Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#383743 by buried under 419s Thu Apr 04, 2019 9:29 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id GPs3Dxv+pVxFSQAAjbubUg
for <>; Thu, 04 Apr 2019 05:52:43 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 04 Apr 2019 05:52:43 -0700
Received: from mail-lj1-f194.google.com ([209.85.208.194]:35183)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hC1rF-0004rX-NR
for; Thu, 04 Apr 2019 05:52:43 -0700
Received: by mail-lj1-f194.google.com with SMTP id t4so2002319ljc.2
for <>; Thu, 04 Apr 2019 05:52:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=5tqf5BukRRYqb9PRqgREt5g3U/MA4xxJyaBgAiO/cPI=;
b=SO2dsP331ud7Mvhv+di1/tJWuuMzXGUAoYno5Rzu5dpXP9PVSO08QR68zg85oCfKi8
eIAtWtCi/YX8aSJt5GSJPet8KEIe3+H68an1qTVyGj2yz9ta32KP7p5LyklZClPynBwj
kGHZHyks/uAzJ0Ohz7i0i8wErywZc2BaWKE79cNCzTcEZJ7yg4+CGZOeJaH7XVY3lQtc
5m2NHCESqac/D3TeTFATxupfEJHOWhOeB0xD7JTzBIzBIL6V0a5qd/yXwP2joe20Lghz
mRFCVYCpl75mdg+n9AXapiy9Q4W7Jl7tJJ/h8zPeD9tQoQ4wLcIZj/k6d3BADpdrFPCe
nEJA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=5tqf5BukRRYqb9PRqgREt5g3U/MA4xxJyaBgAiO/cPI=;
b=FB36MLAmTd+nIIR3uRtRMCuXc2jKRLvADwEAKGy4TyeyWfQM2f13mv7pTp06X0Hfqc
PfAkWhGBp00UmzJ+zoHqR+JmKYV+trMiO+Iw9En88GrbHRVdgPFqJtyMfJvwGXzutqdZ
qR3NzaEctm1iJ+l1OQ+B7rUAAan4aCpEpisUUNDx6DgkWeCgA3+yhpFArC1bJRe2e0R+
I39qvDuhJrVvQAHKTgsye/jj7kj3/WzfFAN3ivwP8x6CqEsbFLeOz8vZityutl0/kEZr
3P0PCkIx+yWJdBdTgnE/bLfsklTf6ZilkuMgu1GMEVdFi0oECV5F26AEcbdI0nc6PXrX
O6tA==
X-Gm-Message-State: APjAAAXFNaJx+TinS/oD5F7rdozVkh8vBjX6/yOnKjXKKK6R6JJgt7/F
PWI/FxEs8/KgGwOPPsY/UYkmaLYI7pxPtRhwJMo=
X-Google-Smtp-Source: APXvYqxUPUfIVFPKajcA8qVjYKXje92ezYJ8yhfmk7wvMz5GbOWVOVwTPsoqVrLzdNE1y1qGVYxhA7RMpOBfoBghEUo=
X-Received: by 2002:a2e:9211:: with SMTP id k17mr3331665ljg.46.1554382319694;
Thu, 04 Apr 2019 05:51:59 -0700 (PDT)
MIME-Version: 1.0
From: Aishah Ahmad <[email protected]>
Date: Thu, 4 Apr 2019 13:51:49 +0100
Message-ID: <CA+jrCWhy+anT828B7d2KfZsoF1ewaFi9jwmOe4SUKQD_5ncSDw@mail.gmail.com>
To:

Content-Type: multipart/alternative; boundary="00000000000002b9360585b3d68f"
X-Spam-Status: Yes, score=7.9
X-Spam-Score: 79
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Good Day to you. I have been wondering that your payment
file has not been processed with my Bank. Didn't you contact My Bank CEO as
i sent you his details? I did sent you details of my Bank CEO by email...Did
you want my bank CEO to divert your fund to his private Company Account?
Your silent will proved that, you don't need the money. Please, update me
and let me know which way i can help, but i can not boldly challenge my Bank
CEO, Dr. Godwin I wait your reply. Regards Mrs.Aishah Ahmad Personal Assistance
to CBN CEO [...]

Content analysis details: (7.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.208.194 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.194 listed in wl.mailspike.net]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(fssdcbnfile[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT FILE WITH CBN CEO

Good Day to you.
I have been wondering that your payment file has not been processed with my
Bank. Didn't you contact My Bank CEO as i sent you his details? I did sent
you details of my Bank CEO by email...Did you want my bank CEO to divert
your fund to his private Company Account? Your silent will proved that, you
don't need the money. Please, update me and let me know which way i can
help, but i can not boldly challenge my Bank CEO, Dr. Godwin
I wait your reply.
Regards
Mrs.Aishah Ahmad
Personal Assistance to CBN CEO

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 229 guests