API tools faq
paste
Advertisement
spamreports

"nigerian scam

spamreports
Sep 6th, 2019
439
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
HTML 6.36 KB | None | 0 0
raw download clone embed print report
  1. Return-Path: <admin@kebose.gq>
  2. Received: from mx3.mail.bg ([unix socket])
  3.      by stor3 (Cyrus 2.5.10-Debian-2.5.10-3) with LMTPA;
  4.      Fri, 06 Sep 2019 16:09:55 +0300
  5. X-Sieve: CMU Sieve 2.4
  6. X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on stor3.stor3
  7. X-Spam-Flag: YES
  8. X-Spam-Level: **************************
  9. X-Spam-Status: Yes, score=26.0 required=5.0 tests=AXB_XMAILER_MIMEOLE_OL_024C2,
  10.     BAYES_99,BAYES_999,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,
  11.     FORGED_OUTLOOK_TAGS,FREEMAIL_FORGED_REPLYTO,FROM_MISSP_MSFT,
  12.     FROM_MISSP_REPLYTO,FROM_MISSP_XPRIO,FSL_CTYPE_WIN1251,
  13.     FSL_NEW_HELO_USER,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_HEADERS,
  14.     MSOE_MID_WRONG_CASE,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PSBL,
  15.     RCVD_IN_RP_RNBL,RCVD_IN_SORBS_DUL,RDNS_NONE,REPLYTO_WITHOUT_TO_CC,
  16.     SPF_NEUTRAL,TO_NO_BRKTS_FROM_MSSP,TO_NO_BRKTS_MSFT,
  17.     TO_NO_BRKTS_NORDNS_HTML,T_HK_NAME_MR_MRS shortcircuit=no autolearn=no
  18.     autolearn_force=no version=3.4.2
  19. X-Spam-Report:
  20.     *  3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
  21.     *      [score: 1.0000]
  22.     *  0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
  23.     *  0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
  24.     *      address
  25.     *      [123.0.100.76 listed in dnsbl.sorbs.net]
  26.     *  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
  27.     *      bl.spamcop.net
  28.     *      [Blocked - see <https://www.spamcop.net/bl.shtml?123.0.100.76>]
  29.     *  2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
  30.     *      [123.0.100.76 listed in psbl.surriel.com]
  31.     *  1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
  32.     *      https://senderscore.org/blacklistlookup/
  33.     *      [123.0.100.76 listed in bl.score.senderscore.com]
  34.     *  1.0 MISSING_HEADERS Missing To: header
  35.     *  0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
  36.     *  0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
  37.     *      [score: 1.0000]
  38.     *  0.0 HTML_MESSAGE BODY: HTML included in message
  39.     *  0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
  40.     *  2.6 MSOE_MID_WRONG_CASE No description available.
  41.     *  1.6 REPLYTO_WITHOUT_TO_CC No description available.
  42.     *  0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
  43.     *  0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
  44.     *  0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
  45.     *  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  46.     *  0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
  47.     *  0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
  48.     *  0.0 FSL_NEW_HELO_USER Spam's using Helo and User
  49.     *  0.0 T_HK_NAME_MR_MRS No description available.
  50.     *  2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  51.     *  2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
  52.     *  0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
  53.     *  1.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
  54.     *       only
  55.     *  1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
  56.     *  1.9 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
  57. Received-SPF: neutral (kebose.gq: Domain does not state whether sender is authorized to use 'admin@kebose.gq' in 'mfrom' identity (mechanism '?all' matched)) receiver=mx3.mail.bg; identity=mailfrom; envelope-from="admin@kebose.gq"; helo=mail.yoshizawa.co.jp; client-ip=123.0.100.76
  58. Received: from mail.yoshizawa.co.jp (unknown [123.0.100.76])
  59.     by mx3.mail.bg (Postfix) with ESMTP id 8F49740EB27D
  60.     for <weeded@mail.bg>; Fri,  6 Sep 2019 16:09:46 +0300 (EEST)
  61. Received: from User ([64.74.157.34])
  62.     (authenticated bits=0)
  63.     by mail.yoshizawa.co.jp (8.13.8/8.13.8/with smtpauth) with ESMTP id x86D9NXD016600;
  64.     Fri, 6 Sep 2019 22:09:25 +0900
  65. Message-Id: <201909061309.x86D9NXD016600@mail.yoshizawa.co.jp>
  66. Reply-To: <justicccka@yahoo.co.jp>
  67. From: "Miss Ngama"<admin@kebose.gq>
  68. Subject: Your Unpaid Fund.
  69. Date: Fri, 6 Sep 2019 06:09:32 -0700
  70. MIME-Version: 1.0
  71. Content-Type: text/html;
  72.     charset="Windows-1251"
  73. Content-Transfer-Encoding: 7bit
  74. X-Priority: 3
  75. X-MSMail-Priority: Normal
  76. X-Mailer: Microsoft Outlook Express 6.00.2600.0000
  77. X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
  78.  
  79. <HTML><HEAD><TITLE></TITLE>
  80. </HEAD>
  81. <BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
  82. <FONT size=2 color=#000000 face="Arial">
  83. <DIV>
  84. <FONT size=4 face="Arial Narrow">Hello Dear ,</FONT></DIV>
  85. <DIV>
  86. <FONT size=4 face="Arial Narrow"> </FONT></DIV>
  87. <DIV>
  88. <FONT size=4 face="Arial Narrow">I am Miss Ngama. A computer scientist with central bank of Nigeria. I am 26 years old, just started work with C.B.N. I came across your file which was marked X and your released disk painted RED, I took time to study it and found out that you have paid VIRTUALLY all fees and certificate but the fund has not been release to you. The most annoying thing is that they cannot tell you the truth that on no account wills they ever release the fund to you; instead they let you spend money unnecessarily. I do not intend to work here all the days of my life, I can release this fund to you if you can certify me of my security, and how I can run away from this Nigeria if I do this, because if I don't run away from this country after I made the transfer, I will be Seriously in trouble and my life will be in danger.</FONT></DIV>
  89. <DIV>
  90. <FONT size=4 face="Arial Narrow">This is like a Mafia setting in Nigeria; you may not understand it because you are not a Nigerian. The only thing I will need from you to release this fund is a special HARD DISK we call it HD140 GIG.I will need two of this hard disk to recopy your information from the corrupted one, destroy the previous one, and punch the computer to reflect in your bank within 24 banking hours.</FONT></DIV>
  91. <DIV>
  92. <FONT size=4 face="Arial Narrow"> </FONT></DIV>
  93. <DIV>
  94. <FONT size=4 face="Arial Narrow">I will clean up the tracer and destroy your file, after which I will run away from Nigeria to meet with you.</FONT></DIV>
  95. <DIV>
  96. <FONT size=4 face="Arial Narrow">If you are interested.</FONT></DIV>
  97. <DIV>
  98. <FONT size=4 face="Arial Narrow"> </FONT></DIV>
  99. <DIV>
  100. <FONT size=4 face="Arial Narrow">Do get in touch with me immediately, You should send to me your convenient tell/fax numbers for easy communications and also re confirm your banking details, so that there won't be any mistake.</FONT></DIV>
  101. <DIV>
  102. <FONT size=4 face="Arial Narrow"> </FONT></DIV>
  103. <DIV>
  104. <FONT size=4 face="Arial Narrow">Regards,</FONT></DIV>
  105. <DIV>
  106. <FONT size=4 face="Arial Narrow">Miss Ngama.</FONT></DIV>
  107. </FONT>
  108. </BODY></HTML>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!