#325722 by buried under 419s
Thu Apr 20, 2017 9:40 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 19 Apr 2017 23:54:59 -0700
Received: from zrhcz-smtp2.virtualtec.ch ([93.189.64.8]:60536)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1d15zS-0005WM-Cc
for ; Wed, 19 Apr 2017 23:54:58 -0700
X-VT-Sender: [email protected]
Received: from first-accounting.com (dhcp.77.245.187.22.databaar.ch [77.245.187.22] (may be forged))
(authenticated bits=0)
by zrhcz-smtp2.virtualtec.ch (8.15.2/8.15.2) with ESMTPA id v3K6sAkS030772
for <>; Thu, 20 Apr 2017 08:54:12 +0200 (CEST)
(envelope-from [email protected])
X-Authentication-Warning: zrhcz-smtp2.virtualtec.ch: Host dhcp.77.245.187.22.databaar.ch [77.245.187.22] (may be forged) claimed to be first-accounting.com
Received: from User ([197.211.60.82]) by first-accounting.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 Apr 2017 20:34:03 +0200
Reply-To: <[email protected]>
From: "IDRI"<[email protected]>
Date: Tue, 18 Apr 2017 19:34:03 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 18 Apr 2017 18:34:03.0719 (UTC) FILETIME=[5ADA1570:01D2B872]
X-Spam-Status: Yes, score=21.2
X-Spam-Score: 212
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir/Madam. Congratulation! this is to inform you that
your inheritance funds valued USD$10.5M has been approved among twenty five
other foreign beneficiaries and bonded to our affiliate bankers in Europe-FRANCE
and MALAYSIA for immediate release. This is due to the strict financial regulations,
lots of certifications/transfer back-up documents required in moving funds
out of the Federal Republic of Nigeria, and most especially United Kingdom-U.K.
[...]
Content analysis details: (21.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[93.189.64.8 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.211.60.82>]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[197.211.60.82 listed in dnsbl.sorbs.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(irisng[at]mmail.com)
1.0 MISSING_HEADERS Missing To: header
1.3 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[93.189.64.8 listed in wl.mailspike.net]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.60.82 listed in zen.spamhaus.org]
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** NEW UPDATE!!!
Attn: Sir/Madam.
Congratulation! this is to inform you that your inheritance funds valued USD$10.5M
has been approved among twenty five other foreign beneficiaries and bonded to our
affiliate bankers in Europe-FRANCE and MALAYSIA for immediate release. This is due
to the strict financial regulations, lots of certifications/transfer back-up
documents required in moving funds out of the Federal Republic of Nigeria, and most
especially United Kingdom-U.K.
I want to sound this as a warning to you that inheritance fund is officially handled
by the office of The Accountant General of the Federation Federal Republic of
Nigeria as the Treasury House known to be the (Accountant General) office
established under Civil Services re-organization Decree No.43 of 1988 and paragraph
8 edit 4 of 1999 as amended is responsible for the overall management of all receipt
and payments of the Federal Republic of Nigeria.
This includes payment of contractors, inheritance, and beneficiaries both local and
foreign. I also want to notify you that since the assumption of office on 29th May
2015 by president Muhammeadu Buhari, he has introduced Treasury Single Account (TSA)
is a financial policy introduced by the Federal Government to consolidate all
inflows from the country's ministries, departments and agencies (MDAs) by way of
deposit into commercial banks, traceable into a single/FEDERAL RESERVE ACCOUNT at
the Central Bank of Nigeria.
Note that this is among our set priorities as a Government, in our pursuit for
change and good governance. Reference to this development, you are therefore advised
without wasting time, to get back to us with your complete information including,
such as your full name and address, telephone number so as to enable us obtain proof
of fund letter in your name while we send to you along with the payment schedule
letter.
When that is done, we shall send you the information of the bank in-charge of your
payment to enable you open communication with them without further delay, so they
can expedite action on the transfer process accordingly.
Awaiting your prompt reply.
Kind regards,
Ahj. Ahmed Idris
The Accountant General of the Federation
(Federal Republic of Nigeria).
Envelope-to:
Delivery-date: Wed, 19 Apr 2017 23:54:59 -0700
Received: from zrhcz-smtp2.virtualtec.ch ([93.189.64.8]:60536)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1d15zS-0005WM-Cc
for ; Wed, 19 Apr 2017 23:54:58 -0700
X-VT-Sender: [email protected]
Received: from first-accounting.com (dhcp.77.245.187.22.databaar.ch [77.245.187.22] (may be forged))
(authenticated bits=0)
by zrhcz-smtp2.virtualtec.ch (8.15.2/8.15.2) with ESMTPA id v3K6sAkS030772
for <>; Thu, 20 Apr 2017 08:54:12 +0200 (CEST)
(envelope-from [email protected])
X-Authentication-Warning: zrhcz-smtp2.virtualtec.ch: Host dhcp.77.245.187.22.databaar.ch [77.245.187.22] (may be forged) claimed to be first-accounting.com
Received: from User ([197.211.60.82]) by first-accounting.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 Apr 2017 20:34:03 +0200
Reply-To: <[email protected]>
From: "IDRI"<[email protected]>
Date: Tue, 18 Apr 2017 19:34:03 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 18 Apr 2017 18:34:03.0719 (UTC) FILETIME=[5ADA1570:01D2B872]
X-Spam-Status: Yes, score=21.2
X-Spam-Score: 212
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir/Madam. Congratulation! this is to inform you that
your inheritance funds valued USD$10.5M has been approved among twenty five
other foreign beneficiaries and bonded to our affiliate bankers in Europe-FRANCE
and MALAYSIA for immediate release. This is due to the strict financial regulations,
lots of certifications/transfer back-up documents required in moving funds
out of the Federal Republic of Nigeria, and most especially United Kingdom-U.K.
[...]
Content analysis details: (21.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[93.189.64.8 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.211.60.82>]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[197.211.60.82 listed in dnsbl.sorbs.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(irisng[at]mmail.com)
1.0 MISSING_HEADERS Missing To: header
1.3 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[93.189.64.8 listed in wl.mailspike.net]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.60.82 listed in zen.spamhaus.org]
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** NEW UPDATE!!!
Attn: Sir/Madam.
Congratulation! this is to inform you that your inheritance funds valued USD$10.5M
has been approved among twenty five other foreign beneficiaries and bonded to our
affiliate bankers in Europe-FRANCE and MALAYSIA for immediate release. This is due
to the strict financial regulations, lots of certifications/transfer back-up
documents required in moving funds out of the Federal Republic of Nigeria, and most
especially United Kingdom-U.K.
I want to sound this as a warning to you that inheritance fund is officially handled
by the office of The Accountant General of the Federation Federal Republic of
Nigeria as the Treasury House known to be the (Accountant General) office
established under Civil Services re-organization Decree No.43 of 1988 and paragraph
8 edit 4 of 1999 as amended is responsible for the overall management of all receipt
and payments of the Federal Republic of Nigeria.
This includes payment of contractors, inheritance, and beneficiaries both local and
foreign. I also want to notify you that since the assumption of office on 29th May
2015 by president Muhammeadu Buhari, he has introduced Treasury Single Account (TSA)
is a financial policy introduced by the Federal Government to consolidate all
inflows from the country's ministries, departments and agencies (MDAs) by way of
deposit into commercial banks, traceable into a single/FEDERAL RESERVE ACCOUNT at
the Central Bank of Nigeria.
Note that this is among our set priorities as a Government, in our pursuit for
change and good governance. Reference to this development, you are therefore advised
without wasting time, to get back to us with your complete information including,
such as your full name and address, telephone number so as to enable us obtain proof
of fund letter in your name while we send to you along with the payment schedule
letter.
When that is done, we shall send you the information of the bank in-charge of your
payment to enable you open communication with them without further delay, so they
can expedite action on the transfer process accordingly.
Awaiting your prompt reply.
Kind regards,
Ahj. Ahmed Idris
The Accountant General of the Federation
(Federal Republic of Nigeria).
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces