Return-path: <
[email protected]>
Envelope-to:
Delivery-date: Fri, 15 Sep 2017 13:42:14 -0700
Received: from [121.43.189.252] (port=39041 helo=mail.garmentoffice.com)
by with esmtp (Exim 4.89)
(envelope-from <
[email protected]>)
id 1dsxRA-00011W-6Z
for ; Fri, 15 Sep 2017 13:42:13 -0700
Received: from User (unknown [88.99.254.129])
by mail.garmentoffice.com (Postfix) with ESMTPA id D659A84CA3;
Sat, 16 Sep 2017 04:41:01 +0800 (CST)
Reply-To: <
[email protected]>
From: "Christopher A. Wray"<
[email protected]>
Date: Fri, 15 Sep 2017 21:41:06 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=34.7
X-Spam-Score: 347
X-Spam-Bar: ++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Office Of The Deputy Director, Christopher A. Wray, Federal
Bureau Of Investigation, [...]
Content analysis details: (34.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[121.43.189.252 listed in dnsbl.sorbs.net]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[121.43.189.252 listed in bb.barracudacentral.org]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see
http://www.openspf.org/Why?s=helo;id=ma ... ce.com;ip=]
1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(cenbnkng0015[at]aol.com)
1.0 MISSING_HEADERS Missing To: header
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 FAKE_REPLY_C No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Urgent Attention:....
Office Of The Deputy Director,
Christopher A. Wray,
Federal Bureau Of Investigation,
935 Pennsylvania Avenue,
NW, Washington, D.C. 20535-0001, USA.
Attention: Beneficiary,
Greetings of the day to you and your family. The Financial Crimes Section (FCS) of
the Federal Bureau Of Investigation (FBI) in collaboration with the International
Monetary Fund has discovered your over-due inheritance / contract payment of
US$8,000,000.00 (Eight Million United States Dollars) in an escrow account in the
Central Bank of Nigeria.
And from the intelligence report made available to us by the executive governor of
the Central Bank of Nigeria in the person of Mr Godwin Emefiele, the funds are 100%
real and have been approved for release to you, but a lady by the name of Mrs. Joan
B Melvin of New York has already filed an application of claim at the Central Bank
of Nigeria with a power of attorney and some official documents signed by you, which
empowered her to claim the funds on your behalf due to your ill health.
In prospect of this, we have been recommended to warn beneficiaries who have
received information pertaining to their outstanding inheritance / contract payment
to be very careful, in order not to fall a victim of ugly circumstance. In case you
are already dealing with some cruel officials of the Central Bank of Nigeria or
other agency, you are strictly advised to STOP further communication with them in
your best interest and thereby contact the governor's office of the Central Bank of
Nigeria via the below details:
NAME: MR. GODWIN EMEFIELE
OFFICE ADDRESS: Central Bank of Nigeria,
Central Business District,
Cadastral Zone, Abuja, Federal.
Capital Territory, Nigeria.
Email:
[email protected] NOTE: You should ignore any message that does not come from the above email address
and phone number for security reasons. And to enable the Central Bank of Nigeria
process and release the fund to you, you are demanded to re-confirm your full
details such as
FULL NAMES:
CITY:
STATE:
ZIP:
COUNTRY:
SEX:
AGE:
TELEPHONE NUMBER:
Ensure that you follow the Central Bank of Nigeria due process as enshrined in the
International Banking Secrecy Act to avoid any form of discrepancy, which may hinder
your fund transfer.
Thanks for your understanding and cooperation as we earnestly await your urgent reply.
Best Regards,
Christopher A. Wray,
Federal Bureau of Investigation
J. Edgar Hoover Building,
935 Pennsylvania Avenue,
NW, Washington, D.C.
E-mail:
[email protected]
