#339992 by buried under 419s
Fri Sep 22, 2017 8:39 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 22 Sep 2017 13:16:20 -0700
Received: from auth.wow.lk ([202.124.160.22]:54604)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dvUMy-0004cy-53
for ; Fri, 22 Sep 2017 13:16:20 -0700
Received: from [192.168.0.202] (unknown [154.120.109.176])
(Authenticated sender: [email protected])
by auth.wow.lk (Postfix) with ESMTPA id 9F1402572EE;
Fri, 22 Sep 2017 21:09:26 +0530 (IST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: [email protected]
Date: Fri, 22 Sep 2017 16:39:23 +0100
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=24.3
X-Spam-Score: 243
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From The Remittance Department Central Bank of Nigeria Garki
FCT,Abuja Nigeria Dear Sir/Ma, We have waited patiently for your bank account
information required for the wire of the approved funds after approval have
been successfully granted in your favor. [...]
Content analysis details: (24.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[202.124.160.22 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.124.160.22 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.124.160.22 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[202.124.160.22 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?202.124.160.22>]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(r3.crco.eurocontrol.int[at]europe.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=r ... pe.com;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Release of your Funds.
From The Remittance Department
Central Bank of Nigeria
Garki FCT,Abuja Nigeria
Dear Sir/Ma,
We have waited patiently for your bank account information required for the wire of
the approved funds after approval have been successfully granted in your favor.
In the absent, we wish to inform you that we have loaded your Inheritance funds into
an ATM Card to be sent to you upon hearing from you by confirming the information
below for the shipment of the card
Your Full Name: ______________________________
Your Address : ______________________________
Name of City of Residence:_______________________________
Direct Telephone Number:_________________________________
Mobile Number:____________________________________
Yours Sincerely,
Dr. David Uche Daniel
Remittance Director.
Tel: +2348031944011
Envelope-to:
Delivery-date: Fri, 22 Sep 2017 13:16:20 -0700
Received: from auth.wow.lk ([202.124.160.22]:54604)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dvUMy-0004cy-53
for ; Fri, 22 Sep 2017 13:16:20 -0700
Received: from [192.168.0.202] (unknown [154.120.109.176])
(Authenticated sender: [email protected])
by auth.wow.lk (Postfix) with ESMTPA id 9F1402572EE;
Fri, 22 Sep 2017 21:09:26 +0530 (IST)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: [email protected]
Date: Fri, 22 Sep 2017 16:39:23 +0100
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=24.3
X-Spam-Score: 243
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From The Remittance Department Central Bank of Nigeria Garki
FCT,Abuja Nigeria Dear Sir/Ma, We have waited patiently for your bank account
information required for the wire of the approved funds after approval have
been successfully granted in your favor. [...]
Content analysis details: (24.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[202.124.160.22 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.124.160.22 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.124.160.22 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[202.124.160.22 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?202.124.160.22>]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(r3.crco.eurocontrol.int[at]europe.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=r ... pe.com;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Release of your Funds.
From The Remittance Department
Central Bank of Nigeria
Garki FCT,Abuja Nigeria
Dear Sir/Ma,
We have waited patiently for your bank account information required for the wire of
the approved funds after approval have been successfully granted in your favor.
In the absent, we wish to inform you that we have loaded your Inheritance funds into
an ATM Card to be sent to you upon hearing from you by confirming the information
below for the shipment of the card
Your Full Name: ______________________________
Your Address : ______________________________
Name of City of Residence:_______________________________
Direct Telephone Number:_________________________________
Mobile Number:____________________________________
Yours Sincerely,
Dr. David Uche Daniel
Remittance Director.
Tel: +2348031944011
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces