by buried under 419s
Thu Oct 16, 2014 8:50 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 16 Oct 2014 16:48:29 -0700
Received: from [104.43.128.76] (port=2304 helo=ns.name.com)
by swith esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1XeumS-0004sq-Al
for ; Thu, 16 Oct 2014 16:48:29 -0700
Received: from [216.59.19.114] (port=54560 helo=User)
by ns.name.com with esmtpa (Exim 4.82)
(envelope-from <[email protected]>)
id 1XeudU-0008xg-9C; Thu, 16 Oct 2014 23:39:12 +0000
Reply-To: <[email protected]>
From: "Col. David Robinson"<[email protected]>
Date: Thu, 16 Oct 2014 16:39:04 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns.name.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: ns.name.com: authenticated_id: vonsain/only user confirmed/virtual account not confirmed
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, I am David Robinson an officer in the US Army,presently
serving in the Military with the US Army, 395th combat sustainment support
battalion stationed here at Baghdad Iraq. Please I have some important items
to ship to you,get back to me ASAP for more information. I will explain further
when i get a response from you. Yours Respectfully, Col. David Robinson US
Army. [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.9 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(robinsondavid109[at]gmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[104.43.128.76 listed in bb.barracudacentral.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (robinsondavid109[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5145]
0.5 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Can i trust you?
Hello,
I am David Robinson an officer in the US Army,presently serving in the Military with the US Army, 395th combat sustainment support battalion stationed here at Baghdad Iraq.
Please I have some important items to ship to you,get back to me ASAP for more information. I will explain further when i get a response from you.
Yours Respectfully,
Col. David Robinson
US Army.
Envelope-to:
Delivery-date: Thu, 16 Oct 2014 16:48:29 -0700
Received: from [104.43.128.76] (port=2304 helo=ns.name.com)
by swith esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1XeumS-0004sq-Al
for ; Thu, 16 Oct 2014 16:48:29 -0700
Received: from [216.59.19.114] (port=54560 helo=User)
by ns.name.com with esmtpa (Exim 4.82)
(envelope-from <[email protected]>)
id 1XeudU-0008xg-9C; Thu, 16 Oct 2014 23:39:12 +0000
Reply-To: <[email protected]>
From: "Col. David Robinson"<[email protected]>
Date: Thu, 16 Oct 2014 16:39:04 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns.name.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: ns.name.com: authenticated_id: vonsain/only user confirmed/virtual account not confirmed
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, I am David Robinson an officer in the US Army,presently
serving in the Military with the US Army, 395th combat sustainment support
battalion stationed here at Baghdad Iraq. Please I have some important items
to ship to you,get back to me ASAP for more information. I will explain further
when i get a response from you. Yours Respectfully, Col. David Robinson US
Army. [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.9 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(robinsondavid109[at]gmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[104.43.128.76 listed in bb.barracudacentral.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (robinsondavid109[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5145]
0.5 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Can i trust you?
Hello,
I am David Robinson an officer in the US Army,presently serving in the Military with the US Army, 395th combat sustainment support battalion stationed here at Baghdad Iraq.
Please I have some important items to ship to you,get back to me ASAP for more information. I will explain further when i get a response from you.
Yours Respectfully,
Col. David Robinson
US Army.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces