#338239 by buried under 419s
Sat Sep 02, 2017 2:52 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id uWYiHgzXqlmjUQAAjbubUg
for <>; Sat, 02 Sep 2017 09:06:36 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 02 Sep 2017 09:06:36 -0700
Received: from johnny.heliohost.org ([64.62.211.131]:36974)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1doAwJ-0005QW-Et
for ; Sat, 02 Sep 2017 09:06:36 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=appledgr.heliohost.org; s=default; h=Content-Transfer-Encoding:MIME-Version
:Content-Type:Reply-to:Subject:To:From:Message-ID:Date:Sender:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=ozhDDy3YaoB3HUEufr45MUjNYEqiidbPUpItLeMhDoc=; b=nDNdbkm9ZjPbVPi6A7u+fWDtT9
cFzYhzBNhRXygSyOwbwhETp/u0hJzNA6B90RXcu8i6/0WvBah7eXr+FI9Ixsl6jYdZSz24K60W1HQ
5Z2NADGE5XK7n3WdSaNbSvpVFYYFsTRrypL7OtB1jN8jPG/wTuJE5uBU8r0bSAAM6h9IehGLRndt7
LjdxO2Hq6FN1offcMe+lTeyJKnt/SRVVCKmW9cJexn4rNTGSDaKyWemNyxJN4E4GZc7uc0Rol0Pps
PhaD7VAJxpeMgVMzn0FLgM8YJ21vNhwynGd3RgOnpHnHA1vsa2ttwbqC0Jn92gKtCc9oahp6zmlw2
35gpzxHQ==;
Received: from [::1] (port=47304 helo=johnny.heliohost.org)
by johnny.heliohost.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1doAsP-0002Sr-NR; Sat, 02 Sep 2017 09:02:31 -0700
Received: from 41.58.88.227 ([41.58.88.227]) by appledgr.heliohost.org
(Horde Framework) with HTTPS; Sat, 02 Sep 2017 09:02:28 -0700
Date: Sat, 02 Sep 2017 09:02:28 -0700
Message-ID: <20170902090228.Horde.YvxBCwMqtbmYwReP0VOwoTA@appledgr.heliohost.org>
From: First Bank <[email protected]>
To:
Reply-to: [email protected]
User-Agent: Horde Application Framework 5
Content-Type: multipart/alternative; boundary="=_5eOxNTQk2OsqCHoBZvjjAnI"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - johnny.heliohost.org
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - appledgr.heliohost.org
X-Get-Message-Sender-Via: johnny.heliohost.org: authenticated_id: [email protected]
X-Authenticated-Sender: johnny.heliohost.org: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=15.5
X-Spam-Score: 155
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear:Beneficiary, I contacted you privately to inform you
that the approved part payment of Us$10.5M in your favor has been programmed
in our micro chips of compartmental central computer for further crediting
into your nominated bank account. However, we received a "Deed of Assignment"
from one Mr.Dell Jordan of USA who told us that he is your next of kin and
that you died in a fire outbreak last week. He has also submitted his account
for us to transfer the fund to him which is as follows [...]
Content analysis details: (15.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[64.62.211.131 listed in dnsbl.sorbs.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(frstbnkngr01[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.5 FSL_HELO_BARE_IP_2 No description available.
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** next of kin
Dear:Beneficiary,
I contacted you privately to inform you that the approved part payment
of Us$10.5M in your favor has been programmed in our micro chips of
compartmental central computer for further crediting into your
nominated bank account.
However, we received a "Deed of Assignment" from one Mr.Dell Jordan of
USA who told us that he is your next of kin and that you died in a
fire outbreak last week.
He has also submitted his account for us to transfer the fund to him
which is as follows
BANK INFORMATION
North Fork Bank
2050 Jericho Tnpk.Commack, NY 11725
Account Number: 2051085880
Routing Number: 021407912
BENEFICIARY : Mr.Dell Jordan
Meanwhile, you are advised to get back to my office immediately with
the requested details to enable us have your correct information.
1.Your Full Name:
2.Your Full Residential Address:
3.Your Direct Phone Number
4. Banking Details:
We shall proceed to issue all payments details to the said Mr. Marc
.A. Wiener, if we do not hear from you within the next four working
days from today
Yours truly,
Mr.John Aboh
Senior managing Director Security & Investigation
First Bank Wire transfer Processing Division
Tel:+234 807 533 9799
--
Dear:Beneficiary,
I contacted you privately to inform you that the approved part payment
of Us$8.5M in your favor has been programmed in our micro chips of
compartmental central computer for further crediting into your
nominated bank account.
However, we received a "Deed of Assignment" from one Mr. Dell Jordan
of USA who told us that he is your next of kin and that you died in a
fire outbreak last week.
He has also submitted his account for us to transfer the fund to him
which is as follows
BANK INFORMATION
North Fork Bank
2050 Jericho Tnpk.Commack, NY 11725
Account Number: 2051085880
Routing Number: 021407912
BENEFICIARY : Dell Jordan
Meanwhile, you are advised to get back to my office immediately with
the requested details to enable us have your correct information.
1.Your Full Name:
2.Your Full Residential Address:
3.Your Direct Phone Number
4. Banking Details:
We shall proceed to issue all payments details to the said Mr. Dell
Jordan, if we do not hear from you within the next four working days
from today
Yours truly,
Mr.John Aboh
Senior managing Director Security & Investigation
First Bank Wire transfer Processing Division
Tel:+234 807 533 9799
Delivered-To:
Received: from
by (Dovecot) with LMTP id uWYiHgzXqlmjUQAAjbubUg
for <>; Sat, 02 Sep 2017 09:06:36 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 02 Sep 2017 09:06:36 -0700
Received: from johnny.heliohost.org ([64.62.211.131]:36974)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1doAwJ-0005QW-Et
for ; Sat, 02 Sep 2017 09:06:36 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=appledgr.heliohost.org; s=default; h=Content-Transfer-Encoding:MIME-Version
:Content-Type:Reply-to:Subject:To:From:Message-ID:Date:Sender:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=ozhDDy3YaoB3HUEufr45MUjNYEqiidbPUpItLeMhDoc=; b=nDNdbkm9ZjPbVPi6A7u+fWDtT9
cFzYhzBNhRXygSyOwbwhETp/u0hJzNA6B90RXcu8i6/0WvBah7eXr+FI9Ixsl6jYdZSz24K60W1HQ
5Z2NADGE5XK7n3WdSaNbSvpVFYYFsTRrypL7OtB1jN8jPG/wTuJE5uBU8r0bSAAM6h9IehGLRndt7
LjdxO2Hq6FN1offcMe+lTeyJKnt/SRVVCKmW9cJexn4rNTGSDaKyWemNyxJN4E4GZc7uc0Rol0Pps
PhaD7VAJxpeMgVMzn0FLgM8YJ21vNhwynGd3RgOnpHnHA1vsa2ttwbqC0Jn92gKtCc9oahp6zmlw2
35gpzxHQ==;
Received: from [::1] (port=47304 helo=johnny.heliohost.org)
by johnny.heliohost.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1doAsP-0002Sr-NR; Sat, 02 Sep 2017 09:02:31 -0700
Received: from 41.58.88.227 ([41.58.88.227]) by appledgr.heliohost.org
(Horde Framework) with HTTPS; Sat, 02 Sep 2017 09:02:28 -0700
Date: Sat, 02 Sep 2017 09:02:28 -0700
Message-ID: <20170902090228.Horde.YvxBCwMqtbmYwReP0VOwoTA@appledgr.heliohost.org>
From: First Bank <[email protected]>
To:
Reply-to: [email protected]
User-Agent: Horde Application Framework 5
Content-Type: multipart/alternative; boundary="=_5eOxNTQk2OsqCHoBZvjjAnI"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - johnny.heliohost.org
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - appledgr.heliohost.org
X-Get-Message-Sender-Via: johnny.heliohost.org: authenticated_id: [email protected]
X-Authenticated-Sender: johnny.heliohost.org: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=15.5
X-Spam-Score: 155
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear:Beneficiary, I contacted you privately to inform you
that the approved part payment of Us$10.5M in your favor has been programmed
in our micro chips of compartmental central computer for further crediting
into your nominated bank account. However, we received a "Deed of Assignment"
from one Mr.Dell Jordan of USA who told us that he is your next of kin and
that you died in a fire outbreak last week. He has also submitted his account
for us to transfer the fund to him which is as follows [...]
Content analysis details: (15.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[64.62.211.131 listed in dnsbl.sorbs.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(frstbnkngr01[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.5 FSL_HELO_BARE_IP_2 No description available.
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** next of kin
Dear:Beneficiary,
I contacted you privately to inform you that the approved part payment
of Us$10.5M in your favor has been programmed in our micro chips of
compartmental central computer for further crediting into your
nominated bank account.
However, we received a "Deed of Assignment" from one Mr.Dell Jordan of
USA who told us that he is your next of kin and that you died in a
fire outbreak last week.
He has also submitted his account for us to transfer the fund to him
which is as follows
BANK INFORMATION
North Fork Bank
2050 Jericho Tnpk.Commack, NY 11725
Account Number: 2051085880
Routing Number: 021407912
BENEFICIARY : Mr.Dell Jordan
Meanwhile, you are advised to get back to my office immediately with
the requested details to enable us have your correct information.
1.Your Full Name:
2.Your Full Residential Address:
3.Your Direct Phone Number
4. Banking Details:
We shall proceed to issue all payments details to the said Mr. Marc
.A. Wiener, if we do not hear from you within the next four working
days from today
Yours truly,
Mr.John Aboh
Senior managing Director Security & Investigation
First Bank Wire transfer Processing Division
Tel:+234 807 533 9799
--
Dear:Beneficiary,
I contacted you privately to inform you that the approved part payment
of Us$8.5M in your favor has been programmed in our micro chips of
compartmental central computer for further crediting into your
nominated bank account.
However, we received a "Deed of Assignment" from one Mr. Dell Jordan
of USA who told us that he is your next of kin and that you died in a
fire outbreak last week.
He has also submitted his account for us to transfer the fund to him
which is as follows
BANK INFORMATION
North Fork Bank
2050 Jericho Tnpk.Commack, NY 11725
Account Number: 2051085880
Routing Number: 021407912
BENEFICIARY : Dell Jordan
Meanwhile, you are advised to get back to my office immediately with
the requested details to enable us have your correct information.
1.Your Full Name:
2.Your Full Residential Address:
3.Your Direct Phone Number
4. Banking Details:
We shall proceed to issue all payments details to the said Mr. Dell
Jordan, if we do not hear from you within the next four working days
from today
Yours truly,
Mr.John Aboh
Senior managing Director Security & Investigation
First Bank Wire transfer Processing Division
Tel:+234 807 533 9799
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces