#356884 by buried under 419s
Mon Feb 26, 2018 10:24 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id IMR5LkQGlFo4agAAjbubUg
for <>; Mon, 26 Feb 2018 05:06:12 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 26 Feb 2018 05:06:12 -0800
Received: from smtp3.hiworks.co.kr ([121.254.168.205]:33798)
by m with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eqITq-000746-S4
for ; Mon, 26 Feb 2018 05:06:12 -0800
Received: (qmail 174874 invoked from network); 26 Feb 2018 22:05:21 +0900
Received: from unknown (HELO hiworks.co.kr) (192.168.10.219)
by 0 (qmail 1.03 + ejcp v14) with SMTP;
26 Feb 2018 22:05:21 +0900
Received: (qmail 26071 invoked by uid 504); 26 Feb 2018 22:05:21 +0900
Received: from unknown (HELO User) ([email protected]@153.142.4.250)
by 0 (qmail 1.03 + ejcp v14) with SMTP;
26 Feb 2018 22:05:21 +0900
X-Authinfo: HIWORKS SMTP authenticated <[email protected]>
Reply-To: <[email protected]>
From: "Walter S. Nkanu Onnoghen GCON"<[email protected]>
To: [email protected]
Date: Mon, 26 Feb 2018 03:05:22 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=31.6
X-Spam-Score: 316
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Fund beneficiary, This is to inform you that in the course
of my investigation as director of payment verification / implementation
committee I came across your name as unpaid fund beneficiary in the record
of the central bank of Nigeria and other banks that are suppose to get your
funds amounting on the sum of $6,700,000.00 (Six million seven hundred thousand
united states dollars) released to you. My committee was set up by the payment
reconciliation committee to verify and scrutinize all outstanding debts owed
to our foreign beneficiaries in accordance to the information received from
the United States government and other countries over unpaid huge debts owed
to Foreigners. [...]
Content analysis details: (31.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.7 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[121.254.168.205 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.142.4.250>]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (wsnogcon5443[at]outlook.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(wsnogcon5443[at]outlook.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(waltesnkanu1951[at]gmail.com)
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[153.142.4.250 listed in zen.spamhaus.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** You do not need to pay any money to any official regarding to your unpaid fund.
Dear Fund beneficiary,
This is to inform you that in the course of my investigation as director of payment
verification / implementation committee I came across your name as unpaid fund
beneficiary in the record of the central bank of Nigeria and other banks that are
suppose to get your funds amounting on the sum of $6,700,000.00 (Six million seven
hundred thousand united states dollars) released to you. My committee was set up by
the payment reconciliation committee to verify and scrutinize all outstanding debts
owed to our foreign beneficiaries in accordance to the information received from the
United States government and other countries over unpaid huge debts owed to
Foreigners.
From my investigation I discovered that these bank officials deliberately refused to
let the charges be deducted from your principal fund because they want your fund to
remain trapped in the bank, while they continue to extort money from beneficiaries
under some flimsy excuse. You do not need to pay any money to any official, all you
are required to do is swear to an affidavit at the federal high court of Nigeria,
authorizing the bank to deduct all charges from your principal fund and transfer the
balance of funds after deduction to your bank account. If you have spent any money
in the past in your quest for payment, kindly let me know so that I can follow this
up. You can reach me on my phone or email for directive on how you can get the
deduction done as soon as possible and get your payment released in your account.
Yours sincerely,
Walter S. Nkanu Onnoghen GCON
ATTORNEY GENERAL FEDERAL
REPUBLIC OF NIGERIA.
PHONE: +234-908325-3420
Email: [email protected]
Delivered-To:
Received: from
by with LMTP id IMR5LkQGlFo4agAAjbubUg
for <>; Mon, 26 Feb 2018 05:06:12 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 26 Feb 2018 05:06:12 -0800
Received: from smtp3.hiworks.co.kr ([121.254.168.205]:33798)
by m with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eqITq-000746-S4
for ; Mon, 26 Feb 2018 05:06:12 -0800
Received: (qmail 174874 invoked from network); 26 Feb 2018 22:05:21 +0900
Received: from unknown (HELO hiworks.co.kr) (192.168.10.219)
by 0 (qmail 1.03 + ejcp v14) with SMTP;
26 Feb 2018 22:05:21 +0900
Received: (qmail 26071 invoked by uid 504); 26 Feb 2018 22:05:21 +0900
Received: from unknown (HELO User) ([email protected]@153.142.4.250)
by 0 (qmail 1.03 + ejcp v14) with SMTP;
26 Feb 2018 22:05:21 +0900
X-Authinfo: HIWORKS SMTP authenticated <[email protected]>
Reply-To: <[email protected]>
From: "Walter S. Nkanu Onnoghen GCON"<[email protected]>
To: [email protected]
Date: Mon, 26 Feb 2018 03:05:22 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=31.6
X-Spam-Score: 316
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Fund beneficiary, This is to inform you that in the course
of my investigation as director of payment verification / implementation
committee I came across your name as unpaid fund beneficiary in the record
of the central bank of Nigeria and other banks that are suppose to get your
funds amounting on the sum of $6,700,000.00 (Six million seven hundred thousand
united states dollars) released to you. My committee was set up by the payment
reconciliation committee to verify and scrutinize all outstanding debts owed
to our foreign beneficiaries in accordance to the information received from
the United States government and other countries over unpaid huge debts owed
to Foreigners. [...]
Content analysis details: (31.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.7 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[121.254.168.205 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.142.4.250>]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (wsnogcon5443[at]outlook.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(wsnogcon5443[at]outlook.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(waltesnkanu1951[at]gmail.com)
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[153.142.4.250 listed in zen.spamhaus.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** You do not need to pay any money to any official regarding to your unpaid fund.
Dear Fund beneficiary,
This is to inform you that in the course of my investigation as director of payment
verification / implementation committee I came across your name as unpaid fund
beneficiary in the record of the central bank of Nigeria and other banks that are
suppose to get your funds amounting on the sum of $6,700,000.00 (Six million seven
hundred thousand united states dollars) released to you. My committee was set up by
the payment reconciliation committee to verify and scrutinize all outstanding debts
owed to our foreign beneficiaries in accordance to the information received from the
United States government and other countries over unpaid huge debts owed to
Foreigners.
From my investigation I discovered that these bank officials deliberately refused to
let the charges be deducted from your principal fund because they want your fund to
remain trapped in the bank, while they continue to extort money from beneficiaries
under some flimsy excuse. You do not need to pay any money to any official, all you
are required to do is swear to an affidavit at the federal high court of Nigeria,
authorizing the bank to deduct all charges from your principal fund and transfer the
balance of funds after deduction to your bank account. If you have spent any money
in the past in your quest for payment, kindly let me know so that I can follow this
up. You can reach me on my phone or email for directive on how you can get the
deduction done as soon as possible and get your payment released in your account.
Yours sincerely,
Walter S. Nkanu Onnoghen GCON
ATTORNEY GENERAL FEDERAL
REPUBLIC OF NIGERIA.
PHONE: +234-908325-3420
Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces