友人からの報告です。
初歩的な偽装迷惑メールです。
中継送信

宛先
自メール
差出人
From: “Annmarie Bolton”
返信先

件名
Here’s a life changing tip that will guide you through trump’s America
内容

Given the current political climate, there are very few certain things in this world.

I can tell you first hand that I’ve had a hard time profiting in the market since Trump’s administration came in a few months ago.

So I’ve looked long and hard for opportunities to leverage this unusual situation we find ourselves in here in America, and I have found the way.

Special circumstances call for special measures, and a friend of mine reached out to me over the weekend telling me that there’s a small company on the verge of being bought out by a top 500 firm.

The price at which this will happen? 21 bucks a share from a current paltry 60 cents.

This means that every ten thousand of stock you buy, you’ll make around 350k when the announcement comes out to the public in a few days.

Why am I telling you this? I want like-minded people to benefit as well and I’m tired of all the big shots making the big bucks.

Take it the way you will, but watch symbol : Quick Sure Mary Garage (use the first letters of each word to make up your 4 letter symbol which you’ll use to buy the stock)

One way or another, whether you get in or not, this buy out is going to happen and people are going to make 35x on their principle.

Why not get a piece of the action?

***
Best Wishes,
Annmarie Bolton

———————————————-

添付ファイル なし

———————————————-
ソース
From – Mon May 8 0
X-Account-Key:
X-UIDL:
X-Mozilla-Status:
X-Mozilla-Status2:
X-Mozilla-Keys:
Return-Path:
X-Original-To:
Delivered-To:
Received: from static-190-181-0-63.acelerate.net (static-190-181-0-192.acelerate.net [190.181.0.192])
by m with ESMTP id
for <>; Tue, 2 May 2017
Received: (from apache@localhost)
by static-190-181-0-63.acelerate.net (8.14.7/8.14.7/Submit) id ;
Tue, 02 May 2017 1
Message-Id: <20170502100637.9668CBA20A370B@static-190-181-0-63.acelerate.net>
To:
Subject: Here’s a life changing tip that will guide you through trump’s America
X-PHP-Originating-Script: 10292:SendMail.php
From: “Annmarie Bolton”
Date: Tue, 02 May 2017
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0
X-EsetId:

Given the current political climate, there are very few certain things in this world.

I can tell you first hand that I’ve had a hard time profiting in the market since Trump’s administration came in a few months ago.

So I’ve looked long and hard for opportunities to leverage this unusual situation we find ourselves in here in America, and I have found the way.

Special circumstances call for special measures, and a friend of mine reached out to me over the weekend telling me that there’s a small company on the verge of being bought out by a top 500 firm.

The price at which this will happen? 21 bucks a share from a current paltry 60 cents.

This means that every ten thousand of stock you buy, you’ll make around 350k when the announcement comes out to the public in a few days.

Why am I telling you this? I want like-minded people to benefit as well and I’m tired of all the big shots making the big bucks.

Take it the way you will, but watch symbol : Quick Sure Mary Garage (use the first letters of each word to make up your 4 letter symbol which you’ll use to buy the stock)

One way or another, whether you get in or not, this buy out is going to happen and people are going to make 35x on their principle.

Why not get a piece of the action?

***
Best Wishes,
Annmarie Bolton

–以下略
————————
Received: from static-190-181-0-63.acelerate.net (static-190-181-0-192.acelerate.net [190.181.0.192])
static-190-181-0-192.acelerate.net
Domain Name:

acelerate.net
Check status
Page Response:
20.63 (ms)
SEO Report Time:
Created: 1 year, 8 months ago, Updated: 8 months, 10 days ago
Update SEO Report:

Enter to update SEO:
Meta Tags:

Title Acelerate.com
Internet service provider:
AXS Bolivia S. A.
Organization:
AXS Bolivia S. A.
Country name:
Bolivia
Country ISO alpha-2 code:
BO
State:
Departamento de La Paz
City:
La Paz
Timezone:
America/La_Paz
Longitude:
-68.15
Latitude:
-16.5
WHOIS last updated:
2 years, 6 months ago on October 12, 2014, 12:03 am GMT Time
WHOIS data:
Domain Name: ACELERATE.NET
Updated Date: 2013-03-04T00:00:00Z
Creation Date: 2001-03-15T00:00:00Z
Registrar Registration Expiration Date: 2018-03-15T00:00:00Z
Registrar: NETWORK SOLUTIONS, LLC.
Domain Status: clientTransferProhibited
Registrant Name: ISHINO, JAVIER
Registrant Street: Calle 18 Calacoto esq. Patino
Registrant City: La Paz
Registrant State/Province: la paz
Registrant Postal Code: PO BOX 1651
Registrant Country: BO
Registrant Phone: +591.22791179
Registrant Fax: +591.22791179
Registrant Email: javier.ishino@axsbolivia.net
Admin Name: ISHINO, JAVIER
Admin Organization: null
Admin Street: Calle 18 Calacoto esq. Patino
Admin City: La Paz
Admin State/Province: la paz
Admin Postal Code: PO BOX 1651
Admin Country: BO
Admin Phone: +591.22791179
Admin Fax: +591.22791179
Admin Email: javier.ishino@axsbolivia.net
Tech Name: Ishino, Javier
Tech Organization: null
Tech Street: Av Arce, Edif multicentro, piso 7
Tech City: La Paz
Tech State/Province: La Paz
Tech Postal Code: 00000
Tech Country: BO
Tech Phone: +591.2444100
Tech Fax: +591.2444412
Tech Email: jishino@aesc.com
Name Server 1: NS2.ACELERATE.COM
Name Server 2: NS1.ACELERATE.COM
Update WHOIS data:

Enter to update WHOIS:
Forward DNS primary host:
acelerate.com
maillwall.acelerate.com
Forward DNS expanded data:
acelerate.net has address 200.105.128.46
acelerate.net mail is handled by 0 mailnet.acelerate.com.
acelerate.net mail is handled by 50 maillwall.acelerate.com.
Forward DNS last updated:
2 months, 7 days ago on March 2, 2017, 2:41 am GMT Time
Forward DNS next check:
in 3 months, 23 days on March 2, 2017, 2:41 am GMT Time
Reverse DNS host:
acelerate.com
Reverse DNS pointer:
www.acelerate.com
Reverse DNS in-addr.arpa:
46.128.105.200.in-addr.arpa domain name pointer www.acelerate.com.
Reverse DNS last updated:
2 months, 6 days ago on March 3, 2017, 11:51 am GMT Time
Reverse DNS next check:
in 3 months, 24 days on March 3, 2017, 11:51 am GMT Time
————————

————————

————————

————————

友人からの報告です。
初歩的な偽装迷惑メールです。
ドメイン偽装、中継、ドメイン不明

宛先
undisclosed-recipients:;
差出人
From: “Robert Michael”
返信先

件名
[Spam-Dfl]Re:..I am waiting for your quick reply
内容
This is not spam message. I personally sent it to you. I have a multi million project that I would like to execute with you. This is going to favour two of us. Kindly confirm your willingness to partner with me so that I can furnish you with full details of the project. Robert.

———————————————-

添付ファイル なし

———————————————-
ソース
From – Mon May 8 08:
X-Account-Key:
X-UIDL:
X-Mozilla-Status:
X-Mozilla-Status2:
X-Mozilla-Keys:
Return-Path:
X-Original-To:
Delivered-To:
Received: from antispam.n3.ru (mx5.medi-a.ru [80.85.245.149])
by (Postfix) with ESMTP id
for <>; Thu, 4 May 2017 T)
Received: from [127.0.0.1] (helo=antispam)
by antispam.n3.ru with esmtp (Exim 4.87)
(envelope-from )
id 1d6DR6-0005Z7-2Y; Thu, 04 May 2017 1
Received: from [77.246.102.132] (helo=User)
by antispam.n3.ru with smtp (Exim 4.87)
(envelope-from )
id 1d6DQg-00045r-Vq; Thu, 04 May 2017
Reply-To:
From: “Robert Michael”
Date: Thu, 4 May 2017
MIME-Version: 1.0
Content-Type: text/plain;
charset=”Windows-1251″
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-KLMS-Rule-ID: 1
X-KLMS-Message-Action: skipped, AntiSpam
X-KLMS-AntiSpam-Lua-Profiles:
X-KLMS-AntiSpam-Version: 5.7.0.14
X-KLMS-AntiSpam-Envelope-From: rbertm68@lgim.com
X-KLMS-AntiSpam-Rate: 100
X-KLMS-AntiSpam-Status: spam
X-KLMS-AntiSpam-Method: headers plus
X-KLMS-AntiSpam-Info: LuaCore: {Headers: reply_not_match_from}, {TO: header missing}, {Advanced Mass Sender X-Mailer}, {Headers: Reply-to without To}, {Tracking_reply_free_from_not_free}, {Tracking_reply_free_dight_from_not_free}, {Tracking_ms_mailer_not_ms_msgid}, {Cyrillic encoding with latin symbols in text only}, {msgid_missed_1b}
X-KLMS-AntiSpam-Interceptor-Info: scan successful
X-KLMS-AntiPhishing: Clean, 201
X-KLMS-AntiVirus: Kaspersky Security 8.0 for Linux Mail Server, version 8.0.1.705, not scanned, license restriction
Subject: [Spam-Dfl]Re:..I am waiting for your quick reply
Message-Id: <>
To: undisclosed-recipients:;
X-EsetId:

This is not spam message. I personally sent it to you. I have a multi million project that I would like to execute with you. This is going to favour two of us. Kindly confirm your willingness to partner with me so that I can furnish you with full details of the project. Robert.

–以下略
————————
from antispam.n3.ru (mx5.medi-a.ru [80.85.245.149])
IPv4 address:

80.85.245.149
IPv4 expanded:

080.085.245.149
IPv4 decimal:

1347810709
Internet service provider:
CJSC Media Alliance
Organization:
CJSC Media Alliance
Country name:
Russian Federation
Country ISO alpha-2 code:
RU
State:
Moscow
City:
Moscow
DMA code:
577
Timezone:
Europe/Moscow
Longitude:
37.6184
Latitude:
55.7485
WHOIS last updated:
WHOIS data frequency request limit is reached. Try again later.
Update WHOIS data:

Enter to update WHOIS:
Reverse DNS host:
medi-a.ru
Reverse DNS pointer:
mx5.medi-a.ru
Reverse DNS in-addr.arpa:
149.245.85.80.in-addr.arpa domain name pointer mx5.medi-a.ru.
Reverse DNS last updated:
0 seconds ago on May 8, 2017, 12:33 am GMT Time
Reverse DNS next check:
in 5 months, 29 days on May 8, 2017, 12:33 am GMT Time
Update DNS Records:

Enter to update DNS:
Bot/spider
No
————————
from [77.246.102.132]
IPv4 address:

77.246.102.132
IPv4 expanded:

077.246.102.132
IPv4 decimal:

1307993732
Internet service provider:
CJSC Media Alliance
Organization:
CJSC Media Alliance
Country name:
Russian Federation
Country ISO alpha-2 code:
RU
State:
Moscow
City:
Moscow
DMA code:
577
Timezone:
Europe/Moscow
Longitude:
37.6184
Latitude:
55.7485
WHOIS last updated:
WHOIS data frequency request limit is reached. Try again later.
Update WHOIS data:

Enter to update WHOIS:
Reverse DNS host:
comvision.ru
Reverse DNS pointer:
cust2-p2p-net.comvision.ru
Reverse DNS in-addr.arpa:
132.102.246.77.in-addr.arpa domain name pointer cust2-p2p-net.comvision.ru.
Reverse DNS last updated:
0 seconds ago on May 8, 2017, 12:35 am GMT Time
Reverse DNS next check:
in 5 months, 29 days on May 8, 2017, 12:35 am GMT Time
Update DNS Records:

Enter to update DNS:
Bot/spider
No
————————
lgim.com
不明ドメイン

————————
rbertml68@gmail.com
www.blocklist.de 04 Apr 2017
black list

友人からの報告です。
初歩的な偽装迷惑メールです。

宛先
Recipients
差出人
shenne.molina@chevrolet-greenhills.com.ph
返信先
Recipients
件名
ABOUT MR. SUSUMU YOUR BROTHER.
内容

Good day,
My name is Prof. David Hamilton (RETIRED), I live in London, United Kingdom, I am looking for any family member of an old friend who used to live here in UK and was in the business of Crude Oil brokerage mostly between Europe and Middle East.

His first name is (SUSUMU) ,but you and him have the same (FAMILY NAME), and this is why I have decided to contact you with this letter to try to find out from you if you know him or if he is one of your relations, he was my client for ten years when I was still working as legal adviser to so many foreigners who were doing businesses here in the UK before I retired.

Mr. Susumu died some years ago in the terrible Tsunami that hit Japan ,and unfortunately he was travelling to Miyagi prefecture with his wife (Keiko) and his only daughter (Namiko) when the Tsunami hit Japan and killed them all, it was a tragic event and I was so sad with the terrible accident.

The reason why I am looking for anyone related to Mr. Susumu is because Mr. Susumu bank account officer contacted me a year ago regarding the ($50,000,000.00) Fifty Million United States Dollars Mr. Susumu kept in the security vault of the bank before he died, the bank made me to know that Mr. Susumu died with his family in the Japan Tsunami, they knew after they did not see him visit the bank to check his cash deposits in their vault, the bank has searched through the Japanese Family Register for anyone who may be related to him, but he has no relation living in Japan ,because his father and mother traveled to USA in the early time and both died there in the USA, so it became very difficult to locate anyone who is directly his relations.

The reason for all this search is because the bank is looking for anyone who is related to him ,so that they can pay out the $50,000,000.00 to the person according to the banking laws of United Kingdom, the bank could not do anything because they couldn’t find anyone related to him, now the bank is under the law to contact me as the last person who consulted for Mr. Susumu on all legal matters here in the UK to ask me to find anyone who is related to him to come forward and claim the $50,000,000.00, but I have also searched and could not find anyone related to him.

I am now using information’s I gathered on the internet to contact people who have the same family name as Mr. Susumu to ask if they know him, please reply to me quickly after you receive this letter to inform me if you are his relative, so that we can discuss how the funds will be paid to you immediately, because by law if the bank does not find anyone to claim the funds they have the right to take the funds without paying it to anyone.

Please keep this information confidential and do not share it with anyone because this is a confidential letter.

I will be waiting and hoping for a reply from you.

Sincerely Yours,

Prof. David Hamilton (Retired)
15 Cunningham Avenue
ENFIELD, Middx EN3 6LB
United Kingdom
TEL/Fax: +44703 196 6282

———————————————-

添付ファイル なし

———————————————-
ソース

From – Mon May 8 08:
X-Account-Key:
X-UIDL:
X-Mozilla-Status:
X-Mozilla-Status2:
X-Mozilla-Keys:
Return-Path:
X-Original-To:
Delivered-To:
Received: from mail.chevrolet-greenhills.com.ph (mail.chevrolet-greenhills.com.ph [210.213.155.82])
by (Postfix) with ESMTP id
for <>; Fri, 5 May 2017 06:0
Received: (qmail 8751 invoked by uid 89); 4 May 2017
Received: from unknown (HELO ?10.10.0.8?) (shenne.molina@chevrolet-greenhills.com.ph@210.213.57.121)
by mail.chevrolet-greenhills.com.ph with ESMTPA; 4
Content-Type: text/plain; charset=”utf-8″
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: ABOUT MR. SUSUMU YOUR BROTHER.
To: Recipients
From: shenne.molina@chevrolet-greenhills.com.ph
Date: Fri, 05 May 2017
Reply-To: pureorangeandpurelondon@hotmail.com
Message-Id: <>
X-EsetId:

Good day, =

My name is Prof. David Hamilton (RETIRED), I live in London, United=
Kingdom, I am looking for any family member of an old friend who used to l=
ive here in UK and was in the business of Crude Oil brokerage mostly betwee=
n Europe and Middle East.

His first name is (SUSUMU) ,but you and him have the same (FAMILY NAME), an=
d this is why I have decided to contact you with this letter to try to find=
out from you if you know him or if he is one of your relations, he was my =
client for ten years when I was still working as legal adviser to so many f=
oreigners who were doing businesses here in the UK before I retired.

Mr. Susumu died some years ago in the terrible Tsunami that hit Japan ,and =
u

–以下略

————————
Received: from mail.chevrolet-greenhills.com.ph (mail.chevrolet-greenhills.com.ph [210.213.155.82])
IPv4 address:

210.213.155.82
IPv4 expanded:

210.213.155.082
IPv4 decimal:

3537214290
Internet service provider:
Philippine Long Distance Telephone
Organization:
Philippine Long Distance Telephone
Country name:
Philippines
Country ISO alpha-2 code:
PH
Timezone:
Asia/Manila
Longitude:
120.9721
Latitude:
14.5955
WHOIS last updated:
WHOIS data frequency request limit is reached. Try again later.
Update WHOIS data:

Enter to update WHOIS:
Reverse DNS host:
chevrolet-greenhills.com.ph
Reverse DNS pointer:
mail.chevrolet-greenhills.com.ph
Reverse DNS in-addr.arpa:
82.155.213.210.in-addr.arpa domain name pointer mail.chevrolet-greenhills.com.ph.
Reverse DNS last updated:
0 seconds ago on May 8, 2017, 12:21 am GMT Time
Reverse DNS next check:
in 5 months, 29 days on May 8, 2017, 12:21 am GMT Time
Update DNS Records:

Enter to update DNS:
Bot/spider
No
————————
unknown (HELO ?10.10.0.8?) (shenne.molina@chevrolet-greenhills.com.ph@210.213.57.121)
IPv4 address:

210.213.57.121
IPv4 expanded:

210.213.057.121
IPv4 decimal:

3537189241
Internet service provider:
True Internet
Organization:
True Internet
Country name:
Thailand
Country ISO alpha-2 code:
TH
State:
Bangkok
City:
Bangkok
Timezone:
Asia/Bangkok
Longitude:
100.5167
Latitude:
13.7833
WHOIS last updated:
WHOIS data frequency request limit is reached. Try again later.
Update WHOIS data:

Enter
————————
“419” sender addresses “P” (blacklisted by jwSpamSpy)
pureorangeandpurelondon@hotmail.com
————————