by [email protected]
Sun Jun 07, 2020 6:44 pm
I received a new scam mail, seems to be coming from Brazil. The data follows:
"-- Hope you are in good health in this time of Pandemic crisis this message is the last notifications about USD14.5Million bearing our Name as Beneficiary, all effort to reach you have not to be successful, please if you receive this message kindly respond back stating your Desire to make the claim reconfirm your full name and Age, Mrs. Anne"
Mail header:
" for myemail; Sun, 07 Jun 2020 23:43:29 +0200
Received: from relay1-whm-tmk.tray.net.br ([177.67.122.94])
by se-filter04.tld-mx.com with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1ji34i-0005XW-5E
for [email protected]; Sun, 07 Jun 2020 23:43:29 +0200
X-BYPSHEADER: 21616782
X-SMScore: -65
X-LCID: 8778763
Received: from [(177.67.112.6)] by relay1-whm-tmk.tray.net.br with Xeams SMTP; Sun, 7 Jun 2020 18:43:24 -0300 (BRT)
X-SM_EnvelopeFrom: [email protected]
X-SM_RECEIVED_ON: Sun, 7 Jun 2020 18:43:24 -0300 (BRT)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Sun, 07 Jun 2020 18:43:17 -0300
From: Mrs Mary Anne <[email protected]>
To: undisclosed-recipients:;
Subject: RE RE
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Return-Receipt-To: Mrs Mary Anne <[email protected]>
Disposition-Notification-To: Mrs Mary Anne <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.3.8
Received-SPF: pass (se-filter04.tld-mx.com: domain of economizou.com.br designates 177.67.122.94 as permitted sender) client-ip=177.67.122.94; [email protected]; helo=relay1-whm-tmk.tray.net.br;
X-SPF-Result: se-filter04.tld-mx.com: domain of economizou.com.br designates 177.67.122.94 as permitted sender
Authentication-Results: se-filter04.tld-mx.com;
iprev=pass (relay1-whm-tmk.tray.net.br) smtp.remote-ip=177.67.122.94;
spf=pass smtp.mailfrom=economizou.com.br;
dmarc=pass header.from=economizou.com.br
Authentication-Results: tld-mx.com; spf=pass [email protected]"
"-- Hope you are in good health in this time of Pandemic crisis this message is the last notifications about USD14.5Million bearing our Name as Beneficiary, all effort to reach you have not to be successful, please if you receive this message kindly respond back stating your Desire to make the claim reconfirm your full name and Age, Mrs. Anne"
Mail header:
" for myemail; Sun, 07 Jun 2020 23:43:29 +0200
Received: from relay1-whm-tmk.tray.net.br ([177.67.122.94])
by se-filter04.tld-mx.com with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1ji34i-0005XW-5E
for [email protected]; Sun, 07 Jun 2020 23:43:29 +0200
X-BYPSHEADER: 21616782
X-SMScore: -65
X-LCID: 8778763
Received: from [(177.67.112.6)] by relay1-whm-tmk.tray.net.br with Xeams SMTP; Sun, 7 Jun 2020 18:43:24 -0300 (BRT)
X-SM_EnvelopeFrom: [email protected]
X-SM_RECEIVED_ON: Sun, 7 Jun 2020 18:43:24 -0300 (BRT)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Sun, 07 Jun 2020 18:43:17 -0300
From: Mrs Mary Anne <[email protected]>
To: undisclosed-recipients:;
Subject: RE RE
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Return-Receipt-To: Mrs Mary Anne <[email protected]>
Disposition-Notification-To: Mrs Mary Anne <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.3.8
Received-SPF: pass (se-filter04.tld-mx.com: domain of economizou.com.br designates 177.67.122.94 as permitted sender) client-ip=177.67.122.94; [email protected]; helo=relay1-whm-tmk.tray.net.br;
X-SPF-Result: se-filter04.tld-mx.com: domain of economizou.com.br designates 177.67.122.94 as permitted sender
Authentication-Results: se-filter04.tld-mx.com;
iprev=pass (relay1-whm-tmk.tray.net.br) smtp.remote-ip=177.67.122.94;
spf=pass smtp.mailfrom=economizou.com.br;
dmarc=pass header.from=economizou.com.br
Authentication-Results: tld-mx.com; spf=pass [email protected]"