by buried under 419s
Return-path: <>
Envelope-to:
Delivery-date: Sat, 31 Mar 2018 05:50:08 -0700
Received: from mail.htc.syn-alias.com ([208.47.184.96]:6132 helo=smtp.sccoast.net)
by with esmtp (Exim 4.89)
id 1f2FxO-0008FC-Bg
for ; Sat, 31 Mar 2018 05:50:07 -0700
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=atTwMmRV c=1 sm=1 tr=0 a=MlZ6Pu/Xlb8z1ejCmHO6tQ==:117 a=MlZ6Pu/Xlb8z1ejCmHO6tQ==:17 a=KGjhK52YXX0A:10 a=E2hnZyXN9DEA:10 a=7g_wA3kW5Q8A:10 a=x7bEGLp0ZPQA:10 a=K4JK8w2vRnoA:10 a=v2DPQv5-lfwA:10 a=viTrb3tW7OgA:10 a=KXl77lDgDEgIEtoqJYcA:9 a=_6GpL_ENAAAA:8 a=kzZpWeiWoAzoVKXZfnIA:9 a=cvflvJrSFKWphfH3:21 a=J7XcXqQ7d-R-71hn:21 a=wPNLvfGTeEIA:10 a=xupg4knwUDYA:10 a=X_xTjnkEZ63gHe-oP4QA:9 a=k3NEYepXIyXqn4UP:21 a=q0fuBy7UhE7m0aX7:21 a=zmZ0slGJcaH6DHlj:21 a=_W_S_7VecoQA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: Y2FwdGFpbnRvbWJAc2Njb2FzdC5uZXQ=
Authentication-Results: smtp02.htc.cmh.synacor.com smtp.user=[email protected]; auth=pass (LOGIN)
Received: from [41.247.195.70] ([41.247.195.70:56378] helo=[41.247.195.70])
by smtp.sccoast.net (envelope-from <>)
(ecelerity 3.6.14.50842 r(Core:3.6.14.1)) with ESMTPA
id A5/0F-02690-8A38FBA5; Sat, 31 Mar 2018 08:49:24 -0400
Content-Type: multipart/alternative; boundary="===============1342049289=="
Message-ID: <[email protected]>
MIME-Version: 1.0
To: Recipients <>
From: Ebrima Faai<<>>
Date: Sat, 31 Mar 2018 05:47:58 -0700
Reply-To: [email protected]
X-Antivirus: Avast (VPS 180330-4, 03/30/2018), Outbound message
X-Antivirus-Status: Clean
X-Spam-Status: Yes, score=17.8
X-Spam-Score: 178
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary, We received a payment instruction
from the Debt Reconciliation Committee of African Union in conjunction with
the International Monetary Fund (IMF) to credit your account with US$ 15.5M
United States Dollars only. Kindly provide the below details to enable us
proceed with the processing of your payment. Your Full Names Your Physical
Address Your Occupation Your Age/ Sex Your direct cell/ mobile number Regards
Mr. Ebrima Faai. [...]
Content analysis details: (17.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 FROM_NO_USER From: has no local-part before @ sign
2.1 TO_MALFORMED To: has a malformed address
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[208.47.184.96 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[208.47.184.96 listed in wl.mailspike.net]
1.6 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_REMOTE_IMAGE Message contains an external image
2.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Beneficiary.
Attention: Beneficiary,
We received a payment instruction from the Debt Reconciliation Committee of
African Union in conjunction with the International Monetary Fund (IMF) to credit
your account with US$ 15.5M United States Dollars only.
Kindly provide the below details to enable us proceed with the processing of your
payment.
Your Full Names
Your Physical Address
Your Occupation
Your Age/ Sex
Your direct cell/ mobile number
Regards
Mr. Ebrima Faai.
Envelope-to:
Delivery-date: Sat, 31 Mar 2018 05:50:08 -0700
Received: from mail.htc.syn-alias.com ([208.47.184.96]:6132 helo=smtp.sccoast.net)
by with esmtp (Exim 4.89)
id 1f2FxO-0008FC-Bg
for ; Sat, 31 Mar 2018 05:50:07 -0700
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=atTwMmRV c=1 sm=1 tr=0 a=MlZ6Pu/Xlb8z1ejCmHO6tQ==:117 a=MlZ6Pu/Xlb8z1ejCmHO6tQ==:17 a=KGjhK52YXX0A:10 a=E2hnZyXN9DEA:10 a=7g_wA3kW5Q8A:10 a=x7bEGLp0ZPQA:10 a=K4JK8w2vRnoA:10 a=v2DPQv5-lfwA:10 a=viTrb3tW7OgA:10 a=KXl77lDgDEgIEtoqJYcA:9 a=_6GpL_ENAAAA:8 a=kzZpWeiWoAzoVKXZfnIA:9 a=cvflvJrSFKWphfH3:21 a=J7XcXqQ7d-R-71hn:21 a=wPNLvfGTeEIA:10 a=xupg4knwUDYA:10 a=X_xTjnkEZ63gHe-oP4QA:9 a=k3NEYepXIyXqn4UP:21 a=q0fuBy7UhE7m0aX7:21 a=zmZ0slGJcaH6DHlj:21 a=_W_S_7VecoQA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: Y2FwdGFpbnRvbWJAc2Njb2FzdC5uZXQ=
Authentication-Results: smtp02.htc.cmh.synacor.com smtp.user=[email protected]; auth=pass (LOGIN)
Received: from [41.247.195.70] ([41.247.195.70:56378] helo=[41.247.195.70])
by smtp.sccoast.net (envelope-from <>)
(ecelerity 3.6.14.50842 r(Core:3.6.14.1)) with ESMTPA
id A5/0F-02690-8A38FBA5; Sat, 31 Mar 2018 08:49:24 -0400
Content-Type: multipart/alternative; boundary="===============1342049289=="
Message-ID: <[email protected]>
MIME-Version: 1.0
To: Recipients <>
From: Ebrima Faai<<>>
Date: Sat, 31 Mar 2018 05:47:58 -0700
Reply-To: [email protected]
X-Antivirus: Avast (VPS 180330-4, 03/30/2018), Outbound message
X-Antivirus-Status: Clean
X-Spam-Status: Yes, score=17.8
X-Spam-Score: 178
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary, We received a payment instruction
from the Debt Reconciliation Committee of African Union in conjunction with
the International Monetary Fund (IMF) to credit your account with US$ 15.5M
United States Dollars only. Kindly provide the below details to enable us
proceed with the processing of your payment. Your Full Names Your Physical
Address Your Occupation Your Age/ Sex Your direct cell/ mobile number Regards
Mr. Ebrima Faai. [...]
Content analysis details: (17.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 FROM_NO_USER From: has no local-part before @ sign
2.1 TO_MALFORMED To: has a malformed address
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[208.47.184.96 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[208.47.184.96 listed in wl.mailspike.net]
1.6 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_REMOTE_IMAGE Message contains an external image
2.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Beneficiary.
Attention: Beneficiary,
We received a payment instruction from the Debt Reconciliation Committee of
African Union in conjunction with the International Monetary Fund (IMF) to credit
your account with US$ 15.5M United States Dollars only.
Kindly provide the below details to enable us proceed with the processing of your
payment.
Your Full Names
Your Physical Address
Your Occupation
Your Age/ Sex
Your direct cell/ mobile number
Regards
Mr. Ebrima Faai.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
