#335178 by buried under 419s
Thu Jul 27, 2017 9:12 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id UWxSFIoFellrKQAAjbubUg
for <>; Thu, 27 Jul 2017 08:23:54 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 27 Jul 2017 08:23:54 -0700
Received: from smtp303.alice.it ([82.57.200.119]:50972)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dakdk-0002ke-8x
for ; Thu, 27 Jul 2017 08:23:54 -0700
Received: from feu11-alice (82.57.204.66) by smtp303.alice.it (8.6.060.43)
id 5895009A07BDE92F; Thu, 27 Jul 2017 17:22:36 +0200
Received: from (105.112.22.156) by wmlight.pc.tim.it; Thu, 27 Jul 2017 17:22:36 +0200
Message-ID: <[email protected]>
Date: Thu, 27 Jul 2017 17:22:36 +0200 (CEST)
From: "Mr.Herbert Wigwe" <[email protected]>
Reply-To: [email protected]
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Originating-IP: 105.112.22.156
X-Spam-Status: Yes, score=13.5
X-Spam-Score: 135
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From the Desk Of: Mr.Herbert Wigwe. Foreign Payment Director.
Federal Republic of Nigeria Attn: Beneficiary Please what is going on? I
hope and believe there is no problem. I am writing to let you know that your
ATM Card that worth USD$8.5M, Eight Million Five Hundred Thousand United
States Dollars is ready to be delivered to you and we are only waiting to
receive the reconfirmation of your home address where you want your ATM card
to be delivered and Telephone number. [...]
Content analysis details: (13.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[82.57.200.119 listed in dnsbl.sorbs.net]
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[82.57.200.119 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mahmud.mohammed[at]tim.it)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officemail4good213[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 LOTTO_AGENT Claims Agent
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT REPLY NEEDED,
From the Desk Of:
Mr.Herbert Wigwe.
Foreign Payment Director.
Federal Republic of Nigeria
Attn: Beneficiary
Please what is going on? I hope and believe there is no problem. I am writing
to let you know that your ATM Card that worth USD$8.5M, Eight Million Five
Hundred Thousand United States Dollars is ready to be delivered to you and we
are only waiting to receive the reconfirmation of your home address where you
want your ATM card to be delivered and Telephone number.
We already have your home address here but still want you to re-confirm it to
me so that we can check if it is correct with what we have here and to avoid
sending your ATM card to the wrong person. You are required to reconfirm the
below information to enable us proceed with the shipment now as directed by the
authorities.
Full Name:
Mailing Address:
Your Age:
Direct Phone/ Mobile Number:
Also remember that it will cost you only $100 for delivery...Please I want to
assure you that the only fee you will pay to receive your ATM Card is $100 no
more.. Immediately the $100 is received from you, your Card shall be delivered
to you without a delay...BELOW IS THE INFORMATION FOR YOU TO SEND THE $100
WESTERN UNION OR MONEY GRAM
RECEIVER: CHUKWU STAN
ADDRESS: LAGOS NIGERIA
AMOUNT: $100.00
We await your urgent response. -
Yours faithfully,
From the Desk Of:
Mr. Herbert Wigwe.
Delivered-To:
Received: from
by (Dovecot) with LMTP id UWxSFIoFellrKQAAjbubUg
for <>; Thu, 27 Jul 2017 08:23:54 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 27 Jul 2017 08:23:54 -0700
Received: from smtp303.alice.it ([82.57.200.119]:50972)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dakdk-0002ke-8x
for ; Thu, 27 Jul 2017 08:23:54 -0700
Received: from feu11-alice (82.57.204.66) by smtp303.alice.it (8.6.060.43)
id 5895009A07BDE92F; Thu, 27 Jul 2017 17:22:36 +0200
Received: from (105.112.22.156) by wmlight.pc.tim.it; Thu, 27 Jul 2017 17:22:36 +0200
Message-ID: <[email protected]>
Date: Thu, 27 Jul 2017 17:22:36 +0200 (CEST)
From: "Mr.Herbert Wigwe" <[email protected]>
Reply-To: [email protected]
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Originating-IP: 105.112.22.156
X-Spam-Status: Yes, score=13.5
X-Spam-Score: 135
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From the Desk Of: Mr.Herbert Wigwe. Foreign Payment Director.
Federal Republic of Nigeria Attn: Beneficiary Please what is going on? I
hope and believe there is no problem. I am writing to let you know that your
ATM Card that worth USD$8.5M, Eight Million Five Hundred Thousand United
States Dollars is ready to be delivered to you and we are only waiting to
receive the reconfirmation of your home address where you want your ATM card
to be delivered and Telephone number. [...]
Content analysis details: (13.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[82.57.200.119 listed in dnsbl.sorbs.net]
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[82.57.200.119 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mahmud.mohammed[at]tim.it)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officemail4good213[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 LOTTO_AGENT Claims Agent
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT REPLY NEEDED,
From the Desk Of:
Mr.Herbert Wigwe.
Foreign Payment Director.
Federal Republic of Nigeria
Attn: Beneficiary
Please what is going on? I hope and believe there is no problem. I am writing
to let you know that your ATM Card that worth USD$8.5M, Eight Million Five
Hundred Thousand United States Dollars is ready to be delivered to you and we
are only waiting to receive the reconfirmation of your home address where you
want your ATM card to be delivered and Telephone number.
We already have your home address here but still want you to re-confirm it to
me so that we can check if it is correct with what we have here and to avoid
sending your ATM card to the wrong person. You are required to reconfirm the
below information to enable us proceed with the shipment now as directed by the
authorities.
Full Name:
Mailing Address:
Your Age:
Direct Phone/ Mobile Number:
Also remember that it will cost you only $100 for delivery...Please I want to
assure you that the only fee you will pay to receive your ATM Card is $100 no
more.. Immediately the $100 is received from you, your Card shall be delivered
to you without a delay...BELOW IS THE INFORMATION FOR YOU TO SEND THE $100
WESTERN UNION OR MONEY GRAM
RECEIVER: CHUKWU STAN
ADDRESS: LAGOS NIGERIA
AMOUNT: $100.00
We await your urgent response. -
Yours faithfully,
From the Desk Of:
Mr. Herbert Wigwe.
Last edited by buried under 419s on Sat Dec 29, 2018 2:34 pm, edited 2 times in total.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces