Return-Path: <
[email protected]>
Delivered-To:
Received: from
by with LMTP
id 3F2DKwPESF8gRQAAibB4EA
(envelope-from <
[email protected]>)
for <>; Fri, 28 Aug 2020 08:44:51 +0000
Return-path: <
[email protected]>
Envelope-to:
Delivery-date: Fri, 28 Aug 2020 08:44:51 +0000
Received: from mail-ej1-f67.google.com ([209.85.218.67]:40807)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <
[email protected]>)
id 1kBa09-0004am-HE
for ; Fri, 28 Aug 2020 08:44:51 +0000
Received: by mail-ej1-f67.google.com with SMTP id o18so476400eje.7
for <>; Fri, 28 Aug 2020 01:44:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=lCtCA2EwM7yZ8X0ROZt9qgiPgE5hnqjGWd7cupCT08g=;
b=BzrvJcZckQGeha/fagful2z7uouzwM0NtS4pLjA9rOXTGSRzANk2CpKYWWyEKyAgAw
A3+Ek9aFHPT3WQlrMtnFi67UDot6TorPCL6RaPGHgOFd7LVdDAcLxvSznvNMHoQYcWMZ
fWq0fvonHMJwAcMUKAYrDu004ZKz0Qfk2vRTRcS0wzYp5QCeYju8U5Fjn5TuuvbfZjx6
q5x8I4QrWaNq6pF7gRykm4Z6SP4KGQUO1B4X4R2AsSPQQTIvDbAk76Zu/dqbCW2zc6cJ
lrRW3LedLiXRYSYtHz3AS/hsj68YYCAFMBBNyo6lBOJIIM/4rSTC9QpPcaFHAMZlxSTY
ahgg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=lCtCA2EwM7yZ8X0ROZt9qgiPgE5hnqjGWd7cupCT08g=;
b=ZT5cYsG6PpN6tXXR054lEQ+sjn2EwdbUnn+eitxTGGSD1GZuLz+swG4/4gCxnMP3hX
eXwuB8elcLlO4CoQ2WMh8EicPp59hvhGVmKnlfnGS+OJnbQnoZrEj9HGx3RJH49dMFhA
Oq7NoulhUHZbiEYSY3KBtd9Dv5cxMMP46h0B4cwA4I4ZwW4hawWbp0Um/+/8vC7EbtEK
jDcLTpjvTq8PjJ4xykfFFou8HpFzXsQZOh0lxJTl2SPTcOVYQSn3xajXyFQxt+JD3hPy
hV8Seyk+jD+HC8C7vA82Ar943Y/95+bgtCgT+DKCVvBUWuWQjkPHHSQX6caIr5RV5gCI
FaAg==
X-Gm-Message-State: AOAM530Igu8xDjZx2JcbvtiB/scHYsU1nETHimDiK5nAyPm5EBtKEzi3
cTVmDE8h0F1lNaCrYedWQUZpkyF0TGA8XAUmtoU=
X-Google-Smtp-Source: ABdhPJx1QhDuVf6n0LoqA00bLrMr5X0CwNkD1XMsXSfZm0vdBMlhHUbeVoUsikAVjd2meo8vnYWDvLnmm8qgbgyrf/c=
X-Received: by 2002:a17:906:6895:: with SMTP id n21mr731897ejr.155.1598604247701;
Fri, 28 Aug 2020 01:44:07 -0700 (PDT)
MIME-Version: 1.0
Reply-To:
[email protected]From: Mr Frank Weather <
[email protected]>
Date: Thu, 27 Aug 2020 09:43:30 -0700
Message-ID: <CA+NbC6O4j0o0S9jp7C+AuaJNcaQwpQQ0yh-C8P-qAwppB+MKsQ@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005224ca05adec0edf"
Bcc:
X-Spam-Status: Yes, score=10.6
X-Spam-Score: 106
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- Dear Beneficiary , We received a Credit Report from our
correspondent Bank to transfer the sum of $5,000,000.00 (Five Million United
States Dollars Only) to your designated Bank Account with immediate effect
on your sat [...]
Content analysis details: (10.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/Dns ... nsbl-block for more information.
[URIs: dmo.gov.ng]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.67 listed in wl.mailspike.net]
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jamesdaveofficedept1954[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jamesdaveofficedept1954[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.5 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** No Upfront Payment
--0000000000005224ca05adec0edf
Content-Type: text/plain; charset="UTF-8"
Dear Beneficiary ,
Wereceived a Credit Report from our correspondent Bank to transfer the sum of $5,000,000.00 (Five Million United States Dollars Only) to your designated Bank Account with immediate effect on your satisfaction of our terms and conditions.
YOUDO NOT HAVE TO BE WORRIED ABOUT THE EXPENSES TO BE MADE AS WE HAVE ASSIGNED AN INVESTOR THAT WILL TAKE CARE OF ALL THE EXPENSES NEEDED TO FINALIZE THIS TRANSACTION.
Therefore, you are hereby advised to reconfirm your details as follows -
Contact address:
Cell phone #:
Home Phone #:
A copy of your ID for identification
Bank Details as follows:
Bank name:
Bank address:
Account name:
Account number:
Routing number:
Account holders address:
Recipient Phone number:
Type of Account (Savings or checking)
Further details shall be furnished to you as soon as we receive the above details from you.
Regards,
Mr Frank Weather.
Accountant General Of
Federation(-Anti Fraud Unit)
NDIC Building (1st Floor)
Plot 447/448 Constitution Avenue
Central Business District
Visit us at
www.dmo.gov.ng
