Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#363656 by buried under 419s Thu May 03, 2018 9:18 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 6IhAAyPS6lqSVQAAjbubUg
for <>; Thu, 03 May 2018 02:10:59 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 03 May 2018 02:10:59 -0700
Received: from mail-oln040092068096.outbound.protection.outlook.com ([40.92.68.96]:54257 helo=EUR02-HE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fEAGP-0005hk-3D
for ; Thu, 03 May 2018 02:10:58 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=u1t2ctJOWcFylCpVL5WzmGZ0jx3R9w0snczHKx+vTCc=;
b=HSlP377Y7zX24X3R1rCc/DXQ1dbia6ocvpyGxKXr+DMoICxaJx1zqAeuQA95oy+34y+7mpxvQfprnn2yaV4r/DyPPF4AOAtqzlJEuEyagWH42zO2zuu2FmuRG4OPI4JGmHUyZrxlPyfOWvWDOawQCh2FnakKLnPze9FlFlGWWGN8QNFcRL5OmM9rziAKMGpCj7OQ1BqU9WK0/CIqtrp/yWaSbSDhRZMSSQk5zTszE1+GdPJZ2FxC++8SCWT7Eem764QHwe0ZQiDVriT5d1mK3SqKcMucwFxzEPLPt+F8g2TsszPIH6LHvT6UZYt0f+dA+RKNaDUai820JL6STI5FVg==
Received: from HE1EUR02FT048.eop-EUR02.prod.protection.outlook.com
(10.152.10.52) by HE1EUR02HT106.eop-EUR02.prod.protection.outlook.com
(10.152.11.138) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.715.13; Thu, 3
May 2018 09:10:03 +0000
Received: from VI1PR0701MB2542.eurprd07.prod.outlook.com (10.152.10.59) by
HE1EUR02FT048.mail.protection.outlook.com (10.152.10.243) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
15.20.715.13 via Frontend Transport; Thu, 3 May 2018 09:10:03 +0000
Received: from VI1PR0701MB2542.eurprd07.prod.outlook.com
([fe80::15e0:3669:4356:afe3]) by VI1PR0701MB2542.eurprd07.prod.outlook.com
([fe80::15e0:3669:4356:afe3%4]) with mapi id 15.20.0735.006; Thu, 3 May 2018
09:10:02 +0000
From: Rev Ben Richards <[email protected]>
Thread-Topic: CHECK IT
Thread-Index: AQHT4r5R6m59aEW7TEOdj55zaXKixA==
Date: Thu, 3 May 2018 09:10:02 +0000
Message-ID: <VI1PR0701MB254295006A218925552C0DB591870@VI1PR0701MB2542.eurprd07.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:D2C1FC587A8F14E0858B77D1381ED9E1E49537D49095726DD899946C10613266;UpperCasedChecksum:61AAACA55834BF66E6AE9D1EEAA5DC90F01E4662D98C1081113C9B83FDF5E48D;SizeAsReceived:14307;Count:42
x-tmn: [yA8YWKlwD9Y+rnwICTojnq8gOInlXa2U]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;HE1EUR02HT106;7:4AKa3aK6yoiRPhdi+ZZrtxAPTRoidL2OoHqx3hvVlyou9q/zRzThKEB3ooXmOsuDvEXu5jMIhuaw+mZb5fRPPCIykQpPC6GSFexTCzJgG4srd+quKdobk9tR74BqQMmnopJYc1WAUZWK0qhpoFz3sint82yX8DhTPxPwdraAPeM/NL4uxo5rCkO4DsdYdoUTqdWKaCJ3EOO0ic9zWqo88CQYl3bkmSg0GeUXZ9TcBB4kdvN3wzemY4A4ebcluVbp
x-incomingheadercount: 42
x-eopattributedmessage: 0
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1603101448)(1601125374)(1701031045);SRVR:HE1EUR02HT106;
x-ms-exchange-slblob-mailprops: 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
x-ms-traffictypediagnostic: HE1EUR02HT106:
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(444000031);SRVR:HE1EUR02HT106;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR02HT106;
x-forefront-prvs: 066153096A
x-forefront-antispam-report: SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:HE1EUR02HT106;H:VI1PR0701MB2542.eurprd07.prod.outlook.com;FPR:;SPF:None;LANG:;
x-microsoft-antispam-message-info: 2o1DHVyqtp7O6n23b5+4gfeGCyBC2rOtAFhe/APST3EPXsVvTuNHjttQCn1zbu2oi6bJJwJNr22EutSlVh4f3XB7pQQeW1ARi3HZQZuP75cWCED7tKxxPVZgDzjG98NDL4aJ+ykH+3QLeXBWqdXmKLI6on6c/3ksiKWP0C+SKsJZVy2wt+cok2usVZ8vsS+r
Content-Type: multipart/alternative;
boundary="_000_VI1PR0701MB254295006A218925552C0DB591870VI1PR0701MB2542_"
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: 788d60a3-40bd-4ecd-3c56-08d5b0d5a798
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 074d7d4d-72e2-4a0a-9d89-73b16535e4cd
X-MS-Exchange-CrossTenant-Network-Message-Id: 788d60a3-40bd-4ecd-3c56-08d5b0d5a798
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 074d7d4d-72e2-4a0a-9d89-73b16535e4cd
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 May 2018 09:10:02.7666
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR02HT106
X-Spam-Status: Yes, score=13.6
X-Spam-Score: 136
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Attention: Sir I am Ben Richards, I am with the Finance Director
in Nigerian National Petroleum Corporation. I am writing to inform you of
a business proposal with a value of $58.2 Million dollars. The Finance Director
have instructed me to look for a foreign business investor; who is ready,
willing and able; to be our business partner. We will provide the $58.2Million
dollars. [...]

Content analysis details: (13.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 MISSING_HEADERS Missing To: header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.68.96 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(benrichards202[at]outlook.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (benrichards202[at]outlook.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 KAM_ADVERT2 RAW: This is probably an unwanted commercial email...
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.4 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** CHECK IT


Attention: Sir

I am Ben Richards, I am with the Finance Director in Nigerian National Petroleum
Corporation. I am writing to inform you of a business proposal with a value of $58.2
Million dollars. The Finance Director have instructed me to look for a foreign
business investor;
who is ready, willing and able; to be our business partner. We will provide the
$58.2Million dollars.

This fund is proceeds of a contract payment overage. We have it secured since the
contract has been fully paid out and completed; leaving the unused balance to use.

You would invest the funds for a period of ten years for benefits. You can reinvest
then after ten years. IF you are not interested in partnership, the fund can be
shared for mutual benefit. You will take 45% of the fund, while 50% will be for our
side. The remaining 5% will be set aside to off set expenses of legalities that
might be incurred in placing & securing the funds ie amount as per above.

I will get back to YOU, so that I can provide current status /location of funds &
details once I hear from you.

This is proposed to secure these funds from seizure by corrupt operatives of the
Economic and Financial Crime Commission (EFCC), for their purposes. WE will use
funds for Humanitarian and Economic Development purposes, for our people.

You can read through the below link: They just seized funds from others.

http://allafrica.com/stories/201704130630.html

I wait to hear from you.

Yours Faithfully,

Ben Richards,

Finance Department,
Nigerian National Petroleum Corporation
+234 8026450994

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 125 guests