#378019 by buried under 419s
Sat Dec 08, 2018 3:45 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 08 Dec 2018 10:19:02 -0800
Received: from [202.102.90.67] (port=32799 helo=mail.suiji6.cn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gVhBp-00064j-GZ
for ; Sat, 08 Dec 2018 10:19:02 -0800
Received: from User (93-40-3-225.ip36.fastwebnet.it [93.40.3.225])
by mail.suiji6.cn (Postfix) with ESMTPA id C0F122D6A17;
Sun, 9 Dec 2018 01:57:21 +0800 (CST)
Reply-To: <[email protected]>
From: "Mr. Daniel Coats"<[email protected]>
Date: Sat, 8 Dec 2018 18:59:50 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=33.7
X-Spam-Score: 337
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: United States Intelligence Community Office of the Inspector
General Investigations Division, Reston 3, Washington, D.C. 20511 USA Greetings
of the Day, READ CAREFULLY [...]
Content analysis details: (33.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HK_SCAM_N8 BODY: No description available.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[202.102.90.67 listed in bl.score.senderscore.com]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(validboss01[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (validboss01[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(usdepartment27[at]gmail.com)
0.0 MILLION_USD BODY: Talks about millions of dollars
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
1.6 MISSING_MID Missing Message-Id: header
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.6 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.2 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.2 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Contact George L. Miller Now !!!
United States Intelligence Community
Office of the Inspector General
Investigations Division, Reston 3,
Washington, D.C. 20511 USA
Greetings of the Day,
READ CAREFULLY
I am Daniel Coats, Director of National Intelligence (DNI) we have been working
towards the eradication of Internet Scam around the globe, western part of Africa to
be precise.
We have been able to track down many con-artist in various part of west Africa
country which include (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMERON AND SENEGAL),
they are all in custody, also huge amount of money was recovered. In reference to
this, several indoor meeting was held between the United Nation, United States
government and the African Union, during the meeting agreement was reached that
victims will get a Refund/Cpmpensation from the money recovered from con artists.
Note this e-mail is directed to you because during our investigations, your email
address was found in one of the con artist file and a computer hard disk in our
custody. In this regards, you will be receiving a Refund/Compensation of the sum of
US$2,800,000.00 (Two Million Eight Hundred United State Dollars). Meanwhile, the
Africa Union committee requested that victims should show evidence to prove they are
victim of West Africa scam.
Due to evidence requested, we appointed a United State base Attorney (George L.
Miller) to advocate on your behalf and provide evidence to prove you're scam victim
to aid the approval release of your funds payment to you.
IMPORTANT NOTICE: The only fee you're to pay to the Attorney is the evidence
processing fee $325.00 for processing and securing the legal evidence to prove to
the West Africa Goverment you are a victim of scam. Also kindly request him to
direct you on how to submit the processing fee $325.00 Only.
Kindly verify your details to the lawyer (George L. Miller) to enable him commence
the processing and secure the evidence to aid the release of your payment to you,
also make sure your details and residential address are provided correctly to avoid
any atom of mistake and delay during processing.
(1) Your Full Name: ...................
(2) Full Residential Address:.......... (P.O.BOX NOT ALLOWED)
(3) Occupation:. ...............
(4) Direct Phone Number: ..............
(5) Valid ID Card: ....................
CONTACT PERSON: George L. Miller
E-MAIL ADDRESS: [email protected]
TEL: +1 (209) 782-8237
As soon as he received your details, the processing to aid the release of your
Compensation Refund will be facilitated immediately and your US$2,800,000.00 (Two
Million Eight Hundred United State Dollars) will be made payable to you in due time
within the next 72 hours.
Treat as urgent!
Regards.
Mr. Daniel Coats
Director of National Intelligence
=======================================================================================================================================================================
This electronic message transmission is intended only for the use of the party to
which it is addressed, including any attachments and contains Investigations from
Director of National Intelligence, LLC (DNI), which may be privileged, confidential,
or protected by law. If you are not the intended recipient you are hereby notified
that any dissemination, copying or distribution of this e-mail or its contents is
strictly prohibited. If you have received this message in error, please notify us
immediately by replying to the message and also deleting it from your computer.
Thank you.
=======================================================================================================================================================================
Envelope-to:
Delivery-date: Sat, 08 Dec 2018 10:19:02 -0800
Received: from [202.102.90.67] (port=32799 helo=mail.suiji6.cn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gVhBp-00064j-GZ
for ; Sat, 08 Dec 2018 10:19:02 -0800
Received: from User (93-40-3-225.ip36.fastwebnet.it [93.40.3.225])
by mail.suiji6.cn (Postfix) with ESMTPA id C0F122D6A17;
Sun, 9 Dec 2018 01:57:21 +0800 (CST)
Reply-To: <[email protected]>
From: "Mr. Daniel Coats"<[email protected]>
Date: Sat, 8 Dec 2018 18:59:50 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=33.7
X-Spam-Score: 337
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: United States Intelligence Community Office of the Inspector
General Investigations Division, Reston 3, Washington, D.C. 20511 USA Greetings
of the Day, READ CAREFULLY [...]
Content analysis details: (33.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HK_SCAM_N8 BODY: No description available.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[202.102.90.67 listed in bl.score.senderscore.com]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(validboss01[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (validboss01[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(usdepartment27[at]gmail.com)
0.0 MILLION_USD BODY: Talks about millions of dollars
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
1.6 MISSING_MID Missing Message-Id: header
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.6 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.2 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.2 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Contact George L. Miller Now !!!
United States Intelligence Community
Office of the Inspector General
Investigations Division, Reston 3,
Washington, D.C. 20511 USA
Greetings of the Day,
READ CAREFULLY
I am Daniel Coats, Director of National Intelligence (DNI) we have been working
towards the eradication of Internet Scam around the globe, western part of Africa to
be precise.
We have been able to track down many con-artist in various part of west Africa
country which include (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMERON AND SENEGAL),
they are all in custody, also huge amount of money was recovered. In reference to
this, several indoor meeting was held between the United Nation, United States
government and the African Union, during the meeting agreement was reached that
victims will get a Refund/Cpmpensation from the money recovered from con artists.
Note this e-mail is directed to you because during our investigations, your email
address was found in one of the con artist file and a computer hard disk in our
custody. In this regards, you will be receiving a Refund/Compensation of the sum of
US$2,800,000.00 (Two Million Eight Hundred United State Dollars). Meanwhile, the
Africa Union committee requested that victims should show evidence to prove they are
victim of West Africa scam.
Due to evidence requested, we appointed a United State base Attorney (George L.
Miller) to advocate on your behalf and provide evidence to prove you're scam victim
to aid the approval release of your funds payment to you.
IMPORTANT NOTICE: The only fee you're to pay to the Attorney is the evidence
processing fee $325.00 for processing and securing the legal evidence to prove to
the West Africa Goverment you are a victim of scam. Also kindly request him to
direct you on how to submit the processing fee $325.00 Only.
Kindly verify your details to the lawyer (George L. Miller) to enable him commence
the processing and secure the evidence to aid the release of your payment to you,
also make sure your details and residential address are provided correctly to avoid
any atom of mistake and delay during processing.
(1) Your Full Name: ...................
(2) Full Residential Address:.......... (P.O.BOX NOT ALLOWED)
(3) Occupation:. ...............
(4) Direct Phone Number: ..............
(5) Valid ID Card: ....................
CONTACT PERSON: George L. Miller
E-MAIL ADDRESS: [email protected]
TEL: +1 (209) 782-8237
As soon as he received your details, the processing to aid the release of your
Compensation Refund will be facilitated immediately and your US$2,800,000.00 (Two
Million Eight Hundred United State Dollars) will be made payable to you in due time
within the next 72 hours.
Treat as urgent!
Regards.
Mr. Daniel Coats
Director of National Intelligence
=======================================================================================================================================================================
This electronic message transmission is intended only for the use of the party to
which it is addressed, including any attachments and contains Investigations from
Director of National Intelligence, LLC (DNI), which may be privileged, confidential,
or protected by law. If you are not the intended recipient you are hereby notified
that any dissemination, copying or distribution of this e-mail or its contents is
strictly prohibited. If you have received this message in error, please notify us
immediately by replying to the message and also deleting it from your computer.
Thank you.
=======================================================================================================================================================================
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces