by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 12 Jun 2017 05:10:16 -0700
Received: from auth.wow.lk ([202.124.160.22]:60261)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dKOAd-0004qO-GX
for ; Mon, 12 Jun 2017 05:10:16 -0700
Received: from User (unknown [14.36.1.142])
(Authenticated sender: paragon)
by auth.wow.lk (Postfix) with ESMTPA id B37441863D6;
Mon, 12 Jun 2017 14:45:06 +0530 (IST)
Reply-To: <[email protected]>
From: "ADEBOLAJI COLE."<[email protected]>
Date: Mon, 12 Jun 2017 10:16:04 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=61.4
X-Spam-Score: 614
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Beneficiary. Kindly take note of the inconsistent
email address since this letter is unofficial. For security reasons, please
be advised not to disclose my ambition as stated in this letter to a third
party. Our next quarter audit will mark the end of my tenure in office and
I am offering to re-validate your inheritance claim to enable me grant immediate
authorization for the release of your funds before I vacate office. [...]
Content analysis details: (61.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
1.0 NSL_RCVD_FROM_USER Received from User
0.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.124.160.22 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.124.160.22 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?14.36.1.142>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[202.124.160.22 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[14.36.1.142 listed in zen.spamhaus.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(turkudide2.0[at]outlook.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(turku12turku[at]outlook.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.6 MSOE_MID_WRONG_CASE No description available.
1.7 FSL_NEW_HELO_USER Spam's using Helo and User
3.4 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.8 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.5 FROM_MISSP_USER From misspaced, from "User"
1.7 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
3.8 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.2 FROM_MISSPACED From: missing whitespace
3.4 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.7 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION BENEFICIARY!!!
Attention Beneficiary.
Kindly take note of the inconsistent email address since this letter is unofficial.
For security reasons, please be advised not to disclose my ambition as stated in
this letter to a third party. Our next quarter audit will mark the end of my tenure
in office and I am offering to re-validate your inheritance claim to enable me grant
immediate authorization for the release of your funds before I vacate office.
Statutory, it's my prerogative to conduct a final review of all unclaimed funds in
the suspense accounts before presenting my handover notes to my successor. However,
my conscience will not forgive me if your payment is revoked over some statutory
charges. Therefore, I am willing to apply for an administrative waiver on your
behalf just to ensure that your payment will be approved within the next three (3)
days.
If upon receiving your outstanding payment you would accept to donate 50% of the
funds to my late mother's orphanage home, I shall exercise my umpire immunity to
enable you enjoy a hitch free payment process under my supervision while still in
office. If you consider my 50%--50% deal offer, please indicate by a prompt reply
with your phone number for more details.
Thanks in anticipation, I hope to read from you at your earliest convenience.
Regards,
Adebolaji Cole.
Head of Operations, Foreign Payment Dept,
Federal Ministry of Interior.
Envelope-to:
Delivery-date: Mon, 12 Jun 2017 05:10:16 -0700
Received: from auth.wow.lk ([202.124.160.22]:60261)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dKOAd-0004qO-GX
for ; Mon, 12 Jun 2017 05:10:16 -0700
Received: from User (unknown [14.36.1.142])
(Authenticated sender: paragon)
by auth.wow.lk (Postfix) with ESMTPA id B37441863D6;
Mon, 12 Jun 2017 14:45:06 +0530 (IST)
Reply-To: <[email protected]>
From: "ADEBOLAJI COLE."<[email protected]>
Date: Mon, 12 Jun 2017 10:16:04 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=61.4
X-Spam-Score: 614
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Beneficiary. Kindly take note of the inconsistent
email address since this letter is unofficial. For security reasons, please
be advised not to disclose my ambition as stated in this letter to a third
party. Our next quarter audit will mark the end of my tenure in office and
I am offering to re-validate your inheritance claim to enable me grant immediate
authorization for the release of your funds before I vacate office. [...]
Content analysis details: (61.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
1.0 NSL_RCVD_FROM_USER Received from User
0.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.124.160.22 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.124.160.22 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?14.36.1.142>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[202.124.160.22 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[14.36.1.142 listed in zen.spamhaus.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(turkudide2.0[at]outlook.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(turku12turku[at]outlook.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.6 MSOE_MID_WRONG_CASE No description available.
1.7 FSL_NEW_HELO_USER Spam's using Helo and User
3.4 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.8 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
2.5 FROM_MISSP_USER From misspaced, from "User"
1.7 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
3.8 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.2 FROM_MISSPACED From: missing whitespace
3.4 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.7 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION BENEFICIARY!!!
Attention Beneficiary.
Kindly take note of the inconsistent email address since this letter is unofficial.
For security reasons, please be advised not to disclose my ambition as stated in
this letter to a third party. Our next quarter audit will mark the end of my tenure
in office and I am offering to re-validate your inheritance claim to enable me grant
immediate authorization for the release of your funds before I vacate office.
Statutory, it's my prerogative to conduct a final review of all unclaimed funds in
the suspense accounts before presenting my handover notes to my successor. However,
my conscience will not forgive me if your payment is revoked over some statutory
charges. Therefore, I am willing to apply for an administrative waiver on your
behalf just to ensure that your payment will be approved within the next three (3)
days.
If upon receiving your outstanding payment you would accept to donate 50% of the
funds to my late mother's orphanage home, I shall exercise my umpire immunity to
enable you enjoy a hitch free payment process under my supervision while still in
office. If you consider my 50%--50% deal offer, please indicate by a prompt reply
with your phone number for more details.
Thanks in anticipation, I hope to read from you at your earliest convenience.
Regards,
Adebolaji Cole.
Head of Operations, Foreign Payment Dept,
Federal Ministry of Interior.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

