by buried under 419s
Thu Mar 24, 2011 3:42 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 24 Mar 2011 12:22:39 -0700
Received: from host.wowcite.com ([67.225.195.55])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2q7A-0004Gr-FT
for ; Thu, 24 Mar 2011 12:22:39 -0700
Received: from moulineclis2.pck.nerim.net ([62.212.111.139]:28347 helo=User)
by host.wowcite.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2pvf-0004rV-TG; Thu, 24 Mar 2011 15:10:44 -0400
Reply-To: <[email protected]>
From: "Dr. Mansur Mukhtar."<[email protected]>
Subject: Attn, Beneficiary: Contact The Custom Agent
Date: Thu, 24 Mar 2011 20:10:45 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host.wowcite.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - emaildisk.com
X-Spam-Subject: ***SPAM*** Attn, Beneficiary: Contact The Custom Agent
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: From Honorable Minister of Finance, Dr.Mansur Muhtar. Approved
by the Nigerian Government. Attn, Beneficiary This message is coming to you
from the office of the Honorable Minister of Finance Federal Republic of
Nigeria Government Reimbursement committee under the strict supervision of
the United Nations to pay Five Thousand Nigerian 419 Scam victims. [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: mcom.com]
0.0 T_LOTTO_DEPT BODY: Claims Department
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[67.225.195.55 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5082]
0.5 MISSING_MID Missing Message-Id: header
0.0 T_HK_NAME_DR T_HK_NAME_DR
0.0 FROM_MISSPACED From: missing whitespace
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
From Honorable Minister of Finance, Dr.Mansur Muhtar.
Approved by the Nigerian Government.
Attn, Beneficiary
This message is coming to you from the office of the Honorable Minister of Finance Federal Republic of Nigeria Government Reimbursement committee under the strict supervision of the United Nations to pay Five Thousand Nigerian 419 Scam victims.
I am writing to inform you that after the end of the meeting between the United Nations, Nigeria Government, American government , it was resolved that funds withheld by the Nigerian Government should be shipped to the U.S chief custom officer in Michigan just to make sure that the funds is been delivered to the right beneficiary and for security reasons.
So please be informed that your consignment had left Nigeria about Six hours ago for the united state of America so you will have to contact the U.S custom boss ..........th her contact address below and demand for the release of your consignment and then see if it has arrive to your country.
Contact Information of the U.S Custom Boss
Office to contact: U.S custom office
Contact person: North Caroline
Email Address: [email protected]
Have her contacted immediately for the release of your consignment and please you must try and Update me as soon as you receive your consignment. Looking forward to hear from you soon.
Thank You.
Dr. Mansur Mukhtar.
Honorable Minister of Finance
Envelope-to:
Delivery-date: Thu, 24 Mar 2011 12:22:39 -0700
Received: from host.wowcite.com ([67.225.195.55])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2q7A-0004Gr-FT
for ; Thu, 24 Mar 2011 12:22:39 -0700
Received: from moulineclis2.pck.nerim.net ([62.212.111.139]:28347 helo=User)
by host.wowcite.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2pvf-0004rV-TG; Thu, 24 Mar 2011 15:10:44 -0400
Reply-To: <[email protected]>
From: "Dr. Mansur Mukhtar."<[email protected]>
Subject: Attn, Beneficiary: Contact The Custom Agent
Date: Thu, 24 Mar 2011 20:10:45 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host.wowcite.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - emaildisk.com
X-Spam-Subject: ***SPAM*** Attn, Beneficiary: Contact The Custom Agent
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: From Honorable Minister of Finance, Dr.Mansur Muhtar. Approved
by the Nigerian Government. Attn, Beneficiary This message is coming to you
from the office of the Honorable Minister of Finance Federal Republic of
Nigeria Government Reimbursement committee under the strict supervision of
the United Nations to pay Five Thousand Nigerian 419 Scam victims. [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: mcom.com]
0.0 T_LOTTO_DEPT BODY: Claims Department
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[67.225.195.55 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5082]
0.5 MISSING_MID Missing Message-Id: header
0.0 T_HK_NAME_DR T_HK_NAME_DR
0.0 FROM_MISSPACED From: missing whitespace
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
From Honorable Minister of Finance, Dr.Mansur Muhtar.
Approved by the Nigerian Government.
Attn, Beneficiary
This message is coming to you from the office of the Honorable Minister of Finance Federal Republic of Nigeria Government Reimbursement committee under the strict supervision of the United Nations to pay Five Thousand Nigerian 419 Scam victims.
I am writing to inform you that after the end of the meeting between the United Nations, Nigeria Government, American government , it was resolved that funds withheld by the Nigerian Government should be shipped to the U.S chief custom officer in Michigan just to make sure that the funds is been delivered to the right beneficiary and for security reasons.
So please be informed that your consignment had left Nigeria about Six hours ago for the united state of America so you will have to contact the U.S custom boss ..........th her contact address below and demand for the release of your consignment and then see if it has arrive to your country.
Contact Information of the U.S Custom Boss
Office to contact: U.S custom office
Contact person: North Caroline
Email Address: [email protected]
Have her contacted immediately for the release of your consignment and please you must try and Update me as soon as you receive your consignment. Looking forward to hear from you soon.
Thank You.
Dr. Mansur Mukhtar.
Honorable Minister of Finance
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces