#320531 by buried under 419s
Sat Feb 25, 2017 2:18 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id eXPkNLJRsVihRwAAjbubUg
for <>; Sat, 25 Feb 2017 01:43:14 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 25 Feb 2017 01:43:14 -0800
Received: from hosting.otitelecom.com ([154.127.32.18]:40181)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1chYsh-0004m7-27
for ; Sat, 25 Feb 2017 01:43:14 -0800
Received: (qmail 17255 invoked from network); 25 Feb 2017 10:39:50 +0100
Received: from unknown (HELO User) (103.228.143.88)
by otitelecom.bj with SMTP; 25 Feb 2017 10:39:47 +0100
Reply-To: <[email protected]>
From: "ENG. CHARLES NMADU"<[email protected]>
Date: Sat, 25 Feb 2017 01:39:41 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=23.8
X-Spam-Score: 238
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Confidential Memo Ready Carefully and Call Me Back Immediately.
Dear Friend, Before I continue to inform you what to do to have your fund
in your account, I want to say here that I am not part of the people that
suppose to release your fund to you, but like I said in my first message
that I work as a scientist with CBN and come across a disk marked X and I
went further to ascertain what was it for and I discovered that it is your
fund and the mark of X means you will never receive the fund. I outlined
many people that are withholding this fund. Please what am about to do for
you is very risk and it can lead to my death by these powerful cartels. [...]
Content analysis details: (23.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?103.228.143.88>]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[103.228.143.88 listed in dnsbl.sorbs.net]
1.0 MISSING_HEADERS Missing To: header
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[103.228.143.88 listed in zen.spamhaus.org]
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 MISSING_MID Missing Message-Id: header
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** Confidential Memo Ready Carefully and Call Me Back Immediately.
Confidential Memo Ready Carefully and Call Me Back Immediately.
Dear Friend,
Before I continue to inform you what to do to have your fund in your account, I want
to say here that I am not part of the people that suppose to release your fund to
you, but like I said in my first message that I work as a scientist with CBN and
come across a disk marked X and I went further to ascertain what was it for and I
discovered that it is your fund and the mark of X means you will never receive the
fund. I outlined many people that are withholding this fund. Please what am about to
do for you is very risk and it can lead to my death by these powerful cartels.
I assure you that as a computer scientist I will reload your fund to another HARD
DISK HD120 GIG and destroy this one marked X and release your fund to your account
within 24hrs, you need to give me an assurance that I will be save if I do this for
you because I will like you to prepare my traveling documents which I will use to
join you in your country Brunel to avoid being killed by this cartels.
Yes you have hear many stories in the past concerning your fund and I cannot doubt
you because it were the same people promising you but nothing happen, my concern now
is this HARD DISK HD120 GIG how to get it, I want you to look for it in your country
and purchase it and send it to me to use and reload or transfer your fund and make
further remittance to your account and if you cannot get it from your country then
sen the money to purchase it from here through a Chinese firm that supplies it to
the CBN. I want to promise you that within 24hrs you will have your fund in your
account one the HARD DISK HD120 GIG gets to my hand. The HARD DISK HD120 GIG is $85
but you can get it from your country and send to me.
Again please confirm this receiving account as listed below where the fund was
already programmed for the transfer And note that this does not required any
documents as you mentioned and it was these documents that have made you spent a lot
of money and I want to tell you that it does not required them to get it done.
Bank Name: COMERICA BANK;
Bank Address: 4040 Lincoln Blvd.; Marina Del Rey, CA 90292, USA;
Account Number: 8001885568
Routing Number: 121137522
Swift Code: MNBDUS33
Bank's Phone +310-827-1684
Bank's fax#: +310-827-1329
Please this is like a Mafia setting in Nigeria; you may not understand It because
you are not a Nigerian. The only thing I will need to Release this fund is a special
HARD DISK we call it HD120 GIG. I will Buy it, recopy your information, destroy the
previous one, and Punch the computer to reflect in your bank within 24 banking
hours. Here are the names of my Top Boss and his colleagues who specially involve in
this scheme of evil.
1. Prof Charles Soludo
2. Malam Nuhu Ribadu
3. Hon Ngozi Okonji Iwuala
4. Shamsuddeen Usman
5. Ahmed Usman
6. Dr Tunde Lemo
7. Dr Lamido Sanusi
8. Sen David Mark
9. Dr Olushegun Aganga
10. MRS FARIDA WAZIRI
11. REV KELVIN AMOR
12. Godwin Emefele
13, Senator Bukola Saraki
14, Lai Mohammed
15, Senator Ike Ikeweremadu
I will clean up the tracer and destroy your file, after which I will Run away from
Nigeria to meet with you. If you are interested. Do get In touch with me
immediately, you should re confirm your personal and Banking details, so that there
won't be any mistake.
Again, do not let any of this people I mentioned here to know about this mail
because if they do I will be a dead person.
You can call me on this phone number for further discussion please: +2348093393937.
Regards,
Engr. Charles Nmadu
Email: [email protected]
Delivered-To:
Received: from
by (Dovecot) with LMTP id eXPkNLJRsVihRwAAjbubUg
for <>; Sat, 25 Feb 2017 01:43:14 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 25 Feb 2017 01:43:14 -0800
Received: from hosting.otitelecom.com ([154.127.32.18]:40181)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1chYsh-0004m7-27
for ; Sat, 25 Feb 2017 01:43:14 -0800
Received: (qmail 17255 invoked from network); 25 Feb 2017 10:39:50 +0100
Received: from unknown (HELO User) (103.228.143.88)
by otitelecom.bj with SMTP; 25 Feb 2017 10:39:47 +0100
Reply-To: <[email protected]>
From: "ENG. CHARLES NMADU"<[email protected]>
Date: Sat, 25 Feb 2017 01:39:41 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=23.8
X-Spam-Score: 238
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Confidential Memo Ready Carefully and Call Me Back Immediately.
Dear Friend, Before I continue to inform you what to do to have your fund
in your account, I want to say here that I am not part of the people that
suppose to release your fund to you, but like I said in my first message
that I work as a scientist with CBN and come across a disk marked X and I
went further to ascertain what was it for and I discovered that it is your
fund and the mark of X means you will never receive the fund. I outlined
many people that are withholding this fund. Please what am about to do for
you is very risk and it can lead to my death by these powerful cartels. [...]
Content analysis details: (23.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?103.228.143.88>]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[103.228.143.88 listed in dnsbl.sorbs.net]
1.0 MISSING_HEADERS Missing To: header
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[103.228.143.88 listed in zen.spamhaus.org]
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 MISSING_MID Missing Message-Id: header
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** Confidential Memo Ready Carefully and Call Me Back Immediately.
Confidential Memo Ready Carefully and Call Me Back Immediately.
Dear Friend,
Before I continue to inform you what to do to have your fund in your account, I want
to say here that I am not part of the people that suppose to release your fund to
you, but like I said in my first message that I work as a scientist with CBN and
come across a disk marked X and I went further to ascertain what was it for and I
discovered that it is your fund and the mark of X means you will never receive the
fund. I outlined many people that are withholding this fund. Please what am about to
do for you is very risk and it can lead to my death by these powerful cartels.
I assure you that as a computer scientist I will reload your fund to another HARD
DISK HD120 GIG and destroy this one marked X and release your fund to your account
within 24hrs, you need to give me an assurance that I will be save if I do this for
you because I will like you to prepare my traveling documents which I will use to
join you in your country Brunel to avoid being killed by this cartels.
Yes you have hear many stories in the past concerning your fund and I cannot doubt
you because it were the same people promising you but nothing happen, my concern now
is this HARD DISK HD120 GIG how to get it, I want you to look for it in your country
and purchase it and send it to me to use and reload or transfer your fund and make
further remittance to your account and if you cannot get it from your country then
sen the money to purchase it from here through a Chinese firm that supplies it to
the CBN. I want to promise you that within 24hrs you will have your fund in your
account one the HARD DISK HD120 GIG gets to my hand. The HARD DISK HD120 GIG is $85
but you can get it from your country and send to me.
Again please confirm this receiving account as listed below where the fund was
already programmed for the transfer And note that this does not required any
documents as you mentioned and it was these documents that have made you spent a lot
of money and I want to tell you that it does not required them to get it done.
Bank Name: COMERICA BANK;
Bank Address: 4040 Lincoln Blvd.; Marina Del Rey, CA 90292, USA;
Account Number: 8001885568
Routing Number: 121137522
Swift Code: MNBDUS33
Bank's Phone +310-827-1684
Bank's fax#: +310-827-1329
Please this is like a Mafia setting in Nigeria; you may not understand It because
you are not a Nigerian. The only thing I will need to Release this fund is a special
HARD DISK we call it HD120 GIG. I will Buy it, recopy your information, destroy the
previous one, and Punch the computer to reflect in your bank within 24 banking
hours. Here are the names of my Top Boss and his colleagues who specially involve in
this scheme of evil.
1. Prof Charles Soludo
2. Malam Nuhu Ribadu
3. Hon Ngozi Okonji Iwuala
4. Shamsuddeen Usman
5. Ahmed Usman
6. Dr Tunde Lemo
7. Dr Lamido Sanusi
8. Sen David Mark
9. Dr Olushegun Aganga
10. MRS FARIDA WAZIRI
11. REV KELVIN AMOR
12. Godwin Emefele
13, Senator Bukola Saraki
14, Lai Mohammed
15, Senator Ike Ikeweremadu
I will clean up the tracer and destroy your file, after which I will Run away from
Nigeria to meet with you. If you are interested. Do get In touch with me
immediately, you should re confirm your personal and Banking details, so that there
won't be any mistake.
Again, do not let any of this people I mentioned here to know about this mail
because if they do I will be a dead person.
You can call me on this phone number for further discussion please: +2348093393937.
Regards,
Engr. Charles Nmadu
Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces