by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Apr 2017 15:59:45 -0700
Received: from cm4.tinp.net.tw ([61.60.224.23]:58123)
by with esmtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1cyniG-0008NV-DO
for ; Thu, 13 Apr 2017 15:59:44 -0700
Received: by cm4.tinp.net.tw (Postfix, from userid 99)
id 9CE6F10485A5; Fri, 14 Apr 2017 06:58:52 +0800 (CST)
Received: from User (unknown [197.242.115.198])
by cm4.tinp.net.tw (Postfix) with ESMTP id 2F274104859A;
Fri, 14 Apr 2017 06:58:17 +0800 (CST)
Reply-To: <[email protected]>
From: "Dr William Mike"<[email protected]>
Date: Thu, 13 Apr 2017 23:58:43 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: Avast (VPS 170413-0, 04/13/2017), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=23.6
X-Spam-Score: 236
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: STATUTORY ANOMALIES ON YOU RECEIVING YOUR APPROVED FUND AS
AND INHERITANCE. [...]
Content analysis details: (23.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[61.60.224.23 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[61.60.224.23 listed in psbl.surriel.com]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(willzzmk01[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 T_HK_NAME_DR No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 T_REMOTE_IMAGE Message contains an external image
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** CONSIGNMENT
STATUTORY ANOMALIES ON YOU RECEIVING YOUR APPROVED
FUND AS AND
INHERITANCE.
FROM: DELIVERY AGENT
Dr William Mike
Hello!!!
Firstly, I wish to introduce myself as a sympathizer of your situation. I
am the Comptroller of Fund Movement Terminal and Director of national
warehouse where abandoned fund/valuables consignments are dumped.
This is to inform you that fresh arrangement was made by me to conclude the shipment
of your consignment of funds to your country. I choose to do it and make sure it has
left the shores of Nigeria already before contacting you. I found out that this
consignment has been lying here because of lack of contact and none payment of
delivery cost This is why I decided to use my connections as the Delivery/Shipment
officer in charge of the National Security warehouse. (This is where all the
abandoned consignments in Nigeria are kept at the orders of the Government of
Nigeria for seizure or destruction.
Therefore, this letter is highly confidential and top secret. For this reason,you
must not inform anybody about this letter or my contact with
you. You must keep my relationship with you to be topped secret and highly
confidential because as I have arranged your consignment to the Diplomatic
Security Company in Nigeria where the delivery will come from to your house, so no
one must know so that the fund will not raise an eye brow.
CONDITIONS OF THIS DELIVERY
1. You must keep my relationship with you highly secret/confidential.
2. You must not expose all the above information to anybody.
3. You must be willing to act fast on any information, directives and
advice from me and the Diplomatic Security Company in Nigeria.
Note: I know the content of the Box because I could see the amount you are being
owned by the Federal Government of Nigeria as an inheritance. This is why I decided
to get involved. You must also know that this arrangement do not concern all the
people that you have had contact with in Nigeria before today as this
consignment/Payment has been surrendered to the Government, Hence my involvement.
As soon as I receive your response, I will give you more details on the way of such
arrangements and I will also give you the full contact information of the Diplomatic
Security Company in Nigeria as soon as you have contacted me.
Therefore, further details will be furnished to you as soon as I receive your reply.
Yours Sincerely
Dr William Mike
Director Of National Warehouse
Envelope-to:
Delivery-date: Thu, 13 Apr 2017 15:59:45 -0700
Received: from cm4.tinp.net.tw ([61.60.224.23]:58123)
by with esmtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1cyniG-0008NV-DO
for ; Thu, 13 Apr 2017 15:59:44 -0700
Received: by cm4.tinp.net.tw (Postfix, from userid 99)
id 9CE6F10485A5; Fri, 14 Apr 2017 06:58:52 +0800 (CST)
Received: from User (unknown [197.242.115.198])
by cm4.tinp.net.tw (Postfix) with ESMTP id 2F274104859A;
Fri, 14 Apr 2017 06:58:17 +0800 (CST)
Reply-To: <[email protected]>
From: "Dr William Mike"<[email protected]>
Date: Thu, 13 Apr 2017 23:58:43 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: Avast (VPS 170413-0, 04/13/2017), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=23.6
X-Spam-Score: 236
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: STATUTORY ANOMALIES ON YOU RECEIVING YOUR APPROVED FUND AS
AND INHERITANCE. [...]
Content analysis details: (23.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[61.60.224.23 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[61.60.224.23 listed in psbl.surriel.com]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(willzzmk01[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 T_HK_NAME_DR No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 T_REMOTE_IMAGE Message contains an external image
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** CONSIGNMENT
STATUTORY ANOMALIES ON YOU RECEIVING YOUR APPROVED
FUND AS AND
INHERITANCE.
FROM: DELIVERY AGENT
Dr William Mike
Hello!!!
Firstly, I wish to introduce myself as a sympathizer of your situation. I
am the Comptroller of Fund Movement Terminal and Director of national
warehouse where abandoned fund/valuables consignments are dumped.
This is to inform you that fresh arrangement was made by me to conclude the shipment
of your consignment of funds to your country. I choose to do it and make sure it has
left the shores of Nigeria already before contacting you. I found out that this
consignment has been lying here because of lack of contact and none payment of
delivery cost This is why I decided to use my connections as the Delivery/Shipment
officer in charge of the National Security warehouse. (This is where all the
abandoned consignments in Nigeria are kept at the orders of the Government of
Nigeria for seizure or destruction.
Therefore, this letter is highly confidential and top secret. For this reason,you
must not inform anybody about this letter or my contact with
you. You must keep my relationship with you to be topped secret and highly
confidential because as I have arranged your consignment to the Diplomatic
Security Company in Nigeria where the delivery will come from to your house, so no
one must know so that the fund will not raise an eye brow.
CONDITIONS OF THIS DELIVERY
1. You must keep my relationship with you highly secret/confidential.
2. You must not expose all the above information to anybody.
3. You must be willing to act fast on any information, directives and
advice from me and the Diplomatic Security Company in Nigeria.
Note: I know the content of the Box because I could see the amount you are being
owned by the Federal Government of Nigeria as an inheritance. This is why I decided
to get involved. You must also know that this arrangement do not concern all the
people that you have had contact with in Nigeria before today as this
consignment/Payment has been surrendered to the Government, Hence my involvement.
As soon as I receive your response, I will give you more details on the way of such
arrangements and I will also give you the full contact information of the Diplomatic
Security Company in Nigeria as soon as you have contacted me.
Therefore, further details will be furnished to you as soon as I receive your reply.
Yours Sincerely
Dr William Mike
Director Of National Warehouse
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
