by buried under 419s
Tue Jun 13, 2017 9:37 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 13 Jun 2017 12:18:37 -0700
Received: from grego.hardonline.com.br ([189.126.224.17]:18671 helo=mail.hardonline.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dKrKh-00072U-Q5
for ; Tue, 13 Jun 2017 12:18:37 -0700
Received: (qmail 83709 invoked from network); 13 Jun 2017 10:13:30 -0300
Received: from unknown (HELO [192.168.43.74]) ([email protected]@[151.34.69.150])
(envelope-sender <[email protected]>)
by mail.hardonline.com.br (qmail-ldap-1.03) with SMTP
for <m>; 13 Jun 2017 10:13:30 -0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "UNITED NATIONS" <[email protected]>
Date: Tue, 13 Jun 2017 06:12:32 -0700
Reply-To: [email protected]
X-Antivirus: Avast (VPS 170612-2, 06/12/2017), Outbound message
X-Antivirus-Status: Clean
X-Spam-Status: Yes, score=30.4
X-Spam-Score: 304
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear: Lucky Winner, This is to announce to you the draw of
the United Nation Foundation Programs held on the 30th of Apirl, 2017 in
Nigeria. Your E-mail was among the 5lucky e-mail addresses that won $1,500,000.00
EUR and payment will be remitted to you via western union money transfer.
[...]
Content analysis details: (30.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[189.126.224.17 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[189.126.224.17 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(unitednationstttt869[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.9 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** PICKUP YOUR $5000 USD VIA ANY WESTERN UNION CLOSE TO YOU**
Dear: Lucky Winner,
This is to announce to you the draw of the United Nation Foundation Programs held on
the 30th of Apirl, 2017 in Nigeria. Your E-mail was among the 5lucky e-mail
addresses that won $1,500,000.00 EUR and payment will be remitted to you via western
union money transfer.
NOTE: $5,000 USD has already be sent to you since four weeks ago and an e-mail was
send to notify you of the remittance but we did not hear from you since 4 weeks ago.
Therefore, we decided to notify you again with same information details of the
western union money transfer. Kindly use the below link to track the status of the
transaction before visiting Western Union office for pickup.
https://www.westernunion.com/us/en/send ... cktransfer
Mtcn: 4829677535
Sender First Name: Ramona
Sender Last Name: Larry
Country: Nigeria
City: Abuja
Amount Sent: $5,000 USD
As soon as you receive the money, simply contact Mrs.Faith Smith for next transfer
of $5,000 USD as soon as you pickup the first transfer in any western union near you
over there.
Thanks
Mrs.Faith Smith
Envelope-to:
Delivery-date: Tue, 13 Jun 2017 12:18:37 -0700
Received: from grego.hardonline.com.br ([189.126.224.17]:18671 helo=mail.hardonline.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dKrKh-00072U-Q5
for ; Tue, 13 Jun 2017 12:18:37 -0700
Received: (qmail 83709 invoked from network); 13 Jun 2017 10:13:30 -0300
Received: from unknown (HELO [192.168.43.74]) ([email protected]@[151.34.69.150])
(envelope-sender <[email protected]>)
by mail.hardonline.com.br (qmail-ldap-1.03) with SMTP
for <m>; 13 Jun 2017 10:13:30 -0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "UNITED NATIONS" <[email protected]>
Date: Tue, 13 Jun 2017 06:12:32 -0700
Reply-To: [email protected]
X-Antivirus: Avast (VPS 170612-2, 06/12/2017), Outbound message
X-Antivirus-Status: Clean
X-Spam-Status: Yes, score=30.4
X-Spam-Score: 304
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear: Lucky Winner, This is to announce to you the draw of
the United Nation Foundation Programs held on the 30th of Apirl, 2017 in
Nigeria. Your E-mail was among the 5lucky e-mail addresses that won $1,500,000.00
EUR and payment will be remitted to you via western union money transfer.
[...]
Content analysis details: (30.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner"
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[189.126.224.17 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[189.126.224.17 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(unitednationstttt869[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.9 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** PICKUP YOUR $5000 USD VIA ANY WESTERN UNION CLOSE TO YOU**
Dear: Lucky Winner,
This is to announce to you the draw of the United Nation Foundation Programs held on
the 30th of Apirl, 2017 in Nigeria. Your E-mail was among the 5lucky e-mail
addresses that won $1,500,000.00 EUR and payment will be remitted to you via western
union money transfer.
NOTE: $5,000 USD has already be sent to you since four weeks ago and an e-mail was
send to notify you of the remittance but we did not hear from you since 4 weeks ago.
Therefore, we decided to notify you again with same information details of the
western union money transfer. Kindly use the below link to track the status of the
transaction before visiting Western Union office for pickup.
https://www.westernunion.com/us/en/send ... cktransfer
Mtcn: 4829677535
Sender First Name: Ramona
Sender Last Name: Larry
Country: Nigeria
City: Abuja
Amount Sent: $5,000 USD
As soon as you receive the money, simply contact Mrs.Faith Smith for next transfer
of $5,000 USD as soon as you pickup the first transfer in any western union near you
over there.
Thanks
Mrs.Faith Smith
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces