Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#322926 by buried under 419s Mon Mar 20, 2017 11:57 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 20 Mar 2017 19:26:12 -0700
Received: from smtp.cyber.net.pk ([61.5.158.182]:53248)
by with esmtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1cq9Ur-0004Or-9l
for ; Mon, 20 Mar 2017 19:26:12 -0700
Received: from User (unknown [202.163.125.149])
by smtp.cyber.net.pk (Postfix) with SMTP id 6712721163;
Tue, 21 Mar 2017 03:50:10 +0500 (PKT)
Reply-To: <[email protected]>
From: "Babachir David Lawal"<[email protected]>
Date: Mon, 20 Mar 2017 17:50:38 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=21.7
X-Spam-Score: 217
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system ",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Re:Presidential Official Gazzaert to all her Creditors all
around the World: This is to kindly inform all foreigners owned to ensure
an urgent reply to this directives as the World Leaders has collaborated
with us in making sufficient funds and human resources available to pay all
cleared individual(s) Organizations, companies in this first fiscal payment
quarter. [...]

Content analysis details: (21.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[61.5.158.182 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?61.5.158.182>]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[61.5.158.182 listed in wl.mailspike.net]
1.0 MISSING_HEADERS Missing To: header
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[61.5.158.182 listed in psbl.surriel.com]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[61.5.158.182 listed in dnsbl.sorbs.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.8 KAM_INFOUSMEBIZ Prevalent use of .info|.us|.me|.me.uk|.biz domains in
spam/malware
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** GAZZETTE NOTICE

Re:Presidential Official Gazzaert to all her Creditors all around the World:



This is to kindly inform all foreigners owned to ensure an urgent reply to this
directives as the World Leaders has collaborated with us in making sufficient funds
and human resources available to pay all cleared individual(s) Organizations,
companies in this first fiscal payment quarter.



We implore and advised all concerned to hurriedly contact the underlisted bank with
all relevant details to help release your money to you and we wish to notify
everyone that we are in conjuction with the United Nation teams of Expatriates
supervising that every cleared claims are met:





Bank Name: Diamond Bank Ltd

Email: [email protected]

Direct Number:234-9093184847

Director:Mr Uzoma Dozie

Group Managing Director/Chief Executive Officer



We give this as a strict warning to every concerned to henceforth desist from
anybody,parastatals, institutions, banks, offshore payment center and any diplomatic
outfit concerning this payment, as money has been allocated the above mentioned bank
to pay all outstanding owned debts, always keep us posted with your dealings with
the Diamond Bank till you are paid.



Meanwhile we congratulate you in advance.



Thanks and Faithfully,



Babachir David Lawal

Secretary to The Federal Government

on behalf of the President.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
#325210 by buried under 419s Thu Apr 13, 2017 8:13 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Apr 2017 10:23:48 -0700
Received: from relay.zaural.ru ([85.233.130.66]:3840)
by with esmtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1cyiT8-0005ST-Ui
for c; Thu, 13 Apr 2017 10:23:47 -0700
Received: from User (ws215.zone111.zaural.ru [90.150.111.215])
by relay.zaural.ru (Postfix) with SMTP id 6193BB162;
Thu, 13 Apr 2017 22:16:46 +0500 (YEKT)
Reply-To: <[email protected]>
From: "Caroline Anyanwu" <[email protected]>
Date: Thu, 13 Apr 2017 19:17:13 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=22.7
X-Spam-Score: 227
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Attention: Beneficiary. Your ATM (Automated Teller Machines)
Swift Card Mode of payment was introduced / constituted by the World Bank,
IMF, FBI and UN to fight and avert scams due to fraudulent activities going
on within the African Region and around the world so it is for your own good
interest as we understand the difficulties of economic time that exist today
and would like to repay this obligation for your plan designed to meet your
budgetary need, this is to enable beneficiaries receive their fund without
any hitches or interference as the International Monetary Fund (IMF) is protecting
all World CITIZENS. [...]

Content analysis details: (22.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[85.233.130.66 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?85.233.130.66>]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[85.233.130.66 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[85.233.130.66 listed in dnsbl.sorbs.net]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR ATM IS READY FOR COLLECTION

Attention: Beneficiary.





Your ATM (Automated Teller Machines) Swift Card Mode of payment was introduced /
constituted by the World Bank, IMF, FBI and UN to fight and avert scams due to
fraudulent activities going on within the African Region and around the world so it
is for your own good interest as we understand the difficulties of economic time
that exist today and would like to repay this obligation for your plan designed to
meet your budgetary need, this is to enable beneficiaries receive their fund without
any hitches or interference as the International Monetary Fund (IMF) is protecting
all World CITIZENS.



Note that your payment was not effected as a result of official negligence as many
abnormalities had happened in the Banks where some top officials of the apex Banks
collaborate with impostors who are carrying fake portfolios with levies misled and
misguided you about the position of your fund and having the opportunity to extort
money from you that made it too long up till date. I want you to follow my
instructions for once and begin to smile. I will feel so unhappy if you loose this
opportunity to receive your fund.



The good news now is that your payment has been uploaded into your ATM Swift Card,
and is ready for immediate use. Go ahead and contact ATM Card Counsellor Office
immediately you receive this mail so that he will advise you on what next to do in
making sure that you receive your Original ATM Card:



Contact Person: Mr.Mr Uzoma Dozie

Group Managing Director/Chief Executive Officer

Email Address: [email protected]



As a matter of urgency, you should send him the below information's so that he will
be able to deliver your original ATM Card to you:



1. Your Full Names.

2. Your Receiving Address.

3. Your Mobile Telephone Number.



Thank you very much for your anticipated co-operation



Regards,

Mrs. Caroline Anyanwu

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: Yahoo [Bot] and 19 guests