by buried under 419s
Thu Apr 16, 2015 12:51 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 16 Apr 2015 05:26:04 -0700
Received: from [216.172.107.182] (port=50039 helo=server1.sbgtrain.com)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1Yiiro-00027M-SE
for ; Thu, 16 Apr 2015 05:26:04 -0700
Received: from 202-176-90-150.static.asianet.co.th ([202.176.90.150]:42281)
by server1.sbgtrain.com with esmtpa (Exim 4.85)
(envelope-from <[email protected]>)
id 1Yiirj-0003Cu-86; Thu, 16 Apr 2015 12:25:55 +0000
X-FEAS-AUTH-USER:
To: undisclosed-recipients:;
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "FOREIGN OPERATION MANAGER"<[email protected]>
Date: Thu, 16 Apr 2015 19:25:55 +0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.sbgtrain.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - saveroanplateau.org
X-Get-Message-Sender-Via: server1.sbgtrain.com: authenticated_id: [email protected]
X-Spam-Status: Yes, score=8.3
X-Spam-Score: 83
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION: This is to notify you about the latest development
concerning all the payment that is left in our custody in which yours are
inclusive, you were given a bill of $450.00 in order to receive your payment
of which we didnÂ’t hear from you for some time now.Hence, our Western Union
is now offering a special BONUS to help all our customers that are having
their payment in our custody. In order words we are now requesting that those
involve should pay only the sum of $300.00 to receive all their payment abandoned
in our custody. [...]
Content analysis details: (8.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[216.172.107.182 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[202.176.90.150 listed in dnsbl.sorbs.net]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION:
ATTENTION:
This is to notify you about the latest development concerning all the payment that is left in our custody in which yours are inclusive, you were given a bill of $450.00 in order to receive your payment of which we didn’t hear from you for some time now.Hence, our Western Union is now offering a special BONUS to help all our customers that are having their payment in our custody. In order words we are now requesting that those involve should pay only the sum of $300.00 to receive all their payment abandoned in our custody.
Besides this is an opportunity for you of which you are to comply and your funds shall be transferred to your designated address. But remember after (3DAYS) you don’t make the payment, then we will divert your funds to Government Fund to avoid problem or we shall cancel the payment for this year until next year because this year is not like previous year. Again after (3DAYS) we shall commence a new project for the year and that is the reason why we decided to help all our customers before the new project begins.
We advise you make the payment of $300.00 immediately so your payment can be registered for you to receive $5,000 as from tomorrow.
Be advice that there is no time again for us to call any person on phone unless you call +234-8131-115-606, E-mail ([email protected]) After the payment of $300.00 you will start receiving your money every day $5,000 through
Western Union, Send the money through Western Union Money Transfer with the information below:
Sender’s Name:
Receiver's name: MOGOLI GODSPOWER
Sender’s country:
Country: Lagos Nigeria.
Text Question: urgent
Text Answer: urgent
Amount: $300
MTCN:
The moment i receive the payment of $300.00,I will instruct the bank to activate the acoout in which the said fund is been deposited before it can be sent to you via western union i will release the first payment information of $5,000 to you, to access you pick up the money and also another will be sent to you,hope to hear from you ASAP.
REGARDS
MR WESLEY PETERS.
FOREIGN OPERATION MANAGER
Envelope-to:
Delivery-date: Thu, 16 Apr 2015 05:26:04 -0700
Received: from [216.172.107.182] (port=50039 helo=server1.sbgtrain.com)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1Yiiro-00027M-SE
for ; Thu, 16 Apr 2015 05:26:04 -0700
Received: from 202-176-90-150.static.asianet.co.th ([202.176.90.150]:42281)
by server1.sbgtrain.com with esmtpa (Exim 4.85)
(envelope-from <[email protected]>)
id 1Yiirj-0003Cu-86; Thu, 16 Apr 2015 12:25:55 +0000
X-FEAS-AUTH-USER:
To: undisclosed-recipients:;
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "FOREIGN OPERATION MANAGER"<[email protected]>
Date: Thu, 16 Apr 2015 19:25:55 +0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.sbgtrain.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - saveroanplateau.org
X-Get-Message-Sender-Via: server1.sbgtrain.com: authenticated_id: [email protected]
X-Spam-Status: Yes, score=8.3
X-Spam-Score: 83
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION: This is to notify you about the latest development
concerning all the payment that is left in our custody in which yours are
inclusive, you were given a bill of $450.00 in order to receive your payment
of which we didnÂ’t hear from you for some time now.Hence, our Western Union
is now offering a special BONUS to help all our customers that are having
their payment in our custody. In order words we are now requesting that those
involve should pay only the sum of $300.00 to receive all their payment abandoned
in our custody. [...]
Content analysis details: (8.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[216.172.107.182 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[202.176.90.150 listed in dnsbl.sorbs.net]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION:
ATTENTION:
This is to notify you about the latest development concerning all the payment that is left in our custody in which yours are inclusive, you were given a bill of $450.00 in order to receive your payment of which we didn’t hear from you for some time now.Hence, our Western Union is now offering a special BONUS to help all our customers that are having their payment in our custody. In order words we are now requesting that those involve should pay only the sum of $300.00 to receive all their payment abandoned in our custody.
Besides this is an opportunity for you of which you are to comply and your funds shall be transferred to your designated address. But remember after (3DAYS) you don’t make the payment, then we will divert your funds to Government Fund to avoid problem or we shall cancel the payment for this year until next year because this year is not like previous year. Again after (3DAYS) we shall commence a new project for the year and that is the reason why we decided to help all our customers before the new project begins.
We advise you make the payment of $300.00 immediately so your payment can be registered for you to receive $5,000 as from tomorrow.
Be advice that there is no time again for us to call any person on phone unless you call +234-8131-115-606, E-mail ([email protected]) After the payment of $300.00 you will start receiving your money every day $5,000 through
Western Union, Send the money through Western Union Money Transfer with the information below:
Sender’s Name:
Receiver's name: MOGOLI GODSPOWER
Sender’s country:
Country: Lagos Nigeria.
Text Question: urgent
Text Answer: urgent
Amount: $300
MTCN:
The moment i receive the payment of $300.00,I will instruct the bank to activate the acoout in which the said fund is been deposited before it can be sent to you via western union i will release the first payment information of $5,000 to you, to access you pick up the money and also another will be sent to you,hope to hear from you ASAP.
REGARDS
MR WESLEY PETERS.
FOREIGN OPERATION MANAGER
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces