#382215 by buried under 419s
Wed Feb 27, 2019 9:51 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id sIMvOA1zdlziVgAAjbubUg
for <a>; Wed, 27 Feb 2019 03:22:53 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 27 Feb 2019 03:22:53 -0800
Received: from respect.lipetsk.ru ([195.34.237.6]:59572)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gyxIa-0005mt-TU
for ; Wed, 27 Feb 2019 03:22:53 -0800
Received: from localhost (localhost [127.0.0.1])
by respect.lipetsk.ru (Postfix) with ESMTP id B5086D021DD;
Wed, 27 Feb 2019 13:56:31 +0300 (MSK)
X-Virus-Scanned: amavisd-new at respect.lipetsk.ru
Received: from respect.lipetsk.ru ([127.0.0.1])
by localhost (respect.loc [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id PRT5Ea4UbjCf; Wed, 27 Feb 2019 13:56:31 +0300 (MSK)
Received: from localhost (localhost [127.0.0.1])
by respect.lipetsk.ru (Postfix) with ESMTP id 841C4D0222F;
Wed, 27 Feb 2019 13:56:31 +0300 (MSK)
Received: from [45.35.196.147] (unknown [45.35.196.147])
by respect.lipetsk.ru (Postfix) with ESMTPSA id 1ABE1D021DD;
Wed, 27 Feb 2019 13:56:27 +0300 (MSK)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: [email protected]
Date: Wed, 27 Feb 2019 02:56:25 -0800
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=9.8
X-Spam-Score: 98
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir/Madam It is very important that all the relevant
documentations needed to authenticate the source of the funds are provided
to prove that the funds were earned legitimately in accordance with the PATRIOT
ACT so that IRS and Homeland Security will not come knocking at your door.
In lieu of the above, it is therefore mandatory that you shall provide the
Nigeria Custom Clearance Certificate (N.C.C.C) to prove that the funds is
not linked with any form of illegality. Being the beneficiary of the consignment,
the Nigeria Custom Clearance Certificate (N.C.C.C) is the only way of confirming
the source of the funds and it is your responsibility to provide the Certificate
before the diplomat will be allowed to complete the delivery of your consignment
box to your house. [...]
Content analysis details: (9.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[195.34.237.6 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[195.34.237.6 listed in bl.score.senderscore.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(johnbrethren56[at]hotmail.com)
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Sir/Madam Recieve your Funds
Attn: Sir/Madam
It is very important that all the relevant documentations needed to authenticate the
source of the funds are provided to prove that the funds were earned legitimately in
accordance with the PATRIOT ACT so that IRS and Homeland Security will not come
knocking at your door. In lieu of the above, it is therefore mandatory that you
shall provide the Nigeria Custom Clearance Certificate (N.C.C.C) to prove that the
funds is not linked with any form of illegality. Being the beneficiary
of the consignment, the Nigeria Custom Clearance Certificate (N.C.C.C) is the only
way of confirming the source of the funds and it is your responsibility to provide
the Certificate before the diplomat will be allowed to complete the delivery of your
consignment box to your house.
The diplomat’s Flight Details shows that he came from Nigeria and we have contacted
the responsible authority in Nigeria to inquire about the process of getting the
Certificate. We were informed that the beneficiary of the consignment will pay for
the Certificate and the cost of this documentation is just US$250 only so that your
consignment delivery will be successfully done within 5-hours without any hitches or
delay after the N.C.C.C is secured.
If you are not in agreement with this proposal, please disregard it.But if you can
meet with my condition, then we have a deal. I can get everything concluded within
24 to 48 hours and proceed to your address for delivery upon your acceptance. Write
me on this email: [email protected] if you accepts to work with me.Send me
your cell phone number and your address and your full name.
You can as well call me on this number (+1) 352-389-1626 if you wish to speak with
me but if you call and could not reach me on phone note that i am on the field for
inspection, So leave your information so that i can reach you when i am back in the
office.
Mr John Brethren
Director Inspection Unit
United Nations Inspection Agent.
Gainesville Regional Airport
Gainesville, Florida USA
Delivered-To:
Received: from
by with LMTP id sIMvOA1zdlziVgAAjbubUg
for <a>; Wed, 27 Feb 2019 03:22:53 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 27 Feb 2019 03:22:53 -0800
Received: from respect.lipetsk.ru ([195.34.237.6]:59572)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gyxIa-0005mt-TU
for ; Wed, 27 Feb 2019 03:22:53 -0800
Received: from localhost (localhost [127.0.0.1])
by respect.lipetsk.ru (Postfix) with ESMTP id B5086D021DD;
Wed, 27 Feb 2019 13:56:31 +0300 (MSK)
X-Virus-Scanned: amavisd-new at respect.lipetsk.ru
Received: from respect.lipetsk.ru ([127.0.0.1])
by localhost (respect.loc [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id PRT5Ea4UbjCf; Wed, 27 Feb 2019 13:56:31 +0300 (MSK)
Received: from localhost (localhost [127.0.0.1])
by respect.lipetsk.ru (Postfix) with ESMTP id 841C4D0222F;
Wed, 27 Feb 2019 13:56:31 +0300 (MSK)
Received: from [45.35.196.147] (unknown [45.35.196.147])
by respect.lipetsk.ru (Postfix) with ESMTPSA id 1ABE1D021DD;
Wed, 27 Feb 2019 13:56:27 +0300 (MSK)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: [email protected]
Date: Wed, 27 Feb 2019 02:56:25 -0800
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=9.8
X-Spam-Score: 98
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir/Madam It is very important that all the relevant
documentations needed to authenticate the source of the funds are provided
to prove that the funds were earned legitimately in accordance with the PATRIOT
ACT so that IRS and Homeland Security will not come knocking at your door.
In lieu of the above, it is therefore mandatory that you shall provide the
Nigeria Custom Clearance Certificate (N.C.C.C) to prove that the funds is
not linked with any form of illegality. Being the beneficiary of the consignment,
the Nigeria Custom Clearance Certificate (N.C.C.C) is the only way of confirming
the source of the funds and it is your responsibility to provide the Certificate
before the diplomat will be allowed to complete the delivery of your consignment
box to your house. [...]
Content analysis details: (9.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[195.34.237.6 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[195.34.237.6 listed in bl.score.senderscore.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(johnbrethren56[at]hotmail.com)
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Sir/Madam Recieve your Funds
Attn: Sir/Madam
It is very important that all the relevant documentations needed to authenticate the
source of the funds are provided to prove that the funds were earned legitimately in
accordance with the PATRIOT ACT so that IRS and Homeland Security will not come
knocking at your door. In lieu of the above, it is therefore mandatory that you
shall provide the Nigeria Custom Clearance Certificate (N.C.C.C) to prove that the
funds is not linked with any form of illegality. Being the beneficiary
of the consignment, the Nigeria Custom Clearance Certificate (N.C.C.C) is the only
way of confirming the source of the funds and it is your responsibility to provide
the Certificate before the diplomat will be allowed to complete the delivery of your
consignment box to your house.
The diplomat’s Flight Details shows that he came from Nigeria and we have contacted
the responsible authority in Nigeria to inquire about the process of getting the
Certificate. We were informed that the beneficiary of the consignment will pay for
the Certificate and the cost of this documentation is just US$250 only so that your
consignment delivery will be successfully done within 5-hours without any hitches or
delay after the N.C.C.C is secured.
If you are not in agreement with this proposal, please disregard it.But if you can
meet with my condition, then we have a deal. I can get everything concluded within
24 to 48 hours and proceed to your address for delivery upon your acceptance. Write
me on this email: [email protected] if you accepts to work with me.Send me
your cell phone number and your address and your full name.
You can as well call me on this number (+1) 352-389-1626 if you wish to speak with
me but if you call and could not reach me on phone note that i am on the field for
inspection, So leave your information so that i can reach you when i am back in the
office.
Mr John Brethren
Director Inspection Unit
United Nations Inspection Agent.
Gainesville Regional Airport
Gainesville, Florida USA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces