by buried under 419s
Fri Dec 18, 2020 10:40 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id ZPtVO3uz3F9KFAAAibB4EA
(envelope-from <[email protected]>)
for <>; Fri, 18 Dec 2020 13:49:47 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 18 Dec 2020 13:49:48 +0000
Received: from mail-ej1-f46.google.com ([209.85.218.46]:34850)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kqG8f-0001LK-NG
for ; Fri, 18 Dec 2020 13:49:47 +0000
Received: by mail-ej1-f46.google.com with SMTP id q22so3312432eja.2
for <>; Fri, 18 Dec 2020 05:49:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=4A+w4TNMpucQG7xLbuqH3rdOklJ9dgA0FDzIEV1OeDQ=;
b=vRNba2E8FTBf+98W3YznYLQkNk/M9CEypv4IyBNlYgrsR1/ehVsV6NS6KkMsUwjTI1
QfVtdHETLiTDgKcgNEgfbPcObaKTsDQ79VTfPpR34d9vKHI7EBo0YZL+svvThZ10q//e
onAtRAijBpY8EcByDFuIsr7ZkYMWBRt25sAosC6F//7XfdX+vpMTRkklXeQfQuv7mww5
x16QMaG1BPpqReMHeBu/8jggvGTWNpXERwEarw4Zfnv8HacH2vYVDDdoVC7AuL3nCC1b
MuNk626pQikR2PYnUoxPkTg4tPMSbMEG5Nv2x4NIVx8xlmTqGvc+jK8O6JPsdGvzIm1+
rBtg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=4A+w4TNMpucQG7xLbuqH3rdOklJ9dgA0FDzIEV1OeDQ=;
b=brENxKi2VgDTlZWPEsSIRssA+wB0hGbiYuayPCnydOyQMg8m9cRkGwZFoAqCOsmD8V
TCKDVok9Xu9ugLY3TNNJ1Gktzx7x7beBmgRwpnS5+E0z3IxMtYNP4q4bmN66nn+QeYlk
ARwj+lrK5JYnfMkB7n4zg18hSvjSqOWMEKSw3tug7uiNl8CcTmnyV+qjqfewE2fbILyu
xs2ooimYH2cRxy6hk126pZKS4cjEbJ3yF/Nxm6ltxJgr/Kvr7yIV/2mqd2Y4tYW5q9oO
COdR781vWCAIwqSZuokd54JoRbKLgdJTkYqSf3GzYia9TWB7eWU2+ozz6sV3s2Neakgq
DWwA==
X-Gm-Message-State: AOAM5304ajQ6HUeVEYcGKB7ODm3A38ryRWvNzwQBIUDUIZY6C5P9XsOV
KG+C2oRqHz+TLg+h1TbeNIY/eZD0rHRh+kZeeVc=
X-Google-Smtp-Source: ABdhPJzW6gu4RnO42+XVLrCssVtU+xlzPWFL2mH9D9vaI35hEQqxhuy/YrwIjanRDThWLoPTi5PP3wId56MB8jN4kmk=
X-Received: by 2002:a17:906:a2d0:: with SMTP id by16mr4032188ejb.207.1608299343838;
Fri, 18 Dec 2020 05:49:03 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a54:3181:0:0:0:0:0 with HTTP; Fri, 18 Dec 2020 05:49:03
-0800 (PST)
Reply-To: [email protected]
From: "Capt. Michael Richard" <[email protected]>
Date: Fri, 18 Dec 2020 14:49:03 +0100
Message-ID: <CAGhxa==bi=z+P--hkhTLxqmnP8e2tCSaE++-kTmG9u3cXjGvDg@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=10.4
X-Spam-Score: 104
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- Dear Sir/Madam I apologize if the content of this my email
is contrary to your moral ethics. but I find it pleasurable to offer you
my partnership in business. I only pray at this time that your address is
still val [...]
Content analysis details: (10.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[shirleypfosgate47[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[shirleypfosgate47[at]gmail.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 HK_SCAM No description available.
0.0 KAM_SHORT Use of a URL Shortener for very short URL
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.4 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attention Needed
Dear Sir/Madam
I apologize if the content of this my email is contrary to your moral ethics.
but I find it pleasurable to offer you my partnership in business. I
only pray at
this time that your address is still valid. I want to solicit your attention to
receive money on my behalf.
I am Capt. Michael Richard, a military anesthesiologist with the task force unit
from 1st battalion, 94th Artillery regiment currently stationed at the
Jordan/Syrian
border for classified operations/military exercises and intervention
in Syria. I am
on the move to Syria from Iraq as the last batch just left, and I
really need your
help in assisting me with the safe keeping of two military trunk boxes which has
just arrived the United Kingdom from the Iraq.Kindly view this news
blog below for some info
www.cnn.com/2014/08/08/world/iraq-options
http://news.bbc.co.uk/2/hi/7444083.stm
If you can be trusted, I will explain further when i get a response from you.
Nevertheless, re-confirm the following to me as follows.
(a) Your full Names
(b) Your physical mailing address
(c) Your direct telephone numbers
(d) Your occupation.
Please ensure to reply via my private E-mail: [email protected]
God bless you and thanks for your cooperation in advance.
Capt. Michael Richard
US Army.
Delivered-To:
Received: from
by with LMTP
id ZPtVO3uz3F9KFAAAibB4EA
(envelope-from <[email protected]>)
for <>; Fri, 18 Dec 2020 13:49:47 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 18 Dec 2020 13:49:48 +0000
Received: from mail-ej1-f46.google.com ([209.85.218.46]:34850)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kqG8f-0001LK-NG
for ; Fri, 18 Dec 2020 13:49:47 +0000
Received: by mail-ej1-f46.google.com with SMTP id q22so3312432eja.2
for <>; Fri, 18 Dec 2020 05:49:25 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=4A+w4TNMpucQG7xLbuqH3rdOklJ9dgA0FDzIEV1OeDQ=;
b=vRNba2E8FTBf+98W3YznYLQkNk/M9CEypv4IyBNlYgrsR1/ehVsV6NS6KkMsUwjTI1
QfVtdHETLiTDgKcgNEgfbPcObaKTsDQ79VTfPpR34d9vKHI7EBo0YZL+svvThZ10q//e
onAtRAijBpY8EcByDFuIsr7ZkYMWBRt25sAosC6F//7XfdX+vpMTRkklXeQfQuv7mww5
x16QMaG1BPpqReMHeBu/8jggvGTWNpXERwEarw4Zfnv8HacH2vYVDDdoVC7AuL3nCC1b
MuNk626pQikR2PYnUoxPkTg4tPMSbMEG5Nv2x4NIVx8xlmTqGvc+jK8O6JPsdGvzIm1+
rBtg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=4A+w4TNMpucQG7xLbuqH3rdOklJ9dgA0FDzIEV1OeDQ=;
b=brENxKi2VgDTlZWPEsSIRssA+wB0hGbiYuayPCnydOyQMg8m9cRkGwZFoAqCOsmD8V
TCKDVok9Xu9ugLY3TNNJ1Gktzx7x7beBmgRwpnS5+E0z3IxMtYNP4q4bmN66nn+QeYlk
ARwj+lrK5JYnfMkB7n4zg18hSvjSqOWMEKSw3tug7uiNl8CcTmnyV+qjqfewE2fbILyu
xs2ooimYH2cRxy6hk126pZKS4cjEbJ3yF/Nxm6ltxJgr/Kvr7yIV/2mqd2Y4tYW5q9oO
COdR781vWCAIwqSZuokd54JoRbKLgdJTkYqSf3GzYia9TWB7eWU2+ozz6sV3s2Neakgq
DWwA==
X-Gm-Message-State: AOAM5304ajQ6HUeVEYcGKB7ODm3A38ryRWvNzwQBIUDUIZY6C5P9XsOV
KG+C2oRqHz+TLg+h1TbeNIY/eZD0rHRh+kZeeVc=
X-Google-Smtp-Source: ABdhPJzW6gu4RnO42+XVLrCssVtU+xlzPWFL2mH9D9vaI35hEQqxhuy/YrwIjanRDThWLoPTi5PP3wId56MB8jN4kmk=
X-Received: by 2002:a17:906:a2d0:: with SMTP id by16mr4032188ejb.207.1608299343838;
Fri, 18 Dec 2020 05:49:03 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a54:3181:0:0:0:0:0 with HTTP; Fri, 18 Dec 2020 05:49:03
-0800 (PST)
Reply-To: [email protected]
From: "Capt. Michael Richard" <[email protected]>
Date: Fri, 18 Dec 2020 14:49:03 +0100
Message-ID: <CAGhxa==bi=z+P--hkhTLxqmnP8e2tCSaE++-kTmG9u3cXjGvDg@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=10.4
X-Spam-Score: 104
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- Dear Sir/Madam I apologize if the content of this my email
is contrary to your moral ethics. but I find it pleasurable to offer you
my partnership in business. I only pray at this time that your address is
still val [...]
Content analysis details: (10.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[shirleypfosgate47[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[shirleypfosgate47[at]gmail.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 HK_SCAM No description available.
0.0 KAM_SHORT Use of a URL Shortener for very short URL
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.4 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attention Needed
Dear Sir/Madam
I apologize if the content of this my email is contrary to your moral ethics.
but I find it pleasurable to offer you my partnership in business. I
only pray at
this time that your address is still valid. I want to solicit your attention to
receive money on my behalf.
I am Capt. Michael Richard, a military anesthesiologist with the task force unit
from 1st battalion, 94th Artillery regiment currently stationed at the
Jordan/Syrian
border for classified operations/military exercises and intervention
in Syria. I am
on the move to Syria from Iraq as the last batch just left, and I
really need your
help in assisting me with the safe keeping of two military trunk boxes which has
just arrived the United Kingdom from the Iraq.Kindly view this news
blog below for some info
www.cnn.com/2014/08/08/world/iraq-options
http://news.bbc.co.uk/2/hi/7444083.stm
If you can be trusted, I will explain further when i get a response from you.
Nevertheless, re-confirm the following to me as follows.
(a) Your full Names
(b) Your physical mailing address
(c) Your direct telephone numbers
(d) Your occupation.
Please ensure to reply via my private E-mail: [email protected]
God bless you and thanks for your cooperation in advance.
Capt. Michael Richard
US Army.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces