Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#399978 by buried under 419s Sat Nov 09, 2019 6:22 pm
Return-path: <[email protected]>
Delivery-date: Sat, 09 Nov 2019 13:23:10 -0800
Received: from server217-174-250-77.live-servers.net ([]:52854 helo=srv1.kas.org.kw)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iTYCK-0006uc-U7
for ; Sat, 09 Nov 2019 13:23:10 -0800
Received: from User (unknown [])
by srv1.kas.org.kw (Postfix) with ESMTPA id 5BBF61466BA4;
Thu, 7 Nov 2019 23:37:46 +0000 (GMT)
Reply-To: <[email protected]>
From: "Daniel Coats"<[email protected]>
Date: Fri, 8 Nov 2019 00:37:50 +0100
MIME-Version: 1.0
Content-Type: text/plain;
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=64.0
X-Spam-Score: 640
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: United States Intelligence Community Office of the Inspector
General Investigations Division, Reston 3, Washington, D.C. 20511 USA Greetings
of the Day, READ CAREFULLY [...]

Content analysis details: (64.0 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.9 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
3.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.3 NSL_RCVD_FROM_USER Received from User
[ listed in bl.score.senderscore.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.2 FROM_MISSP_USER From misspaced, from "User"
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
3.2 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.5 FSL_NEW_HELO_USER Spam's using Helo and User
2.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 HK_SCAM No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
1.6 MISSING_MID Missing Message-Id: header
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.9 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 FROM_MISSPACED From: missing whitespace
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
2.3 TO_NO_BRKTS_DYNIP To: lacks brackets and dynamic rDNS
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.3 MONEY_FORM Lots of money if you fill out a form
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Refund/Compensation

United States Intelligence Community
Office of the Inspector General
Investigations Division, Reston 3,
Washington, D.C. 20511 USA

Greetings of the Day,


I am Daniel Coats, Director of National Intelligence (DNI) we have been working
towards the eradication of Internet Scam around the globe, western part of Africa to
be precise.

We have been able to track down many con-artist in various part of west Africa
they are all in custody, also huge amount of money was recovered. In reference to
this, several indoor meeting was held between the United Nation, United States
government and the African Union, during the meeting agreement was reached that
victims will get a Refund/Cpmpensation from the money recovered from con artists.

Note this e-mail is directed to you because during our investigations, your email
address was found in one of the con artist file and a computer hard disk in our
custody. In this regards, you will be receiving a Refund/Compensation of the sum of
US$2,800,000.00 (Two Million Eight Hundred United State Dollars). Meanwhile, the
Africa Union committee requested that victims should show evidence to prove they are
victim of West Africa scam.

Due to evidence requested, we appointed a United State base Attorney (George L.
Miller) to advocate on your behalf and provide evidence to prove you're scam victim
to aid the approval release of your funds payment to you.

IMPORTANT NOTICE: The only fee you're to pay to the Attorney is the evidence
processing fee $325.00 for processing and securing the legal evidence to prove to
the West Africa Goverment you are a victim of scam. Also kindly request him to
direct you on how to submit the processing fee $325.00 Only.

Kindly verify your details to the lawyer (George L. Miller) to enable him commence
the processing and secure the evidence to aid the release of your payment to you,
also make sure your details and residential address are provided correctly to avoid
any atom of mistake and delay during processing.

(1) Your Full Name: ...................
(2) Full Residential Address:.......... (P.O.BOX NOT ALLOWED)
(3) Occupation:. ...............
(4) Direct Phone Number: ..............
(5) Valid ID Card: ....................

CONTACT PERSON: George L. Miller
E-MAIL ADDRESS: [email protected]

As soon as he received your details, the processing to aid the release of your
Compensation Refund will be facilitated immediately and your US$2,800,000.00 (Two
Million Eight Hundred United State Dollars) will be made payable to you in due time
within the next 72 hours.

Treat as urgent!


Mr. Daniel Coats
Director of National Intelligence


This electronic message transmission is intended only for the use of the party to
which it is addressed, including any attachments and contains Investigations from
Director of National Intelligence, LLC (DNI), which may be privileged, confidential,
or protected by law. If you are not the intended recipient you are hereby notified
that any dissemination, copying or distribution of this e-mail or its contents is
strictly prohibited. If you have received this message in error, please notify us
immediately by replying to the message and also deleting it from your computer.
Thank you.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: No registered users and 35 guests