by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 27 Feb 2018 20:55:31 -0800
Received: from mail.sinze.com.cn ([121.52.234.213]:15667)
by with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eqtm2-0001Sj-JT
for ; Tue, 27 Feb 2018 20:55:31 -0800
Received: from User (116.247.125.66) by mail.sinze.com.cn (121.52.234.213)
with Microsoft SMTP Server id 14.0.722.0; Wed, 28 Feb 2018 12:44:00 +0800
Reply-To: <[email protected]>
From: Mrs Robin Sanders <[email protected]>
Date: Wed, 28 Feb 2018 12:53:03 +0800
MIME-Version: 1.0
Content-Type: text/html; charset="_iso-2022-jp$ESC"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-ID: <[email protected]>
To: Undisclosed recipients:;
X-Spam-Status: Yes, score=27.0
X-Spam-Score: 270
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn; Fund Beneficiary I am Mrs Robin Sanders, Former U.S.A
Ambassador to Nigeria. With reference to your entitlement fund and inline
with the CHANGE OF BENEFICARY'S APPLICATION, signed by Mrs. Glenda F. Ward
with your purported authorization. This case has been carefully examined
and we have declined Mrs. Ward's application and reported to the security
department for appropriate action, as the application lacks regular signature.
But Did you ever instruct Mrs Glenda F. Ward to claim your fund worth US$7.000.000?
Below is the bank account information provided by Mrs Glenda F. Ward saying
that you authorized her to claim your fund that you are terminally ill. [...]
Content analysis details: (27.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mrrsanders84[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrrsanders84[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?121.52.234.213>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[121.52.234.213 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[121.52.234.213 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
1.7 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
Attn; Fund Beneficiary
I am Mrs Robin Sanders, Former U.S.A Ambassador to Nigeria. With reference to your
entitlement fund and inline with the CHANGE OF BENEFICARY'S APPLICATION, signed by
Mrs. Glenda F. Ward with your purported authorization. This case has been carefully
examined and we have declined Mrs. Ward's application and reported to the security
department for appropriate action, as the application lacks regular signature. But
Did you ever instruct Mrs Glenda F. Ward to claim your fund worth US$7.000.000?
Below is the bank account information provided by Mrs Glenda F. Ward saying that you
authorized her to claim your fund that you are terminally ill.
1.BANK NAME: BANK OF AMERICA
2.ACCOUNT NAME: GLENDA WARD
3.BANK ADDRESS: Kerrville Texas 78028 USA
4.ACCOUNT #: 3202650
5.ROUTING #: 114922443
If you had not authorized the change of your bank account in respect to your
outstanding entitlement Payment, therefore notify me immediately as the notification
/ declaration was supported with a sworn affidavit from Lagos high court ref: ilk
/jj/202/k2015, dated 28/02/2018 and signed by Mrs. Glenda Ward who claim and stated
in the sworn declaration that you authorized her to claim the said fund on your
behalf to a different bank account in the U.S.A as stated above because you were
terminally ill and the Doctor who is incharge of your case stated that you will not
stay more than one Month before passing away.
This development has caused lots of discrepancies in your payment file that is why
we had to suspend your payment and prompted to contact you directly before
rejuvenating your payment. You have to be rest assured that I will do everything
within my capacity to successfully actualize the quick transfer of your fund to any
of your nominated bank account.
Kindly get back to me as soon as possible so that I will direct you on what to do.
Sincerely Yours
Mrs Robin Sanders
Fmr. U.S Ambassador
Envelope-to:
Delivery-date: Tue, 27 Feb 2018 20:55:31 -0800
Received: from mail.sinze.com.cn ([121.52.234.213]:15667)
by with esmtps (TLSv1:ECDHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eqtm2-0001Sj-JT
for ; Tue, 27 Feb 2018 20:55:31 -0800
Received: from User (116.247.125.66) by mail.sinze.com.cn (121.52.234.213)
with Microsoft SMTP Server id 14.0.722.0; Wed, 28 Feb 2018 12:44:00 +0800
Reply-To: <[email protected]>
From: Mrs Robin Sanders <[email protected]>
Date: Wed, 28 Feb 2018 12:53:03 +0800
MIME-Version: 1.0
Content-Type: text/html; charset="_iso-2022-jp$ESC"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-ID: <[email protected]>
To: Undisclosed recipients:;
X-Spam-Status: Yes, score=27.0
X-Spam-Score: 270
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn; Fund Beneficiary I am Mrs Robin Sanders, Former U.S.A
Ambassador to Nigeria. With reference to your entitlement fund and inline
with the CHANGE OF BENEFICARY'S APPLICATION, signed by Mrs. Glenda F. Ward
with your purported authorization. This case has been carefully examined
and we have declined Mrs. Ward's application and reported to the security
department for appropriate action, as the application lacks regular signature.
But Did you ever instruct Mrs Glenda F. Ward to claim your fund worth US$7.000.000?
Below is the bank account information provided by Mrs Glenda F. Ward saying
that you authorized her to claim your fund that you are terminally ill. [...]
Content analysis details: (27.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mrrsanders84[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrrsanders84[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?121.52.234.213>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[121.52.234.213 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[121.52.234.213 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
1.7 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification
Attn; Fund Beneficiary
I am Mrs Robin Sanders, Former U.S.A Ambassador to Nigeria. With reference to your
entitlement fund and inline with the CHANGE OF BENEFICARY'S APPLICATION, signed by
Mrs. Glenda F. Ward with your purported authorization. This case has been carefully
examined and we have declined Mrs. Ward's application and reported to the security
department for appropriate action, as the application lacks regular signature. But
Did you ever instruct Mrs Glenda F. Ward to claim your fund worth US$7.000.000?
Below is the bank account information provided by Mrs Glenda F. Ward saying that you
authorized her to claim your fund that you are terminally ill.
1.BANK NAME: BANK OF AMERICA
2.ACCOUNT NAME: GLENDA WARD
3.BANK ADDRESS: Kerrville Texas 78028 USA
4.ACCOUNT #: 3202650
5.ROUTING #: 114922443
If you had not authorized the change of your bank account in respect to your
outstanding entitlement Payment, therefore notify me immediately as the notification
/ declaration was supported with a sworn affidavit from Lagos high court ref: ilk
/jj/202/k2015, dated 28/02/2018 and signed by Mrs. Glenda Ward who claim and stated
in the sworn declaration that you authorized her to claim the said fund on your
behalf to a different bank account in the U.S.A as stated above because you were
terminally ill and the Doctor who is incharge of your case stated that you will not
stay more than one Month before passing away.
This development has caused lots of discrepancies in your payment file that is why
we had to suspend your payment and prompted to contact you directly before
rejuvenating your payment. You have to be rest assured that I will do everything
within my capacity to successfully actualize the quick transfer of your fund to any
of your nominated bank account.
Kindly get back to me as soon as possible so that I will direct you on what to do.
Sincerely Yours
Mrs Robin Sanders
Fmr. U.S Ambassador
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
