#396993 by buried under 419s
Thu Sep 12, 2019 8:39 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id YI9NDrzKel3WYQAAjbubUg
for <>; Thu, 12 Sep 2019 15:46:20 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 12 Sep 2019 15:46:20 -0700
Received: from [124.6.224.29] (port=44998 helo=mx3.prisma.net.bd)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1i8Xqz-0006VU-F3
for ; Thu, 12 Sep 2019 15:46:20 -0700
Received: from localhost (localhost [127.0.0.1])
by mx3.prisma.net.bd (Postfix) with ESMTP id 8634635283
for <>; Fri, 13 Sep 2019 04:45:34 +0600 (BDT)
X-Virus-Scanned: Debian amavisd-new at mx.prisma.net.bd
Received: from mx3.prisma.net.bd ([127.0.0.1])
by localhost (mx3.prisma.net.bd [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id JlWOAb-ahe3a for <>;
Fri, 13 Sep 2019 04:45:34 +0600 (BDT)
Received: from mail.prisma.net.bd (mail.prisma.net.bd [124.6.224.16])
by mx3.prisma.net.bd (Postfix) with ESMTPS id F389331D84
for <>; Fri, 13 Sep 2019 04:41:27 +0600 (BDT)
Received: (qmail 11050 invoked by uid 89); 13 Sep 2019 04:41:25 +0600
Received: from unknown (HELO User) (124.6.224.59)
by mail.prisma.net.bd with SMTP; 13 Sep 2019 04:41:25 +0600
Reply-To: <[email protected]>
From: "SENATOR Ahmed Ibrahim Lawan"<[email protected]>
Date: Thu, 12 Sep 2019 23:41:26 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=60.7
X-Spam-Score: 607
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Office of the Senate President Federal Republic of Nigeria
4th Floor, New Senate Wing, [...]
Content analysis details: (60.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.2 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 MILLION_USD BODY: Talks about millions of dollars
4.2 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.3 NSL_RCVD_HELO_USER Received from HELO User
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... .224.29;r=]
2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
4.3 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 FROM_MISSP_SPF_FAIL No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 MSOE_MID_WRONG_CASE No description available.
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
3.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.5 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.0 FROM_MISSPACED From: missing whitespace
0.3 LOTTO_DEPT Claims Department
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** WHAT YOU SHOULD KNOW ABOUT YOUR PENDING PAYMENT
Office of the Senate President
Federal Republic of Nigeria
4th Floor, New Senate Wing,
National Assembly Complex,
Three Arms Zone, PMB 141 FCT Abuja.
I am Senator Ahmed Ibrahim Lawan the New Senate President of the Federal Republic of
Nigeria. I decided to contact you because of the prevailing financial report
reaching my office today from United States of America concerning your payment after
taking Oath of allegiance as the new Senate President of the 9th Assembly of Federal
Republic of Nigeria. In the course of my investigation as the New Senate President
and the director of payment verification / implementation committee, I came across
your name in the documents handed over to me by my predecessor the past immediate
senate president Senator Abubakar Saraki as unpaid fund beneficiary in the record of
the central bank of Nigeria and other banks that are suppose to get your funds
released to you. My committee was set up by the Senate payment reconciliation
committee to verify and scrutinize all outstanding debts owed to our foreign
beneficiaries in accordance to the information received from the United States
governm
ent and other countries o
1. Did you instruct Mr Seung-Hee Lee of Pantech Co Ltd South Korea, whose
information is below, to claim and receive the payment on your behalf?
2. Did you sign any "Deed of Assignment" in his favor thereby making him the current
beneficiary with the following account details?
Bank Name: KUMHO INVESTIMENT BANK,
SEOUL SOUTH KOREA,
A/C Number: 573701092,
Swift Code: KHMBKRSE.
[email protected]
SENATOR AHMED IBRAHIM LAWAN
NEW SENATE PRESIDENT
FEDERAL REPUBLIC OF NIGERIA
Delivered-To:
Received: from
by with LMTP id YI9NDrzKel3WYQAAjbubUg
for <>; Thu, 12 Sep 2019 15:46:20 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 12 Sep 2019 15:46:20 -0700
Received: from [124.6.224.29] (port=44998 helo=mx3.prisma.net.bd)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1i8Xqz-0006VU-F3
for ; Thu, 12 Sep 2019 15:46:20 -0700
Received: from localhost (localhost [127.0.0.1])
by mx3.prisma.net.bd (Postfix) with ESMTP id 8634635283
for <>; Fri, 13 Sep 2019 04:45:34 +0600 (BDT)
X-Virus-Scanned: Debian amavisd-new at mx.prisma.net.bd
Received: from mx3.prisma.net.bd ([127.0.0.1])
by localhost (mx3.prisma.net.bd [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id JlWOAb-ahe3a for <>;
Fri, 13 Sep 2019 04:45:34 +0600 (BDT)
Received: from mail.prisma.net.bd (mail.prisma.net.bd [124.6.224.16])
by mx3.prisma.net.bd (Postfix) with ESMTPS id F389331D84
for <>; Fri, 13 Sep 2019 04:41:27 +0600 (BDT)
Received: (qmail 11050 invoked by uid 89); 13 Sep 2019 04:41:25 +0600
Received: from unknown (HELO User) (124.6.224.59)
by mail.prisma.net.bd with SMTP; 13 Sep 2019 04:41:25 +0600
Reply-To: <[email protected]>
From: "SENATOR Ahmed Ibrahim Lawan"<[email protected]>
Date: Thu, 12 Sep 2019 23:41:26 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=60.7
X-Spam-Score: 607
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Office of the Senate President Federal Republic of Nigeria
4th Floor, New Senate Wing, [...]
Content analysis details: (60.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.2 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 MILLION_USD BODY: Talks about millions of dollars
4.2 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.3 NSL_RCVD_HELO_USER Received from HELO User
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... .224.29;r=]
2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
4.3 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 FROM_MISSP_SPF_FAIL No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 MSOE_MID_WRONG_CASE No description available.
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
3.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.5 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.0 FROM_MISSPACED From: missing whitespace
0.3 LOTTO_DEPT Claims Department
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** WHAT YOU SHOULD KNOW ABOUT YOUR PENDING PAYMENT
Office of the Senate President
Federal Republic of Nigeria
4th Floor, New Senate Wing,
National Assembly Complex,
Three Arms Zone, PMB 141 FCT Abuja.
I am Senator Ahmed Ibrahim Lawan the New Senate President of the Federal Republic of
Nigeria. I decided to contact you because of the prevailing financial report
reaching my office today from United States of America concerning your payment after
taking Oath of allegiance as the new Senate President of the 9th Assembly of Federal
Republic of Nigeria. In the course of my investigation as the New Senate President
and the director of payment verification / implementation committee, I came across
your name in the documents handed over to me by my predecessor the past immediate
senate president Senator Abubakar Saraki as unpaid fund beneficiary in the record of
the central bank of Nigeria and other banks that are suppose to get your funds
released to you. My committee was set up by the Senate payment reconciliation
committee to verify and scrutinize all outstanding debts owed to our foreign
beneficiaries in accordance to the information received from the United States
governm
ent and other countries o
1. Did you instruct Mr Seung-Hee Lee of Pantech Co Ltd South Korea, whose
information is below, to claim and receive the payment on your behalf?
2. Did you sign any "Deed of Assignment" in his favor thereby making him the current
beneficiary with the following account details?
Bank Name: KUMHO INVESTIMENT BANK,
SEOUL SOUTH KOREA,
A/C Number: 573701092,
Swift Code: KHMBKRSE.
[email protected]
SENATOR AHMED IBRAHIM LAWAN
NEW SENATE PRESIDENT
FEDERAL REPUBLIC OF NIGERIA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces