by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id iKT7IknROV0eQgAAjbubUg
for <>; Thu, 25 Jul 2019 08:56:57 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 25 Jul 2019 08:56:57 -0700
Received: from mail.windstream.syn-alias.com ([69.168.106.36]:18540 helo=mail.windstream.net)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hqg6y-0004OU-46
for ; Thu, 25 Jul 2019 08:56:57 -0700
DKIM-Signature: v=1; a=rsa-sha1; d=windstream.net; s=20180222; c=relaxed/simple;
q=dns/txt; [email protected]; t=1564070167;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=MKudYAug/iiejEfhPoSS49DUe5c=;
b=BGIk7pwl9sWNi/8OsB7WZ820bR+l9g4F7EI/U7ylqJyWpWBm5m72BehveAaLqhzo
a9V16GnwVwvviCmDOnupqH2Vc3D3j6lckqbQxrlgy2E0vOvJQBUO0RNF3lm5b5br
a/TJoHl7qBfUjAiLqPwLUX/B93kFzWIXb0/U7TNPRAyBa1cHI0udhewl2mi+NATF
+CpN7EF41F3h8Yzp1/IJgfujm6sU6mtzNDkg0O6tlLuwXYLuViO8EMHDdnFQoPOp
jXRYh7gRoCHIfgj33L4xzxZDkrgk16TjwQS9+zaFvwfSpJ0NZp6WzcyCbwQlUZFQ
APe4p2lDKQWK8jsgY5po9g==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=eoed9chX c=1 sm=1 tr=0 a=jK1hRjIcgHSufvDHaPkiaA==:117 a=jK1hRjIcgHSufvDHaPkiaA==:17 a=KGjhK52YXX0A:10 a=0o9FgrsRnhwA:10 a=DSv4QsM789kA:10 a=KXl77lDgDEgIEtoqJYcA:9 a=RLl3hCC_Xq_SND0AxH0A:9 a=dJ4-zMqG8z4zQYZq:21 a=7aYc-_rlkoW73KLm:21 a=QEXdDO2ut3YA:10 a=7MpQHrVRASMA:10 a=kr0f9r3MHXkA:10 a=HjOd4FFmHLrecK4ey5EA:9 a=glVL0J5gd8H1cW0T:21 a=QuATd5lH53bDMpv7:21 a=_W_S_7VecoQA:10 a=y3gxJGGnbrtUV2GOxcvc:22
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: am5qYkB3aW5kc3RyZWFtLm5ldA==
Authentication-Results: smtp02.aqua.bos.sync.lan smtp.user=[email protected]; auth=pass (LOGIN)
Received: from [66.133.74.124] ([66.133.74.124:54538] helo=LAPTOP-DDQQ8L89.localdomain)
by mail.windstream.net (envelope-from <[email protected]>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-SHA)
id 32/DE-29895-BD0D93D5; Thu, 25 Jul 2019 11:56:02 -0400
Content-Type: multipart/alternative; boundary="===============1626017967=="
Message-ID: <[email protected]>
MIME-Version: 1.0
To: Recipients <[email protected]>
From: Howard Woods <[email protected]>
Date: Thu, 25 Jul 2019 08:54:11 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=8.4
X-Spam-Score: 84
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Consignee, Your cash consignment intercepted at the
airport because of failure of the delivery officer to declare the cash in
excess of $10,000 has finally been slated for a deposit in a Bank in USA for
an onward Payment through a more secured means. However, we are having counter
claims on this from different beneficiaries who claimed that you are insolvent,
hence we should accept their proposal to receive the payment in their account
on your behalf. If you still exist get back urgently with your details for
authentication: 0B 0B 0B 1. Your Full Name. 0B 2. Home phone & Cell Phone
0B 3. Any form of Identification either Drivers license or International
Passport. 0B 0B 0B Once I hear from you, I will direct you on how to reclaim
your funds. 0B 0B Regards, 0B 0B Howard Woods Direct Mobile: (413) 251-7062
[...]
Content analysis details: (8.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[69.168.106.36 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Attn: Consignee,
Your cash consignment intercepted at the airport because of failure of the delivery
officer to declare the cash in excess of $10,000 has finally been slated for a
deposit in a Bank in USA for an onward Payment through a more secured means.
However, we are having counter claims on this from different beneficiaries who
claimed that you are insolvent, hence we should accept their proposal to receive
the payment in their account on your behalf. If you still exist get back urgently
with your details for authentication: 0B
0B
0B
1. Your Full Name. 0B
2. Home phone & Cell Phone 0B
3. Any form of Identification either Drivers license or International Passport. 0B
0B
0B
Once I hear from you, I will direct you on how to reclaim your funds.
0B
0B
Regards, 0B
0B
Howard Woods
Direct Mobile: (413) 251-7062
Delivered-To:
Received: from
by with LMTP id iKT7IknROV0eQgAAjbubUg
for <>; Thu, 25 Jul 2019 08:56:57 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 25 Jul 2019 08:56:57 -0700
Received: from mail.windstream.syn-alias.com ([69.168.106.36]:18540 helo=mail.windstream.net)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hqg6y-0004OU-46
for ; Thu, 25 Jul 2019 08:56:57 -0700
DKIM-Signature: v=1; a=rsa-sha1; d=windstream.net; s=20180222; c=relaxed/simple;
q=dns/txt; [email protected]; t=1564070167;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=MKudYAug/iiejEfhPoSS49DUe5c=;
b=BGIk7pwl9sWNi/8OsB7WZ820bR+l9g4F7EI/U7ylqJyWpWBm5m72BehveAaLqhzo
a9V16GnwVwvviCmDOnupqH2Vc3D3j6lckqbQxrlgy2E0vOvJQBUO0RNF3lm5b5br
a/TJoHl7qBfUjAiLqPwLUX/B93kFzWIXb0/U7TNPRAyBa1cHI0udhewl2mi+NATF
+CpN7EF41F3h8Yzp1/IJgfujm6sU6mtzNDkg0O6tlLuwXYLuViO8EMHDdnFQoPOp
jXRYh7gRoCHIfgj33L4xzxZDkrgk16TjwQS9+zaFvwfSpJ0NZp6WzcyCbwQlUZFQ
APe4p2lDKQWK8jsgY5po9g==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=eoed9chX c=1 sm=1 tr=0 a=jK1hRjIcgHSufvDHaPkiaA==:117 a=jK1hRjIcgHSufvDHaPkiaA==:17 a=KGjhK52YXX0A:10 a=0o9FgrsRnhwA:10 a=DSv4QsM789kA:10 a=KXl77lDgDEgIEtoqJYcA:9 a=RLl3hCC_Xq_SND0AxH0A:9 a=dJ4-zMqG8z4zQYZq:21 a=7aYc-_rlkoW73KLm:21 a=QEXdDO2ut3YA:10 a=7MpQHrVRASMA:10 a=kr0f9r3MHXkA:10 a=HjOd4FFmHLrecK4ey5EA:9 a=glVL0J5gd8H1cW0T:21 a=QuATd5lH53bDMpv7:21 a=_W_S_7VecoQA:10 a=y3gxJGGnbrtUV2GOxcvc:22
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: am5qYkB3aW5kc3RyZWFtLm5ldA==
Authentication-Results: smtp02.aqua.bos.sync.lan smtp.user=[email protected]; auth=pass (LOGIN)
Received: from [66.133.74.124] ([66.133.74.124:54538] helo=LAPTOP-DDQQ8L89.localdomain)
by mail.windstream.net (envelope-from <[email protected]>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-SHA)
id 32/DE-29895-BD0D93D5; Thu, 25 Jul 2019 11:56:02 -0400
Content-Type: multipart/alternative; boundary="===============1626017967=="
Message-ID: <[email protected]>
MIME-Version: 1.0
To: Recipients <[email protected]>
From: Howard Woods <[email protected]>
Date: Thu, 25 Jul 2019 08:54:11 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=8.4
X-Spam-Score: 84
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Consignee, Your cash consignment intercepted at the
airport because of failure of the delivery officer to declare the cash in
excess of $10,000 has finally been slated for a deposit in a Bank in USA for
an onward Payment through a more secured means. However, we are having counter
claims on this from different beneficiaries who claimed that you are insolvent,
hence we should accept their proposal to receive the payment in their account
on your behalf. If you still exist get back urgently with your details for
authentication: 0B 0B 0B 1. Your Full Name. 0B 2. Home phone & Cell Phone
0B 3. Any form of Identification either Drivers license or International
Passport. 0B 0B 0B Once I hear from you, I will direct you on how to reclaim
your funds. 0B 0B Regards, 0B 0B Howard Woods Direct Mobile: (413) 251-7062
[...]
Content analysis details: (8.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[69.168.106.36 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Attn: Consignee,
Your cash consignment intercepted at the airport because of failure of the delivery
officer to declare the cash in excess of $10,000 has finally been slated for a
deposit in a Bank in USA for an onward Payment through a more secured means.
However, we are having counter claims on this from different beneficiaries who
claimed that you are insolvent, hence we should accept their proposal to receive
the payment in their account on your behalf. If you still exist get back urgently
with your details for authentication: 0B
0B
0B
1. Your Full Name. 0B
2. Home phone & Cell Phone 0B
3. Any form of Identification either Drivers license or International Passport. 0B
0B
0B
Once I hear from you, I will direct you on how to reclaim your funds.
0B
0B
Regards, 0B
0B
Howard Woods
Direct Mobile: (413) 251-7062
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
