#339461 by buried under 419s
Fri Sep 15, 2017 8:47 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id kcoyIqjtu1kdUAAAjbubUg
for <>; Fri, 15 Sep 2017 08:11:36 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 15 Sep 2017 08:11:36 -0700
Received: from a2nlsmtp01-02.prod.iad2.secureserver.net ([198.71.225.36]:60916)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dssHG-0005KN-V2
for ; Fri, 15 Sep 2017 08:11:36 -0700
Received: from a2plcpnl0481.prod.iad2.secureserver.net ([198.71.235.74])
by : HOSTING RELAY : with SMTP
id ssFddTt6ADbVLssFdd2WEF; Fri, 15 Sep 2017 08:09:53 -0700
Received: from thego2promoguy by a2plcpnl0481.prod.iad2.secureserver.net with local (Exim 4.88)
(envelope-from <[email protected]>)
id 1dssFd-000KZh-DX
for ; Fri, 15 Sep 2017 08:09:53 -0700
To:
X-PHP-Script: thego2promoguy.net/wp-content/themes/social/library/js/Postmail.php for 197.210.44.135
Date: Fri, 15 Sep 2017 15:09:53 +0000
From: ATM CARD PAYMENT <[email protected]>
Reply-to: ATM CARD PAYMENT <[email protected]>
Message-ID: <[email protected]>
X-Priority: 3
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.10.2800.1409.726025130.rg.sm31
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="iso-8859-1"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - a2plcpnl0481.prod.iad2.secureserver.net
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [2100001 216] / [47 12]
X-AntiAbuse: Sender Address Domain - a2plcpnl0481.prod.iad2.secureserver.net
X-Get-Message-Sender-Via: a2plcpnl0481.prod.iad2.secureserver.net: authenticated_id: thego2promoguy/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: a2plcpnl0481.prod.iad2.secureserver.net: thego2promoguy
X-Source:
X-Source-Args: /usr/sbin/proxyexec -q -d -s /var/lib/proxyexec/cagefs.sock/socket /bin/cagefs.server
X-Source-Dir: thego2promoguy.net:/public_html/wp-content/themes/social/library/js
X-CMAE-Envelope: MS4wfCN1EE4cp+Pr9U5uts0hRfCGjcbs9tF59tHC1rqHG9Oi5Tt8F3/+Rea+nfYAk7fyh78sFswl4IwE6FPRUkmtjLmi5G5SRp+p+UR8BttsG8aoMRko1N4s
o7OXqudJUycJyeSccMANU9IR6KGU0lNMaJ4QymNlk0gqkzIT/BKPAKymDdUZMfWhr83+OKz76ZkIwvWo0sR5PNoQWABEd5R6trEVJK6v9tR3f2tqn7aaYJBJ
z/Jz9vyZImot1qjkFtVgXQ==
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From The Office Of New Payment Director CENTRAL BANK NIG PLC.
MR DAVID UDONNA This is to officially inform you that we have verified your
contract/Inheritance file and discovered reasons why you are yet to receive
your Payment.It is because of irregularities and complications discovered
On your payment file by our technical experts in respect to your Contract
/ inheritance payment requirements which have just been duly Rectified. [...]
Content analysis details: (16.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[198.71.225.36 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[198.71.225.36 listed in dnsbl.sorbs.net]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paymentwithdrawas[at]gmail.com)
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** GOOD NOWS ON FINAL RELEASE OF YOUR ATM CARD
From The Office Of New Payment Director
CENTRAL BANK NIG PLC.
MR DAVID UDONNA
This is to officially inform you that we have verified your contract/Inheritance
file and discovered reasons why you are yet to receive your Payment.It is because
of irregularities and complications discovered On your payment file by our technical
experts in respect to your Contract / inheritance payment requirements which have
just been duly Rectified.
Meanwhile, we have been informed that you are still dealing with Impostors and
non-recommended officials in the bank, such acts must Stop for security reasons if
you wish to receive your payment. Since we Have decided to bring a solution to your
problem, right now we have Arranged your payment through our ATM Swift Card Payment
this is the Latest instruction by the elected president Alhaji Muhammadu Buhari
(GCFR) Federal republic of Nigeria,
We have received a credit advice and a detailed payment instruction to deliver your
Gold Inter-Swift Gold ATM CARD to your nominated home address and we are very
happy to inform you that all process to deliver this fund through this means of
payment to your home address has commenced by World Bank and United Nation bring
this solution toward all beneificaires to received there fund via atm secreting
without any stop-order by IMF and IRS with others agencies,
We have paid few beneficiaries this Year below are there DHL tracking numbers of
these beneficiaries we have paid please feel free to track all the DHL tracking
numbers below and conform these beneficiaries have below DHL Tracking Numbers have
received there Inter-Swift Gold ATM CARD smoothing by them comply well with us
right now them are happy with there families celebrating which all arrangement
toward your Inter-Swift Gold ATM CARD to dispatch have been finalized and that is
the secrete way you can received your fund via Inter-Swift Gold ATM CARD without
any problem feel free to track below DHL tracking numbers and find out that you are
going to rejoice as soon as you comply with us,
WWW.DHL.COM
TRACKING NO;1088350281
TRACKING NO;1088350303
TRACKING NO;1088350351
TRACKING NO;1088350373
TRACKING NO;1088350550
TRACKING NO;1088350620
TRACKING NO;1088350443
TRACKING NO;1088350270
TRACKING NO;1088350480
Your fund payment was load into your atm card today which we have handle it to DHL
as order giving to us from Office of the Presidency which the DHL are asking for
the DHL DELIVERY CHARGE AND INSURANCE CHARGE of $60 to able your Inter-Swift Gold
ATM CARD delivery to your doorstep which the cost of delivery and insurance fees
is $60 you should sent the fee to us via western union Money Transfer Service or
Monetgram with the information below to enable us clear with DHL so that you will
have your Inter-Swift Gold ATM CARD received within 72hours and please understand
that your Inter-Swift Gold ATM CARD was giving to DHL today with all the documents
that will back the delivery of your Inter-Swift Gold ATM CARD have been package
saved,
I will advice you to try your best so that we can cleared with DHL Delivery charge
to able your atm card atm card departed without any problem please go ahead and
have the fee send today so that your Inter-Swift Gold ATM CARD will be departed
same day and you can contact DHL by below information for more information,
NAME TO CONTACT MRS JOY EZENNA
EMAIL'. [email protected]
PRIVATE EMAIL.;[email protected]
TELEPHONE. 234-8155533328
Contact DHL for more information i am giving you 100% guarantee and assure that
immediately the fee is well received your DHL tracking number will send to you so
that you will be at home and tracking your atm card toward you to know the actual
day it will deliver to you so that you will received it and signed for pick up
please do not delay by getting back to us within 24hours becuase delay is
dangerous,
RECEIVER NAME Ali Nouman
ADDRESS, LAGOS NIGERIA
TEXT QUESTION,IN GOD
ANSWER; WE TRUST
AMOUNT$$60
MTCN:....................
We shall be expecting to receive the completed filled form of $60 as quickly as
possible to enable DHL departed the delivery of your atm card to you home address
immediately. We are going to send you the DHL delivery airway bill and tracking
number as soon as the fee is well receive and bear in mind your atm card have been
activated which as soon as you receive it you are going to start making huge of
money withdrawing from the atm card like $50,000 per transaction and limit in a day
is $350,000 this is the secrete pin code of your atm card (8076) please keep it for
your self for security reason,
Thanks and I waiting for your update
MR DAVID UDONNA
The New Executive payment
Director CENTRAL BANK OF NIGERIA
DIRECT LINE,234-8178293138
Delivered-To:
Received: from
by (Dovecot) with LMTP id kcoyIqjtu1kdUAAAjbubUg
for <>; Fri, 15 Sep 2017 08:11:36 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 15 Sep 2017 08:11:36 -0700
Received: from a2nlsmtp01-02.prod.iad2.secureserver.net ([198.71.225.36]:60916)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dssHG-0005KN-V2
for ; Fri, 15 Sep 2017 08:11:36 -0700
Received: from a2plcpnl0481.prod.iad2.secureserver.net ([198.71.235.74])
by : HOSTING RELAY : with SMTP
id ssFddTt6ADbVLssFdd2WEF; Fri, 15 Sep 2017 08:09:53 -0700
Received: from thego2promoguy by a2plcpnl0481.prod.iad2.secureserver.net with local (Exim 4.88)
(envelope-from <[email protected]>)
id 1dssFd-000KZh-DX
for ; Fri, 15 Sep 2017 08:09:53 -0700
To:
X-PHP-Script: thego2promoguy.net/wp-content/themes/social/library/js/Postmail.php for 197.210.44.135
Date: Fri, 15 Sep 2017 15:09:53 +0000
From: ATM CARD PAYMENT <[email protected]>
Reply-to: ATM CARD PAYMENT <[email protected]>
Message-ID: <[email protected]>
X-Priority: 3
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.10.2800.1409.726025130.rg.sm31
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="iso-8859-1"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - a2plcpnl0481.prod.iad2.secureserver.net
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [2100001 216] / [47 12]
X-AntiAbuse: Sender Address Domain - a2plcpnl0481.prod.iad2.secureserver.net
X-Get-Message-Sender-Via: a2plcpnl0481.prod.iad2.secureserver.net: authenticated_id: thego2promoguy/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: a2plcpnl0481.prod.iad2.secureserver.net: thego2promoguy
X-Source:
X-Source-Args: /usr/sbin/proxyexec -q -d -s /var/lib/proxyexec/cagefs.sock/socket /bin/cagefs.server
X-Source-Dir: thego2promoguy.net:/public_html/wp-content/themes/social/library/js
X-CMAE-Envelope: MS4wfCN1EE4cp+Pr9U5uts0hRfCGjcbs9tF59tHC1rqHG9Oi5Tt8F3/+Rea+nfYAk7fyh78sFswl4IwE6FPRUkmtjLmi5G5SRp+p+UR8BttsG8aoMRko1N4s
o7OXqudJUycJyeSccMANU9IR6KGU0lNMaJ4QymNlk0gqkzIT/BKPAKymDdUZMfWhr83+OKz76ZkIwvWo0sR5PNoQWABEd5R6trEVJK6v9tR3f2tqn7aaYJBJ
z/Jz9vyZImot1qjkFtVgXQ==
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From The Office Of New Payment Director CENTRAL BANK NIG PLC.
MR DAVID UDONNA This is to officially inform you that we have verified your
contract/Inheritance file and discovered reasons why you are yet to receive
your Payment.It is because of irregularities and complications discovered
On your payment file by our technical experts in respect to your Contract
/ inheritance payment requirements which have just been duly Rectified. [...]
Content analysis details: (16.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[198.71.225.36 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[198.71.225.36 listed in dnsbl.sorbs.net]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paymentwithdrawas[at]gmail.com)
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** GOOD NOWS ON FINAL RELEASE OF YOUR ATM CARD
From The Office Of New Payment Director
CENTRAL BANK NIG PLC.
MR DAVID UDONNA
This is to officially inform you that we have verified your contract/Inheritance
file and discovered reasons why you are yet to receive your Payment.It is because
of irregularities and complications discovered On your payment file by our technical
experts in respect to your Contract / inheritance payment requirements which have
just been duly Rectified.
Meanwhile, we have been informed that you are still dealing with Impostors and
non-recommended officials in the bank, such acts must Stop for security reasons if
you wish to receive your payment. Since we Have decided to bring a solution to your
problem, right now we have Arranged your payment through our ATM Swift Card Payment
this is the Latest instruction by the elected president Alhaji Muhammadu Buhari
(GCFR) Federal republic of Nigeria,
We have received a credit advice and a detailed payment instruction to deliver your
Gold Inter-Swift Gold ATM CARD to your nominated home address and we are very
happy to inform you that all process to deliver this fund through this means of
payment to your home address has commenced by World Bank and United Nation bring
this solution toward all beneificaires to received there fund via atm secreting
without any stop-order by IMF and IRS with others agencies,
We have paid few beneficiaries this Year below are there DHL tracking numbers of
these beneficiaries we have paid please feel free to track all the DHL tracking
numbers below and conform these beneficiaries have below DHL Tracking Numbers have
received there Inter-Swift Gold ATM CARD smoothing by them comply well with us
right now them are happy with there families celebrating which all arrangement
toward your Inter-Swift Gold ATM CARD to dispatch have been finalized and that is
the secrete way you can received your fund via Inter-Swift Gold ATM CARD without
any problem feel free to track below DHL tracking numbers and find out that you are
going to rejoice as soon as you comply with us,
WWW.DHL.COM
TRACKING NO;1088350281
TRACKING NO;1088350303
TRACKING NO;1088350351
TRACKING NO;1088350373
TRACKING NO;1088350550
TRACKING NO;1088350620
TRACKING NO;1088350443
TRACKING NO;1088350270
TRACKING NO;1088350480
Your fund payment was load into your atm card today which we have handle it to DHL
as order giving to us from Office of the Presidency which the DHL are asking for
the DHL DELIVERY CHARGE AND INSURANCE CHARGE of $60 to able your Inter-Swift Gold
ATM CARD delivery to your doorstep which the cost of delivery and insurance fees
is $60 you should sent the fee to us via western union Money Transfer Service or
Monetgram with the information below to enable us clear with DHL so that you will
have your Inter-Swift Gold ATM CARD received within 72hours and please understand
that your Inter-Swift Gold ATM CARD was giving to DHL today with all the documents
that will back the delivery of your Inter-Swift Gold ATM CARD have been package
saved,
I will advice you to try your best so that we can cleared with DHL Delivery charge
to able your atm card atm card departed without any problem please go ahead and
have the fee send today so that your Inter-Swift Gold ATM CARD will be departed
same day and you can contact DHL by below information for more information,
NAME TO CONTACT MRS JOY EZENNA
EMAIL'. [email protected]
PRIVATE EMAIL.;[email protected]
TELEPHONE. 234-8155533328
Contact DHL for more information i am giving you 100% guarantee and assure that
immediately the fee is well received your DHL tracking number will send to you so
that you will be at home and tracking your atm card toward you to know the actual
day it will deliver to you so that you will received it and signed for pick up
please do not delay by getting back to us within 24hours becuase delay is
dangerous,
RECEIVER NAME Ali Nouman
ADDRESS, LAGOS NIGERIA
TEXT QUESTION,IN GOD
ANSWER; WE TRUST
AMOUNT$$60
MTCN:....................
We shall be expecting to receive the completed filled form of $60 as quickly as
possible to enable DHL departed the delivery of your atm card to you home address
immediately. We are going to send you the DHL delivery airway bill and tracking
number as soon as the fee is well receive and bear in mind your atm card have been
activated which as soon as you receive it you are going to start making huge of
money withdrawing from the atm card like $50,000 per transaction and limit in a day
is $350,000 this is the secrete pin code of your atm card (8076) please keep it for
your self for security reason,
Thanks and I waiting for your update
MR DAVID UDONNA
The New Executive payment
Director CENTRAL BANK OF NIGERIA
DIRECT LINE,234-8178293138
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces