of my official email, to guide against
being monitored. [...]
Content analysis details: (29.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(zaibmohamed2[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zaibmohamed2[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zaibmohamed2[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 KAM_ADVERT2 RAW: This is probably an unwanted commercial email...
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.5 FAKE_REPLY_C No description available.
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.6 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.8 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.1 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Notice
Attn:
I am writing you on a personal note and I will want this communication to remain
between you and me, due to my position. I do not want my sincerity and concern to
turn
against me and this is why i am writing through my personal email instead of my
official email, to guide against being monitored.
am a member of a security outfit here in United States of America. am appointed
among the officers designated to monitor/investigate fund brought into United States
from Africa in cash.This investigation have been on for the past 16months and a lot
have been discovered. these funds were sent to America for payment of their winning
funds.
In execution of my job,i found your fund, packaged in Metal Trunk Box weighing
approximately 110kg (W61 x H156 x D73 (cm)effective capacity: 680 L.) Approximately.
Your information was also written/tagged on it. On the other hand, our Agency found
out that this fund was scheduled to be delivered to you
Subsequently, i found out from my investigation that you were lured into this by the
people who engineered the dispatch of this fund into USA. They possibly have told
you lies that they have documents protecting/permitting them to dispatch this fund.
When i found out that you were ignorant of their ill intention, I decided to write
and inform you of this. They did not actually wanted to move this fund to you,
rather they placed you as the beneficiary, to use your name and protect themselves.
Meanwhile, they have perfected plans to divert this fund to a designated person in
the USA who will receive the fund and invest for them. Due to their quest and wicked
intention, they did not consider the fact that it would be difficult for them to
actualize this, base on the prevailing Law hence, on spotting the high security
network, they abandoned it and left. They wanted you to finance the cost of
dispatching this fund and this is why they were demanding series of money from you
and end up without result.
I can use my position to get this fund package to you if you are sincere and promise
to keep this only to yourself. I sincerely want this communication to remain
private, due to my position and not to be discussed with anyone no matter how close.
I do not want to say much until i here from you. There is no reason to exercise any
fear whatsoever,as i assure you that i will handle this in such a way that, there
would be no trace or implication at all,now and in the future. I wait to hear from
you. If you are not interested in working with me, please disregard. But do keep
this communication private.
Regards,
Mohamed
Delivered-To:
Received: from
by with LMTP id wGAANN4FtVs5OAAAjbubUg
for <>; Wed, 03 Oct 2018 11:09:34 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 03 Oct 2018 11:09:34 -0700
Received: from [210.50.76.235] (port=50855 helo=smtp688out8.syd.oss-core.net)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1g7laW-0003kd-Pe
for ; Wed, 03 Oct 2018 11:09:34 -0700
Message-Id: <[email protected]>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2D//wAjBbVb/90f3G8YAkKCQAMBEoIIH?=
=?us-ascii?q?kQkEhk+gkWBAIJchhiIKQ0jZXkDggwBgTUBhkGCZoVBh0ETfGo2AYEDgzMqBYN?=
=?us-ascii?q?8ERE9DwQCBAJtKEIMhGIDEAQBAQECEwQCBQoCHwEBBAEEEhECCAIBAwQGEQY5A?=
=?us-ascii?q?QQKBwUBAwYFATsBAgIBAUqCR4FoAQEWiFCbR4FLDIEQBQEXDYRbggIKGQQKfwE?=
=?us-ascii?q?OAYJzkBs1hEIJARIBgzMBIoIhgSoBgjWEBm2FSI80BgECAoFChgOFIoU2IoRAh?=
=?us-ascii?q?CsKARA7hDWWKoETAgxkcXCBbgolgV6QAxM+gT4IDAGCO4d5gj4B?=
X-IPAS-Result: =?us-ascii?q?A2D//wAjBbVb/90f3G8YAkKCQAMBEoIIHkQkEhk+gkWBAIJ?=
=?us-ascii?q?chhiIKQ0jZXkDggwBgTUBhkGCZoVBh0ETfGo2AYEDgzMqBYN8ERE9DwQCBAJtK?=
=?us-ascii?q?EIMhGIDEAQBAQECEwQCBQoCHwEBBAEEEhECCAIBAwQGEQY5AQQKBwUBAwYFATs?=
=?us-ascii?q?BAgIBAUqCR4FoAQEWiFCbR4FLDIEQBQEXDYRbggIKGQQKfwEOAYJzkBs1hEIJA?=
=?us-ascii?q?RIBgzMBIoIhgSoBgjWEBm2FSI80BgECAoFChgOFIoU2IoRAhCsKARA7hDWWKoE?=
=?us-ascii?q?TAgxkcXCBbgolgV6QAxM+gT4IDAGCO4d5gj4B?=
X-IronPort-AV: E=Sophos;i="5.54,336,1534773600";
d="scan'208,217";a="67398083"
Received: from 221.31.220.111.sta.wbroadband.net.au (HELO User) ([111.220.31.221])
by smtp688.syd.oss-core.net with SMTP; 04 Oct 2018 04:08:38 +1000
Reply-To: <[email protected]>
From: "Mr. Mohamed"<[email protected]>
Date: Wed, 3 Oct 2018 19:08:52 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=29.9
X-Spam-Score: 299
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: I am writing you on a personal note and I will want
this communication to remain between you and me, due to my position. I do
not want my sincerity and concern to turn against me and this is why i am
writing through my personal email instead of my official email, to guide against
being monitored. [...]
Content analysis details: (29.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(zaibmohamed2[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zaibmohamed2[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zaibmohamed2[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 KAM_ADVERT2 RAW: This is probably an unwanted commercial email...
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.5 FAKE_REPLY_C No description available.
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.6 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.8 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.1 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Notice
Attn:
I am writing you on a personal note and I will want this communication to remain
between you and me, due to my position. I do not want my sincerity and concern to
turn
against me and this is why i am writing through my personal email instead of my
official email, to guide against being monitored.
am a member of a security outfit here in United States of America. am appointed
among the officers designated to monitor/investigate fund brought into United States
from Africa in cash.This investigation have been on for the past 16months and a lot
have been discovered. these funds were sent to America for payment of their winning
funds.
In execution of my job,i found your fund, packaged in Metal Trunk Box weighing
approximately 110kg (W61 x H156 x D73 (cm)effective capacity: 680 L.) Approximately.
Your information was also written/tagged on it. On the other hand, our Agency found
out that this fund was scheduled to be delivered to you
Subsequently, i found out from my investigation that you were lured into this by the
people who engineered the dispatch of this fund into USA. They possibly have told
you lies that they have documents protecting/permitting them to dispatch this fund.
When i found out that you were ignorant of their ill intention, I decided to write
and inform you of this. They did not actually wanted to move this fund to you,
rather they placed you as the beneficiary, to use your name and protect themselves.
Meanwhile, they have perfected plans to divert this fund to a designated person in
the USA who will receive the fund and invest for them. Due to their quest and wicked
intention, they did not consider the fact that it would be difficult for them to
actualize this, base on the prevailing Law hence, on spotting the high security
network, they abandoned it and left. They wanted you to finance the cost of
dispatching this fund and this is why they were demanding series of money from you
and end up without result.
I can use my position to get this fund package to you if you are sincere and promise
to keep this only to yourself. I sincerely want this communication to remain
private, due to my position and not to be discussed with anyone no matter how close.
I do not want to say much until i here from you. There is no reason to exercise any
fear whatsoever,as i assure you that i will handle this in such a way that, there
would be no trace or implication at all,now and in the future. I wait to hear from
you. If you are not interested in working with me, please disregard. But do keep
this communication private.
Regards,
Mohamed
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
