#395161 by buried under 419s
Fri Aug 23, 2019 8:57 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 2JrCC6fGX10laAAAjbubUg
for <>; Fri, 23 Aug 2019 03:57:43 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 23 Aug 2019 03:57:43 -0700
Received: from smtp-out-8.cbn.net.id ([210.210.188.228]:41296 helo=smtp.cbn.net.id)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1i17GE-0006un-7t
for ; Fri, 23 Aug 2019 03:57:43 -0700
Received: from ip17-146.cbn.net.id ([202.158.17.146]:55327 helo=User)
by smtp-2-3.int.cbn.net.id with smtp (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1i17FT-0004IY-1F; Fri, 23 Aug 2019 17:56:52 +0700
Reply-To: <[email protected]>
From: "DR AMOS JOHNSON"<[email protected]>
Date: Fri, 23 Aug 2019 11:57:00 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=48.6
X-Spam-Score: 486
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear: Beneficiary, We apologized for sending you this sensitive
information via e-mail (Internet) which has been greatly abused instead of
a Certified mail/Post-mail. This is due to the urgency and importance of
the information., I was instructed to inform you on the Latest development
concerning your unpaid fund. You are to abide by this instructions and email
us back for more directives on your payment through our "Fiduciary Offshore
payment Bank". [...]
Content analysis details: (48.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.1 NSL_RCVD_HELO_USER Received from HELO User
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
2.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (paymastergeneralfgn002[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?202.158.17.146>]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[202.158.17.146 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paymastergeneralfgn002[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(foreigndebtpaymentfgn2002[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.8 YOU_INHERIT Discussing your inheritance
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
1.5 FAKE_REPLY_C No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.7 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.9 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Notice Concerning your Approved Payment!
Dear: Beneficiary,
We apologized for sending you this sensitive information via e-mail (Internet) which
has been greatly abused instead of a Certified mail/Post-mail. This is due to the
urgency and importance of the information., I was instructed to inform you on the
Latest development concerning your unpaid fund. You are to abide by this
instructions and email us back for more directives on your payment through our
"Fiduciary Offshore payment Bank".
From the transaction files available to us, you should be able to have received your
funds before now. But from the fact that you did not come through the front door to
claim your fund but through the back door by dealing with some African and European
impostors and that is why you have not received your inheritance payment,
To process this payment through our fiduciary payment bank without further delay,
kindly send the details as stated below to enable us re-profile your funds ready for
release from the payment bank.
Full Name
ID Card Copy
Current/Address
Phone Number
Occupation
If we do not receive a response from you within the next 72 hours, we will assume
you are no longer ready, willing and able to process your funds, and we will regard
same as unclaimed inheritance to be returned
to the Escrow Account of FMF.
Yours Sincerely,
Dr Amos Johnson
Director Foreign Debt Payment Committee
Federal Republic of Nigeria
+234 9030564752.
Delivered-To:
Received: from
by with LMTP id 2JrCC6fGX10laAAAjbubUg
for <>; Fri, 23 Aug 2019 03:57:43 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 23 Aug 2019 03:57:43 -0700
Received: from smtp-out-8.cbn.net.id ([210.210.188.228]:41296 helo=smtp.cbn.net.id)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1i17GE-0006un-7t
for ; Fri, 23 Aug 2019 03:57:43 -0700
Received: from ip17-146.cbn.net.id ([202.158.17.146]:55327 helo=User)
by smtp-2-3.int.cbn.net.id with smtp (Exim 4.80.1)
(envelope-from <[email protected]>)
id 1i17FT-0004IY-1F; Fri, 23 Aug 2019 17:56:52 +0700
Reply-To: <[email protected]>
From: "DR AMOS JOHNSON"<[email protected]>
Date: Fri, 23 Aug 2019 11:57:00 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=48.6
X-Spam-Score: 486
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear: Beneficiary, We apologized for sending you this sensitive
information via e-mail (Internet) which has been greatly abused instead of
a Certified mail/Post-mail. This is due to the urgency and importance of
the information., I was instructed to inform you on the Latest development
concerning your unpaid fund. You are to abide by this instructions and email
us back for more directives on your payment through our "Fiduciary Offshore
payment Bank". [...]
Content analysis details: (48.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.1 NSL_RCVD_HELO_USER Received from HELO User
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
2.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (paymastergeneralfgn002[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?202.158.17.146>]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[202.158.17.146 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paymastergeneralfgn002[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(foreigndebtpaymentfgn2002[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.8 YOU_INHERIT Discussing your inheritance
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
1.5 FAKE_REPLY_C No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.7 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.9 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Notice Concerning your Approved Payment!
Dear: Beneficiary,
We apologized for sending you this sensitive information via e-mail (Internet) which
has been greatly abused instead of a Certified mail/Post-mail. This is due to the
urgency and importance of the information., I was instructed to inform you on the
Latest development concerning your unpaid fund. You are to abide by this
instructions and email us back for more directives on your payment through our
"Fiduciary Offshore payment Bank".
From the transaction files available to us, you should be able to have received your
funds before now. But from the fact that you did not come through the front door to
claim your fund but through the back door by dealing with some African and European
impostors and that is why you have not received your inheritance payment,
To process this payment through our fiduciary payment bank without further delay,
kindly send the details as stated below to enable us re-profile your funds ready for
release from the payment bank.
Full Name
ID Card Copy
Current/Address
Phone Number
Occupation
If we do not receive a response from you within the next 72 hours, we will assume
you are no longer ready, willing and able to process your funds, and we will regard
same as unclaimed inheritance to be returned
to the Escrow Account of FMF.
Yours Sincerely,
Dr Amos Johnson
Director Foreign Debt Payment Committee
Federal Republic of Nigeria
+234 9030564752.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces