by buried under 419s
Thu Oct 16, 2014 8:29 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 16 Oct 2014 13:05:09 -0700
Received: from mail.vermessung-irgang.at ([93.83.105.34]:60827 helo=2003server.irgang.local)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1XerII-0000P5-9T
for ; Thu, 16 Oct 2014 13:05:09 -0700
Received: from User ([41.138.181.53]) by 2003server.irgang.local with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 16 Oct 2014 22:56:10 +0200
Reply-To: <[email protected]>
From: "Bernard Abbah"<[email protected]>
Date: Thu, 16 Oct 2014 21:04:56 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 16 Oct 2014 20:56:10.0859 (UTC) FILETIME=[9D7323B0:01CFE983]
X-Spam-Status: Yes, score=12.2
X-Spam-Score: 122
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Re: Fund Beneficiary; Did you authorize for the change of
beneficiary account for your bequest funds. We received this yesterday authorizing
us to change your account to the one below. It was accompanied by a duly
sworn affidavit. [...]
Content analysis details: (12.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(babbah[at]qq.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[93.83.105.34 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.138.181.53 listed in zen.spamhaus.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5036]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Please Clarify.
Re: Fund Beneficiary;
Did you authorize for the change of beneficiary account for your bequest funds.
We received this yesterday authorizing us to change your account to the one below. It was accompanied by a duly sworn affidavit.
SOVEREIGN BANK
ROUTE# 37
MANCHESTER NEW JERSEY</DIV>
08439 USA
ACCT NAME Vince Joseph
ACCT # 1390189332
ROUTING # 232452696
Please advice urgently.
Bernard Abbah
Envelope-to:
Delivery-date: Thu, 16 Oct 2014 13:05:09 -0700
Received: from mail.vermessung-irgang.at ([93.83.105.34]:60827 helo=2003server.irgang.local)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1XerII-0000P5-9T
for ; Thu, 16 Oct 2014 13:05:09 -0700
Received: from User ([41.138.181.53]) by 2003server.irgang.local with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 16 Oct 2014 22:56:10 +0200
Reply-To: <[email protected]>
From: "Bernard Abbah"<[email protected]>
Date: Thu, 16 Oct 2014 21:04:56 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 16 Oct 2014 20:56:10.0859 (UTC) FILETIME=[9D7323B0:01CFE983]
X-Spam-Status: Yes, score=12.2
X-Spam-Score: 122
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Re: Fund Beneficiary; Did you authorize for the change of
beneficiary account for your bequest funds. We received this yesterday authorizing
us to change your account to the one below. It was accompanied by a duly
sworn affidavit. [...]
Content analysis details: (12.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(babbah[at]qq.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[93.83.105.34 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.138.181.53 listed in zen.spamhaus.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5036]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Please Clarify.
Re: Fund Beneficiary;
Did you authorize for the change of beneficiary account for your bequest funds.
We received this yesterday authorizing us to change your account to the one below. It was accompanied by a duly sworn affidavit.
SOVEREIGN BANK
ROUTE# 37
MANCHESTER NEW JERSEY</DIV>
08439 USA
ACCT NAME Vince Joseph
ACCT # 1390189332
ROUTING # 232452696
Please advice urgently.
Bernard Abbah
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces