#381358 by buried under 419s
Fri Feb 08, 2019 10:02 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by m with LMTP id 0OhYNEJ2XVwhbAAAjbubUg
for <>; Fri, 08 Feb 2019 04:29:54 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Feb 2019 04:29:54 -0800
Received: from sonic305-21.consmr.mail.ne1.yahoo.com ([66.163.185.147]:44472)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gs5Hy-0007C6-DR
for ; Fri, 08 Feb 2019 04:29:54 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1549628948; bh=9CcUlsart3U62ch8WSgh5kc/jZmKP08/lg2UCE11pTc=; h=Date:From:Reply-To:Subject:References:From:Subject; b=kgnS0cZN+IJL8mTMJmVP1IK5QT0uoEij5owaM+OKmLHV3d6mMFE3GxxmfR6Y3+dN+NoiZvvREbWRuHduB46imHhPsvQbsE5cqdR9HXjpYZg7Nn3lGTOjedm5XTzboxqziOhXJvHgR7F/tlVUIvr/T+8g+bKdg4QMwnfR7w5VFl7gjhrkvzYUn/X4lW+yuhxAIasqMr1mBndhCMZQ8MnyVU2ktE5yryKp+D+dAn3XzwHFjvBCW0PR+2fqnT8Z8sPIfVCODOzO04FCJUzKmrC5+exUreOUjYAyOmZMjMR6ntttpsKBrK8Plsgv6nWsY9cXj5Wcy159WnAdpx8ZwnRoMw==
X-YMail-OSG: .INlPIIVM1kfbxUTiFwW2VJ6yhF72PvCnWu5zt93trksauRcA440ahm2kjV74sx
JzgyNFEVg6oeJfA4DS4qGMY1d83lLAsONxDklUNdTDO3gbauw_EJJ4UyG0jQGIWCNCOq3DbuAlCW
WLqR3Y6ShWiDbcSDUVSyXoJItFcEIkGSsIS_CYRELk_b9_9GwFGNTtvsk4nh97KYD.pHRb0b0KqL
p32eIOurGX0mbUmVi4VqsMwEdiDiOVGbfnkcLnKEYPSvWgeGsUPoTlYZUvYws97nUl4Q.0RkgpuO
QenQE_ffeL7oUT0_1WqvZNMEsSBz8l9FpHJkNKAMhL4x2vasgIt5ZUtWCrNb9QRJpaZjFlDOVur_
DJEtdAqJWHmwSNqP8Ym4c8svDcshTwRmh_VkTsfZoqwhdMX65AWcRMfNpv0xFyQzFvfXtA4pT0Ue
_MS3bz1tyMlG3ELGu6AD6rwx69EibEFuOQF.D7KYjHv.1BV2Jrk9q9bQGXQB8tv.9_2EtFWMwiLr
2.GNgPsfZOjsOmkcweI6Ics5tjUxBm_giwSwKWNO90nbofwyD7oMKlL3cO_O8XZit3QrHMXzWNfy
ihzZyZ2CCD6gAnd1lrSORp8f2xQJUzL60IRTwTMsQZrcH.XuOHbUDKOPumVd0BN1iaD7ZpnaS8u4
f1YIk7Mb4sAUMVBfc7jr2yCkDnSMwb3Wx9pP1skLzfKTfD9qBW8HR6Ec_ArMZmVRUfElGJLPg8gG
l.duC7pnnE359clvK_7t1lktrfte9gMA_MrVk8DqZlLfqXhmcaFCAoQNdZau4amuHi_pVNjgVBPK
AUqfW.99lhJP6VIx_1e9wKP_AQkVFJg9V9IRG76caxbl..imbPago6DTLq_eftXG3lQQtRoqJJH6
HBXLKq_w8S3ZqUnWJdy4LqoNLEkHu3CLiuQXGBmrxOYlf0oC0wyHmdXIU8rPQw_AiH.HIIhiacZf
P6VYJwUzp38JChTTHVQOA_2MHV_gS4IC483Ig0iwTV97wBwKn8Sf1lu3_Z7OtspYfUj7sxlYU396
SCa.p5BQ294vvw7yeHzzYnNl2mwIjIOqZACe0RiCb43PyVcR3VQSqjbpIs.jkULmPgQqmfe.Kapf
c2D0ro2CkUfVT
Received: from sonic.gate.mail.ne1.yahoo.com by sonic305.consmr.mail.ne1.yahoo.com with HTTP; Fri, 8 Feb 2019 12:29:08 +0000
Date: Fri, 8 Feb 2019 12:29:08 +0000 (UTC)
From: ECOWAS COUNSEL <[email protected]>
Reply-To: ECOWAS COUNSEL <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.13027 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:65.0) Gecko/20100101 Firefox/65.0
Content-Length: 1244
X-Spam-Status: Yes, score=15.8
X-Spam-Score: 158
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Dear Sir, I am Dr. Nelson Magbagbeola, the secretary
general of economic community of west African states, known as (ECOWAS).
I am directed by the president, Marcel A. De-Souza to contact you for the
delay of your payment which is bringing bad records to Africa by the united
nations and we are here to stop this ugly records. [...]
Content analysis details: (15.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.163.185.147 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ecowascounsel[at]ecowasoffice.onmicrosoft.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=e ... ft.com;ip=]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dr_nelson9810[at]yahoo.com)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Approved
Attention: Dear Sir,
I am Dr. Nelson Magbagbeola, the secretary general of economic community of west
African states, known as (ECOWAS). I am directed by the president, Marcel A.
De-Souza to contact you for the delay of your payment which is bringing bad records
to Africa by the united nations and we are here to stop this ugly records.
Having serious meetings with the united nations, debt reconciliation unit, to
investigate the unnecessary delay on your payment, recommended and approved in your
favor. During the course of our investigation, we discovered with dismay that your
payment has been unnecessarily delayed by corrupt officials of the bank and
government regulatory organs in Africa who are trying to divert your fund to their
private accounts.
You are hereby advised without delay to follow our instruction and contact Mr. Mike
Favre at First National Bank Minnesota with email (
[email protected] )
Kindly re-confirm the below information's and forward it to Mike Favre for immediate
process of your payment.
YOUR NAME:
YOUR ADDRESS:
CITY:
COUNTRY:
YOUR OCCUPATION:
TEL/FAX NUMBER:
MOBILE NUMBER:
PRIVATE E-MAIL:
Thank you,
Best regards,
Dr. Nelson Magbagbeola
Secretary General, (ECOWAS)
Delivered-To:
Received: from
by m with LMTP id 0OhYNEJ2XVwhbAAAjbubUg
for <>; Fri, 08 Feb 2019 04:29:54 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Feb 2019 04:29:54 -0800
Received: from sonic305-21.consmr.mail.ne1.yahoo.com ([66.163.185.147]:44472)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gs5Hy-0007C6-DR
for ; Fri, 08 Feb 2019 04:29:54 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1549628948; bh=9CcUlsart3U62ch8WSgh5kc/jZmKP08/lg2UCE11pTc=; h=Date:From:Reply-To:Subject:References:From:Subject; b=kgnS0cZN+IJL8mTMJmVP1IK5QT0uoEij5owaM+OKmLHV3d6mMFE3GxxmfR6Y3+dN+NoiZvvREbWRuHduB46imHhPsvQbsE5cqdR9HXjpYZg7Nn3lGTOjedm5XTzboxqziOhXJvHgR7F/tlVUIvr/T+8g+bKdg4QMwnfR7w5VFl7gjhrkvzYUn/X4lW+yuhxAIasqMr1mBndhCMZQ8MnyVU2ktE5yryKp+D+dAn3XzwHFjvBCW0PR+2fqnT8Z8sPIfVCODOzO04FCJUzKmrC5+exUreOUjYAyOmZMjMR6ntttpsKBrK8Plsgv6nWsY9cXj5Wcy159WnAdpx8ZwnRoMw==
X-YMail-OSG: .INlPIIVM1kfbxUTiFwW2VJ6yhF72PvCnWu5zt93trksauRcA440ahm2kjV74sx
JzgyNFEVg6oeJfA4DS4qGMY1d83lLAsONxDklUNdTDO3gbauw_EJJ4UyG0jQGIWCNCOq3DbuAlCW
WLqR3Y6ShWiDbcSDUVSyXoJItFcEIkGSsIS_CYRELk_b9_9GwFGNTtvsk4nh97KYD.pHRb0b0KqL
p32eIOurGX0mbUmVi4VqsMwEdiDiOVGbfnkcLnKEYPSvWgeGsUPoTlYZUvYws97nUl4Q.0RkgpuO
QenQE_ffeL7oUT0_1WqvZNMEsSBz8l9FpHJkNKAMhL4x2vasgIt5ZUtWCrNb9QRJpaZjFlDOVur_
DJEtdAqJWHmwSNqP8Ym4c8svDcshTwRmh_VkTsfZoqwhdMX65AWcRMfNpv0xFyQzFvfXtA4pT0Ue
_MS3bz1tyMlG3ELGu6AD6rwx69EibEFuOQF.D7KYjHv.1BV2Jrk9q9bQGXQB8tv.9_2EtFWMwiLr
2.GNgPsfZOjsOmkcweI6Ics5tjUxBm_giwSwKWNO90nbofwyD7oMKlL3cO_O8XZit3QrHMXzWNfy
ihzZyZ2CCD6gAnd1lrSORp8f2xQJUzL60IRTwTMsQZrcH.XuOHbUDKOPumVd0BN1iaD7ZpnaS8u4
f1YIk7Mb4sAUMVBfc7jr2yCkDnSMwb3Wx9pP1skLzfKTfD9qBW8HR6Ec_ArMZmVRUfElGJLPg8gG
l.duC7pnnE359clvK_7t1lktrfte9gMA_MrVk8DqZlLfqXhmcaFCAoQNdZau4amuHi_pVNjgVBPK
AUqfW.99lhJP6VIx_1e9wKP_AQkVFJg9V9IRG76caxbl..imbPago6DTLq_eftXG3lQQtRoqJJH6
HBXLKq_w8S3ZqUnWJdy4LqoNLEkHu3CLiuQXGBmrxOYlf0oC0wyHmdXIU8rPQw_AiH.HIIhiacZf
P6VYJwUzp38JChTTHVQOA_2MHV_gS4IC483Ig0iwTV97wBwKn8Sf1lu3_Z7OtspYfUj7sxlYU396
SCa.p5BQ294vvw7yeHzzYnNl2mwIjIOqZACe0RiCb43PyVcR3VQSqjbpIs.jkULmPgQqmfe.Kapf
c2D0ro2CkUfVT
Received: from sonic.gate.mail.ne1.yahoo.com by sonic305.consmr.mail.ne1.yahoo.com with HTTP; Fri, 8 Feb 2019 12:29:08 +0000
Date: Fri, 8 Feb 2019 12:29:08 +0000 (UTC)
From: ECOWAS COUNSEL <[email protected]>
Reply-To: ECOWAS COUNSEL <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.13027 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:65.0) Gecko/20100101 Firefox/65.0
Content-Length: 1244
X-Spam-Status: Yes, score=15.8
X-Spam-Score: 158
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Dear Sir, I am Dr. Nelson Magbagbeola, the secretary
general of economic community of west African states, known as (ECOWAS).
I am directed by the president, Marcel A. De-Souza to contact you for the
delay of your payment which is bringing bad records to Africa by the united
nations and we are here to stop this ugly records. [...]
Content analysis details: (15.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.163.185.147 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ecowascounsel[at]ecowasoffice.onmicrosoft.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=e ... ft.com;ip=]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dr_nelson9810[at]yahoo.com)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Approved
Attention: Dear Sir,
I am Dr. Nelson Magbagbeola, the secretary general of economic community of west
African states, known as (ECOWAS). I am directed by the president, Marcel A.
De-Souza to contact you for the delay of your payment which is bringing bad records
to Africa by the united nations and we are here to stop this ugly records.
Having serious meetings with the united nations, debt reconciliation unit, to
investigate the unnecessary delay on your payment, recommended and approved in your
favor. During the course of our investigation, we discovered with dismay that your
payment has been unnecessarily delayed by corrupt officials of the bank and
government regulatory organs in Africa who are trying to divert your fund to their
private accounts.
You are hereby advised without delay to follow our instruction and contact Mr. Mike
Favre at First National Bank Minnesota with email (
[email protected] )
Kindly re-confirm the below information's and forward it to Mike Favre for immediate
process of your payment.
YOUR NAME:
YOUR ADDRESS:
CITY:
COUNTRY:
YOUR OCCUPATION:
TEL/FAX NUMBER:
MOBILE NUMBER:
PRIVATE E-MAIL:
Thank you,
Best regards,
Dr. Nelson Magbagbeola
Secretary General, (ECOWAS)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces