by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 15 Sep 2017 19:28:59 -0700
Received: from pd9e2f5d5.dip0.t-ipconnect.de ([217.226.245.213]:61181 helo=Zentrale.los-kg.de)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dt2qh-00057f-Sr
for ; Fri, 15 Sep 2017 19:28:58 -0700
Received: from User ([37.49.224.161]) by Zentrale.los-kg.de with Microsoft SMTPSVC(8.5.9600.16384);
Sat, 16 Sep 2017 03:56:57 +0200
Reply-To: <[email protected]>
From: "Mr,Keith CAROLUS"<[email protected]>
Date: Fri, 15 Sep 2017 18:56:57 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 16 Sep 2017 01:56:57.0367 (UTC) FILETIME=[13F17A70:01D32E8F]
X-AVK-Virus-Check: AVA 25.8319;C275
X-AVK-Spam-Check: 4;str=0001.0A0C0207.59BC8C63.00A7,ss=3,re=0.000,recu=0.000,reip=0.000,pt=F_35437833,cl=4,cld=1,fgs=0;C63CFA6
X-Spam-Status: Yes, score=35.2
X-Spam-Score: 352
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UNITED NATIONS COMPENSATION IN CONJUNCTION WITH FEDERAL GOVERNMENT
OF NIGERIA IN AFFILIATION WITH WORLD BANK. ATTN: Beneficiary, Hope all is
well with you and Your family?, you may not understand why this mail came
to you. In regards to the recent meeting between the United Nations and the
new President of United State Donald Trump and the Present United States
Government to restore the dignity and Economy of the Nations,Base on the Agreement
with the World Bank Assistance to help and make the world a better place
for all with the sole aim of abolishing poverty and those who have been involves
into scam in anyway should be compensated. We have been having a meeting
for the passed three months which ended two days ago. [...]
Content analysis details: (35.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(joker2811[at]sina.com)
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[217.226.245.213 listed in bb.barracudacentral.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[217.226.245.213 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[217.226.245.213 listed in dnsbl.sorbs.net]
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(eric.bufersson706[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (joker2811[at]sina.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=j]
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FROM_MISSP_USER From misspaced, from "User"
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** (SPAM Erkennung Stormshield Firewall 3)ATTN: Beneficiary,
UNITED NATIONS COMPENSATION IN CONJUNCTION WITH FEDERAL GOVERNMENT OF NIGERIA IN
AFFILIATION WITH WORLD BANK.
ATTN: Beneficiary,
Hope all is well with you and Your family?, you may not understand why this mail
came to you. In regards to the recent meeting between the United Nations and the new
President of United State Donald Trump and the Present United States Government to
restore the dignity and Economy of the Nations,Base on the Agreement with the World
Bank Assistance to help and make the world a better place for all with the sole aim
of abolishing poverty and those who have been involves into scam in anyway should be
compensated. We have been having a meeting for the passed three months which ended
two days ago.
The National Central Bureau of Interpol enhanced by the United Nations and Federal
Bureau of Investigation have successfully passed a mandate to the current president
of Nigeria his Excellency President Muhammadu Buhari to boost the exercise of
clearing all foreign debts owned to Foreigners and Compensate all that have lost
their hard earned money to the Nigeria Fraudsters.
This email is to all the people that have been scammed in any part of the world, the
UNITED NATIONS have agreed to compensate them with the sum of US$8,500,000 ( Eight
Million Five Hundred United State Dollars) This includes every foreign contractors
that may have not received their contract sum, and people that have had an
unfinished transaction or international businesses that failed due to Government
problems,Contracts Sum, Lottery/Gambling etc.Your name and email was in the list
submitted by our Monitoring Teams of Economic and Financial Crime Commission (EFCC)
and the Federal Bureau of Investigation (FBI) observers and this is why we are
contacting you, this have been agreed upon and have been signed.
You are advised to contact Mr.Eric.Bufersson, as he is our representative in Nigeria
immediately for your ATM VISA CARD worth the total sum of US$8,500,000 ( Eight
Million Five Hundred United State Dollars) Which you can withdraw your Fund at any
ATM Machine in your location Worldwide, So he will send it to you via DHL courier
NAME: Mr.Eric.Bufersson / [email protected]
EMAIL: [email protected]
PHONE NUMBER:(+14342728894)
Please go through our website.
http://www.un.org/press/en
http://www.worldsafety.org/united-natio ... sentatives
Kindly re-confirm your details to him for verification, and make sure your
residential address is provided correctly, to avoid any atom of mistake during
delivery process of your ATM VISA CARD, so as to facilitate the immediate release of
your ATM VISA CARD immediately as soon as you comply with the requirement.
(1) Your Full Name..................
(2) Full Residential Address........
(3) Direct and current telephone....
(4) Nationality.....................
(5) Present Country.................
(6) Occupation......................
(7) Age.............................
(8) Sex.............................
Give him your File Reference (RE-101-V) and you are free to contact him via
telephone number, it will be better to call him and once you do that he will ask you
of your File Reference number which is (RE-101-V), this file reference number is
very important and gives him access to get through to your file and email you back
quickly once he confirms your email and your delivery details.
Thanks for adhering to this instructions and once again accept our congratulations.
Good luck and kind regards,
Making the world a better place,
Mr,Keith CAROLUS (UNITED NATIONS).
Envelope-to:
Delivery-date: Fri, 15 Sep 2017 19:28:59 -0700
Received: from pd9e2f5d5.dip0.t-ipconnect.de ([217.226.245.213]:61181 helo=Zentrale.los-kg.de)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dt2qh-00057f-Sr
for ; Fri, 15 Sep 2017 19:28:58 -0700
Received: from User ([37.49.224.161]) by Zentrale.los-kg.de with Microsoft SMTPSVC(8.5.9600.16384);
Sat, 16 Sep 2017 03:56:57 +0200
Reply-To: <[email protected]>
From: "Mr,Keith CAROLUS"<[email protected]>
Date: Fri, 15 Sep 2017 18:56:57 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 16 Sep 2017 01:56:57.0367 (UTC) FILETIME=[13F17A70:01D32E8F]
X-AVK-Virus-Check: AVA 25.8319;C275
X-AVK-Spam-Check: 4;str=0001.0A0C0207.59BC8C63.00A7,ss=3,re=0.000,recu=0.000,reip=0.000,pt=F_35437833,cl=4,cld=1,fgs=0;C63CFA6
X-Spam-Status: Yes, score=35.2
X-Spam-Score: 352
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UNITED NATIONS COMPENSATION IN CONJUNCTION WITH FEDERAL GOVERNMENT
OF NIGERIA IN AFFILIATION WITH WORLD BANK. ATTN: Beneficiary, Hope all is
well with you and Your family?, you may not understand why this mail came
to you. In regards to the recent meeting between the United Nations and the
new President of United State Donald Trump and the Present United States
Government to restore the dignity and Economy of the Nations,Base on the Agreement
with the World Bank Assistance to help and make the world a better place
for all with the sole aim of abolishing poverty and those who have been involves
into scam in anyway should be compensated. We have been having a meeting
for the passed three months which ended two days ago. [...]
Content analysis details: (35.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(joker2811[at]sina.com)
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[217.226.245.213 listed in bb.barracudacentral.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[217.226.245.213 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[217.226.245.213 listed in dnsbl.sorbs.net]
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(eric.bufersson706[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (joker2811[at]sina.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=j]
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FROM_MISSP_USER From misspaced, from "User"
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** (SPAM Erkennung Stormshield Firewall 3)ATTN: Beneficiary,
UNITED NATIONS COMPENSATION IN CONJUNCTION WITH FEDERAL GOVERNMENT OF NIGERIA IN
AFFILIATION WITH WORLD BANK.
ATTN: Beneficiary,
Hope all is well with you and Your family?, you may not understand why this mail
came to you. In regards to the recent meeting between the United Nations and the new
President of United State Donald Trump and the Present United States Government to
restore the dignity and Economy of the Nations,Base on the Agreement with the World
Bank Assistance to help and make the world a better place for all with the sole aim
of abolishing poverty and those who have been involves into scam in anyway should be
compensated. We have been having a meeting for the passed three months which ended
two days ago.
The National Central Bureau of Interpol enhanced by the United Nations and Federal
Bureau of Investigation have successfully passed a mandate to the current president
of Nigeria his Excellency President Muhammadu Buhari to boost the exercise of
clearing all foreign debts owned to Foreigners and Compensate all that have lost
their hard earned money to the Nigeria Fraudsters.
This email is to all the people that have been scammed in any part of the world, the
UNITED NATIONS have agreed to compensate them with the sum of US$8,500,000 ( Eight
Million Five Hundred United State Dollars) This includes every foreign contractors
that may have not received their contract sum, and people that have had an
unfinished transaction or international businesses that failed due to Government
problems,Contracts Sum, Lottery/Gambling etc.Your name and email was in the list
submitted by our Monitoring Teams of Economic and Financial Crime Commission (EFCC)
and the Federal Bureau of Investigation (FBI) observers and this is why we are
contacting you, this have been agreed upon and have been signed.
You are advised to contact Mr.Eric.Bufersson, as he is our representative in Nigeria
immediately for your ATM VISA CARD worth the total sum of US$8,500,000 ( Eight
Million Five Hundred United State Dollars) Which you can withdraw your Fund at any
ATM Machine in your location Worldwide, So he will send it to you via DHL courier
NAME: Mr.Eric.Bufersson / [email protected]
EMAIL: [email protected]
PHONE NUMBER:(+14342728894)
Please go through our website.
http://www.un.org/press/en
http://www.worldsafety.org/united-natio ... sentatives
Kindly re-confirm your details to him for verification, and make sure your
residential address is provided correctly, to avoid any atom of mistake during
delivery process of your ATM VISA CARD, so as to facilitate the immediate release of
your ATM VISA CARD immediately as soon as you comply with the requirement.
(1) Your Full Name..................
(2) Full Residential Address........
(3) Direct and current telephone....
(4) Nationality.....................
(5) Present Country.................
(6) Occupation......................
(7) Age.............................
(8) Sex.............................
Give him your File Reference (RE-101-V) and you are free to contact him via
telephone number, it will be better to call him and once you do that he will ask you
of your File Reference number which is (RE-101-V), this file reference number is
very important and gives him access to get through to your file and email you back
quickly once he confirms your email and your delivery details.
Thanks for adhering to this instructions and once again accept our congratulations.
Good luck and kind regards,
Making the world a better place,
Mr,Keith CAROLUS (UNITED NATIONS).
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
