#339814 by buried under 419s
Wed Sep 20, 2017 10:04 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by m (Dovecot) with LMTP id GnRBCJUswlnBIQAAjbubUg
for <>; Wed, 20 Sep 2017 01:53:41 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 20 Sep 2017 01:53:41 -0700
Received: from [188.117.111.43] (port=60653 helo=H4593275VM.fmscoenc.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dual7-0002DT-WE
for ; Wed, 20 Sep 2017 01:53:40 -0700
Received: from User ([93.174.93.71]) by fmscoenc.com with MailEnable ESMTP; Wed, 20 Sep 2017 11:52:35 +0300
Reply-To: <[email protected]>
From: "MR. JOHN JOHNSON"<[email protected]>
Date: Wed, 20 Sep 2017 09:52:54 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, How are you doing today and hope this email
finds you well. My name is John Johnson with Central Bank of Nigeria/ United
Nation foreign debt settlement. I would have contacted you long before now
but was caught up with in the Hurricane Irma since on the 30th of last month.
I was sent here after the meeting and agreement with President Muhammadu
Buhari over the conclusion and strategy on how to release your fund but unfortunately
was caught up in the Hurricane Irma. [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[93.174.93.71 listed in zen.spamhaus.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[93.174.93.71 listed in dnsbl.sorbs.net]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Notification about your fund
Dear Beneficiary,
How are you doing today and hope this email finds you well. My name is John Johnson
with Central Bank of Nigeria/ United Nation foreign debt settlement. I would have
contacted you long before now but was caught up with in the Hurricane Irma since on
the 30th of last month. I was sent here after the meeting and agreement with
President Muhammadu Buhari over the conclusion and strategy on how to release your
fund but unfortunately was caught up in the Hurricane Irma.
The President set a goal and it was agreed that if you do not have the original
document of your fund, no bank or organization will make any payment to you because
all banks in Europe, Asia, London, USA that you have been in contact with towards
the release of this fund has revert back to CBN treasury department. Any banks or
organization contacting you or, you might have been in contact with towards
releasing any fund to you is only deceiving you which at the end you will not
receive anything from them but lost your hard earned money.
That's why it was declared that all beneficiaries will have their original documents
of their contract/inheritance fund to proof that this fund is legal and legitimate.
All agents in United States is aware of this meeting like FBI, Homeland Security,
CIA and without the beneficiary having this original documents from the CBN, you
will never be in any position to receive the fund as the rightful owner of the fund.
In conclusion, you have been advise to comply with this instruction accordingly to
enable me complete the delivery of your bank draft valued $10.6 Million Dollars
which i have been sent over here to deliver to you. I need you to send me a copy of
the Fund Ownership Certificate issued to you and signed by President Goodluck
Jonathan to be presented to the authority here and to complete the delivery. If you
do not have it, let me know immediately so they can send it to you by courier which
is the only thing you need to receive your fund.
Also send me your address where to make the delivery and direct contact number.
Meanwhile, you can reach me on the above number +1-786-763-3265 leave a message if i
do not answer and i shall return your call.
Awaiting your immediate and urgent response.
Regards,
Mr. John Johnson.
Delivered-To:
Received: from
by m (Dovecot) with LMTP id GnRBCJUswlnBIQAAjbubUg
for <>; Wed, 20 Sep 2017 01:53:41 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 20 Sep 2017 01:53:41 -0700
Received: from [188.117.111.43] (port=60653 helo=H4593275VM.fmscoenc.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dual7-0002DT-WE
for ; Wed, 20 Sep 2017 01:53:40 -0700
Received: from User ([93.174.93.71]) by fmscoenc.com with MailEnable ESMTP; Wed, 20 Sep 2017 11:52:35 +0300
Reply-To: <[email protected]>
From: "MR. JOHN JOHNSON"<[email protected]>
Date: Wed, 20 Sep 2017 09:52:54 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, How are you doing today and hope this email
finds you well. My name is John Johnson with Central Bank of Nigeria/ United
Nation foreign debt settlement. I would have contacted you long before now
but was caught up with in the Hurricane Irma since on the 30th of last month.
I was sent here after the meeting and agreement with President Muhammadu
Buhari over the conclusion and strategy on how to release your fund but unfortunately
was caught up in the Hurricane Irma. [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[93.174.93.71 listed in zen.spamhaus.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[93.174.93.71 listed in dnsbl.sorbs.net]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Notification about your fund
Dear Beneficiary,
How are you doing today and hope this email finds you well. My name is John Johnson
with Central Bank of Nigeria/ United Nation foreign debt settlement. I would have
contacted you long before now but was caught up with in the Hurricane Irma since on
the 30th of last month. I was sent here after the meeting and agreement with
President Muhammadu Buhari over the conclusion and strategy on how to release your
fund but unfortunately was caught up in the Hurricane Irma.
The President set a goal and it was agreed that if you do not have the original
document of your fund, no bank or organization will make any payment to you because
all banks in Europe, Asia, London, USA that you have been in contact with towards
the release of this fund has revert back to CBN treasury department. Any banks or
organization contacting you or, you might have been in contact with towards
releasing any fund to you is only deceiving you which at the end you will not
receive anything from them but lost your hard earned money.
That's why it was declared that all beneficiaries will have their original documents
of their contract/inheritance fund to proof that this fund is legal and legitimate.
All agents in United States is aware of this meeting like FBI, Homeland Security,
CIA and without the beneficiary having this original documents from the CBN, you
will never be in any position to receive the fund as the rightful owner of the fund.
In conclusion, you have been advise to comply with this instruction accordingly to
enable me complete the delivery of your bank draft valued $10.6 Million Dollars
which i have been sent over here to deliver to you. I need you to send me a copy of
the Fund Ownership Certificate issued to you and signed by President Goodluck
Jonathan to be presented to the authority here and to complete the delivery. If you
do not have it, let me know immediately so they can send it to you by courier which
is the only thing you need to receive your fund.
Also send me your address where to make the delivery and direct contact number.
Meanwhile, you can reach me on the above number +1-786-763-3265 leave a message if i
do not answer and i shall return your call.
Awaiting your immediate and urgent response.
Regards,
Mr. John Johnson.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces