by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id kCt5JQcQul32cwAAjbubUg
for <>; Wed, 30 Oct 2019 15:34:47 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 30 Oct 2019 15:34:47 -0700
Received: from bufferz.csloxinfo.com ([203.146.237.187]:49784 helo=bufferz9.csloxinfo.com)
by m with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1iPwY8-0007jI-DJ
for ; Wed, 30 Oct 2019 15:34:47 -0700
Received: from mailx1-3.csloxinfo.com (unknown [10.20.140.3])
by bufferz9.csloxinfo.com (Postfix) with ESMTP id 079DA21D3047
for <>; Thu, 31 Oct 2019 05:34:02 +0700 (ICT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B4/wBDD7pd/91OkssDTIJkA4M1hj+ZR?=
=?us-ascii?q?YhYgSWFaYFnCQEBAQEBAQEBATQBAgEBHAeEOCCDJUIBBQEuDgIEAwIBBQSFWFi?=
=?us-ascii?q?FYyAxBTAQHisRAgwBDgEBJ4VxAQECLbQ7BQEXDQ0CgR+CEIFzgjiBGkZcIyKNP?=
=?us-ascii?q?YF/gVeCF4R1EAETA4s6hgOBYoMvhRmJGI48QQo8gWiMYYIigUqEf1oHggqLRgM?=
=?us-ascii?q?BgjoOfodjpDWEYYIScXCCHYFvkgctgTEBHggTBQUBAY0lAQE?=
Spam_Positive: LL
X-IronPort-AV: E=Sophos;i="5.68,248,1569258000";
d="scan'208";a="413518314"
Received: from unknown (HELO prince) ([203.146.78.221])
by mail-1.csloxinfo.com with SMTP; 31 Oct 2019 05:34:01 +0700
Received: from 207.177.168.100 by 127.0.0.1; Wed, 30 Oct 2019 18:29:02 -0500
Message-ID: <[email protected]>
From: "Sir, Jacob Vakabua Driver" <[email protected]>
Reply-To: "Sir, Jacob Vakabua Driver" <[email protected]>
To:
Date: Wed, 30 Oct 2019 22:27:02 -0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--54684568056601238"
X-Originating-IP: smtp.csloxinfo.com
X-Spam-Status: Yes, score=39.1
X-Spam-Score: 391
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Greetings: I hope all is well with you and your family, My
name is Sir, Jacob Vakabua Driver, Chief Finance Officer Investment Bank
in SA, I am the fund manager of Late Mr. Mohammad Asaf Husain who passed on
5 years ago left the sum US$ 8,620.000.00 with my bank. Since after his death
no one has stepped up for the claim, however, I did not know any of his family
members, I think he was staying alone here in South Africa before he passed
on, Late Mr. Mohammad Asaf Husain originally from Netherlands. [...]
Content analysis details: (39.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.4 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
3.1 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?203.146.78.221>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[203.146.237.187 listed in bl.score.senderscore.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[203.146.237.187 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[203.146.78.221 listed in zen.spamhaus.org]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[203.146.237.187 listed in bl.mailspike.net]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jacobvakabudriver[at]gmail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.146.237.187 listed in psbl.surriel.com]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.0 SPOOFED_FREEMAIL No description available.
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Greetings...
Greetings:
I hope all is well with you and your family,
My name is Sir, Jacob Vakabua Driver, Chief Finance Officer Investment Bank in SA, I
am the fund manager of Late Mr. Mohammad Asaf Husain who passed on 5 years ago left
the sum US$ 8,620.000.00 with my bank. Since after his death no one has stepped up
for the claim, however, I did not know any of his family members, I think he was
staying alone here in South Africa before he passed on, Late Mr. Mohammad Asaf
Husain originally from Netherlands.
Currently my bank Director summon a mandate to me to provide any of his family
members to claim, fail to do that the fund will be confiscated by the National
Treasury Department South Africa, in this regards I am proposing a deal to you.
Here Is the Deal;
I will use my power to present you as an extended family to my late client for the
fund to be released to you without any interruption. I guarantee you that this will
be executed under a legitimate arrangement that will protect you from any breach of
the law. I will not fail to bring to your notice that this proposal is hitch-free
and that you should not entertain any fear I will provide you all the virtual
documents about the fund as well as lead you step by step.
The sharing terms:
Other two of junior staffs working with me in my bank who knows about this deal we
share 20%, I myself get 40% while 40% of the total funds go to you. The transfer is
risk free since we are handling it via a bank to bank transfer.
Send me your full name, address/country and mobile number to my private email
address ( [email protected] )
Waiting for your swift reply.
Kind Regards
Sir, Jacob Vakabua Driver
Chief Financial Officer
Tel +27 62 569 7374
Delivered-To:
Received: from
by with LMTP id kCt5JQcQul32cwAAjbubUg
for <>; Wed, 30 Oct 2019 15:34:47 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 30 Oct 2019 15:34:47 -0700
Received: from bufferz.csloxinfo.com ([203.146.237.187]:49784 helo=bufferz9.csloxinfo.com)
by m with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1iPwY8-0007jI-DJ
for ; Wed, 30 Oct 2019 15:34:47 -0700
Received: from mailx1-3.csloxinfo.com (unknown [10.20.140.3])
by bufferz9.csloxinfo.com (Postfix) with ESMTP id 079DA21D3047
for <>; Thu, 31 Oct 2019 05:34:02 +0700 (ICT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B4/wBDD7pd/91OkssDTIJkA4M1hj+ZR?=
=?us-ascii?q?YhYgSWFaYFnCQEBAQEBAQEBATQBAgEBHAeEOCCDJUIBBQEuDgIEAwIBBQSFWFi?=
=?us-ascii?q?FYyAxBTAQHisRAgwBDgEBJ4VxAQECLbQ7BQEXDQ0CgR+CEIFzgjiBGkZcIyKNP?=
=?us-ascii?q?YF/gVeCF4R1EAETA4s6hgOBYoMvhRmJGI48QQo8gWiMYYIigUqEf1oHggqLRgM?=
=?us-ascii?q?BgjoOfodjpDWEYYIScXCCHYFvkgctgTEBHggTBQUBAY0lAQE?=
Spam_Positive: LL
X-IronPort-AV: E=Sophos;i="5.68,248,1569258000";
d="scan'208";a="413518314"
Received: from unknown (HELO prince) ([203.146.78.221])
by mail-1.csloxinfo.com with SMTP; 31 Oct 2019 05:34:01 +0700
Received: from 207.177.168.100 by 127.0.0.1; Wed, 30 Oct 2019 18:29:02 -0500
Message-ID: <[email protected]>
From: "Sir, Jacob Vakabua Driver" <[email protected]>
Reply-To: "Sir, Jacob Vakabua Driver" <[email protected]>
To:
Date: Wed, 30 Oct 2019 22:27:02 -0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--54684568056601238"
X-Originating-IP: smtp.csloxinfo.com
X-Spam-Status: Yes, score=39.1
X-Spam-Score: 391
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Greetings: I hope all is well with you and your family, My
name is Sir, Jacob Vakabua Driver, Chief Finance Officer Investment Bank
in SA, I am the fund manager of Late Mr. Mohammad Asaf Husain who passed on
5 years ago left the sum US$ 8,620.000.00 with my bank. Since after his death
no one has stepped up for the claim, however, I did not know any of his family
members, I think he was staying alone here in South Africa before he passed
on, Late Mr. Mohammad Asaf Husain originally from Netherlands. [...]
Content analysis details: (39.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.4 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
3.1 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?203.146.78.221>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[203.146.237.187 listed in bl.score.senderscore.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[203.146.237.187 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[203.146.78.221 listed in zen.spamhaus.org]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[203.146.237.187 listed in bl.mailspike.net]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jacobvakabudriver[at]gmail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.146.237.187 listed in psbl.surriel.com]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.0 SPOOFED_FREEMAIL No description available.
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Greetings...
Greetings:
I hope all is well with you and your family,
My name is Sir, Jacob Vakabua Driver, Chief Finance Officer Investment Bank in SA, I
am the fund manager of Late Mr. Mohammad Asaf Husain who passed on 5 years ago left
the sum US$ 8,620.000.00 with my bank. Since after his death no one has stepped up
for the claim, however, I did not know any of his family members, I think he was
staying alone here in South Africa before he passed on, Late Mr. Mohammad Asaf
Husain originally from Netherlands.
Currently my bank Director summon a mandate to me to provide any of his family
members to claim, fail to do that the fund will be confiscated by the National
Treasury Department South Africa, in this regards I am proposing a deal to you.
Here Is the Deal;
I will use my power to present you as an extended family to my late client for the
fund to be released to you without any interruption. I guarantee you that this will
be executed under a legitimate arrangement that will protect you from any breach of
the law. I will not fail to bring to your notice that this proposal is hitch-free
and that you should not entertain any fear I will provide you all the virtual
documents about the fund as well as lead you step by step.
The sharing terms:
Other two of junior staffs working with me in my bank who knows about this deal we
share 20%, I myself get 40% while 40% of the total funds go to you. The transfer is
risk free since we are handling it via a bank to bank transfer.
Send me your full name, address/country and mobile number to my private email
address ( [email protected] )
Waiting for your swift reply.
Kind Regards
Sir, Jacob Vakabua Driver
Chief Financial Officer
Tel +27 62 569 7374
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
