by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 14 Jun 2017 03:54:45 -0700
Received: from auth.wow.lk ([202.124.160.22]:38809)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dL5wd-0005Kx-GA
for Wed, 14 Jun 2017 03:54:45 -0700
Received: from User (unknown [163.121.188.3])
(Authenticated sender: paragon)
by auth.wow.lk (Postfix) with ESMTPA id 016AE261CF9;
Tue, 13 Jun 2017 22:11:52 +0530 (IST)
Reply-To: <[email protected]>
From: "ADEBOLAJI COLE."<[email protected]>
Date: Tue, 13 Jun 2017 17:41:49 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=58.4
X-Spam-Score: 584
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Beneficiary. This is not an open request, so be
advised not to disclose my ambition stated in this letter to a third party.This
quarter audit will mark the end of my tenure in office and I am offering
to initiate the validation of your outstanding payment before vacating office
soon. Since my predecessor has already approved your Inheritance claim, It
will require just a Validation Appeal for me to grant an authorization for
the release of your funds. [...]
Content analysis details: (58.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
2.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 NSL_RCVD_FROM_USER Received from User
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[202.124.160.22 listed in bl.score.senderscore.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.124.160.22 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.124.160.22 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[163.121.188.3 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?202.124.160.22>]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(turku12turku[at]outlook.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(turkudide2.0[at]outlook.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.9 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.5 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FROM_MISSP_USER From misspaced, from "User"
4.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE No description available.
3.4 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.3 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.6 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION BENEFICIARY!!
Attention Beneficiary.
This is not an open request, so be advised not to disclose my ambition stated in
this letter to a third party.This quarter audit will mark the end of my tenure in
office and I am offering to initiate the validation of your outstanding payment
before vacating office soon. Since my predecessor has already approved your
Inheritance claim, It will require just a Validation Appeal for me to grant an
authorization for the release of your funds.
I found out about your pending payment during a review of every unclaimed funds in
the suspense accounts. Further to my previous comment about my retirement, now is
the only opportunity I have to assist you before compiling my handover notes. My
conscience will not forgive me if your payment is revoked in my regime over some
carryover charges. Therefore, I am willing to apply for an administrative waiver on
your behalf just to ensure that your payment will be validated within three (3)
days.
Having known that you have given up hope after unfruitful efforts to receive this
payment for years, I have decided to make you an offer you can't refuse. If you
would to donate 50% of your inheritance entitlement to my late mother's orphanage
after receiving the funds, I shall exercise my umpire immunity to enable you enjoy a
hitch free payment process under my full supervision. If you consider my 50%-50%
offer, please indicate by a prompt reply alongside a phone number for more details.
Thanks in anticipation, I hope to read from you at your earliest convenience.
Regards,
Adebolaji Cole.
Head of Operations, Foreign Payment Dept,
Federal Ministry of Interior
Envelope-to:
Delivery-date: Wed, 14 Jun 2017 03:54:45 -0700
Received: from auth.wow.lk ([202.124.160.22]:38809)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dL5wd-0005Kx-GA
for Wed, 14 Jun 2017 03:54:45 -0700
Received: from User (unknown [163.121.188.3])
(Authenticated sender: paragon)
by auth.wow.lk (Postfix) with ESMTPA id 016AE261CF9;
Tue, 13 Jun 2017 22:11:52 +0530 (IST)
Reply-To: <[email protected]>
From: "ADEBOLAJI COLE."<[email protected]>
Date: Tue, 13 Jun 2017 17:41:49 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=58.4
X-Spam-Score: 584
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Beneficiary. This is not an open request, so be
advised not to disclose my ambition stated in this letter to a third party.This
quarter audit will mark the end of my tenure in office and I am offering
to initiate the validation of your outstanding payment before vacating office
soon. Since my predecessor has already approved your Inheritance claim, It
will require just a Validation Appeal for me to grant an authorization for
the release of your funds. [...]
Content analysis details: (58.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
2.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 NSL_RCVD_FROM_USER Received from User
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[202.124.160.22 listed in bl.score.senderscore.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.124.160.22 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.124.160.22 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[163.121.188.3 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?202.124.160.22>]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(turku12turku[at]outlook.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(turkudide2.0[at]outlook.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.9 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.5 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FROM_MISSP_USER From misspaced, from "User"
4.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE No description available.
3.4 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.3 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.6 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION BENEFICIARY!!
Attention Beneficiary.
This is not an open request, so be advised not to disclose my ambition stated in
this letter to a third party.This quarter audit will mark the end of my tenure in
office and I am offering to initiate the validation of your outstanding payment
before vacating office soon. Since my predecessor has already approved your
Inheritance claim, It will require just a Validation Appeal for me to grant an
authorization for the release of your funds.
I found out about your pending payment during a review of every unclaimed funds in
the suspense accounts. Further to my previous comment about my retirement, now is
the only opportunity I have to assist you before compiling my handover notes. My
conscience will not forgive me if your payment is revoked in my regime over some
carryover charges. Therefore, I am willing to apply for an administrative waiver on
your behalf just to ensure that your payment will be validated within three (3)
days.
Having known that you have given up hope after unfruitful efforts to receive this
payment for years, I have decided to make you an offer you can't refuse. If you
would to donate 50% of your inheritance entitlement to my late mother's orphanage
after receiving the funds, I shall exercise my umpire immunity to enable you enjoy a
hitch free payment process under my full supervision. If you consider my 50%-50%
offer, please indicate by a prompt reply alongside a phone number for more details.
Thanks in anticipation, I hope to read from you at your earliest convenience.
Regards,
Adebolaji Cole.
Head of Operations, Foreign Payment Dept,
Federal Ministry of Interior
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

