by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 31 Aug 2019 04:52:10 -0700
Received: from 205-142-150-182.northland.net ([205.142.150.182]:50307 helo=mail.tibatcs.net)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1i41vI-0002R2-I3
for m; Sat, 31 Aug 2019 04:52:10 -0700
Received: from User (69.75.148.206) by USCPCExchange.tibatcs.local
(10.80.43.25) with Microsoft SMTP Server id 15.2.221.12; Sat, 31 Aug 2019
07:51:10 -0400
Reply-To: <[email protected]>
From: "Mrs.C. Balling" <[email protected]>
To: <[email protected]>
Date: Sat, 31 Aug 2019 04:51:33 -0700
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=32.2
X-Spam-Score: 322
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: DOING THE WILL OF GOD. I am Mrs.Cathryn Balling, a widow to
late Andrew Balling and I am 56 years old, i am now a new Christian convert,
suffering from long time cancer of the lung, from all indication my conditions
is really deteriorating and it is quite obvious that i would only live for
a short period. According to my doctors, this is because the cancer stage
has gotten to a very bad stage. My late husband was killed during the U.S.
Raid against terrorism in Afghanistan, and during the period of our marriage
we couldn't produce any child. [...]
Content analysis details: (32.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 MILLION_USD BODY: Talks about millions of dollars
0.6 URG_BIZ BODY: Contains urgent matter
0.0 NSL_RCVD_FROM_USER Received from User
0.0 TVD_RCVD_IP Message was received from an IP address
0.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
[205.142.150.182 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(offfice000111[at]mail.ru)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... ua.com;ip=]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
3.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.0 HK_NAME_MR_MRS No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** DOING THE WILL OF GOD.
DOING THE WILL OF GOD.
I am Mrs.Cathryn Balling, a widow to late Andrew Balling and I am 56 years old, i am
now a new Christian convert, suffering from long time cancer of the lung, from all
indication my conditions is really deteriorating and it is quite obvious that i
would only live for a short period. According to my doctors, this is because the
cancer stage has gotten to a very bad stage. My late husband was killed during the
U.S. Raid against terrorism in Afghanistan, and during the period of our marriage we
couldn't produce any child.
My late husband was very wealthy and after his death, i inherited all his business
and wealth. The doctors has advised me that i would only live for a short period, so
i now decided to divide the part of this wealth, to contribute to the development of
the churches all over the world and the less privileged. I selected you after
visiting the website and i prayed over it.
I am willing to donate the sum of $12,500.000.00 USD (Twelve Million, Five Hundred
Thousand United States Dollars) to the less privileged. Please i want you to note
that this fund is lying in a Spanish Bank and upon my instruction, our family
attorney, who presently lives in Spain will file in an application on your behalf
for the transfer of the money in your name.
Lastly, i honestly pray that this money when transferred will be used for the said
purpose, because i have come to find out that wealth acquisition without Christ is
vanity.
May the Grace of our Lord Jesus, the love of God and the fellowship of God be with
you and your family. I await urgent reply.: [email protected]
Yours in Christ,
Mrs.C. Balling.
Envelope-to:
Delivery-date: Sat, 31 Aug 2019 04:52:10 -0700
Received: from 205-142-150-182.northland.net ([205.142.150.182]:50307 helo=mail.tibatcs.net)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1i41vI-0002R2-I3
for m; Sat, 31 Aug 2019 04:52:10 -0700
Received: from User (69.75.148.206) by USCPCExchange.tibatcs.local
(10.80.43.25) with Microsoft SMTP Server id 15.2.221.12; Sat, 31 Aug 2019
07:51:10 -0400
Reply-To: <[email protected]>
From: "Mrs.C. Balling" <[email protected]>
To: <[email protected]>
Date: Sat, 31 Aug 2019 04:51:33 -0700
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=32.2
X-Spam-Score: 322
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: DOING THE WILL OF GOD. I am Mrs.Cathryn Balling, a widow to
late Andrew Balling and I am 56 years old, i am now a new Christian convert,
suffering from long time cancer of the lung, from all indication my conditions
is really deteriorating and it is quite obvious that i would only live for
a short period. According to my doctors, this is because the cancer stage
has gotten to a very bad stage. My late husband was killed during the U.S.
Raid against terrorism in Afghanistan, and during the period of our marriage
we couldn't produce any child. [...]
Content analysis details: (32.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 MILLION_USD BODY: Talks about millions of dollars
0.6 URG_BIZ BODY: Contains urgent matter
0.0 NSL_RCVD_FROM_USER Received from User
0.0 TVD_RCVD_IP Message was received from an IP address
0.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
[205.142.150.182 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(offfice000111[at]mail.ru)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=i ... ua.com;ip=]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
3.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.0 HK_NAME_MR_MRS No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** DOING THE WILL OF GOD.
DOING THE WILL OF GOD.
I am Mrs.Cathryn Balling, a widow to late Andrew Balling and I am 56 years old, i am
now a new Christian convert, suffering from long time cancer of the lung, from all
indication my conditions is really deteriorating and it is quite obvious that i
would only live for a short period. According to my doctors, this is because the
cancer stage has gotten to a very bad stage. My late husband was killed during the
U.S. Raid against terrorism in Afghanistan, and during the period of our marriage we
couldn't produce any child.
My late husband was very wealthy and after his death, i inherited all his business
and wealth. The doctors has advised me that i would only live for a short period, so
i now decided to divide the part of this wealth, to contribute to the development of
the churches all over the world and the less privileged. I selected you after
visiting the website and i prayed over it.
I am willing to donate the sum of $12,500.000.00 USD (Twelve Million, Five Hundred
Thousand United States Dollars) to the less privileged. Please i want you to note
that this fund is lying in a Spanish Bank and upon my instruction, our family
attorney, who presently lives in Spain will file in an application on your behalf
for the transfer of the money in your name.
Lastly, i honestly pray that this money when transferred will be used for the said
purpose, because i have come to find out that wealth acquisition without Christ is
vanity.
May the Grace of our Lord Jesus, the love of God and the fellowship of God be with
you and your family. I await urgent reply.: [email protected]
Yours in Christ,
Mrs.C. Balling.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
