by buried under 419s
Wed May 13, 2020 8:32 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id tjPsIMYmvF6zTgAAibB4EA
(envelope-from <[email protected]>)
for <>; Wed, 13 May 2020 12:56:38 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 13 May 2020 12:56:38 -0400
Received: from mail-lf1-f65.google.com ([209.85.167.65]:35168)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jYugP-0005Dj-BK
for ; Wed, 13 May 2020 12:56:38 -0400
Received: by mail-lf1-f65.google.com with SMTP id x73so127997lfa.2
for <>; Wed, 13 May 2020 09:56:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=r+QQAa1sWljnlBmk3piL3evms2flGGh1YHRH7cObdsE=;
b=X+n8F27EZvAQP/A2n35seIznyEVFCPZENm3Ygx0MKaaDST00keozXJmoA7vIitxgNT
52e5qu4S7QBtwR7+7RBzT5DnmQajh7Y4TkQyWRYL3jIqzVSp+HofBw7InOkJZVI/kfMf
Je89ZbaJqfZ7lHisR9Y6Rzi9akWhswFbOvxeudRll2LriXfhG4pfDyfD4bGrbEhVULex
9z1weznL2HQ1W3jpalbsdkmI7PrYzwrKb298uF6QmqVIiWWzSUvdDsFishE4FUhXlURo
kQtyoQO3lxpj3yal6FP8zZRhT+sP6y/DOLETzQ79p1TLyd4KgiWCWFEnAfjVeZDkbqCB
F5uQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=r+QQAa1sWljnlBmk3piL3evms2flGGh1YHRH7cObdsE=;
b=e4v4AQtsE4ZFnChgGejiw8hr+uMorfaNQnnlGMr73FCC9JtBR/I906eCCyiSpUkLE+
+zbzOMgvoJCyZx0uPS/bp4L9HMLC4sL/lzAf31ZkWoAFz/e1XkVsv3PUz6kp6TbpDJ9W
ntA7fKUx4UBZSKWxISQHB8QDTAOBxds/4o7J/FKZbsbKiBAimimpEqeUecGTJRtu0nw2
MN5/+Vwa8/DlxQPP+z4zuDGat+rs/tGv1OZMCeqAVPrpcyuN5fuImhdywQDF/FTFzAdX
qs8ZtWNZNu3jYPSdywBrqElG7GCTmaWcQippj0yJ++7nyvUADF0v6OPIa5CPaImExtZC
sgTA==
X-Gm-Message-State: AOAM5326rbE6Oug6yK/8KeWEE8hRmKZZtrf21WhdNORevsd599BjgD8Q
7t+SMzIFfryLtLYaDbpXG1nUVs3qE8fla523e0M=
X-Google-Smtp-Source: ABdhPJyfnrwsCKgznR5Xh7+/SSFhd7+hV1fXZMs2Pa6/IpbrzH1xSXIb95+vyftInazJ+qTXRFbYsJkwvazFVG7n+4M=
X-Received: by 2002:a19:380d:: with SMTP id f13mr280469lfa.43.1589388953482;
Wed, 13 May 2020 09:55:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a19:ad49:0:0:0:0:0 with HTTP; Wed, 13 May 2020 09:55:52
-0700 (PDT)
Reply-To: [email protected]
From: Carlos Slim Helu <[email protected]>
Date: Wed, 13 May 2020 17:55:52 +0100
Message-ID: <CAMQ4+bcX0pjWdowe=q+J0zmt+ZQ7wqgi+KfBjPEsu4qWFncR8w@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc:
X-Spam-Status: Yes, score=9.4
X-Spam-Score: 94
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hi My name is Carlos Slim Helu, A philanthropist the CEO and
Chairman of the Carlos Slim Helu Foundation Charitable Foundation, one of
the largest private foundations in the world. I believe strongly [...]
Content analysis details: (9.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[paymentcenter617[at]gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.167.65 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.65 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[paymentcenter617[at]gmail.com]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Hi
Hi
My name is Carlos Slim Helu, A philanthropist the CEO and Chairman of
the Carlos Slim Helu Foundation Charitable Foundation, one of the
largest private foundations in the world. I believe strongly in‘giving
while living’ I had one idea that never changed in my mind, that you
should use your wealth to help people and i have decided to secretly
give {$2,500,000.00 USD } to randomly selected individuals worldwide.
On receipt of this email, you should count yourself as the lucky
individual. Your email address was chosen online while searching at
random. Kindly get back to me with your full address at your earliest
convenience, so I know your email address is valid. RESPOND TO THIS
EMAIL([email protected])
ONLY.
Regards,
Carlos Slim Helu
Reply To: [email protected]
Delivered-To:
Received: from
by with LMTP
id tjPsIMYmvF6zTgAAibB4EA
(envelope-from <[email protected]>)
for <>; Wed, 13 May 2020 12:56:38 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 13 May 2020 12:56:38 -0400
Received: from mail-lf1-f65.google.com ([209.85.167.65]:35168)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jYugP-0005Dj-BK
for ; Wed, 13 May 2020 12:56:38 -0400
Received: by mail-lf1-f65.google.com with SMTP id x73so127997lfa.2
for <>; Wed, 13 May 2020 09:56:16 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=r+QQAa1sWljnlBmk3piL3evms2flGGh1YHRH7cObdsE=;
b=X+n8F27EZvAQP/A2n35seIznyEVFCPZENm3Ygx0MKaaDST00keozXJmoA7vIitxgNT
52e5qu4S7QBtwR7+7RBzT5DnmQajh7Y4TkQyWRYL3jIqzVSp+HofBw7InOkJZVI/kfMf
Je89ZbaJqfZ7lHisR9Y6Rzi9akWhswFbOvxeudRll2LriXfhG4pfDyfD4bGrbEhVULex
9z1weznL2HQ1W3jpalbsdkmI7PrYzwrKb298uF6QmqVIiWWzSUvdDsFishE4FUhXlURo
kQtyoQO3lxpj3yal6FP8zZRhT+sP6y/DOLETzQ79p1TLyd4KgiWCWFEnAfjVeZDkbqCB
F5uQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=r+QQAa1sWljnlBmk3piL3evms2flGGh1YHRH7cObdsE=;
b=e4v4AQtsE4ZFnChgGejiw8hr+uMorfaNQnnlGMr73FCC9JtBR/I906eCCyiSpUkLE+
+zbzOMgvoJCyZx0uPS/bp4L9HMLC4sL/lzAf31ZkWoAFz/e1XkVsv3PUz6kp6TbpDJ9W
ntA7fKUx4UBZSKWxISQHB8QDTAOBxds/4o7J/FKZbsbKiBAimimpEqeUecGTJRtu0nw2
MN5/+Vwa8/DlxQPP+z4zuDGat+rs/tGv1OZMCeqAVPrpcyuN5fuImhdywQDF/FTFzAdX
qs8ZtWNZNu3jYPSdywBrqElG7GCTmaWcQippj0yJ++7nyvUADF0v6OPIa5CPaImExtZC
sgTA==
X-Gm-Message-State: AOAM5326rbE6Oug6yK/8KeWEE8hRmKZZtrf21WhdNORevsd599BjgD8Q
7t+SMzIFfryLtLYaDbpXG1nUVs3qE8fla523e0M=
X-Google-Smtp-Source: ABdhPJyfnrwsCKgznR5Xh7+/SSFhd7+hV1fXZMs2Pa6/IpbrzH1xSXIb95+vyftInazJ+qTXRFbYsJkwvazFVG7n+4M=
X-Received: by 2002:a19:380d:: with SMTP id f13mr280469lfa.43.1589388953482;
Wed, 13 May 2020 09:55:53 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a19:ad49:0:0:0:0:0 with HTTP; Wed, 13 May 2020 09:55:52
-0700 (PDT)
Reply-To: [email protected]
From: Carlos Slim Helu <[email protected]>
Date: Wed, 13 May 2020 17:55:52 +0100
Message-ID: <CAMQ4+bcX0pjWdowe=q+J0zmt+ZQ7wqgi+KfBjPEsu4qWFncR8w@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc:
X-Spam-Status: Yes, score=9.4
X-Spam-Score: 94
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hi My name is Carlos Slim Helu, A philanthropist the CEO and
Chairman of the Carlos Slim Helu Foundation Charitable Foundation, one of
the largest private foundations in the world. I believe strongly [...]
Content analysis details: (9.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[paymentcenter617[at]gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.167.65 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.65 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[paymentcenter617[at]gmail.com]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Hi
Hi
My name is Carlos Slim Helu, A philanthropist the CEO and Chairman of
the Carlos Slim Helu Foundation Charitable Foundation, one of the
largest private foundations in the world. I believe strongly in‘giving
while living’ I had one idea that never changed in my mind, that you
should use your wealth to help people and i have decided to secretly
give {$2,500,000.00 USD } to randomly selected individuals worldwide.
On receipt of this email, you should count yourself as the lucky
individual. Your email address was chosen online while searching at
random. Kindly get back to me with your full address at your earliest
convenience, so I know your email address is valid. RESPOND TO THIS
EMAIL([email protected])
ONLY.
Regards,
Carlos Slim Helu
Reply To: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces