by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 01 Sep 2017 01:52:26 -0700
Received: from z98l186.static.ctm.net ([202.175.98.186]:58805 helo=perfectone.com.mo)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dnhga-0003ii-PW
for ; Fri, 01 Sep 2017 01:52:25 -0700
Received: from User (cpe-66-24-46-1.stny.res.rr.com [66.24.46.1])
(Authenticated sender: admin)
by perfectone.com.mo (Postfix) with ESMTPA id B65D73389A0C;
Fri, 1 Sep 2017 10:39:59 +0800 (CST)
Reply-To: <[email protected]>
From: "Mark Sango"<[email protected]>
Date: Fri, 1 Sep 2017 02:40:29 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=26.5
X-Spam-Score: 265
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, First of all, let me introduce myself. My name is Mr
Mark Sango, I am a staff in one of the banks here in Abidjan Ivory coast
working in account Department and I would like to know if you can be at my
disposal to strike a perfect/smooth deal in my Bank here. I discovered anonymous
fund totaling $25.4M [...]
Content analysis details: (26.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[202.175.98.186 listed in list.dnswl.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.175.98.186 listed in bb.barracudacentral.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[66.24.46.1 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[202.175.98.186 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?66.24.46.1>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(sanmark196[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Hello
Hello,
First of all, let me introduce myself. My name is Mr Mark Sango, I am a staff in one
of the banks here in Abidjan Ivory coast working in account Department and I would
like to know if you can be at my disposal to strike a perfect/smooth deal in my Bank
here. I discovered anonymous fund totaling $25.4M
This fund has been floating in our suspense account for the past years, in an
account that belongs to one of our foreign customer who died along with his entire
family in September 2007 in a plane crash.Since the notification of his death our
bank have been expecting his next of kin to come forward and claim his fund because
our bank cannot release it unless somebody applies for it as the next of kin or
relative to the Deceased Person as indicated in our banking guidelines and policies
but unfortunately I learnt that all his supposed next of kin or relation died along
side with him at the plane crash leaving nobody behind for the claims. Therefore, I
request for your assistance by presenting you as the next of kin/beneficiary of
Deceased Account, so that the fund can be claimed and transfer to your bank account.
The request of a foreigner as the next of kin in this deal is occasioned by the fact
that the customer was a foreigner and an Ivorian cannot stand as next of kin to a
foreigner. I will agree that 40% of this money will be for you as a foreign partner.
In respect to the provision of a foreign bank account where the fund will be
transfer and 60 % would be for me. Please let me know if you are interested and also
send your direct telephone numbers for discussion of this deal in details.
Best regards,
Mr Mark Sango
Envelope-to:
Delivery-date: Fri, 01 Sep 2017 01:52:26 -0700
Received: from z98l186.static.ctm.net ([202.175.98.186]:58805 helo=perfectone.com.mo)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dnhga-0003ii-PW
for ; Fri, 01 Sep 2017 01:52:25 -0700
Received: from User (cpe-66-24-46-1.stny.res.rr.com [66.24.46.1])
(Authenticated sender: admin)
by perfectone.com.mo (Postfix) with ESMTPA id B65D73389A0C;
Fri, 1 Sep 2017 10:39:59 +0800 (CST)
Reply-To: <[email protected]>
From: "Mark Sango"<[email protected]>
Date: Fri, 1 Sep 2017 02:40:29 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=26.5
X-Spam-Score: 265
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, First of all, let me introduce myself. My name is Mr
Mark Sango, I am a staff in one of the banks here in Abidjan Ivory coast
working in account Department and I would like to know if you can be at my
disposal to strike a perfect/smooth deal in my Bank here. I discovered anonymous
fund totaling $25.4M [...]
Content analysis details: (26.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[202.175.98.186 listed in list.dnswl.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.175.98.186 listed in bb.barracudacentral.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[66.24.46.1 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[202.175.98.186 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?66.24.46.1>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(sanmark196[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Hello
Hello,
First of all, let me introduce myself. My name is Mr Mark Sango, I am a staff in one
of the banks here in Abidjan Ivory coast working in account Department and I would
like to know if you can be at my disposal to strike a perfect/smooth deal in my Bank
here. I discovered anonymous fund totaling $25.4M
This fund has been floating in our suspense account for the past years, in an
account that belongs to one of our foreign customer who died along with his entire
family in September 2007 in a plane crash.Since the notification of his death our
bank have been expecting his next of kin to come forward and claim his fund because
our bank cannot release it unless somebody applies for it as the next of kin or
relative to the Deceased Person as indicated in our banking guidelines and policies
but unfortunately I learnt that all his supposed next of kin or relation died along
side with him at the plane crash leaving nobody behind for the claims. Therefore, I
request for your assistance by presenting you as the next of kin/beneficiary of
Deceased Account, so that the fund can be claimed and transfer to your bank account.
The request of a foreigner as the next of kin in this deal is occasioned by the fact
that the customer was a foreigner and an Ivorian cannot stand as next of kin to a
foreigner. I will agree that 40% of this money will be for you as a foreign partner.
In respect to the provision of a foreign bank account where the fund will be
transfer and 60 % would be for me. Please let me know if you are interested and also
send your direct telephone numbers for discussion of this deal in details.
Best regards,
Mr Mark Sango
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
