by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id UJIQFybBjFw9ZwAAjbubUg
for <>; Sat, 16 Mar 2019 02:25:58 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 16 Mar 2019 02:25:58 -0700
Received: from srv1.techtunes.info ([107.155.93.190]:36732)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1h55Zk-0006rt-Nn
for ; Sat, 16 Mar 2019 02:25:58 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=pearlharbourbd.com; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=mcrTquOrO53DqumUWYmJe5Yp0E+yUfnSNQtI/8lAyUg=; b=j+fOEKxDeClwi8GqGeQLQmKQwv
d0k9GyZmoDNYhbL9HyTkAK/2fnsTAax/hI63eGKo9hBcQNEKCOcjxJDbeJCjwGZrNjSGVRyyOe4rQ
JDz8+A6IYPsdSoZufRfQ3p0PNSZyAnexEe/umzUXzLomUQCp3nE2gc+3QdTaVWzM/bfU=;
Received: from [45.35.196.147] (port=63778 helo=User)
by srv1.techtunes.info with esmtpa (Exim 4.91)
(envelope-from <[email protected]>)
id 1h55Yw-0005qS-BP; Sat, 16 Mar 2019 15:25:08 +0600
Reply-To: <[email protected]>
From: "Mr Kenneth Wesley Inspection Agent"<[email protected]>
Date: Sat, 16 Mar 2019 02:25:05 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - srv1.techtunes.info
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - urafoods.com
X-Get-Message-Sender-Via: srv1.techtunes.info: authenticated_id: [email protected]
X-Authenticated-Sender: srv1.techtunes.info: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=22.0
X-Spam-Score: 220
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: My Friend I am Mr Kenneth Wesley, Chief Inspection
Agent United Nations Inspection Unit at Dallas/Fort Worth International Airport
Tx, USA, On routine investigation, I discovered this forfeited consignment
with your name on the bill of entry. On an extensive inspection the Value
of the cash stuffed consignment was not declared but assumed approximately
$8.5 Million USD. The Consignment was forfeited because of false declaration
by the Consignee and the delivery officers' inability to pay the Non Inspection
fee (NI). The Consignment was originally declared as personal effect while
the real content is cash money. Call me or sms text +1 936-666-4527 or email
me now if you are still interested in receiving your consignment boxes. Regards,
Mr Kenneth Wesley Inspection Agent [...]
Content analysis details: (22.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 MILLION_USD BODY: Talks about millions of dollars
2.1 NSL_RCVD_HELO_USER Received from HELO User
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_MX4 MX Record and dot info domains associated with FAKERBL
Spammers
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Final and Greatest Opporunity to Recieve your funds Delivering ??
Attn: My Friend
I am Mr Kenneth Wesley, Chief Inspection Agent United Nations Inspection Unit at
Dallas/Fort Worth International Airport Tx, USA, On routine investigation, I
discovered this forfeited consignment with your name on the bill of entry. On an
extensive inspection the Value of the cash stuffed consignment was not declared but
assumed approximately $8.5 Million USD.
The Consignment was forfeited because of false declaration by the Consignee and the
delivery officers' inability to pay the Non Inspection fee (NI). The Consignment was
originally declared as personal effect while the real content is cash money.
Call me or sms text +1 936-666-4527 or email me now if you are still interested in
receiving your consignment boxes.
Regards,
Mr Kenneth Wesley
Inspection Agent
Delivered-To:
Received: from
by with LMTP id UJIQFybBjFw9ZwAAjbubUg
for <>; Sat, 16 Mar 2019 02:25:58 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 16 Mar 2019 02:25:58 -0700
Received: from srv1.techtunes.info ([107.155.93.190]:36732)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1h55Zk-0006rt-Nn
for ; Sat, 16 Mar 2019 02:25:58 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=pearlharbourbd.com; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:From:Reply-To:Sender:Message-ID:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=mcrTquOrO53DqumUWYmJe5Yp0E+yUfnSNQtI/8lAyUg=; b=j+fOEKxDeClwi8GqGeQLQmKQwv
d0k9GyZmoDNYhbL9HyTkAK/2fnsTAax/hI63eGKo9hBcQNEKCOcjxJDbeJCjwGZrNjSGVRyyOe4rQ
JDz8+A6IYPsdSoZufRfQ3p0PNSZyAnexEe/umzUXzLomUQCp3nE2gc+3QdTaVWzM/bfU=;
Received: from [45.35.196.147] (port=63778 helo=User)
by srv1.techtunes.info with esmtpa (Exim 4.91)
(envelope-from <[email protected]>)
id 1h55Yw-0005qS-BP; Sat, 16 Mar 2019 15:25:08 +0600
Reply-To: <[email protected]>
From: "Mr Kenneth Wesley Inspection Agent"<[email protected]>
Date: Sat, 16 Mar 2019 02:25:05 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - srv1.techtunes.info
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - urafoods.com
X-Get-Message-Sender-Via: srv1.techtunes.info: authenticated_id: [email protected]
X-Authenticated-Sender: srv1.techtunes.info: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=22.0
X-Spam-Score: 220
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: My Friend I am Mr Kenneth Wesley, Chief Inspection
Agent United Nations Inspection Unit at Dallas/Fort Worth International Airport
Tx, USA, On routine investigation, I discovered this forfeited consignment
with your name on the bill of entry. On an extensive inspection the Value
of the cash stuffed consignment was not declared but assumed approximately
$8.5 Million USD. The Consignment was forfeited because of false declaration
by the Consignee and the delivery officers' inability to pay the Non Inspection
fee (NI). The Consignment was originally declared as personal effect while
the real content is cash money. Call me or sms text +1 936-666-4527 or email
me now if you are still interested in receiving your consignment boxes. Regards,
Mr Kenneth Wesley Inspection Agent [...]
Content analysis details: (22.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 MILLION_USD BODY: Talks about millions of dollars
2.1 NSL_RCVD_HELO_USER Received from HELO User
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_MX4 MX Record and dot info domains associated with FAKERBL
Spammers
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Final and Greatest Opporunity to Recieve your funds Delivering ??
Attn: My Friend
I am Mr Kenneth Wesley, Chief Inspection Agent United Nations Inspection Unit at
Dallas/Fort Worth International Airport Tx, USA, On routine investigation, I
discovered this forfeited consignment with your name on the bill of entry. On an
extensive inspection the Value of the cash stuffed consignment was not declared but
assumed approximately $8.5 Million USD.
The Consignment was forfeited because of false declaration by the Consignee and the
delivery officers' inability to pay the Non Inspection fee (NI). The Consignment was
originally declared as personal effect while the real content is cash money.
Call me or sms text +1 936-666-4527 or email me now if you are still interested in
receiving your consignment boxes.
Regards,
Mr Kenneth Wesley
Inspection Agent
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
