by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 26 Sep 2019 15:07:24 -0700
Received: from [121.15.135.251] (port=48005 helo=mail.belle.cn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1iDbux-0001hy-7D
for ; Thu, 26 Sep 2019 15:07:24 -0700
Message-Id: <2b36de$[email protected]>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: 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
X-IronPort-AV: E=Sophos;i="5.43,368,1503331200";
d="scan'208";a="340898811"
Received: from 61-216-18-241.hinet-ip.hinet.net (HELO User) ([61.216.18.241])
by mail.belle.cn with ESMTP; 27 Sep 2019 06:06:33 +0800
Reply-To: <[email protected]>
From: "Central Bank of Nigeria"<[email protected]>
Date: Fri, 27 Sep 2019 06:06:39 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=82.0
X-Spam-Score: 820
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary This is to officially inform you that
your email was short listed by the Central Bank Compensation Award Committee
setup to compensate the huge losses of the victims of the internet scam/fraud;
You are also warned to disengage from future pursuit of unlearned transaction.
[...]
Content analysis details: (82.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.9 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 NSL_RCVD_HELO_USER Received from HELO User
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[121.15.135.251 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[121.15.135.251 listed in psbl.surriel.com]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[121.15.135.251 listed in wl.mailspike.net]
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=m ... en.com;ip=]
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 FSL_NEW_HELO_USER Spam's using Helo and User
3.9 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 HK_SCAM No description available.
2.0 FROM_MISSP_SPF_FAIL No description available.
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
10 KAM_MARK Email arrived marked as Spam
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.7 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.0 FROM_MISSPACED From: missing whitespace
2.7 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_LOTTO_AGENT Claims Agent
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** [SPAM] Contact him now
Attention: Beneficiary
This is to officially inform you that your email was short listed by the Central
Bank Compensation Award Committee setup to compensate the huge losses of the victims
of the internet scam/fraud; You are also warned to disengage from future pursuit of
unlearned transaction.
However, Your Compensation Payment via ATM CARD value at US$20.3M has been
accredited and approved in your favor; All that is required of you to redeem your
funds is to contact the payment officer with the official fee of US$90 being for
courier charges.
Contact the delivery diplomat as soon as possible through this (email:
[email protected] )
You are hereby advice to re-confirm the below information once again to the payment
officer for further proceedings/next line of action.
1. Full Name:
2. Home address:
3. Direct/personal cell number
4. Copy of any valid identification:
5. Your occupation
Below is the delovery diplomat detail:
NAME: Micheal Armstrong
E-MAIL:[email protected]
Yours truly,
Mr John Mba
Secretary
Envelope-to:
Delivery-date: Thu, 26 Sep 2019 15:07:24 -0700
Received: from [121.15.135.251] (port=48005 helo=mail.belle.cn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1iDbux-0001hy-7D
for ; Thu, 26 Sep 2019 15:07:24 -0700
Message-Id: <2b36de$[email protected]>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: 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
X-IronPort-AV: E=Sophos;i="5.43,368,1503331200";
d="scan'208";a="340898811"
Received: from 61-216-18-241.hinet-ip.hinet.net (HELO User) ([61.216.18.241])
by mail.belle.cn with ESMTP; 27 Sep 2019 06:06:33 +0800
Reply-To: <[email protected]>
From: "Central Bank of Nigeria"<[email protected]>
Date: Fri, 27 Sep 2019 06:06:39 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=82.0
X-Spam-Score: 820
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary This is to officially inform you that
your email was short listed by the Central Bank Compensation Award Committee
setup to compensate the huge losses of the victims of the internet scam/fraud;
You are also warned to disengage from future pursuit of unlearned transaction.
[...]
Content analysis details: (82.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.9 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 NSL_RCVD_HELO_USER Received from HELO User
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[121.15.135.251 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[121.15.135.251 listed in psbl.surriel.com]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[121.15.135.251 listed in wl.mailspike.net]
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=m ... en.com;ip=]
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 FSL_NEW_HELO_USER Spam's using Helo and User
3.9 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 HK_SCAM No description available.
2.0 FROM_MISSP_SPF_FAIL No description available.
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
10 KAM_MARK Email arrived marked as Spam
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.7 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.0 FROM_MISSPACED From: missing whitespace
2.7 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_LOTTO_AGENT Claims Agent
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** [SPAM] Contact him now
Attention: Beneficiary
This is to officially inform you that your email was short listed by the Central
Bank Compensation Award Committee setup to compensate the huge losses of the victims
of the internet scam/fraud; You are also warned to disengage from future pursuit of
unlearned transaction.
However, Your Compensation Payment via ATM CARD value at US$20.3M has been
accredited and approved in your favor; All that is required of you to redeem your
funds is to contact the payment officer with the official fee of US$90 being for
courier charges.
Contact the delivery diplomat as soon as possible through this (email:
[email protected] )
You are hereby advice to re-confirm the below information once again to the payment
officer for further proceedings/next line of action.
1. Full Name:
2. Home address:
3. Direct/personal cell number
4. Copy of any valid identification:
5. Your occupation
Below is the delovery diplomat detail:
NAME: Micheal Armstrong
E-MAIL:[email protected]
Yours truly,
Mr John Mba
Secretary
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
