#342124 by buried under 419s
Tue Oct 17, 2017 8:45 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id gPCrJEC25FkfOgAAjbubUg
for <>; Mon, 16 Oct 2017 06:38:08 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 16 Oct 2017 06:38:08 -0700
Received: from mail-oi0-f65.google.com ([209.85.218.65]:55748)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e45an-0003rU-TT
for ; Mon, 16 Oct 2017 06:38:08 -0700
Received: by mail-oi0-f65.google.com with SMTP id g125so25097975oib.12
for <>; Mon, 16 Oct 2017 06:37:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=ITiA6FbsxAG/FCMrK1+VgHvAEJ7zpS+BsNLZq9uGySQ=;
b=E27vX4um1ergayf/k46Sj9Zd+mW58gw0lpcXaxdrYFiZgRhFIdfZbWgGZeLKYmRFdR
n3S1CDKFLMR529YlmjV06TsGCwI67vZBbreaoZ5cOR2QRDemxWSLihZyZ+qATTzo1J6f
vikQ+7ahBpc8H6UvU/qdwwsYDiHT8cC1oGLPYE993Oa7+M0H4qlQvyRAaJGGe7G06HIv
pvVpQPtByQTYSTNHJu9DbXN4S4onQ8qFRRE6W/LfM3+YTEVcb+qxBEYAx0cmzONS+ZgA
Z7lfVHA8dknKD/FEQvP7khGG93Qu3SRndrgpABGy8uD+IRGNvMapWobREWsQLG7L2Rjd
bsNQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=ITiA6FbsxAG/FCMrK1+VgHvAEJ7zpS+BsNLZq9uGySQ=;
b=FYOR3TjUgejtWytfvgdkyi28gJO54BPuqFMIsVXOGAefKcF18xD2WqUUU8zLpBWocn
rPvH0KiKqjJKfJ714QP3xkDmIx75Yfs2lHg+Zmb2Npw0jxJhwNWCc9O9zXngUQPPLxep
sOTphiFMYoS0LdiYfyPGaG1W2As0WXIOqp7k+EOTMwiRIhvY2fjrNzocSFR3qK5QO0Nd
T9xkZRmad+jrltMNdLjj6VjMSBgly+jvhfkqQSJkj2GsfeYrtaDzSny030NLo64LMBXB
8m8fsq11h3B0gqC6oy+uXy+0gQgKQhfEYceMaEULQILe7F95+Q2pOFvMY0CCbuzp2hbz
/VQA==
X-Gm-Message-State: AMCzsaV2/qHPgBlrYkUFnPy9Ov2EFaiLSLs++ycpLqVjvB8tyaA6qTS5
I3bzzZou7tylPmRVcZ3vLzo5yVqXei2q7IHZUZE=
X-Google-Smtp-Source: ABhQp+SeuD4UMLb0EMP0LmT90Arr15CGJxY2MH/CUxkGFfszB308t1fxH8OEs95PCQAE4qJGzKp2EgTJY6nUxu/vPLQ=
X-Received: by 10.202.198.194 with SMTP id w185mr5538430oif.329.1508161044773;
Mon, 16 Oct 2017 06:37:24 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.157.58.117 with HTTP; Mon, 16 Oct 2017 06:37:24 -0700 (PDT)
Reply-To: [email protected]
From: FINANCE MINISTER <[email protected]>
Date: Mon, 16 Oct 2017 14:37:24 +0100
Message-ID: <CAJ_-63PejBvJF5gHqiDh1SQWKbaF0FN003rfC6m-pMVd-aTd4Q@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="001a1134e650568697055baa1b97"
Bcc:
X-Spam-Status: Yes, score=10.0
X-Spam-Score: 100
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From the desk of Dr. Mrs. Ngozi Okonjo Iwuala Finance Minister
Federal Republic of Nigeria E-mail: [email protected] <[email protected]>
ATTN: *Beneficiary,* INFORMATION::: We believe this notification meets you
in a very good state of mind and health. The FEDERAL BUREAU OF INVESTIGATION
(FBI) Washington, D.C United States of America in conjunction with some other
relevant Investigative Agencies here in Africa-Nigeria. [...]
Content analysis details: (10.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.65 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.65 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (dennisbrown912[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(financemnister022[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(dennisbrown912[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.218.65 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** ATTN: BENEFICIARY
From the desk of
Dr. Mrs. Ngozi Okonjo Iwuala
Finance Minister Federal Republic of Nigeria
E-mail: [email protected]
<[email protected]>
ATTN:
*Beneficiary,*
INFORMATION::: We believe this notification meets you in a very good state
of mind and health. The FEDERAL BUREAU OF INVESTIGATION (FBI) Washington,
D.C United States of America in conjunction with some other relevant
Investigative Agencies here in Africa-Nigeria.
There is presently a counter claims on your funds by one MR, JOHN WHEELER
who is presently trying to let us believe that you are dead and even
explained that you entered into an agreement with him to help you in
receiving your fund, So here comes the big question. Did you sign any Deed
of Assignment in favor of (JOHN WHEELER). Consequently, we received a
directive from the office of the New President, ordering the above office
to settle all genuine contractors/Inheritance whose their fund has been
outstanding for a long time now. And for those that shown sufficient proof
regarding the release of their fund, and we wish to inform you that in our
record here, you have fulfilled such conditions as the rightful beneficiary
of the said fund.
But the reasons why your own transfer has to be delayed is because, there
is presently a counter claims on your fund by so-called MR.JOHN WHEELER and
his friend who is presently trying to let us believe that you are dead and
even explained that you entered into an agree mint with him, there by
making him the current beneficiary with his following account details?
BANK NAME: WELLS FARGO BANK.
ADDRESS: 1063 11TH ST REEDLEY CA 93654
ACCOUNT #3292957895
ROUTING # 121042882.
BENEFICIARY NAME: JOHN WHEELER
Please if you did not sign, or authorize MR.JOHN WHEELER to receive your
payment on your behalf, kindly reconfirm to us, for your urgent release the
Premium immediately, Please Reconfirm your genuine ADDRESS, Please note
that you have less than 48hrs to get back to us to enable us direct you to
the paying bank before they proceed to issue all payments to the said.
N/B, we will sincerely appreciate your urgent and timely responses as we
are 24hours on email communication hence to serve you better and to making
sure we conclude this transaction as programmed whereas we reply almost
immediately.
ATTACH IS MY WORKING ID
Thanks for Your Co-operation
BEST REGARDS,
Dr. Mrs. Ngozi Okonjo Iwuala
Finance Minister Federal Republic of Nigeria
Delivered-To:
Received: from
by with LMTP id gPCrJEC25FkfOgAAjbubUg
for <>; Mon, 16 Oct 2017 06:38:08 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 16 Oct 2017 06:38:08 -0700
Received: from mail-oi0-f65.google.com ([209.85.218.65]:55748)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e45an-0003rU-TT
for ; Mon, 16 Oct 2017 06:38:08 -0700
Received: by mail-oi0-f65.google.com with SMTP id g125so25097975oib.12
for <>; Mon, 16 Oct 2017 06:37:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=ITiA6FbsxAG/FCMrK1+VgHvAEJ7zpS+BsNLZq9uGySQ=;
b=E27vX4um1ergayf/k46Sj9Zd+mW58gw0lpcXaxdrYFiZgRhFIdfZbWgGZeLKYmRFdR
n3S1CDKFLMR529YlmjV06TsGCwI67vZBbreaoZ5cOR2QRDemxWSLihZyZ+qATTzo1J6f
vikQ+7ahBpc8H6UvU/qdwwsYDiHT8cC1oGLPYE993Oa7+M0H4qlQvyRAaJGGe7G06HIv
pvVpQPtByQTYSTNHJu9DbXN4S4onQ8qFRRE6W/LfM3+YTEVcb+qxBEYAx0cmzONS+ZgA
Z7lfVHA8dknKD/FEQvP7khGG93Qu3SRndrgpABGy8uD+IRGNvMapWobREWsQLG7L2Rjd
bsNQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=ITiA6FbsxAG/FCMrK1+VgHvAEJ7zpS+BsNLZq9uGySQ=;
b=FYOR3TjUgejtWytfvgdkyi28gJO54BPuqFMIsVXOGAefKcF18xD2WqUUU8zLpBWocn
rPvH0KiKqjJKfJ714QP3xkDmIx75Yfs2lHg+Zmb2Npw0jxJhwNWCc9O9zXngUQPPLxep
sOTphiFMYoS0LdiYfyPGaG1W2As0WXIOqp7k+EOTMwiRIhvY2fjrNzocSFR3qK5QO0Nd
T9xkZRmad+jrltMNdLjj6VjMSBgly+jvhfkqQSJkj2GsfeYrtaDzSny030NLo64LMBXB
8m8fsq11h3B0gqC6oy+uXy+0gQgKQhfEYceMaEULQILe7F95+Q2pOFvMY0CCbuzp2hbz
/VQA==
X-Gm-Message-State: AMCzsaV2/qHPgBlrYkUFnPy9Ov2EFaiLSLs++ycpLqVjvB8tyaA6qTS5
I3bzzZou7tylPmRVcZ3vLzo5yVqXei2q7IHZUZE=
X-Google-Smtp-Source: ABhQp+SeuD4UMLb0EMP0LmT90Arr15CGJxY2MH/CUxkGFfszB308t1fxH8OEs95PCQAE4qJGzKp2EgTJY6nUxu/vPLQ=
X-Received: by 10.202.198.194 with SMTP id w185mr5538430oif.329.1508161044773;
Mon, 16 Oct 2017 06:37:24 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.157.58.117 with HTTP; Mon, 16 Oct 2017 06:37:24 -0700 (PDT)
Reply-To: [email protected]
From: FINANCE MINISTER <[email protected]>
Date: Mon, 16 Oct 2017 14:37:24 +0100
Message-ID: <CAJ_-63PejBvJF5gHqiDh1SQWKbaF0FN003rfC6m-pMVd-aTd4Q@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="001a1134e650568697055baa1b97"
Bcc:
X-Spam-Status: Yes, score=10.0
X-Spam-Score: 100
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From the desk of Dr. Mrs. Ngozi Okonjo Iwuala Finance Minister
Federal Republic of Nigeria E-mail: [email protected] <[email protected]>
ATTN: *Beneficiary,* INFORMATION::: We believe this notification meets you
in a very good state of mind and health. The FEDERAL BUREAU OF INVESTIGATION
(FBI) Washington, D.C United States of America in conjunction with some other
relevant Investigative Agencies here in Africa-Nigeria. [...]
Content analysis details: (10.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.65 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.65 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (dennisbrown912[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(financemnister022[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(dennisbrown912[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.218.65 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** ATTN: BENEFICIARY
From the desk of
Dr. Mrs. Ngozi Okonjo Iwuala
Finance Minister Federal Republic of Nigeria
E-mail: [email protected]
<[email protected]>
ATTN:
*Beneficiary,*
INFORMATION::: We believe this notification meets you in a very good state
of mind and health. The FEDERAL BUREAU OF INVESTIGATION (FBI) Washington,
D.C United States of America in conjunction with some other relevant
Investigative Agencies here in Africa-Nigeria.
There is presently a counter claims on your funds by one MR, JOHN WHEELER
who is presently trying to let us believe that you are dead and even
explained that you entered into an agreement with him to help you in
receiving your fund, So here comes the big question. Did you sign any Deed
of Assignment in favor of (JOHN WHEELER). Consequently, we received a
directive from the office of the New President, ordering the above office
to settle all genuine contractors/Inheritance whose their fund has been
outstanding for a long time now. And for those that shown sufficient proof
regarding the release of their fund, and we wish to inform you that in our
record here, you have fulfilled such conditions as the rightful beneficiary
of the said fund.
But the reasons why your own transfer has to be delayed is because, there
is presently a counter claims on your fund by so-called MR.JOHN WHEELER and
his friend who is presently trying to let us believe that you are dead and
even explained that you entered into an agree mint with him, there by
making him the current beneficiary with his following account details?
BANK NAME: WELLS FARGO BANK.
ADDRESS: 1063 11TH ST REEDLEY CA 93654
ACCOUNT #3292957895
ROUTING # 121042882.
BENEFICIARY NAME: JOHN WHEELER
Please if you did not sign, or authorize MR.JOHN WHEELER to receive your
payment on your behalf, kindly reconfirm to us, for your urgent release the
Premium immediately, Please Reconfirm your genuine ADDRESS, Please note
that you have less than 48hrs to get back to us to enable us direct you to
the paying bank before they proceed to issue all payments to the said.
N/B, we will sincerely appreciate your urgent and timely responses as we
are 24hours on email communication hence to serve you better and to making
sure we conclude this transaction as programmed whereas we reply almost
immediately.
ATTACH IS MY WORKING ID
Thanks for Your Co-operation
BEST REGARDS,
Dr. Mrs. Ngozi Okonjo Iwuala
Finance Minister Federal Republic of Nigeria
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces