by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 06 May 2017 09:26:10 -0700
Received: from z98l186.static.ctm.net ([202.175.98.186]:42028 helo=perfectone.com.mo)
by with esmtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1d72X2-0000xt-Fx
for ; Sat, 06 May 2017 09:26:10 -0700
Received: from User (virtual146.drikict.net [103.10.52.83])
(Authenticated sender: admin)
by perfectone.com.mo (Postfix) with ESMTPA id 231CF33A1A9C;
Sat, 6 May 2017 22:17:15 +0800 (CST)
Reply-To: <[email protected]>
From: "Mr.Mathieu"<[email protected]>
Date: Sat, 6 May 2017 14:17:32 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=27.5
X-Spam-Score: 275
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Before I introduce myself, I wish to inform you that this
letter is not a hoax mail and I urge you to treat it serious. We want to transfer
to overseas account ($60,000.000.00 ) Sixty million US DOLLARS from a prime
Bank here in Abidjan. I want to ask you, If you are not capable to quietly
look for a reliable and honest person who will be capable and fit to provide
either an existing bank account or to set up a new Bank a/c immediately to
receive this money, even an empty a/c can serve to receive this money, as
long as you will remain honest to me till the end for this important business
trusting in you and believing in God that you will never let me down either
now or in future I am Mr.Mathieu SANOGO , presently promoted to Auditor General
in one of the banks here in Abidjan cote d'ivoire. [...]
Content analysis details: (27.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.5 HK_SCAM_N15 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[202.175.98.186 listed in list.dnswl.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.175.98.186 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[202.175.98.186 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?103.10.52.83>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(drmathsag45[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re;
Before I introduce myself, I wish to inform you that this letter is not a hoax mail
and I urge you to treat it serious. We want to transfer to overseas account
($60,000.000.00 ) Sixty million US DOLLARS from a prime Bank here in Abidjan. I want
to ask you, If you are not capable to quietly look for a reliable and honest person
who will be capable and fit to provide either an existing bank account or to set up
a new Bank a/c immediately to receive this money, even an empty a/c can serve to
receive this money, as long as you will remain honest to me till the end for this
important business trusting in you and believing in God that you will never let me
down either now or in future I am Mr.Mathieu SANOGO , presently promoted to Auditor
General in one of the banks here in Abidjan cote d'ivoire.
During the course of our auditing last week, I discovered a floating fund in an
account opened in the bank in 2012 and since 2017 nobody has operated on this
account again, after going through some old files in the records I discovered that
the owner of the account died without a [Heir/WILL] hence the money is floating and
if I do not remit this money out urgently it will be forfeited for nothing. The
owner of this account is Mr. Keith Lathan an American and a great industrialist and
a resident of Alaska State, who unfortunately lost his life in the Auto crash in
Alaska ,which crashed on January 31 2014, including his wife and
only daughter leaving nobody to claim the money. No other person knows about this
account or any thing concerning it, the account has no other beneficiary and my
investigation proved to me as well that the account is a secret account.
The total amount involved is Sixty million US DOLLARS only [60,000.000.00 DOLLARS ]
and we wish to transfer this money into a safe foreigners account abroad. But I
don't know any foreigner; I am only contacting you as a foreigner because this money
cannot be approved to a local person here, but to a foreigner who has information
about the account, which I shall give to you upon your positive response. I am
revealing this to you with believe in God that you will never let me down in this
business, you are the first and the only person that I am contacting for this
business, so please reply urgently so that I will inform you the next step to take
urgently. I need your strong assurance that you will never let us down, me and a key
bank official who is deeply involved with me in this business.
I guarantee you that this transaction will be executed under a legitimate
arrangement that will protect you from any breach of the law. The bank official will
destroy all documents of the transaction immediately you receive this money leaving
no trace to any place. I will use my position and influence to obtain all legal
approvals for onward transfer of this money to your account with appropriate
clearance from the relevant ministries and foreign exchange departments At the
conclusion of this business, you will be given 30% of the total amount, 70% will be
for us.
PLEASE, TREAT THIS PROPOSAL AS TOP SECRET.
Best Regards
Mathieu SANOGO
Envelope-to:
Delivery-date: Sat, 06 May 2017 09:26:10 -0700
Received: from z98l186.static.ctm.net ([202.175.98.186]:42028 helo=perfectone.com.mo)
by with esmtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1d72X2-0000xt-Fx
for ; Sat, 06 May 2017 09:26:10 -0700
Received: from User (virtual146.drikict.net [103.10.52.83])
(Authenticated sender: admin)
by perfectone.com.mo (Postfix) with ESMTPA id 231CF33A1A9C;
Sat, 6 May 2017 22:17:15 +0800 (CST)
Reply-To: <[email protected]>
From: "Mr.Mathieu"<[email protected]>
Date: Sat, 6 May 2017 14:17:32 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=27.5
X-Spam-Score: 275
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Before I introduce myself, I wish to inform you that this
letter is not a hoax mail and I urge you to treat it serious. We want to transfer
to overseas account ($60,000.000.00 ) Sixty million US DOLLARS from a prime
Bank here in Abidjan. I want to ask you, If you are not capable to quietly
look for a reliable and honest person who will be capable and fit to provide
either an existing bank account or to set up a new Bank a/c immediately to
receive this money, even an empty a/c can serve to receive this money, as
long as you will remain honest to me till the end for this important business
trusting in you and believing in God that you will never let me down either
now or in future I am Mr.Mathieu SANOGO , presently promoted to Auditor General
in one of the banks here in Abidjan cote d'ivoire. [...]
Content analysis details: (27.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.5 HK_SCAM_N15 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[202.175.98.186 listed in list.dnswl.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.175.98.186 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[202.175.98.186 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?103.10.52.83>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(drmathsag45[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re;
Before I introduce myself, I wish to inform you that this letter is not a hoax mail
and I urge you to treat it serious. We want to transfer to overseas account
($60,000.000.00 ) Sixty million US DOLLARS from a prime Bank here in Abidjan. I want
to ask you, If you are not capable to quietly look for a reliable and honest person
who will be capable and fit to provide either an existing bank account or to set up
a new Bank a/c immediately to receive this money, even an empty a/c can serve to
receive this money, as long as you will remain honest to me till the end for this
important business trusting in you and believing in God that you will never let me
down either now or in future I am Mr.Mathieu SANOGO , presently promoted to Auditor
General in one of the banks here in Abidjan cote d'ivoire.
During the course of our auditing last week, I discovered a floating fund in an
account opened in the bank in 2012 and since 2017 nobody has operated on this
account again, after going through some old files in the records I discovered that
the owner of the account died without a [Heir/WILL] hence the money is floating and
if I do not remit this money out urgently it will be forfeited for nothing. The
owner of this account is Mr. Keith Lathan an American and a great industrialist and
a resident of Alaska State, who unfortunately lost his life in the Auto crash in
Alaska ,which crashed on January 31 2014, including his wife and
only daughter leaving nobody to claim the money. No other person knows about this
account or any thing concerning it, the account has no other beneficiary and my
investigation proved to me as well that the account is a secret account.
The total amount involved is Sixty million US DOLLARS only [60,000.000.00 DOLLARS ]
and we wish to transfer this money into a safe foreigners account abroad. But I
don't know any foreigner; I am only contacting you as a foreigner because this money
cannot be approved to a local person here, but to a foreigner who has information
about the account, which I shall give to you upon your positive response. I am
revealing this to you with believe in God that you will never let me down in this
business, you are the first and the only person that I am contacting for this
business, so please reply urgently so that I will inform you the next step to take
urgently. I need your strong assurance that you will never let us down, me and a key
bank official who is deeply involved with me in this business.
I guarantee you that this transaction will be executed under a legitimate
arrangement that will protect you from any breach of the law. The bank official will
destroy all documents of the transaction immediately you receive this money leaving
no trace to any place. I will use my position and influence to obtain all legal
approvals for onward transfer of this money to your account with appropriate
clearance from the relevant ministries and foreign exchange departments At the
conclusion of this business, you will be given 30% of the total amount, 70% will be
for us.
PLEASE, TREAT THIS PROPOSAL AS TOP SECRET.
Best Regards
Mathieu SANOGO
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
