Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#334429 by buried under 419s Wed Jul 19, 2017 9:25 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 19 Jul 2017 12:58:30 -0700
Received: from [54.64.228.74] (port=37508 helo=gone.club)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dXv77-00030M-5G
for ; Wed, 19 Jul 2017 12:58:30 -0700
Received: from User (unknown [45.35.198.57])
by gone.club (Postfix) with ESMTPA id CBE903ECD17;
Wed, 19 Jul 2017 21:34:43 +0900 (JST)
Reply-To: <[email protected]>
From: "DR.ONYERGO HENRY"<[email protected]>
Date: Wed, 19 Jul 2017 05:35:01 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=25.8
X-Spam-Score: 258
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: From the Desk of;DR.Onyego Henry Director;Int'l, Credit Control
Office. Central Bank of Nigeria (CBN) [...]

Content analysis details: (25.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[54.64.228.74 listed in dnsbl.sorbs.net]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[54.64.228.74 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?54.64.228.74>]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_HK_NAME_DR No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_USER From misspaced, from "User"
1.6 MISSING_MID Missing Message-Id: header
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RE; CHANGE


From the Desk of;DR.Onyego Henry

Director;Int'l, Credit Control Office.

Central Bank of Nigeria (CBN)

Tel.+ 234 816 726 9749



Attn: BENEFICIARY,



RE: APPLICATION FOR CHANGE OF ACCOUNT PARTICULARS OF YOUR FUND TRANSFER SUM OF
USD$12.5MILLION.



Following the directives received from the Office of the President, Federal Republic
of Nigeria,as a result of petitions and counter petitions by foreign contractors
over non-payment of their contract claims,we the APEX BANK of the Nation CBN,has
been mandated to look into all overdue contract payments yet to be released for
vetting/Authenticating and immediate release of such funds,Your name is among the
list of beneficiaries short-listed for immediate payment.



Be informed that there are several accounts submitted for your payment by your local
representatives Engr.Williams Okon to the KTT Director, Central Bank of Nigeria, We
do not know into which account to effect your payment.Please, you are hereby
required to clarify the following immediately: -



1. Did you broker your payment to one Mr. DARRYL SPEARS Of Michigan USA.,to claim
and receive the payment on your behalf?.







Northwest trust Bank

1 Oakbrook Terrace, Chicago, Illinois USA,

A/C NO: 12 49819

Swift Code;6023-13 76ABA

ROUTING NO: 171000152,

A/C NAME: Titan Erectors, Gerard V. Radice/Konzeng Agent.



You are required as a matter of urgency to confirm the legitimacy of the above claim
and kindly give us reason why you decided to affect the above Change of Account.



If you are not aware of this claim, please confirm to us through the above stated
telephone, and e-mail address immediately by stating your authentic Account
details,for proper credit of your funds.



Due to the long delay this payment has suffered, be rest assured that immediately
these payment irregularities are cleared, you would receive your fund remittance
analysis for clearance of funds into your account.



Note that we are bound to recognize Mr. DARRYL SPEARS claim, if you fail to promptly
response to this notice following the Deed of Assignment he submitted to claim this
payment.



Make sure you get back to me as soon as possible so that necessary action will be
taking immediately.



Yours faithfully,



DR.Onyego Henry

Director;Int'l, Credit Control Office.

Central Bank of Nigeria (CBN)

[email protected]

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Google [Bot] and 257 guests