by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id QEBmN3MriV0WLQAAjbubUg
for <>; Mon, 23 Sep 2019 13:30:43 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 23 Sep 2019 13:30:43 -0700
Received: from sonic310-24.consmr.mail.ne1.yahoo.com ([66.163.186.205]:35299)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iCUyo-0002z9-0Y
for ; Mon, 23 Sep 2019 13:30:43 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1569270600; bh=sLEM5k4Wj6U6QyKdRQDCgECa+e13eabTdvwL1TIhDGg=; h=Date:From:Reply-To:Subject:References:From:Subject; b=BK0ATQ5M/eZk1yRN7PYQ38Zb+NHf4QTzvyiuNwuOGLLoF7nvLVHOL3IJEjYU2Rg0aGN1aOtMAl1PRZXHoueAmTVGY6/x6Q3s5G7+mkLYHNH6ZuPapQrDUJ5VNVPGtew9sRAlJyWgemZyvkC7m371jGIOy+O/bTliSVfDXv/JSX3c3yLYH/q56AD/QnNu3IeCTyFcIgQ0aJZAIAKlcNO0XGYEkLnWO0VMftJo+IrNQkRlA/3r5Q5rl4M5gQDj/x6ZgxSx5VP+rBznDbmjMJdwinG7Bn5ZndatqHA1mN8DMrhjdHlN4ALUjTvO3ngrT3DOquezEcvJ/iWJNLSmPneXKQ==
X-YMail-OSG: W1XUlX4VM1k80plSc2Yn3ga7lkP84HnvVKglN5Vu4eSiCQkW6R_KzWXHNDmfCvm
p7kThw3D.wvMWwEQ8gouuBfJVyMBmJWHjgkVYfFtCiLzSy4hkbGqCepyuix_W7vptJCEyQ38iFP5
FxED0mb81MCNagJE6ImliuAH8U9kPhzo7SQKqOVGxaCrPnxTDwWhcwKx6j48BWgEjCGzT8vj2Rn1
SsSRFsUY68gtDWE3fiftalKm9XVPqTMuXb0T0b9WmfjieUijtlxI4b0_HMK.95YuJzsHp7yjkKyL
MT9z5K1URMz.nwS6O4rtu_FzcmpQVysneiS.3sCJc3d6tPcL2nWwIFoRWC7M9bip6S90wUJbhNnx
zINgwlhygZYcYQuakxJftTMrtE0eL8xvp_TgN1GFrK0oWrJsut8mYZWZr4ALt1pyv0JlAyxB0var
UAhVMpGnu5PFuLz2fXQFR6w_Yapx46R73HHyBLkeXCPv1C7e7aqetZCsfMqHP8p3_6Zpbsr2vDHy
WuA.MdXwBF8hrMza77rlBcAYBkj_eme.aZ69Bmetb3l4XXuTZg4zVq0d80OUWgLrdjCzMiuelXHP
Pn0tT_9_9c_fFU6Diadd9OXEp.sh6XmUIBd_2z0sI1sNk4NMyccDhF3LHesY6KKCYiR8hp3iRrLo
64YrKXCHVUCE78roU3o3A._Whd62lMXF3jQaV3GG4HE6yBS12UgQotPuT7qHSMzSI8TTlO1Uw6UT
1QZgqolDhjeZYMNz7p7uCcdYY1CYDiNuwNhWF4tTU48l5.d7WUwhuxW2bmW0Mrt3WvSX1ZQGH69i
nnxJD7MMna4jjhxoaqfTqQ.sJiNyL_8sbpHHTE9Z.h4ntE1FsEnztziuNpwKBMjECY64dKqQ3OMZ
a_XmVgEojWjZQhkeC9C_TjxZx.nCGV_jKVHzVUoCImLPjumCb5mSSQD_pkVXfMlVEJ1XzX7mhQ28
A3q7udk1EOae7QXIT9BYmyOWhfAH2xUYnh8lHc6FKWxPirQXT_V2NslvYzoR2Bx76qaE2hB9XJiw
2p3gLwcmg9HN042CJU3OODkcqQLJsnshdGWijNlXNvY.A3YeaVmP0rDzdxrDVH6jXSgEm4svCiAd
yAXrL4SEZN_9GF.Tu6dQo3D8CeaYJ97xyX681nOexgvEzIUwWz0BkaztMxp8onfvXQ4o.4r755Kb
jaCxiDmzr5XQD_qu.d.WMRxENWUt1roYIh1PjTvb.qny.4hcxh_U5Vp4Xn15A2.6Vfd8PxKlFuF7
AU.PdYiRXGEnl2fSfoDs99cvwVw--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic310.consmr.mail.ne1.yahoo.com with HTTP; Mon, 23 Sep 2019 20:30:00 +0000
Date: Mon, 23 Sep 2019 20:29:59 +0000 (UTC)
From: "[email protected]" <[email protected]>
Reply-To: "[email protected]" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_5569478_1407378971.1569270599498"
References: <[email protected]>
X-Mailer: WebService/1.1.14367 YMailNorrin Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36
Content-Length: 2530
X-Spam-Status: Yes, score=17.2
X-Spam-Score: 172
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, I decided to write you this proposal in good
faith, believing that you will not betray me. This is a very confidential
transaction, I will trust you so much and i believe that you can handle this
for me. I want to use this opportunity to seek for your assistance to help
me repatriate this fund to your country for investment purposes, I was approached
by a Syria political family, who were wanted to wipe away by the Syria Islamic
groups, I rescued the family and relocated them to China, the family handed
a box full of cash totaling US$8.5 Eight million five hundred thousand dollars
with gold to me, because the fund is not safe here and I can no longer
hold on to this fund because of the situation here. I am willing to set up
a company with you. The money will change our life, I will be very grateful
if the proposal is considered and given the urgent attention it deserves.
Regards,Aleksandr Abramovich [...]
Content analysis details: (17.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(adalcesario51[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(venkateshsrikanta28[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (venkateshsrikanta28[at]yahoo.com)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[66.163.186.205 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.6 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.9 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Friend,
Dear Friend,
I decided to write you this proposal in good faith, believing that you will not
betray me. This is a very confidential transaction, I will trust you so much and i
believe that you can handle this for me. I want to use this opportunity to seek for
your assistance to help me repatriate this fund to your country for investment
purposes, I was approached by a Syria political family, who were wanted to wipe away
by the Syria Islamic groups, I rescued the family and relocated them to China, the
family handed a box full of cash totaling US$8.5 Eight million five hundred thousand
dollars with gold to me, because the fund is not safe here and I can no longer hold
on to this fund because of the situation here. I am willing to set up a company with
you. The money will change our life, I will be very grateful if the proposal is
considered and given the urgent attention it deserves.
Regards,Aleksandr Abramovich
Delivered-To:
Received: from
by with LMTP id QEBmN3MriV0WLQAAjbubUg
for <>; Mon, 23 Sep 2019 13:30:43 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 23 Sep 2019 13:30:43 -0700
Received: from sonic310-24.consmr.mail.ne1.yahoo.com ([66.163.186.205]:35299)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iCUyo-0002z9-0Y
for ; Mon, 23 Sep 2019 13:30:43 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1569270600; bh=sLEM5k4Wj6U6QyKdRQDCgECa+e13eabTdvwL1TIhDGg=; h=Date:From:Reply-To:Subject:References:From:Subject; b=BK0ATQ5M/eZk1yRN7PYQ38Zb+NHf4QTzvyiuNwuOGLLoF7nvLVHOL3IJEjYU2Rg0aGN1aOtMAl1PRZXHoueAmTVGY6/x6Q3s5G7+mkLYHNH6ZuPapQrDUJ5VNVPGtew9sRAlJyWgemZyvkC7m371jGIOy+O/bTliSVfDXv/JSX3c3yLYH/q56AD/QnNu3IeCTyFcIgQ0aJZAIAKlcNO0XGYEkLnWO0VMftJo+IrNQkRlA/3r5Q5rl4M5gQDj/x6ZgxSx5VP+rBznDbmjMJdwinG7Bn5ZndatqHA1mN8DMrhjdHlN4ALUjTvO3ngrT3DOquezEcvJ/iWJNLSmPneXKQ==
X-YMail-OSG: W1XUlX4VM1k80plSc2Yn3ga7lkP84HnvVKglN5Vu4eSiCQkW6R_KzWXHNDmfCvm
p7kThw3D.wvMWwEQ8gouuBfJVyMBmJWHjgkVYfFtCiLzSy4hkbGqCepyuix_W7vptJCEyQ38iFP5
FxED0mb81MCNagJE6ImliuAH8U9kPhzo7SQKqOVGxaCrPnxTDwWhcwKx6j48BWgEjCGzT8vj2Rn1
SsSRFsUY68gtDWE3fiftalKm9XVPqTMuXb0T0b9WmfjieUijtlxI4b0_HMK.95YuJzsHp7yjkKyL
MT9z5K1URMz.nwS6O4rtu_FzcmpQVysneiS.3sCJc3d6tPcL2nWwIFoRWC7M9bip6S90wUJbhNnx
zINgwlhygZYcYQuakxJftTMrtE0eL8xvp_TgN1GFrK0oWrJsut8mYZWZr4ALt1pyv0JlAyxB0var
UAhVMpGnu5PFuLz2fXQFR6w_Yapx46R73HHyBLkeXCPv1C7e7aqetZCsfMqHP8p3_6Zpbsr2vDHy
WuA.MdXwBF8hrMza77rlBcAYBkj_eme.aZ69Bmetb3l4XXuTZg4zVq0d80OUWgLrdjCzMiuelXHP
Pn0tT_9_9c_fFU6Diadd9OXEp.sh6XmUIBd_2z0sI1sNk4NMyccDhF3LHesY6KKCYiR8hp3iRrLo
64YrKXCHVUCE78roU3o3A._Whd62lMXF3jQaV3GG4HE6yBS12UgQotPuT7qHSMzSI8TTlO1Uw6UT
1QZgqolDhjeZYMNz7p7uCcdYY1CYDiNuwNhWF4tTU48l5.d7WUwhuxW2bmW0Mrt3WvSX1ZQGH69i
nnxJD7MMna4jjhxoaqfTqQ.sJiNyL_8sbpHHTE9Z.h4ntE1FsEnztziuNpwKBMjECY64dKqQ3OMZ
a_XmVgEojWjZQhkeC9C_TjxZx.nCGV_jKVHzVUoCImLPjumCb5mSSQD_pkVXfMlVEJ1XzX7mhQ28
A3q7udk1EOae7QXIT9BYmyOWhfAH2xUYnh8lHc6FKWxPirQXT_V2NslvYzoR2Bx76qaE2hB9XJiw
2p3gLwcmg9HN042CJU3OODkcqQLJsnshdGWijNlXNvY.A3YeaVmP0rDzdxrDVH6jXSgEm4svCiAd
yAXrL4SEZN_9GF.Tu6dQo3D8CeaYJ97xyX681nOexgvEzIUwWz0BkaztMxp8onfvXQ4o.4r755Kb
jaCxiDmzr5XQD_qu.d.WMRxENWUt1roYIh1PjTvb.qny.4hcxh_U5Vp4Xn15A2.6Vfd8PxKlFuF7
AU.PdYiRXGEnl2fSfoDs99cvwVw--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic310.consmr.mail.ne1.yahoo.com with HTTP; Mon, 23 Sep 2019 20:30:00 +0000
Date: Mon, 23 Sep 2019 20:29:59 +0000 (UTC)
From: "[email protected]" <[email protected]>
Reply-To: "[email protected]" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_5569478_1407378971.1569270599498"
References: <[email protected]>
X-Mailer: WebService/1.1.14367 YMailNorrin Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36
Content-Length: 2530
X-Spam-Status: Yes, score=17.2
X-Spam-Score: 172
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, I decided to write you this proposal in good
faith, believing that you will not betray me. This is a very confidential
transaction, I will trust you so much and i believe that you can handle this
for me. I want to use this opportunity to seek for your assistance to help
me repatriate this fund to your country for investment purposes, I was approached
by a Syria political family, who were wanted to wipe away by the Syria Islamic
groups, I rescued the family and relocated them to China, the family handed
a box full of cash totaling US$8.5 Eight million five hundred thousand dollars
with gold to me, because the fund is not safe here and I can no longer
hold on to this fund because of the situation here. I am willing to set up
a company with you. The money will change our life, I will be very grateful
if the proposal is considered and given the urgent attention it deserves.
Regards,Aleksandr Abramovich [...]
Content analysis details: (17.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(adalcesario51[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(venkateshsrikanta28[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (venkateshsrikanta28[at]yahoo.com)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[66.163.186.205 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.6 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.9 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Friend,
Dear Friend,
I decided to write you this proposal in good faith, believing that you will not
betray me. This is a very confidential transaction, I will trust you so much and i
believe that you can handle this for me. I want to use this opportunity to seek for
your assistance to help me repatriate this fund to your country for investment
purposes, I was approached by a Syria political family, who were wanted to wipe away
by the Syria Islamic groups, I rescued the family and relocated them to China, the
family handed a box full of cash totaling US$8.5 Eight million five hundred thousand
dollars with gold to me, because the fund is not safe here and I can no longer hold
on to this fund because of the situation here. I am willing to set up a company with
you. The money will change our life, I will be very grateful if the proposal is
considered and given the urgent attention it deserves.
Regards,Aleksandr Abramovich
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
