#384106 by buried under 419s
Thu Apr 11, 2019 8:44 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id ANKlMiidr1x3OAAAjbubUg
for <>; Thu, 11 Apr 2019 13:01:44 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 11 Apr 2019 13:01:44 -0700
Received: from smtp8.biz.net.id ([137.59.125.44]:57726)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hEftG-0003js-IF
for ; Thu, 11 Apr 2019 13:01:44 -0700
Received: from User (unknown [182.253.207.170])
by smtp8.biz.net.id (Postfix) with SMTP id 80CFFC0CD96D;
Fri, 12 Apr 2019 03:00:28 +0700 (WIB)
Reply-To: <[email protected]>
From: "Justice Sylvanus Nsofor (CFR)"<[email protected]>
Date: Thu, 11 Apr 2019 21:00:55 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.8
X-Spam-Score: 248
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: TO WHOM IT MAY CONCERN Dear Sir/Madam My name is Justice Sylvanus
Nsofor a Nigerian diplomat to United States. I have received a presidential
Order from the presidency of the government of Nigeria to contact you for
the immediate payment of your overdue payment after his re-election for the
second term in office as the president commender in chieft of armed forces
Fedral Republic of Nigeria on his official visit to the United States to
meet with the United States President (Donald Trumph) to express his gratitude
to him for supporting won the presidential election. him . [...]
Content analysis details: (24.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 NSL_RCVD_FROM_USER Received from User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[137.59.125.44 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(sh144802[at]gmail.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.2 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.9 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Immediate Payment of your overdue fund.
TO WHOM IT MAY CONCERN
Dear Sir/Madam
My name is Justice Sylvanus Nsofor a Nigerian diplomat to United States. I have
received a presidential Order from the presidency of the government of Nigeria to
contact you for the immediate payment of your overdue payment after his re-election
for the second term in office as the president commender in chieft of armed forces
Fedral Republic of Nigeria on his official visit to the United States to meet with
the United States President (Donald Trumph) to express his gratitude to him for
supporting won the presidential election. him .
It has been discovered through our security monitoring network that you have been
dealing with wrong channels to actualize your claim and lost some amount of money in
the process. Be informed that the government does not pay foreign debt through
sycophants but only through the government approved channels.
Diplomatic trust cannot be put into disrepute by any responsible government. This is
one of the reasons the present government of Nigeria Anti-corruption crusade has
been commended by the United Nations, the World Bank, IMF, American Government,
British Government etc with the Bi-lateral agreement between both the Nigeria
President and the United states President that outstanding foreign funds such as
Inheritance claim and Lottery winnings be paid while the United States Government
have also agreed to repatraite the looted funds brought to
United States back to Nigeria Government.
The Government considered to pay you and few other beneficiaries through this
diplomatic means to safe you and your funds from the evil hands of impostors and to
save the image of the government of Nigeria from disrepute. So you are lucky to be
one of the few favored beneficiaries. All we need from you is your maximum
cooperation and you get paid.
Reconfirm your current information as requested below:
1) Your full name, address, telephone and email.
2) Your kind of claim
3} How much is your money?
4) Why have you not been paid before this time?
The reason for the request of the above is to be sure that we are dealing with the
true beneficiary. I have your payment file and I know that only a true beneficiary
will give the right information in the payment file. Upon our receipt of your reply
to this mail, we shall reconcile your payment documents with the concern authorities
and direct you to our paying bank for your immediate payment.
Kindly reply through this Email Address
Regards,
Justice Sylvanus Nsofor (CFR)
Nigerian Diplomat to United States.
Delivered-To:
Received: from
by with LMTP id ANKlMiidr1x3OAAAjbubUg
for <>; Thu, 11 Apr 2019 13:01:44 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 11 Apr 2019 13:01:44 -0700
Received: from smtp8.biz.net.id ([137.59.125.44]:57726)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hEftG-0003js-IF
for ; Thu, 11 Apr 2019 13:01:44 -0700
Received: from User (unknown [182.253.207.170])
by smtp8.biz.net.id (Postfix) with SMTP id 80CFFC0CD96D;
Fri, 12 Apr 2019 03:00:28 +0700 (WIB)
Reply-To: <[email protected]>
From: "Justice Sylvanus Nsofor (CFR)"<[email protected]>
Date: Thu, 11 Apr 2019 21:00:55 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.8
X-Spam-Score: 248
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: TO WHOM IT MAY CONCERN Dear Sir/Madam My name is Justice Sylvanus
Nsofor a Nigerian diplomat to United States. I have received a presidential
Order from the presidency of the government of Nigeria to contact you for
the immediate payment of your overdue payment after his re-election for the
second term in office as the president commender in chieft of armed forces
Fedral Republic of Nigeria on his official visit to the United States to
meet with the United States President (Donald Trumph) to express his gratitude
to him for supporting won the presidential election. him . [...]
Content analysis details: (24.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 NSL_RCVD_FROM_USER Received from User
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[137.59.125.44 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(sh144802[at]gmail.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.2 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.9 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Immediate Payment of your overdue fund.
TO WHOM IT MAY CONCERN
Dear Sir/Madam
My name is Justice Sylvanus Nsofor a Nigerian diplomat to United States. I have
received a presidential Order from the presidency of the government of Nigeria to
contact you for the immediate payment of your overdue payment after his re-election
for the second term in office as the president commender in chieft of armed forces
Fedral Republic of Nigeria on his official visit to the United States to meet with
the United States President (Donald Trumph) to express his gratitude to him for
supporting won the presidential election. him .
It has been discovered through our security monitoring network that you have been
dealing with wrong channels to actualize your claim and lost some amount of money in
the process. Be informed that the government does not pay foreign debt through
sycophants but only through the government approved channels.
Diplomatic trust cannot be put into disrepute by any responsible government. This is
one of the reasons the present government of Nigeria Anti-corruption crusade has
been commended by the United Nations, the World Bank, IMF, American Government,
British Government etc with the Bi-lateral agreement between both the Nigeria
President and the United states President that outstanding foreign funds such as
Inheritance claim and Lottery winnings be paid while the United States Government
have also agreed to repatraite the looted funds brought to
United States back to Nigeria Government.
The Government considered to pay you and few other beneficiaries through this
diplomatic means to safe you and your funds from the evil hands of impostors and to
save the image of the government of Nigeria from disrepute. So you are lucky to be
one of the few favored beneficiaries. All we need from you is your maximum
cooperation and you get paid.
Reconfirm your current information as requested below:
1) Your full name, address, telephone and email.
2) Your kind of claim
3} How much is your money?
4) Why have you not been paid before this time?
The reason for the request of the above is to be sure that we are dealing with the
true beneficiary. I have your payment file and I know that only a true beneficiary
will give the right information in the payment file. Upon our receipt of your reply
to this mail, we shall reconcile your payment documents with the concern authorities
and direct you to our paying bank for your immediate payment.
Kindly reply through this Email Address
Regards,
Justice Sylvanus Nsofor (CFR)
Nigerian Diplomat to United States.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces