#352759 by buried under 419s
Wed Jan 17, 2018 10:05 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id GJu+EE0kX1ozGwAAjbubUg
for <>; Wed, 17 Jan 2018 02:24:13 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 17 Jan 2018 02:24:13 -0800
Received: from dsl-202-45-101-188-static.vic.netspace.net.au ([202.45.101.188]:45155 helo=server01.h4u.local)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1ebkt5-0001o0-Ry
for ; Wed, 17 Jan 2018 02:24:13 -0800
Received: from User ([88.99.20.165]) by server01.h4u.local with Microsoft SMTPSVC(6.0.3790.1830);
Wed, 17 Jan 2018 19:22:54 +1100
Reply-To: <[email protected]>
From: "JOHN JOHNSON"<[email protected]>
Date: Wed, 17 Jan 2018 11:23:12 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 17 Jan 2018 08:22:55.0468 (UTC) FILETIME=[600E82C0:01D38F6C]
X-TM-AS-Product-Ver: SMEX-7.2.0.1122-3.52.1006-14239.000
X-TM-AS-Result: No-4.275000-5.000000-31
X-Spam-Status: Yes, score=58.2
X-Spam-Score: 582
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, How are you doing today and hope this email
finds you well. My name is John Johnson with Central Bank of Nigeria/ United
Nation foreign debt settlement.I was sent here after the meeting and agreement
with President Muhammadu Buhari over the conclusion and strategy on how to
release your fund. [...]
Content analysis details: (58.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
3.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.9 NSL_RCVD_FROM_USER Received from User
0.5 KAM_NUMSUBJECT Subject ends in numbers
1.0 MISSING_HEADERS Missing To: header
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.45.101.188 listed in bb.barracudacentral.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(johnson.johnson-ky[at]yandex.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(agentjj1960[at]gmail.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.7 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 FROM_MISSP_USER From misspaced, from "User"
3.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.2 FROM_MISSPACED From: missing whitespace
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.0 XFER_LOTSA_MONEY Transfer a lot of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.5 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** CALL ME IMMEDIATELY: +1-786-763-3265
Dear Beneficiary,
How are you doing today and hope this email finds you well. My name is John Johnson
with Central Bank of Nigeria/ United Nation foreign debt settlement.I was sent here
after the meeting and agreement with President Muhammadu Buhari over the conclusion
and strategy on how to release your fund.
The President set a goal and it was agreed that if you do not have the original
document of your fund, no bank or organization will make any payment to you because
all banks in Europe, Asia, London, USA that you have been in contact with towards
the release of this fund has revert back to CBN treasury department. Any banks or
organization contacting you or, you might have been in contact with towards
releasing any fund to you is only deceiving you which at the end you will not
receive anything from them but lost your hard earned money.
That's why it was declared that all beneficiaries will have their original documents
of their contract/inheritance fund to proof that this fund is legal and legitimate.
All agents in United States is aware of this meeting like FBI, Homeland Security,
CIA and without the beneficiary having this original documents from the CBN, you
will never be in any position to receive the fund as the rightful owner of the fund.
In conclusion, you have been advise to comply with this instruction accordingly to
enable me complete the delivery of your bank draft valued $10.6 Million Dollars
which i have been sent over here to deliver to you. I need you to send me a copy of
the Fund Ownership Certificate issued to you and signed by President Goodluck
Jonathan to be presented to the authority here and to complete the delivery. If you
do not have it, let me know immediately so they can send it to you by courier which
is the only thing you need to receive your fund.
Also send me your address where to make the delivery and direct contact number.
Meanwhile, you can reach me on the above number +1-786-763-3265 leave a message if i
do not answer and i shall return your call.
Awaiting your immediate and urgent response.
Regards,
Mr. John Johnson.
Delivered-To:
Received: from
by with LMTP id GJu+EE0kX1ozGwAAjbubUg
for <>; Wed, 17 Jan 2018 02:24:13 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 17 Jan 2018 02:24:13 -0800
Received: from dsl-202-45-101-188-static.vic.netspace.net.au ([202.45.101.188]:45155 helo=server01.h4u.local)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1ebkt5-0001o0-Ry
for ; Wed, 17 Jan 2018 02:24:13 -0800
Received: from User ([88.99.20.165]) by server01.h4u.local with Microsoft SMTPSVC(6.0.3790.1830);
Wed, 17 Jan 2018 19:22:54 +1100
Reply-To: <[email protected]>
From: "JOHN JOHNSON"<[email protected]>
Date: Wed, 17 Jan 2018 11:23:12 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 17 Jan 2018 08:22:55.0468 (UTC) FILETIME=[600E82C0:01D38F6C]
X-TM-AS-Product-Ver: SMEX-7.2.0.1122-3.52.1006-14239.000
X-TM-AS-Result: No-4.275000-5.000000-31
X-Spam-Status: Yes, score=58.2
X-Spam-Score: 582
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, How are you doing today and hope this email
finds you well. My name is John Johnson with Central Bank of Nigeria/ United
Nation foreign debt settlement.I was sent here after the meeting and agreement
with President Muhammadu Buhari over the conclusion and strategy on how to
release your fund. [...]
Content analysis details: (58.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
3.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.9 NSL_RCVD_FROM_USER Received from User
0.5 KAM_NUMSUBJECT Subject ends in numbers
1.0 MISSING_HEADERS Missing To: header
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[202.45.101.188 listed in bb.barracudacentral.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(johnson.johnson-ky[at]yandex.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(agentjj1960[at]gmail.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.7 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 FROM_MISSP_USER From misspaced, from "User"
3.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.2 FROM_MISSPACED From: missing whitespace
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.0 XFER_LOTSA_MONEY Transfer a lot of money
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.5 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** CALL ME IMMEDIATELY: +1-786-763-3265
Dear Beneficiary,
How are you doing today and hope this email finds you well. My name is John Johnson
with Central Bank of Nigeria/ United Nation foreign debt settlement.I was sent here
after the meeting and agreement with President Muhammadu Buhari over the conclusion
and strategy on how to release your fund.
The President set a goal and it was agreed that if you do not have the original
document of your fund, no bank or organization will make any payment to you because
all banks in Europe, Asia, London, USA that you have been in contact with towards
the release of this fund has revert back to CBN treasury department. Any banks or
organization contacting you or, you might have been in contact with towards
releasing any fund to you is only deceiving you which at the end you will not
receive anything from them but lost your hard earned money.
That's why it was declared that all beneficiaries will have their original documents
of their contract/inheritance fund to proof that this fund is legal and legitimate.
All agents in United States is aware of this meeting like FBI, Homeland Security,
CIA and without the beneficiary having this original documents from the CBN, you
will never be in any position to receive the fund as the rightful owner of the fund.
In conclusion, you have been advise to comply with this instruction accordingly to
enable me complete the delivery of your bank draft valued $10.6 Million Dollars
which i have been sent over here to deliver to you. I need you to send me a copy of
the Fund Ownership Certificate issued to you and signed by President Goodluck
Jonathan to be presented to the authority here and to complete the delivery. If you
do not have it, let me know immediately so they can send it to you by courier which
is the only thing you need to receive your fund.
Also send me your address where to make the delivery and direct contact number.
Meanwhile, you can reach me on the above number +1-786-763-3265 leave a message if i
do not answer and i shall return your call.
Awaiting your immediate and urgent response.
Regards,
Mr. John Johnson.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces