[email protected] Dr. Kemi Adeosun

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 8JulKMRTI1r6WQAAjbubUg
for <>; Sat, 02 Dec 2017 17:30:44 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 02 Dec 2017 17:30:44 -0800
Received: from johnny.heliohost.org ([65.19.141.67]:48210)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eLJ7D-0005yq-EN
for ; Sat, 02 Dec 2017 17:30:44 -0800
Received: from [::1] (port=36288 helo=johnny.heliohost.org)
by johnny.heliohost.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1eLJ3k-0002cK-5a; Sat, 02 Dec 2017 17:27:08 -0800
Received: from 169.159.98.122 ([169.159.98.122]) by networkt.heliohost.org
(Horde Framework) with HTTPS; Sat, 02 Dec 2017 17:27:07 -0800
Date: Sat, 02 Dec 2017 17:27:07 -0800
Message-ID: <20171202172707.Horde.iFZaJksPD-uUY9SV-5fqrMW@networkt.heliohost.org>
From: Payment Office <[email protected]>
To:
Reply-to: [email protected]
User-Agent: Horde Application Framework 5
Content-Type: text/html; charset=utf-8
Content-Description: HTML Message
MIME-Version: 1.0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - johnny.heliohost.org
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - networkt.heliohost.org
X-Get-Message-Sender-Via: johnny.heliohost.org: authenticated_id: [email protected]
X-Authenticated-Sender: johnny.heliohost.org: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=21.7
X-Spam-Score: 217
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Federal Ministry of Finance (FMF) Ahmadu Bello Way, Central
Business District Abuja, Nigeria PMB 14, Abuja, Nigeria Abuja FCT 00234 Nigeria
Attn : This is to inform the above named beneficiary that your NNPC Contract
Payment file has been submitted to my office today for the cancellation of
your approved payment in the sum of (US$10.5M) this file was submitted from
the IMF/UN office yesterday with the report that you are dead and as such
no next of kin to stand and receive the payment on your behalf ? . [...]

Content analysis details: (21.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.6 URG_BIZ BODY: Contains urgent matter
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[65.19.141.67 listed in bb.barracudacentral.org]
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[65.19.141.67 listed in psbl.surriel.com]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Do You About This ??


Federal Ministry of Finance (FMF)

Ahmadu Bello Way, Central Business District

Abuja, Nigeria PMB 14, Abuja, Nigeria

Abuja FCT 00234 Nigeria


Attn :



This is to inform the above named beneficiary that your NNPC Contract Payment file
has been submitted to my office today for the cancellation of your approved payment
in the sum of (US$10.5M) this file was submitted from the IMF/UN office yesterday
with the report that you are dead and as such no next of kin to stand and receive
the payment on your behalf ? .

Before I go on to sign for your payment cancellation I need to get your response if
truly you are alive and aware of this development? did you mandate them to cancel
your payment ? Please explain to this ministry what really went wrong and why your
file was submitted for cancellation .



I declined to take this action until I hear from you, but if after 72hrs of this
notice and no response from you then this ministry will assume there report is true
that you are dead or that you willingly forfeited your payment, and so I shall be
compelled to sign the payment cancellation form . Your response is urgently needed
in other to safe your payment now .





Looking forward for your urgent response



Dr. Kemi Adeosun

Finance Minister

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id wDrjK+YtLlosYwAAjbubUg
for <>; Sun, 10 Dec 2017 23:04:06 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 10 Dec 2017 23:04:06 -0800
Received: from johnny.heliohost.org ([65.19.141.67]:36542)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eOI86-0006b6-Aa
for ; Sun, 10 Dec 2017 23:04:06 -0800
Received: from [::1] (port=42424 helo=johnny.heliohost.org)
by johnny.heliohost.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1eL4fJ-0000k2-ML; Sat, 02 Dec 2017 02:04:59 -0800
Received: from 154.66.23.211 ([154.66.23.211]) by networkt.heliohost.org
(Horde Framework) with HTTPS; Sat, 02 Dec 2017 02:04:56 -0800
Date: Sat, 02 Dec 2017 02:04:56 -0800
Message-ID: <20171202020456.Horde.HrjTy5a4nt0tqO9lY40rTus@networkt.heliohost.org>
From: Shipment Office <[email protected]>
To:
Reply-to: [email protected]
User-Agent: Horde Application Framework 5
Content-Type: text/html; charset=utf-8
Content-Description: HTML Message
MIME-Version: 1.0
Content-Disposition: inline
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - johnny.heliohost.org
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - networkt.heliohost.org
X-Get-Message-Sender-Via: johnny.heliohost.org: authenticated_id: [email protected]
X-Authenticated-Sender: johnny.heliohost.org: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=21.7
X-Spam-Score: 217
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Mr. James J. Bednarz Director Inspection Unit/Cargo Section
Newark Liberty International Airport New York USA. [...]

Content analysis details: (21.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 MILLION_USD BODY: Talks about millions of dollars
1.0 HK_SCAM_N3 BODY: No description available.
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[65.19.141.67 listed in bb.barracudacentral.org]
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.7 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: This is Urgent

Mr. James J. Bednarz
Director Inspection Unit/Cargo Section
Newark Liberty International Airport
New York USA.
Tel : +1 ( 202) 241 2357


Attn :

I am Mr. James Bednarz IMF/United Nations Inspection Agency here in Newark Liberty
International airport New York City. During my recent routine check at the Airport
Storage/vault on withheld packages, I discovered an abandoned shipment from a
Diplomat from London and Africa, when scanned it revealed an undisclosed sum of
money in two Metal Trunk Boxes weighing approximately 35kg each.

The consignment was abandoned because the Contents was not properly declared by the
consignee as “MONEY” rather it was declared as personal effect to avoid
interrogation by the customs and also the inability of the diplomat to pay for the
Non Inspection Charges which is about $5,850 USD before bringing in the consignment
into USA which from the delivery air way bill the shipment was suppose to be
delivered to your address and we refused to return back the consignment where it
came from since, we have already received it.

On my assumption, and after the scan each of the boxes will contain more than USD5.5
Million USD10M each and the consignment is still left in our Storage House here at
the airport till date. The details of the consignment has the receiver name and
address, also the airway bill has been received by my office.

However, to enable me confirm if you are the actual recipient of this consignment,
please provide me with your current Phone Number and Full Address to enable me cross
check if it c corresponds with the address on the official documents including the
Name of the nearest Airport around your city for immediate delivery.

Note that this consignment is supposed to have been returned to the United States
Treasury Department as unclaimed delivery due to the delays in concluding the
clearance processes and you know that the United States Government is under pressure
and seriously indeed of funds, so I advise you hasten up and clear it so I will
place it for the next day delivery of which possibly I will have to accompany the
delivery to your address to ensure it's smooth and safe arrival to your address,
that is also part of my duty .

The unpaid sum of $850 is the Government income revenue charges which can not be
weaved or ignored and we do not have any legal authority to take any thing out
from your consignment before delivery to you, the only thing that will bring the
eyes of the custom back to the consignment is if your delay in clearing it up for
immediate delivery. The US Government is expecting you to pay the above charges
without delay .

In other words, I will advise you to send the required details to me for quick
processing and response. Once I receive your information including the receipt of
the payment Sum of $850 for the Non Inspection Charges, I can get every thing
concluded within 3-6 hours upon your acceptance and proceed to your address for
delivery.

Please your direct telephone number is required so that we can reach you for more
information, I wait to hear from you urgently if you a re still alive.


Your in service

Mr. James Bednarz
IMF/UN Clearance Agent