by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 30 Mar 2019 04:37:47 -0700
Received: from mail.windstream.syn-alias.com ([69.168.106.36]:58145 helo=mail.windstream.net)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hACIw-0007RX-EV
for ; Sat, 30 Mar 2019 04:37:47 -0700
DKIM-Signature: v=1; a=rsa-sha1; d=windstream.net; s=20180222; c=relaxed/simple;
q=dns/txt; [email protected]; t=1553945814;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=0IwTIL58VpgYJfhSCUKW6GARLb4=;
b=FRX44pEvUrfIztZP3g1bR+i5jMp0QLuFBAPaDijIGrOENJ724tx6FGuhwXuu0QCr
bQUF/M75rP1f0ZuX8D62ydB+6chjkz3Agc0fh72ZmlrXjCGLgl8R+8EEKf1Sul3/
/nRFkwx/JqjJR5z18XyRQ3tR2BqU0YVY91QT5t4bg3rZFIelkoEY5xDzuionOQkD
NpggnF7klpkX48RjLohBT5glrhXXAb5JcenuYGEe/lkXiOQaBgaeh6kUCda+6BvF
jz5IpuLOhoAmXsnP6+G24pnoOd0Ck3W/AdGRVxRydhtnNdEC7wF2KLVrg6QTmX8f
k2ebqIJtQPb9ufuaCOgy4w==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=YNrd8lOx c=1 sm=1 tr=0 a=Sjm1Vl2LLszrtUMlxIqIQw==:117 a=Sjm1Vl2LLszrtUMlxIqIQw==:17 a=KGjhK52YXX0A:10 a=8nJEP1OIZ-IA:10 a=NTGMnVQrEZIA:10 a=oyJcbPGSuGYA:10 a=tU28RKygArNBjqMZJLUA:9 a=wPNLvfGTeEIA:10 a=y3gxJGGnbrtUV2GOxcvc:22
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: bGRtY2NveUB3aW5kc3RyZWFtLm5ldA==
Authentication-Results: smtp03.aqua.bos.sync.lan smtp.user=ldmccoy; auth=pass (LOGIN)
Received: from [192.69.253.118] ([192.69.253.118:62022] helo=[10.151.7.126])
by mail.windstream.net (envelope-from <[email protected]>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-SHA)
id 7D/13-10797-AA45F9C5; Sat, 30 Mar 2019 07:36:51 -0400
Content-Type: text/plain; charset="iso-8859-1"
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: As soon as you respond I will work out the finer details
To: Recipients <[email protected]>
From: "Captain Benjamin Rivera" <[email protected]>
Date: Sat, 30 Mar 2019 04:35:24 -0700
Reply-To: [email protected]
X-Spam-Status: No, score=5.9
X-Spam-Score: 59
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I pray this mail finds you in a state of your sound health.My
name is captain Rivera and I was a member of the US ARMY medical team deployed
to Iraq and then later transferred to Afghanistan.I am looking for a trust
worthy individual who will assist me in receiving some funds for me. I am
requesting this individual to hold onto the cash until I arrive safely back
to retrieve them. As soon as I hear back I will work out the finer details.
[...]
Content analysis details: (5.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[69.168.106.36 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-Spam-Flag: NO
I pray this mail finds you in a state of your sound health.My name is captain Rivera
and I was a member of the US ARMY medical team deployed to Iraq and then later
transferred to Afghanistan.I am looking for a trust worthy individual who will
assist me in receiving some funds for me. I am requesting this individual to hold
onto the cash until I arrive safely back to retrieve them.
As soon as I hear back I will work out the finer details.
Best Regards
Captain Benjamin Rivera
Envelope-to:
Delivery-date: Sat, 30 Mar 2019 04:37:47 -0700
Received: from mail.windstream.syn-alias.com ([69.168.106.36]:58145 helo=mail.windstream.net)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hACIw-0007RX-EV
for ; Sat, 30 Mar 2019 04:37:47 -0700
DKIM-Signature: v=1; a=rsa-sha1; d=windstream.net; s=20180222; c=relaxed/simple;
q=dns/txt; [email protected]; t=1553945814;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=0IwTIL58VpgYJfhSCUKW6GARLb4=;
b=FRX44pEvUrfIztZP3g1bR+i5jMp0QLuFBAPaDijIGrOENJ724tx6FGuhwXuu0QCr
bQUF/M75rP1f0ZuX8D62ydB+6chjkz3Agc0fh72ZmlrXjCGLgl8R+8EEKf1Sul3/
/nRFkwx/JqjJR5z18XyRQ3tR2BqU0YVY91QT5t4bg3rZFIelkoEY5xDzuionOQkD
NpggnF7klpkX48RjLohBT5glrhXXAb5JcenuYGEe/lkXiOQaBgaeh6kUCda+6BvF
jz5IpuLOhoAmXsnP6+G24pnoOd0Ck3W/AdGRVxRydhtnNdEC7wF2KLVrg6QTmX8f
k2ebqIJtQPb9ufuaCOgy4w==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=YNrd8lOx c=1 sm=1 tr=0 a=Sjm1Vl2LLszrtUMlxIqIQw==:117 a=Sjm1Vl2LLszrtUMlxIqIQw==:17 a=KGjhK52YXX0A:10 a=8nJEP1OIZ-IA:10 a=NTGMnVQrEZIA:10 a=oyJcbPGSuGYA:10 a=tU28RKygArNBjqMZJLUA:9 a=wPNLvfGTeEIA:10 a=y3gxJGGnbrtUV2GOxcvc:22
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: bGRtY2NveUB3aW5kc3RyZWFtLm5ldA==
Authentication-Results: smtp03.aqua.bos.sync.lan smtp.user=ldmccoy; auth=pass (LOGIN)
Received: from [192.69.253.118] ([192.69.253.118:62022] helo=[10.151.7.126])
by mail.windstream.net (envelope-from <[email protected]>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-SHA)
id 7D/13-10797-AA45F9C5; Sat, 30 Mar 2019 07:36:51 -0400
Content-Type: text/plain; charset="iso-8859-1"
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: As soon as you respond I will work out the finer details
To: Recipients <[email protected]>
From: "Captain Benjamin Rivera" <[email protected]>
Date: Sat, 30 Mar 2019 04:35:24 -0700
Reply-To: [email protected]
X-Spam-Status: No, score=5.9
X-Spam-Score: 59
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I pray this mail finds you in a state of your sound health.My
name is captain Rivera and I was a member of the US ARMY medical team deployed
to Iraq and then later transferred to Afghanistan.I am looking for a trust
worthy individual who will assist me in receiving some funds for me. I am
requesting this individual to hold onto the cash until I arrive safely back
to retrieve them. As soon as I hear back I will work out the finer details.
[...]
Content analysis details: (5.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[69.168.106.36 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-Spam-Flag: NO
I pray this mail finds you in a state of your sound health.My name is captain Rivera
and I was a member of the US ARMY medical team deployed to Iraq and then later
transferred to Afghanistan.I am looking for a trust worthy individual who will
assist me in receiving some funds for me. I am requesting this individual to hold
onto the cash until I arrive safely back to retrieve them.
As soon as I hear back I will work out the finer details.
Best Regards
Captain Benjamin Rivera
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
