#258307 by buried under 419s
Mon Jun 29, 2015 3:49 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 29 Jun 2015 00:07:46 -0700
Received: from mail-oi0-f68.google.com ([209.85.218.68]:36180)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1Z9TAP-0001JN-4d
for ; Mon, 29 Jun 2015 00:07:46 -0700
Received: by oiav1 with SMTP id v1so5648819oia.3
for <>; Mon, 29 Jun 2015 00:14:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=jFR+SRdPcnO6+lG8HZgR2z5fCA/Z8AuiJ1JLEzQO7G8=;
b=awkiCxDtrKg1anmVAYK8PHRMTGKpeEROJWGmUdMP4v46B7d602IrjCy+ViKOSmifvg
yozNobTB5bAgO0+X8cjLcngMDm7enGvvjcrdsmaCwYSehcPxIgZUcgGw5qDoOS4fW5br
g0KdUWbhE5ysRcWeqvED8ehP3Sj7RDoJ29/prrBBH9IyJLVaiHjC6xVVRBez0JC53KyU
VYhpSDRUxLnmOZMwGWEMpHzHGn4wbrIAFMt1zkiVJMZy0AHFc6aKy81e8tfo1PnSc6ux
cCrxRNZIqI9zmOI6jo/u9m81y7ooJ2vHjxXpWeiXndoH/6c7+PlEuIbEKWwQUF2VUAAV
KBlg==
MIME-Version: 1.0
X-Received: by 10.60.173.233 with SMTP id bn9mr13068719oec.20.1435562088893;
Mon, 29 Jun 2015 00:14:48 -0700 (PDT)
Received: by 10.76.153.5 with HTTP; Mon, 29 Jun 2015 00:14:48 -0700 (PDT)
Reply-To: [email protected]
Date: Mon, 29 Jun 2015 08:14:48 +0100
Message-ID: <CAHM8wLfUZJNUUtruz4VWdCPT29JaaZiSRz2JezHWpwsn0sKaHg@mail.gmail.com>
From: Mr Joseph Obi <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=089e011825445c96c90519a2d8df
Bcc:
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beneficiary, I will advise you to receive your fund now
or it will be cancels. This is to inform you that I have registered your
ATM Platinum CARD loaded with the sum of $4.500.000 United State Dollars with
Express Courier Company with Package Number: 00876538 and code of ( Shipment
Code awb 33xzs, Atm Card Registered Code No xgt442. Be advised to contact
them with your delivery information such as, Your Full Name, Your Address
and Your Telephone Number: [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 HK_RANDOM_FROM From username looks random
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zenithbankplcmjo9[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.218.68 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrjoseph7[at]hotmail.com
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zenithbankplcmjo9[at]gmail.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5005]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
1.6 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.5 MONEY_FORM Lots of money if you fill out a form
2.9 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
3.8 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR ATM CARD of US$4.5M.
--089e011825445c96c90519a2d8df
Content-Type: text/plain; charset=UTF-8
Dear Beneficiary,
I will advise you to receive your fund now or it will be cancels.
This is to inform you that I have registered your ATM Platinum CARD loaded
with the sum of $4.500.000 United State Dollars with Express Courier
Company with Package Number: 00876538 and code of ( Shipment Code awb
33xzs, Atm Card Registered Code No xgt442. Be advised to contact them with
your delivery information such as, Your Full Name, Your Address and Your
Telephone Number:
Security Code sctc/2001dhx/567/; Transaction Code 233/cstc/101/33028/;
Certificate Deposit code; sctc/bun/xxiv/-78/01). please Contact him now
with your delivery information such as,
Full Name______________
Home Addres _________
Country_______________
City- ______________
Nearest Airport _______
Phone Number________________
I have assisted you to paid for the Insurance & Delivery fee.The only
payment you have to make is their Security fee $79, Please indicate the
registration Number and ask Him how to pay their Security fee of $79
immediately, I am in India to receive treatment for my health, Please
indicate the registration Number and ask Him how to pay the security fee to
avoid increase of tax.
Contact Person:______Mr.Ola Vincent
Contact E-mail:_____ [email protected]
Telephone Number:___ +234-803-479-8097
Congratulations
Best Regards,
Mr Joseph Obi
Envelope-to:
Delivery-date: Mon, 29 Jun 2015 00:07:46 -0700
Received: from mail-oi0-f68.google.com ([209.85.218.68]:36180)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1Z9TAP-0001JN-4d
for ; Mon, 29 Jun 2015 00:07:46 -0700
Received: by oiav1 with SMTP id v1so5648819oia.3
for <>; Mon, 29 Jun 2015 00:14:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=jFR+SRdPcnO6+lG8HZgR2z5fCA/Z8AuiJ1JLEzQO7G8=;
b=awkiCxDtrKg1anmVAYK8PHRMTGKpeEROJWGmUdMP4v46B7d602IrjCy+ViKOSmifvg
yozNobTB5bAgO0+X8cjLcngMDm7enGvvjcrdsmaCwYSehcPxIgZUcgGw5qDoOS4fW5br
g0KdUWbhE5ysRcWeqvED8ehP3Sj7RDoJ29/prrBBH9IyJLVaiHjC6xVVRBez0JC53KyU
VYhpSDRUxLnmOZMwGWEMpHzHGn4wbrIAFMt1zkiVJMZy0AHFc6aKy81e8tfo1PnSc6ux
cCrxRNZIqI9zmOI6jo/u9m81y7ooJ2vHjxXpWeiXndoH/6c7+PlEuIbEKWwQUF2VUAAV
KBlg==
MIME-Version: 1.0
X-Received: by 10.60.173.233 with SMTP id bn9mr13068719oec.20.1435562088893;
Mon, 29 Jun 2015 00:14:48 -0700 (PDT)
Received: by 10.76.153.5 with HTTP; Mon, 29 Jun 2015 00:14:48 -0700 (PDT)
Reply-To: [email protected]
Date: Mon, 29 Jun 2015 08:14:48 +0100
Message-ID: <CAHM8wLfUZJNUUtruz4VWdCPT29JaaZiSRz2JezHWpwsn0sKaHg@mail.gmail.com>
From: Mr Joseph Obi <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=089e011825445c96c90519a2d8df
Bcc:
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beneficiary, I will advise you to receive your fund now
or it will be cancels. This is to inform you that I have registered your
ATM Platinum CARD loaded with the sum of $4.500.000 United State Dollars with
Express Courier Company with Package Number: 00876538 and code of ( Shipment
Code awb 33xzs, Atm Card Registered Code No xgt442. Be advised to contact
them with your delivery information such as, Your Full Name, Your Address
and Your Telephone Number: [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 HK_RANDOM_FROM From username looks random
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zenithbankplcmjo9[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.218.68 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrjoseph7[at]hotmail.com
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zenithbankplcmjo9[at]gmail.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5005]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
1.6 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.5 MONEY_FORM Lots of money if you fill out a form
2.9 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
3.8 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR ATM CARD of US$4.5M.
--089e011825445c96c90519a2d8df
Content-Type: text/plain; charset=UTF-8
Dear Beneficiary,
I will advise you to receive your fund now or it will be cancels.
This is to inform you that I have registered your ATM Platinum CARD loaded
with the sum of $4.500.000 United State Dollars with Express Courier
Company with Package Number: 00876538 and code of ( Shipment Code awb
33xzs, Atm Card Registered Code No xgt442. Be advised to contact them with
your delivery information such as, Your Full Name, Your Address and Your
Telephone Number:
Security Code sctc/2001dhx/567/; Transaction Code 233/cstc/101/33028/;
Certificate Deposit code; sctc/bun/xxiv/-78/01). please Contact him now
with your delivery information such as,
Full Name______________
Home Addres _________
Country_______________
City- ______________
Nearest Airport _______
Phone Number________________
I have assisted you to paid for the Insurance & Delivery fee.The only
payment you have to make is their Security fee $79, Please indicate the
registration Number and ask Him how to pay their Security fee of $79
immediately, I am in India to receive treatment for my health, Please
indicate the registration Number and ask Him how to pay the security fee to
avoid increase of tax.
Contact Person:______Mr.Ola Vincent
Contact E-mail:_____ [email protected]
Telephone Number:___ +234-803-479-8097
Congratulations
Best Regards,
Mr Joseph Obi
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces