by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id NnrDJWrxp15Z3gEAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 28 Apr 2020 05:03:38 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 28 Apr 2020 05:03:38 -0400
Received: from mail.windstream.syn-alias.com ([69.168.106.36]:24592 helo=mail.windstream.net)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jTM9O-000VqG-KD
for ; Tue, 28 Apr 2020 05:03:38 -0400
DKIM-Signature: v=1; a=rsa-sha1; d=windstream.net; s=20180222; c=relaxed/simple;
q=dns/txt; [email protected]; t=1588063330;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=+23FGiAdfWMDv07L70mpLWQz4ag=;
b=A2QLKXGlVHalK2i1PGX4KU2iyhA/ZVjDasUhBAhfmLFyL78eWQtsGnfeV6ImAxsA
zJEnil2eV3ENaL4y1twdhz0drw4kz0YA12lzGv4tGX1l5XiulVq3m6Qsh3hx3Djg
TT5xIiNxxKAm/6pVAq4woBFgKkVWjzyEK/28syI8s0y6ycQQWfnqn9Qj/eIS2aFj
HmJ9Vsc6/6EJXsmUFlzGAR0Frw9xMv8bajuQuXKdn4zRmTREXtUhfey78ce8CKA+
qysKkuRdG2ePIbONM4Tisqo46wEzjw0XaT6KaGqwNsyST2hGeuDuijfQTtNLeLXw
6nQlH97GUl2viC6O6BQ8YQ==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.3 cv=FqF7AFjq c=1 sm=1 tr=0 a=OWlS06JeqejQsgbUCfrR0A==:117 a=OWlS06JeqejQsgbUCfrR0A==:17 a=KGjhK52YXX0A:10 a=cl8xLZFz6L8A:10 a=2pux8ysSk-IA:10 a=KXl77lDgDEgIEtoqJYcA:9 a=h1N7SxzrfRHoAPmF96MA:9 a=iURno3aEv1SlcQl-:21 a=LLtwbxrZ6dSaeJny:21 a=wPNLvfGTeEIA:10 a=XCS5KlWvjFmIAZI2NlYA:9 a=QIErWYoxKKZ2ud_-:21 a=_W_S_7VecoQA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: bGFkb25uYXN0ZWVsbWFuQHdpbmRzdHJlYW0ubmV0
Received: from [98.20.216.79] ([98.20.216.79:4368] helo=[172.93.165.27])
by mail.windstream.net (envelope-from <[email protected]>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPS (cipher=DHE-RSA-AES256-SHA)
id 04/4C-26265-F2CE7AE5; Tue, 28 Apr 2020 04:42:09 -0400
Content-Type: multipart/alternative; boundary="===============1162561407=="
Message-ID: <[email protected]>
MIME-Version: 1.0
To: [email protected]
From: "Desmond Adjei Kuti" <[email protected]>
Date: Tue, 28 Apr 2020 01:41:09 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=9.5
X-Spam-Score: 95
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system ",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Financial Consultancy Services 114 Boulevards Westland West
Legon, Accra-Ghana 28/04/2020 Attn: SUBJECT: YOUR FUND. In consonance with
the Central (Apex) Banks of West African countries and having been contracted
as a consultant (Ecowas)to identify beneficiaries/payments for eventual uncondition
[...]
Content analysis details: (9.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[69.168.106.36 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?69.168.106.36>]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[69.168.106.36 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.4 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FUND
You will not see this in a MIME-aware mail reader.
--===============1162561407==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Financial Consultancy Services
114 Boulevards Westland
West Legon,
Accra-Ghana
28/04/2020
Attn:
SUBJECT: YOUR FUND.
In consonance with the Central (Apex) Banks of West African countries and having been
contracted as a consultant (Ecowas)to identify beneficiaries/payments for eventual
unconditional transfer to beneficiaries, I respectfully wish to draw your attention to the
following.
1. You have been identified as a beneficiary of outstanding Fund Currently long overdue.
To help/facilitate our ongoing exercise, preparatory to the unconditional transfer of your
funds, you need to urgently reconfirm your details and requisite information viz,
I. full names and address and telephone.
II. Copy of your identity.
III. Essential documents pertaining to your funds and your claim for payment.
Note: The above is to help us confirm that we are dealing and communicating with the
rightful and real owner (Scott A. Anderson), and not an impostor trying to claim or divert
funds belonging to you.
2. Be informed and know that you are not required by law or procedure to pay any money
to any person(s) or office(s) before you receive your funds.
Accordingly, you will not pay any money to receive your funds as your funds will be released
and transferred to you upon completion of requisite due diligence and due process.
You are quickly advised to stop communication with the impostors who are asking you for
money and taking money from you as you are not required to pay any money.
3. It is also part of our mandate to help rescue you from criminals and impostors who
may have criminally deceived and defrauded you
We shall deploy necessary machinery to help recover all or substantial money you may have
lost to the criminals and impostors.
All you need do is to provide details and information on the money you have lost and to the
people and places you sent the money.
4. It is important that you know that payments such as yours go through banks and are
not done by cash. Any one telling you to go pick your money in cash anywhere is only
deceiving you and using that as a ploy to take money from you.
Finally, endeavor to treat this mail as imperative and urgent and also to maintain
confidentiality on it at all times and in all places until you have received your funds.
Regards,
Desmond Adjei Kuti
Delivered-To:
Received: from
by with LMTP
id NnrDJWrxp15Z3gEAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 28 Apr 2020 05:03:38 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 28 Apr 2020 05:03:38 -0400
Received: from mail.windstream.syn-alias.com ([69.168.106.36]:24592 helo=mail.windstream.net)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jTM9O-000VqG-KD
for ; Tue, 28 Apr 2020 05:03:38 -0400
DKIM-Signature: v=1; a=rsa-sha1; d=windstream.net; s=20180222; c=relaxed/simple;
q=dns/txt; [email protected]; t=1588063330;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=+23FGiAdfWMDv07L70mpLWQz4ag=;
b=A2QLKXGlVHalK2i1PGX4KU2iyhA/ZVjDasUhBAhfmLFyL78eWQtsGnfeV6ImAxsA
zJEnil2eV3ENaL4y1twdhz0drw4kz0YA12lzGv4tGX1l5XiulVq3m6Qsh3hx3Djg
TT5xIiNxxKAm/6pVAq4woBFgKkVWjzyEK/28syI8s0y6ycQQWfnqn9Qj/eIS2aFj
HmJ9Vsc6/6EJXsmUFlzGAR0Frw9xMv8bajuQuXKdn4zRmTREXtUhfey78ce8CKA+
qysKkuRdG2ePIbONM4Tisqo46wEzjw0XaT6KaGqwNsyST2hGeuDuijfQTtNLeLXw
6nQlH97GUl2viC6O6BQ8YQ==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.3 cv=FqF7AFjq c=1 sm=1 tr=0 a=OWlS06JeqejQsgbUCfrR0A==:117 a=OWlS06JeqejQsgbUCfrR0A==:17 a=KGjhK52YXX0A:10 a=cl8xLZFz6L8A:10 a=2pux8ysSk-IA:10 a=KXl77lDgDEgIEtoqJYcA:9 a=h1N7SxzrfRHoAPmF96MA:9 a=iURno3aEv1SlcQl-:21 a=LLtwbxrZ6dSaeJny:21 a=wPNLvfGTeEIA:10 a=XCS5KlWvjFmIAZI2NlYA:9 a=QIErWYoxKKZ2ud_-:21 a=_W_S_7VecoQA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: bGFkb25uYXN0ZWVsbWFuQHdpbmRzdHJlYW0ubmV0
Received: from [98.20.216.79] ([98.20.216.79:4368] helo=[172.93.165.27])
by mail.windstream.net (envelope-from <[email protected]>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPS (cipher=DHE-RSA-AES256-SHA)
id 04/4C-26265-F2CE7AE5; Tue, 28 Apr 2020 04:42:09 -0400
Content-Type: multipart/alternative; boundary="===============1162561407=="
Message-ID: <[email protected]>
MIME-Version: 1.0
To: [email protected]
From: "Desmond Adjei Kuti" <[email protected]>
Date: Tue, 28 Apr 2020 01:41:09 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=9.5
X-Spam-Score: 95
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system ",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Financial Consultancy Services 114 Boulevards Westland West
Legon, Accra-Ghana 28/04/2020 Attn: SUBJECT: YOUR FUND. In consonance with
the Central (Apex) Banks of West African countries and having been contracted
as a consultant (Ecowas)to identify beneficiaries/payments for eventual uncondition
[...]
Content analysis details: (9.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[69.168.106.36 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?69.168.106.36>]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[69.168.106.36 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.4 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FUND
You will not see this in a MIME-aware mail reader.
--===============1162561407==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Financial Consultancy Services
114 Boulevards Westland
West Legon,
Accra-Ghana
28/04/2020
Attn:
SUBJECT: YOUR FUND.
In consonance with the Central (Apex) Banks of West African countries and having been
contracted as a consultant (Ecowas)to identify beneficiaries/payments for eventual
unconditional transfer to beneficiaries, I respectfully wish to draw your attention to the
following.
1. You have been identified as a beneficiary of outstanding Fund Currently long overdue.
To help/facilitate our ongoing exercise, preparatory to the unconditional transfer of your
funds, you need to urgently reconfirm your details and requisite information viz,
I. full names and address and telephone.
II. Copy of your identity.
III. Essential documents pertaining to your funds and your claim for payment.
Note: The above is to help us confirm that we are dealing and communicating with the
rightful and real owner (Scott A. Anderson), and not an impostor trying to claim or divert
funds belonging to you.
2. Be informed and know that you are not required by law or procedure to pay any money
to any person(s) or office(s) before you receive your funds.
Accordingly, you will not pay any money to receive your funds as your funds will be released
and transferred to you upon completion of requisite due diligence and due process.
You are quickly advised to stop communication with the impostors who are asking you for
money and taking money from you as you are not required to pay any money.
3. It is also part of our mandate to help rescue you from criminals and impostors who
may have criminally deceived and defrauded you
We shall deploy necessary machinery to help recover all or substantial money you may have
lost to the criminals and impostors.
All you need do is to provide details and information on the money you have lost and to the
people and places you sent the money.
4. It is important that you know that payments such as yours go through banks and are
not done by cash. Any one telling you to go pick your money in cash anywhere is only
deceiving you and using that as a ploy to take money from you.
Finally, endeavor to treat this mail as imperative and urgent and also to maintain
confidentiality on it at all times and in all places until you have received your funds.
Regards,
Desmond Adjei Kuti
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
