#333475 by buried under 419s
Mon Jul 10, 2017 9:18 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 10 Jul 2017 02:41:45 -0700
Received: from auth.wow.lk ([202.124.160.22]:56719)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dUVCF-0001OK-MF
for ; Mon, 10 Jul 2017 02:41:45 -0700
Received: from User (unknown [47.88.79.207])
(Authenticated sender: paragon)
by auth.wow.lk (Postfix) with ESMTPA id F404A2EE88E;
Fri, 23 Jun 2017 21:15:24 +0530 (IST)
Reply-To: <[email protected]>
From: "Debt Conversion Unit."<[email protected]>
Date: Fri, 23 Jun 2017 16:46:11 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=29.2
X-Spam-Score: 292
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, The contemporary bureaucratic bottlenecks
are deliberate measures to scrutinize public disbursements; however, forfeiting
your long overdue funds won't be an option anymore. Is been challenging for
you because 'Inheritance claims' from this region are largely perceived as
Hoax which is not entirely true. What most people don't know is that 90%
of public office holders divert their allocations to overseas through a well
orchestrated Inheritance claim, it's easily executed with the help of a foreign
partner. [...]
Content analysis details: (29.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.124.160.22 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[202.124.160.22 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[47.88.79.207 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?202.124.160.22>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[202.124.160.22 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.124.160.22 listed in psbl.surriel.com]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[202.124.160.22 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(turkudide2.0[at]outlook.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(turku12turku[at]outlook.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_USER From misspaced, from "User"
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** From The Executive Director.
Dear Beneficiary,
The contemporary bureaucratic bottlenecks are deliberate measures to scrutinize
public disbursements; however, forfeiting your long overdue funds won't be an option
anymore. Is been challenging for you because 'Inheritance claims' from this region
are largely perceived as Hoax which is not entirely true. What most people don't
know is that 90% of public office holders divert their allocations to overseas
through a well orchestrated Inheritance claim, it's easily executed with the help of
a foreign partner.
I have empirical evidence to prove that over $302 Million worth of looted treasury
is being released as inheritance entitlements to faceless beneficiaries annually. Do
not forfeit this fund yet, consider this final option and I can assure you of your
payment authorization in two days. I have vested interest in your transaction and I
will be willing to apply for a debt conversion on your behalf. The 'Origin of Fund'
on your surface Affidavit can be revised if I have your consent. With my executive
powers, all I require is to change the payment title from 'Inheritance' to
'Procurement'
Please, note that I won't require any upfront payment from you, but will receive my
remuneration on a percentage sharing formula at the end. I will appreciate your
prompt feedback If you are interested to know your new role in this pursuit and the
modality involved.
I look forward to rearing from you at your earliest convenience.
Best Regards,
M. Bank-Anthony.
Executive Director, Debt Conversion Dept.
National Bureau of Financial.
Envelope-to:
Delivery-date: Mon, 10 Jul 2017 02:41:45 -0700
Received: from auth.wow.lk ([202.124.160.22]:56719)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dUVCF-0001OK-MF
for ; Mon, 10 Jul 2017 02:41:45 -0700
Received: from User (unknown [47.88.79.207])
(Authenticated sender: paragon)
by auth.wow.lk (Postfix) with ESMTPA id F404A2EE88E;
Fri, 23 Jun 2017 21:15:24 +0530 (IST)
Reply-To: <[email protected]>
From: "Debt Conversion Unit."<[email protected]>
Date: Fri, 23 Jun 2017 16:46:11 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=29.2
X-Spam-Score: 292
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, The contemporary bureaucratic bottlenecks
are deliberate measures to scrutinize public disbursements; however, forfeiting
your long overdue funds won't be an option anymore. Is been challenging for
you because 'Inheritance claims' from this region are largely perceived as
Hoax which is not entirely true. What most people don't know is that 90%
of public office holders divert their allocations to overseas through a well
orchestrated Inheritance claim, it's easily executed with the help of a foreign
partner. [...]
Content analysis details: (29.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.124.160.22 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[202.124.160.22 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[47.88.79.207 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?202.124.160.22>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[202.124.160.22 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.124.160.22 listed in psbl.surriel.com]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[202.124.160.22 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(turkudide2.0[at]outlook.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(turku12turku[at]outlook.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_USER From misspaced, from "User"
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** From The Executive Director.
Dear Beneficiary,
The contemporary bureaucratic bottlenecks are deliberate measures to scrutinize
public disbursements; however, forfeiting your long overdue funds won't be an option
anymore. Is been challenging for you because 'Inheritance claims' from this region
are largely perceived as Hoax which is not entirely true. What most people don't
know is that 90% of public office holders divert their allocations to overseas
through a well orchestrated Inheritance claim, it's easily executed with the help of
a foreign partner.
I have empirical evidence to prove that over $302 Million worth of looted treasury
is being released as inheritance entitlements to faceless beneficiaries annually. Do
not forfeit this fund yet, consider this final option and I can assure you of your
payment authorization in two days. I have vested interest in your transaction and I
will be willing to apply for a debt conversion on your behalf. The 'Origin of Fund'
on your surface Affidavit can be revised if I have your consent. With my executive
powers, all I require is to change the payment title from 'Inheritance' to
'Procurement'
Please, note that I won't require any upfront payment from you, but will receive my
remuneration on a percentage sharing formula at the end. I will appreciate your
prompt feedback If you are interested to know your new role in this pursuit and the
modality involved.
I look forward to rearing from you at your earliest convenience.
Best Regards,
M. Bank-Anthony.
Executive Director, Debt Conversion Dept.
National Bureau of Financial.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces