Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#400940 by buried under 419s Wed Nov 27, 2019 9:34 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id MMe7JGe93l1dJwAAjbubUg
for <>; Wed, 27 Nov 2019 10:16:07 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 27 Nov 2019 10:16:07 -0800
Received: from vh16.eurobyte.ru ([46.30.40.106]:26176)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ia1rB-0002ap-2S
for ; Wed, 27 Nov 2019 10:16:07 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=silvertele.com; s=mail; h=Sender:Message-Id:Content-Transfer-Encoding:
Content-Type:MIME-Version:Date:Subject:From:Reply-To:To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=6Tbsr6dVk3Xa1Yow/GfY4Ot9f97LWWgqXkex11HZzf4=; b=NgQjZcNn8tABP9r1elcQdJLHVd
oTxD0CNEtwpkk/Igg+d1PjzH6OffxuwcyPG8gZzDrYByR7ONTwHaN/Z94BEHX3dezxGNOpzBaTeWM
L/x0EH3mqS2auStn24GeinxV6m5Mlas28XefULxUNvYHMBm69dwTjHzss/Jo7haTn+EQ=;
Received: from [213.39.58.161] (helo=User)
by vh16.eurobyte.ru with esmtpa
(envelope-from <[email protected]>)
authenticated with [email protected]
message id 1ia1q8-003pvC-OA; Wed, 27 Nov 2019 21:15:02 +0300
Reply-To: <[email protected]>
From: "United Nations Settlements Program"<[email protected]>
Date: Wed, 27 Nov 2019 10:14:55 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
Sender: [email protected]
X-Scanned-By: Clam AntiVirus, Wed, 27 Nov 2019 21:15:02 +0300
X-Spam-Status: Yes, score=43.2
X-Spam-Score: 432
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: From: Mr. Wanney Tunchy UNITED NATIONS OFFICE OF INTERNATIONAL
OVERSIGHT SERVICES Internal Audit,Monitoring,Consulting And Investigations
Division. [...]

Content analysis details: (43.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[213.39.58.161 listed in zen.spamhaus.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.9 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.2 NSL_RCVD_HELO_USER Received from HELO User
2.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.0 MISSING_HEADERS Missing To: header
0.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.3 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.1 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.5 FROM_MISSP_FREEMAIL From misspaced + freemail provider
3.1 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR $100, 000 FIRST INSTALLMENT PAYMENT IS READY


From: Mr. Wanney Tunchy

UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES

Internal Audit,Monitoring,Consulting And Investigations Division.





Dear Beneficiary,





My name is Mr. Wanney Tunchy, from the United Nations. It is a distinct pleasure to
write you again. As you are well aware many foreigners have invested thousands of
United States Dollars into Nigeria transactions in Hopeless Dreams to have none of
them become a reality.











This is to enable you have enough funds to pay for the Tax Clearance and bank
charges before you will receive the balance of US$10.4M (Ten Million Four Hundred
Thousand United States Dollars). PLEASE TAKE NOTE THAT YOU WILL PAY US$100 ONLY,
BEING NOTARIZATION FEE FIRST BEFORE YOUR $100,000.00 WILL PROCESS AND THIS IS THE
ONLY FINANCIAL OBLIGATION THAT YOU WILL UNDERTAKE TO RECEIVE THE US$100,000.00 (ONE
HUNDRED THOUSAND UNITED STATES DOLLARS) THROUGH THE WESTERN UNION MONEY TRANSFER OR
RIA MONEY TRANSFER.



NOTE: THIS FEE IS NOT DEDUCTIBLE. IT IS AN ORDER FROM THE BOARD OF DIRECTORS.



UPON THE RECEIPT OF YOUR RESPONSE, I WILL GIVE YOU DETAILS TO SEND THE $100
NOTARIZATION FEE TO ENABLE US PROCESS YOUR FUND WIRE TRANSFER WITIN 24 HOURS.



YOU CAN ALSO CONTACT ME ON THIS EMAIL: [email protected]



I await your response for further proceedings.



Sincerely yours,

Mr. Wanney Tunchy

{Under-Secretary-General}

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 24 guests