by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 13 Sep 2017 04:03:39 -0700
Received: from [203.67.178.248] (port=51992 helo=vpower-bio.com.tw)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ds5SD-00049p-2D
for ; Wed, 13 Sep 2017 04:03:38 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by vpower-bio.com.tw (Postfix) with SMTP id 13A6A45A04F5;
Tue, 12 Sep 2017 21:30:11 +0800 (CST)
Received: from User (unknown [201.151.238.37])
by vpower-bio.com.tw (Postfix) with ESMTPA id 4FE7B44A00FC;
Tue, 12 Sep 2017 16:48:26 +0800 (CST)
Reply-To: <[email protected]>
From: "Dr.Evans Egobia"<[email protected]>
To: [email protected]
Date: Tue, 12 Sep 2017 03:48:39 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=35.2
X-Spam-Score: 352
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From Dr.Evans Egobia Dear Friend It is with trust and confidence
that i write to make this urgent business proposal to you.i was assigned
by two of my colleague to seek for a foreign partner who will assist us in
providing a convenient foreign account in any designated bank abroad for
the transfer of us$35,500,000.00 pending on our arrival in your country for
utilization and disbursement with the owner of the account. this amount results
from a deliberate inflation of the value of a contract awarded by our ministry
- the federal ministry of agriculture (fma)to an expatriate company.the contract
has been executed and payment made to the original contractor,remaining the
over-invoiced amount of us$35.5 million,which we want to transfer the funds
out the country in ourfavour for disbursement among ourselves.the transfer
of this money can only be possible with the help of a foreigner who will
be presented as the beneficiary of the fund. as government officials, we are
not allowed to operate foreign accounts,and this is the reason why we decided
to contact you. we have agreed that if you/your company can act as the beneficiary
of this fund (us$35,500,000.00 million)25% of the total sum will be for you
for providing the account while 5% will be set aside for the expenses incurred
during the cost of transfer of the fund into your account while 70% will
be reserved for us. we hereby solict for your assistance in providing a convenient
account number in a designated bank abroad where this fund would be transferred.we
intend coming over there on the completion of this transfer to secureour
own share of the money. please note that we have been careful and have made
all arrangements towards the success and smooth transfer of the fund to your
acccount beforeyou. for security reasons and confidenciality of this transaction,
we demand that you should not expose this proposal and the entire transaction
to anybody. we are putting so much trust in you with the hope that you would
not betray us. or sit on this money when it is [...]
Content analysis details: (35.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
2.5 HK_SCAM_N15 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[203.67.178.248 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.67.178.248 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?203.67.178.248>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[203.67.178.248 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[203.67.178.248 listed in dnsbl.sorbs.net]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(accdeptfedminagric65[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(drevanegobiaa2[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (accdeptfedminagric65[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 T_HK_NAME_FM_DR No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** AWAITING FOR YOUR RESPONSE.......203.
From Dr.Evans Egobia
Dear Friend
It is with trust and confidence that i write to make this urgent business proposal
to you.i was assigned by two of my colleague to seek for a foreign partner who will
assist us in providing a convenient foreign account in any designated bank abroad
for the transfer of us$35,500,000.00 pending on our arrival in your country for
utilization and disbursement with the owner of the account.
this amount results from a deliberate inflation of the value of a contract awarded
by our ministry - the federal ministry of agriculture (fma)to an expatriate
company.the contract has been executed and payment made to the original
contractor,remaining the over-invoiced amount of us$35.5 million,which we want to
transfer the funds out the country in ourfavour for disbursement among ourselves.the
transfer of this money can only be possible with the help of a foreigner who will be
presented as the beneficiary of the fund.
as government officials, we are not allowed to operate foreign accounts,and this is
the reason why we decided to contact you. we have agreed that if you/your company
can act as the beneficiary of this fund (us$35,500,000.00 million)25% of the total
sum will be for you for providing the account while 5% will be set aside for the
expenses incurred during the cost of transfer of the fund into your account while
70% will be reserved for us.
we hereby solict for your assistance in providing a convenient account number in a
designated bank abroad where this fund would be transferred.we intend coming over
there on the completion of this transfer to secureour own share of the money.
please note that we have been careful and have made all arrangements towards the
success and smooth transfer of the fund to your acccount beforeyou. for security
reasons and confidenciality of this transaction, we demand that you should not
expose this proposal and the entire transaction to anybody.
we are putting so much trust in you with the hope that you would not betray us. or
sit on this money when it is finally transferred into your account.berest assured
that this transaction is 100% risk free. if this proposal is acceptable to
you,indicate your interest by sending a email to us including your bank name &
address,account number,telephone and fax
numbers.
note:our former president olusegun aremu obasanjo collaborated with the former
chairman of the economic financial crime commission , mallam nuhun ribadu to stop
the junior ranks officers from transferring funds out of the country. he sent
different publication to many countries in the world as propaganda to discourage all
government officials from transferring funds into an overseas account to avoid and
save guides the countries economy.
apparently, so that other government officials will not benefits from these( oil
windfalls venture) where he has been a culprit alone with his aides.more details
about this transaction will be given to you as soon as we receive your positive
respond.
note that the particular nature of your company's business is irrelevant to this
transaction. if this transaction interests you, your urgent response will be
appreciated.
yours faithfully,
Dr.Evans Egobia
Direct cellphone +234-80-9239-0816
Reply To: [email protected]
Envelope-to:
Delivery-date: Wed, 13 Sep 2017 04:03:39 -0700
Received: from [203.67.178.248] (port=51992 helo=vpower-bio.com.tw)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ds5SD-00049p-2D
for ; Wed, 13 Sep 2017 04:03:38 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by vpower-bio.com.tw (Postfix) with SMTP id 13A6A45A04F5;
Tue, 12 Sep 2017 21:30:11 +0800 (CST)
Received: from User (unknown [201.151.238.37])
by vpower-bio.com.tw (Postfix) with ESMTPA id 4FE7B44A00FC;
Tue, 12 Sep 2017 16:48:26 +0800 (CST)
Reply-To: <[email protected]>
From: "Dr.Evans Egobia"<[email protected]>
To: [email protected]
Date: Tue, 12 Sep 2017 03:48:39 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=35.2
X-Spam-Score: 352
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From Dr.Evans Egobia Dear Friend It is with trust and confidence
that i write to make this urgent business proposal to you.i was assigned
by two of my colleague to seek for a foreign partner who will assist us in
providing a convenient foreign account in any designated bank abroad for
the transfer of us$35,500,000.00 pending on our arrival in your country for
utilization and disbursement with the owner of the account. this amount results
from a deliberate inflation of the value of a contract awarded by our ministry
- the federal ministry of agriculture (fma)to an expatriate company.the contract
has been executed and payment made to the original contractor,remaining the
over-invoiced amount of us$35.5 million,which we want to transfer the funds
out the country in ourfavour for disbursement among ourselves.the transfer
of this money can only be possible with the help of a foreigner who will
be presented as the beneficiary of the fund. as government officials, we are
not allowed to operate foreign accounts,and this is the reason why we decided
to contact you. we have agreed that if you/your company can act as the beneficiary
of this fund (us$35,500,000.00 million)25% of the total sum will be for you
for providing the account while 5% will be set aside for the expenses incurred
during the cost of transfer of the fund into your account while 70% will
be reserved for us. we hereby solict for your assistance in providing a convenient
account number in a designated bank abroad where this fund would be transferred.we
intend coming over there on the completion of this transfer to secureour
own share of the money. please note that we have been careful and have made
all arrangements towards the success and smooth transfer of the fund to your
acccount beforeyou. for security reasons and confidenciality of this transaction,
we demand that you should not expose this proposal and the entire transaction
to anybody. we are putting so much trust in you with the hope that you would
not betray us. or sit on this money when it is [...]
Content analysis details: (35.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
2.5 HK_SCAM_N15 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[203.67.178.248 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.67.178.248 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?203.67.178.248>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[203.67.178.248 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[203.67.178.248 listed in dnsbl.sorbs.net]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(accdeptfedminagric65[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(drevanegobiaa2[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (accdeptfedminagric65[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 T_HK_NAME_FM_DR No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** AWAITING FOR YOUR RESPONSE.......203.
From Dr.Evans Egobia
Dear Friend
It is with trust and confidence that i write to make this urgent business proposal
to you.i was assigned by two of my colleague to seek for a foreign partner who will
assist us in providing a convenient foreign account in any designated bank abroad
for the transfer of us$35,500,000.00 pending on our arrival in your country for
utilization and disbursement with the owner of the account.
this amount results from a deliberate inflation of the value of a contract awarded
by our ministry - the federal ministry of agriculture (fma)to an expatriate
company.the contract has been executed and payment made to the original
contractor,remaining the over-invoiced amount of us$35.5 million,which we want to
transfer the funds out the country in ourfavour for disbursement among ourselves.the
transfer of this money can only be possible with the help of a foreigner who will be
presented as the beneficiary of the fund.
as government officials, we are not allowed to operate foreign accounts,and this is
the reason why we decided to contact you. we have agreed that if you/your company
can act as the beneficiary of this fund (us$35,500,000.00 million)25% of the total
sum will be for you for providing the account while 5% will be set aside for the
expenses incurred during the cost of transfer of the fund into your account while
70% will be reserved for us.
we hereby solict for your assistance in providing a convenient account number in a
designated bank abroad where this fund would be transferred.we intend coming over
there on the completion of this transfer to secureour own share of the money.
please note that we have been careful and have made all arrangements towards the
success and smooth transfer of the fund to your acccount beforeyou. for security
reasons and confidenciality of this transaction, we demand that you should not
expose this proposal and the entire transaction to anybody.
we are putting so much trust in you with the hope that you would not betray us. or
sit on this money when it is finally transferred into your account.berest assured
that this transaction is 100% risk free. if this proposal is acceptable to
you,indicate your interest by sending a email to us including your bank name &
address,account number,telephone and fax
numbers.
note:our former president olusegun aremu obasanjo collaborated with the former
chairman of the economic financial crime commission , mallam nuhun ribadu to stop
the junior ranks officers from transferring funds out of the country. he sent
different publication to many countries in the world as propaganda to discourage all
government officials from transferring funds into an overseas account to avoid and
save guides the countries economy.
apparently, so that other government officials will not benefits from these( oil
windfalls venture) where he has been a culprit alone with his aides.more details
about this transaction will be given to you as soon as we receive your positive
respond.
note that the particular nature of your company's business is irrelevant to this
transaction. if this transaction interests you, your urgent response will be
appreciated.
yours faithfully,
Dr.Evans Egobia
Direct cellphone +234-80-9239-0816
Reply To: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
