Probably not, because someone actually fell for this scam previously, therefore, senders are trying to catch a new “sucker”.
One way to slow this scam down to a crawl or end it completely: email services and apps should allow for both block by country IP from known spammer location and display name of country’s IP right next to “From”/sender’s name. We didn’t have these problems on UNIX-only internet when there was no anonymity, before scammers were given web browsers and “IP privacy”.
But one irony, person(s) behind this particular scam-spam is using a Gmail account, which is supposed to provide better security options when sending or receiving. Another irony: look at the anti-spam “measures” noted in email’s header, yet message was still allowed to be sent and received.
😮 And look at all the network servers forged or email had to pass through to reach recipient:
104.47.124.211 – Microsoft abuse@microsoft.com
100.65.128.14 – IANA abuse@iana.org
116.203.78.0 – INDIA -> PDSNNEW3-MUMBAI-MTS-INDIA-IN abuse@mtsindia.in BINGO!! Along with China, India is a primary source of spam while our jobs are being outsourced to both. So companies which outsource are paying both countries coming and going: for untaxable corporate profits and tax write-off expense for enforcing spam, if any enforcement done at all, while recipient bares any tax burden.
25.162.171.29 – RIPE hostmaster@ripe.net
sgtjohnscott29874@gmail.com – Google.com abuse@google.com, which doesn’t investigate nor enforce against messages such as these, but simply allows the same repetitive message to be sent through their network with their email account services.
Delivered-To: <redacted>@gmail.com
Received: by 10.182.117.131 with SMTP id ke3csp1413313obb;
Mon, 21 Sep 2015 03:56:11 -0700 (PDT)
X-Received: by 10.67.7.137 with SMTP id dc9mr3687843pad.116.1442832971591;
Mon, 21 Sep 2015 03:56:11 -0700 (PDT)
Return-Path: <>
Received: from APC01-HK2-obe.outbound.protection.outlook.com (mail-hk2apc01hn0211.outbound.protection.outlook.com. [104.47.124.211])
by mx.google.com with ESMTPS id rq7si36852137pab.73.2015.09.21.03.56.11
for <redacted>@gmail.com
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Mon, 21 Sep 2015 03:56:11 -0700 (PDT)
Received-SPF: pass (google.com: domain of APC01-HK2-obe.outbound.protection.outlook.com designates 104.47.124.211 as permitted sender) client-ip=104.47.124.211;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of APC01-HK2-obe.outbound.protection.outlook.com designates 104.47.124.211 as permitted sender) smtp.mailfrom=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=<>;
Received: from [100.65.128.14] (116.203.78.0) by
SG2PR02MB1151.apcprd02.prod.outlook.com (10.169.53.25) with Microsoft SMTP
Server (TLS) id 15.1.274.16; Mon, 21 Sep 2015 10:56:02 +0000
Content-Type: text/plain; charset=”iso-8859-1″
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Help
To: Recipients
From: Sgt John Scot
Date: Mon, 21 Sep 2015 16:25:54 +0530
Reply-To: <sgtjohnscott29874@gmail.com>
X-Originating-IP: [116.203.78.0]
X-ClientProxiedBy: SIXPR04CA0039.apcprd04.prod.outlook.com (25.162.171.29) To
SG2PR02MB1151.apcprd02.prod.outlook.com (25.169.53.25)
Return-Path: <>
Message-ID: <SG2PR02MB11510AEFF77344A984DA6536B8460@SG2PR02MB1151.apcprd02.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics:
1;SG2PR02MB1151;2:wjcap9lzqSC/4wUsKFE0YHeU9e8jepDt6d2ZkC59L1sTHYpghhrsHWzjXdJA2WHwPa5N7LK73GytHqri+tcGVRyuBm6KboRHkIJwwh6d8x0XnigUFxi3DMIK+H9f0je5nq0hOPS3ZFAapjjaqQ0sPGwTIkjzuA2bCSc+ZPNfHc4=;3:7EHvTCoPvNrtYKkZDf/vEOIo8LsRvZpUoXAJyov4ia/XjgH9uwSScc7680kCxnzkuyu+R2DiDGoULwnXgqM9C42OfJAqqlbZbd6n5H3a5kEJIWyzshUqDVM12I9t9CiAGH1mWzcQhkpHbpTt9WAUBQ==;25:DjC1LvFrWamsvNb86m2WVOCq/lqimylsJNKpaIkUcuVnSWxDswrTUEJyRFYaqyG7O6O0jWJobyROGU3rPoinrWRn1DxThkfOp5nDF/F1I6eUv6OCpZtJ980yYQ1+5RpZDjbXxuVt8q/I1ZNPmx2Rh10VcGfNeSTFntD5BVpWVTYrEs/5zbODNnO5MmLgNBUuyaBGBJEffvERQboBBczq7UczfZNQwpKcJrVcS3PeTzEhdF81iQJvjTzv5BEPFS9VMk4xkcw745opT939ZhWsSA==;4:nLrZySkGVgD5UFjLhcm9vgX44b/cy+LQMmPlzPwV7xXApyz3UutjZyk05C0ZnMU/PHCMsfkL8jEcNOM3P+MWViZKSZdebMmIRc3ox4A3394Xa+UroNlymOCU859X35uMEWL8tWTIjGWXkZhlHlc62CR5ooCl+9v0/IZd3roQCINM69CZ9yl4sH165w8kW5bAjLYLCG9cBObjrftdp9RoZkOhPe0pGr1SD6IY7LydmDYzs6uZDWmyA0W1srX000bOE1g0R+tyiBgG/cgqYz1Bvgu8HCHws9XPlWoWFx8VIxFK5JzOuOW8UlrJBgWWL9gR2VkPNBOgmtnechJBV7g7NA==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SG2PR02MB1151;
X-Microsoft-Antispam-PRVS: <SG2PR02MB1151E8F0047A5D8002773BEEB8460@SG2PR02MB1151.apcprd02.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(8121501046)(5005006)(520078)(3002001);SRVR:SG2PR02MB1151;BCL:0;PCL:0;RULEID:;SRVR:SG2PR02MB1151;
X-Forefront-PRVS: 07063A0A30
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10019020)(6049001)(6009001)(35000200001)(189002)(199003)(74316001)(106356001)(5007970100001)(43066003)(68736005)(77096005)(62966003)(46102003)(46552002)(250100001)(23756003)(64706001)(47776003)(77156002)(42186005)(325944007)(42382002)(105586002)(54356999)(50466002)(229853001)(5001960100002)(19580405001)(40100003)(122386002)(101416001)(53256004)(33656002)(19580395003)(50986999)(4001450100002)(5005630100001)(561924002)(551984002)(107886002)(553524004)(189998001)(109986003)(5001920100001)(87976001)(97736004)(53806999)(78352002)(5001830100001)(110136002)(4001540100001)(5001860100001)(66066001)(81156007)(5004730100002)(4001600100001)(221733001)(76576001)(7099028)(517684003)(88746003);DIR:OUT;SFP:1501;SCL:5;SRVR:SG2PR02MB1151;H:[100.65.128.14];FPR:;SPF:None;PTR:InfoNoRecords;MX:0;A:0;LANG:en;
Received-SPF: None (protection.outlook.com: [100.65.128.14] does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: =?iso-8859-1?Q?1;SG2PR02MB1151;23:Fml0cMhT37XS4p0a8KahJSrfBm6X/2GIcWf2io/?=
=?iso-8859-1?Q?cWGjQL1iMjpjzQfRwqWwCDWgkOawTX4tMklO9MVc8JHoTxdnNYvrWBO61D?=
=?iso-8859-1?Q?PA5FsUYtUbrEtGYQBWfE5/30SWOn9Y1Lh3kwMw4L75KDA50MAz2LYACXPF?=
=?iso-8859-1?Q?PplOIspzcVkXVD+RCy/H4YFmmtllJ8kqsEmdobeig7KComgO5H5aIuRlRq?=
=?iso-8859-1?Q?y16tifDsFz15XPiu9JOtH3vDmfJ0B10y2KBzfxikUFYCFhYby+k1nb2UDv?=
=?iso-8859-1?Q?YUgBxsgyqbqQUvt73gCyx9BjIXTtCeVDkPHz4CjtdvaFbopGlpOTT5tm/h?=
=?iso-8859-1?Q?hxPYAn/9bcDqtQsJgF3v9Z51P4E0a4+/G2PcX/h97R2efTDVzceWnqknRr?=
=?iso-8859-1?Q?V6/wzRJ52k2a0AtAevZnVXIjzf4H1HCruWrI+7UgQDjfLAl/LNhIIUo5Sf?=
=?iso-8859-1?Q?Wz4v7KG7xVo51zoi+pQA6fGuHeBjVAzsOsGN/XpTzgfgnD71L+I6+o9yoK?=
=?iso-8859-1?Q?fC/GgqSj2Hv9O/Zd+2FuhIVy9ywRLlJF7scT88SikHt+qV1O2n6WIpfjKP?=
=?iso-8859-1?Q?RL0/Cq6Q3ttfkHeIrpBBxMn9NOzMYLyd5XRTEKT3BSkrQwLmMKuZlepv17?=
=?iso-8859-1?Q?npzbaiuubZwQj+ehuazNKQXGfEG3KPhl1GBu+k1A0FgT94/TtceNp7wJQh?=
=?iso-8859-1?Q?4HYyhmC37wa7RcKoMB0GpPmj/OpJsKLL19q/dZaTB0wUMCavEm++dH71XY?=
=?iso-8859-1?Q?7tn2FbOWScCAa7ymsji2dw5mjIIH+J6ypPj+dNBQH+A4WQrmSZv8b1LlPw?=
=?iso-8859-1?Q?7bdr3WHQv38rpHGq6khPg96cUEzIikOm54djD3VC7ew8NQ4dxiTYZzNxEJ?=
=?iso-8859-1?Q?YW5t25tfS2Rrw7DmbWj1Roy/9mv38vJ3KvdNPiadkUh1o5i9rTu//TpK4E?=
=?iso-8859-1?Q?+mAZcZ+JrE/5XJzgYFWQgaGPhVjGUejcuIh/VLBLauuBey8rkVoOYi2l2f?=
=?iso-8859-1?Q?4uvhltyY2SdP2gywrqRLDYI+xWv+wMUicgvtYbRha7ysqrPgYq4/uOdCiK?=
=?iso-8859-1?Q?HzQJB8Db+ganeeUm2Ys9GDyroLHCMUc8rYpDlBhW9p1QnDETHfLz74bwKb?=
=?iso-8859-1?Q?grdbkncrSWdprgLrhQDfyP2o0NrL9Go/98d4VV7pe4hTEi3e071pJDWavf?=
=?iso-8859-1?Q?XatnM1JdT3IHUnP+/6Vp7qgV0UdKTa50xZfpNG+xCp9MXsJMeD2+Tm7xbn?=
=?iso-8859-1?Q?DqNaMZJuuBYUM3+N/42PDgWWOOScKn7YORFFmX3DqOu69uMMVvWG/fBbls?=
=?iso-8859-1?Q?WHjjQKuHoVGxN+57MSVy1RZ9gf93GbxdZfTemQbV8IN5JlzL9C0XKIEdNi?=
=?iso-8859-1?Q?a+0+ZESBXhrg/XIAssPaGmmvIeN4WOV8z6l5pNq0egeQpGnGWy75wNPYJa?=
=?iso-8859-1?Q?sfT3krPqAmx8Ji1StULzXSDUCZtMHeNyNowutOKtG3m03ugWY6wRsrbSuw?=
=?iso-8859-1?Q?i6EtpWm1aJHI//5FlFg2C3gnBz+MRB7puxq5pDZ3h+89EshLDyAj3RQYT7?=
=?iso-8859-1?Q?nHZh3kBnp8OKMVG5VW/xDlE0EAOT7+RHxMPv4AfS64kNkHCEVM+DRD5kPP?=
=?iso-8859-1?Q?qL7S07SihF0MpwZ3Au3zVwPoGpHQqRGNWotDdDuihUpBkjIuM1ck/B80XY?=
=?iso-8859-1?Q?iGaFsrShRAxMZ6z1A=3D=3D?=
X-Microsoft-Exchange-Diagnostics: 1;SG2PR02MB1151;5:YsUtYuW69LBijDnCeXdrMehHWaeA41JgZ0P9W8w3oWsMUWaQN3tavrrrJmUOkrdG22i1GC/qDOOAqEJZjj0qVr5b2fSBF2VdvRwIZ0JqWsLURniqnGpomo8A1ys2Qry6ixKuSSszDdo+qDbDc1pOXQ==;24:E/X4YIWKbENUfVHn0NpiNrFhmEECQxjg2/LGBxYH09ZZp06UgKUlQD3ee99zn30tB68MqozYhi3SWt52zkzjjw==;20:L/kyDDc2hkbJ2c2GLhgC/1p9Er41xxPeKq+TeWS9ATItjj2z6Ezl1kypJZSvfMRh+5ur4Oa62d1J7DTmrPIZpQ==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: officeweb.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Sep 2015 10:56:02.0247
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR02MB1151I am sgt John Scot of the US Army base in Afghanistan for peace keeping I f=
ound your contact detail in a address journal am seeking =your assistance to evacuate the sum of $25,000,000.00 to you as long as I =
am assured that it will be safe in your care until I complete my service h=
ere in Afghanistan.This is not stolen money and there are no dangers invo=
lved. I count on your understanding. Please email me: sgtjohnscott29874@gm=
ail.com———- Forwarded message ———-
From: <>
Date: Mon, Sep 21, 2015 at 6:55 AM
Subject: Help
To: RecipientsI am sgt John Scot of the US Army base in Afghanistan for peace keeping I found your contact detail in a address journal am seeking
your assistance to evacuate the sum of $25,000,000.00 to you as long as I am assured that it will be safe in your care until I complete my service here in Afghanistan.This is not stolen money and there are no dangers involved. I count on your understanding. Please email me: sgtjohnscott29874@gmail.com
And yes, the “From” details are automatically blank when forwarding message, content was not removed. Gee, I wonder what NSA has to say about that and the number of networks involved? My guess, nothing as it doesn’t involve spying on CapHill members for political games and/or protecting corrupt politicians at our expense. 😐
