Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#415294 by buried under 419s Mon Aug 10, 2020 8:41 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 10 Aug 2020 15:32:24 +0000
Received: from host-45-236-224-18.destaknetsgo.com.br ([45.236.224.18]:53887 helo=srv01.destaknet.com)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1k59mh-0006hU-Qe
for ; Mon, 10 Aug 2020 15:32:24 +0000
Received: from [89.108.96.249] (helo=User)
by srv01.destaknet.com with esmtpa (Exim 4.92.2)
(envelope-from <[email protected]>)
id 1k58WR-0007Hl-H2; Mon, 10 Aug 2020 11:11:32 -0300
Reply-To: <[email protected]>
From: "Dr.Ken Obiorah"<[email protected]>
To: [email protected]
Date: Mon, 10 Aug 2020 07:11:33 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=54.9
X-Spam-Score: 549
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Good Friend I am Dr.Ken Obiorah, a Chatered accountant
by profession working with the Federal Ministry Of Agriculture in Nigeria.
Perhaps you might be wondering why you have received this mail, but I can
assure y [...]
Content analysis details: (54.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?45.236.224.18>]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.1 TVD_PH_SEC BODY: Message includes a phrase commonly used in
phishing mails
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[45.236.224.18 listed in bl.score.senderscore.com]
4.5 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[45.236.224.18 listed in bl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[accdeptfedminagricnig5[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[accdeptfedminagricnig5[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[drkenobiorah5[at]yahoo.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.8 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
2.6 MSOE_MID_WRONG_CASE No description available.
3.9 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
1.2 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.4 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
1.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing
list
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.2 SPOOFED_FREEMAIL No description available.
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.3 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.7 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Business Proposal... ...224.18


Dear Good Friend


I am Dr.Ken Obiorah, a Chatered accountant by profession working with the Federal Ministry Of Agriculture in Nigeria. Perhaps you might be wondering why you have received this mail, but I can assure you that at the end, we both will be having discussion as to whatever profitable business(es) we should invest our respective share(s) in. I was assigned by two of my colleagues to seek for a foreign partner who will assist us in providing a convenient foreign account in any designated bank abroad for a transfer of US$52,750,000.00 pending on our arrival in your country for utilization and disbursement with the owner of the account.

This amount results from a deliberate inflation of the value of a contract awarded by our Ministry (The Federal Ministry of Agriculture, F.M.A) to an expatriate company who supplied Agricultural equipment to the Ministry. The contract has been executed and payment made to the ORIGINAL contractor, remaining the over-invoiced amount of US$52,750,000.00.which we want to transfer the fund out of the country for disbursement among ourselves (i.e You being the foreign counterpart, I and my other two colleagues). The transfer of this money can only be possible with your help being a foreigner who will be presented as the beneficiary of the fund.

As Civil servants, we are not allowed to operate foreign accounts, and this is the reason why I decided to contact you. We have agreed that if you/your company can act as the beneficiary of this fund (US$52,750,000.00 million), 15% of the total sum will be for you for assisting us from start to finish in this venture while 85% will be reserved for us.

We hereby solicit for your assistance in providing your convenient banking coordinate in a designated bank in your country where this fund would be transferred. We intend coming over on the completion of this transfer to secure our own share of the money.

Please note that we have been careful and have made all arrangements towards the success and smooth transfer of the fund to your account before I contacted you. For security reasons and confidentiality of this transaction, we demand that you should not expose this proposal and the entire transaction to anybody.

We are putting so much trust in you with the hope that you would not betray us or sit on this money when it is finally transferred into your account. Be rest assured that this transaction is 100% risk free. If this proposal is acceptable by you, indicate your interest by sending your response via an email to me including your working cellphone number.


Note that the particular nature of your company's business is not necessary needed for this transaction. if this transaction interests you, your urgent response will be appreciated.

Yours faithfully,

Dr.Ken Obiorah.
Private E-mail:[email protected]
Cellphone: +234-81-0920-6368

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 149 guests