by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 23 Dec 2017 17:08:23 -0800
Received: from cme-gti-edge01.diavaz.com ([187.141.107.11]:21720 helo=diavaz.com)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eSum2-000051-RP
for \; Sat, 23 Dec 2017 17:08:23 -0800
Received: from User ([47.19.32.162])
by FortiMail-Diavaz.localdomain with SMTP id vBO1506s009831-vBO1506u009831;
Sat, 23 Dec 2017 19:05:01 -0600
Message-Id: <201712240105.vBO1506s009831-vBO1506u009831@FortiMail-Diavaz.localdomain>
Reply-To: <[email protected]>
From: "Mr. Ibrahim Mustafa Magu"<[email protected]>
Date: Sat, 23 Dec 2017 20:08:55 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-FEAS-SYSTEM-WL: [email protected]
X-Spam-Status: Yes, score=35.6
X-Spam-Score: 356
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ECONOMIC & FINANCIAL CRIME COMMISSION (EFCC). EFCC in alliance
with economic community of West African states (ECOWAS) with head Office
here in Nigeria. We have been working towards the eradication of fraudsters
and scam Artists in Western part of Africa With the help of United States
Government and the United Nations and some corrupt official adminstrators
Mr Ibrahim Lamorde has been sacked who happen to be the former EFCC chairman.
This email is being directed to you because your email address was found
in one of the scam Artists file and computer hard disk in our custody here
in Nigeria and with the information gartered from this Scam artist, you notice
that you have been scammed of so much money and have decided to compensate
you with a little token to recover the lost of your fund. You are therefore
being compensated with the total sum $ 2.5 Million Dollars. We have also
arrested all those who claim that they are barristers, bank officials, Inheritance,
Lottery Agents who has money for transfer or want you to be the next of kin
of such funds which does not exist. [...]
Content analysis details: (35.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[187.141.107.11 listed in bl.score.senderscore.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[187.141.107.11 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[187.141.107.11 listed in psbl.surriel.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(emmanulesther0000[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 T_HK_NAME_MR_MRS No description available.
0.0 MONEY_BARRISTER Lots of money from a UK lawyer
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
2.8 MONEY_ATM_CARD Lots of money on an ATM card
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.9 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** From Mr. Ibrahim Mustafa Magu (EFCC)
ECONOMIC & FINANCIAL CRIME COMMISSION (EFCC). EFCC in
alliance with economic community of West African states
(ECOWAS) with head Office here in Nigeria. We have been
working towards the eradication of fraudsters and scam
Artists in Western part of Africa With the help of United
States Government and the United Nations and some corrupt
official adminstrators Mr Ibrahim Lamorde has been sacked
who happen to be the former EFCC chairman.
This email is being directed to you
because your email address was found in one of the scam
Artists file and computer hard disk in our custody here in
Nigeria and with the information gartered from this Scam
artist, you notice that you have been scammed of so much
money and have decided to compensate you with a little token
to recover the lost of your fund. You are therefore being
compensated with the total sum $ 2.5 Million Dollars. We have
also arrested all those who claim that they are barristers,
bank officials, Inheritance, Lottery Agents who has money for transfer or
want you to be the next of kin of such funds which does not
exist.
Since your name appeared among the
lucky beneficiaries who will receive a compensation of
US $ 2.5 Million, we have made arrangement to register an
Online Banking through our Global Bank, where you will have
full access to your Online Banking Account Fund, to transfer
your fund personally to your Private Bank Account with no
complication of things or questioning as the Account will be
fully registered in your Name.
Feel free to contact the processing
officer MISS ESTHER EMMANUEL. The online Banking Processing
It is made much easier for you to transfer your fund to your
private Bank Account personally, to avoid any delay or
complication of things. With this Online Banking Transfer
Processing, you can only transfer the Maximum Amount of
US $ 500.000.00 daily / install mentally until the total amount
of your Compensated / deposited fund is transferred and
completely paid to you and also if you choose to recieve your
payment VIA ATM CARD its is still accepted so you get back to her
with your choice of payment.
So you are advice to contact,
processing officer MISS ESTHER EMMANUEL with your provided
information? required for verification below.
CONTACT PERSON: MISS ESTHER EMMANUEL
CONTACT EMAIL ADDRESS: [email protected]
CELL PHONE: +234 9024 690 348
Provide the information below to enable
the processing of your Online Banking Account for deposition
of your total compensated fund.
1) YOUR FULL NAME.
2) YOUR ADDRESS.
3) YOUR TELEPHONE NUMBER.
4) YOUR OCCUPATION
5) YOUR IDENTITY.
6) COUNTRY
Contact MISS ESTHER EMMANUEL with the
information required for verification to enable her start
the processing of your Online Banking Account
Registration.
We guarantee your safety and wish you
the best of luck.
Best Regard,
Mr. Ibrahim Mustafa Magu
CHAIRMAN ECONOMIC & FINANCIAL CRIME
COMMISSION
(EFCC) FOREIGN OPERATIONS
DEPT
Envelope-to:
Delivery-date: Sat, 23 Dec 2017 17:08:23 -0800
Received: from cme-gti-edge01.diavaz.com ([187.141.107.11]:21720 helo=diavaz.com)
by with smtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eSum2-000051-RP
for \; Sat, 23 Dec 2017 17:08:23 -0800
Received: from User ([47.19.32.162])
by FortiMail-Diavaz.localdomain with SMTP id vBO1506s009831-vBO1506u009831;
Sat, 23 Dec 2017 19:05:01 -0600
Message-Id: <201712240105.vBO1506s009831-vBO1506u009831@FortiMail-Diavaz.localdomain>
Reply-To: <[email protected]>
From: "Mr. Ibrahim Mustafa Magu"<[email protected]>
Date: Sat, 23 Dec 2017 20:08:55 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-FEAS-SYSTEM-WL: [email protected]
X-Spam-Status: Yes, score=35.6
X-Spam-Score: 356
X-Spam-Bar: +++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ECONOMIC & FINANCIAL CRIME COMMISSION (EFCC). EFCC in alliance
with economic community of West African states (ECOWAS) with head Office
here in Nigeria. We have been working towards the eradication of fraudsters
and scam Artists in Western part of Africa With the help of United States
Government and the United Nations and some corrupt official adminstrators
Mr Ibrahim Lamorde has been sacked who happen to be the former EFCC chairman.
This email is being directed to you because your email address was found
in one of the scam Artists file and computer hard disk in our custody here
in Nigeria and with the information gartered from this Scam artist, you notice
that you have been scammed of so much money and have decided to compensate
you with a little token to recover the lost of your fund. You are therefore
being compensated with the total sum $ 2.5 Million Dollars. We have also
arrested all those who claim that they are barristers, bank officials, Inheritance,
Lottery Agents who has money for transfer or want you to be the next of kin
of such funds which does not exist. [...]
Content analysis details: (35.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[187.141.107.11 listed in bl.score.senderscore.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[187.141.107.11 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[187.141.107.11 listed in psbl.surriel.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(emmanulesther0000[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 T_HK_NAME_MR_MRS No description available.
0.0 MONEY_BARRISTER Lots of money from a UK lawyer
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
2.8 MONEY_ATM_CARD Lots of money on an ATM card
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.9 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** From Mr. Ibrahim Mustafa Magu (EFCC)
ECONOMIC & FINANCIAL CRIME COMMISSION (EFCC). EFCC in
alliance with economic community of West African states
(ECOWAS) with head Office here in Nigeria. We have been
working towards the eradication of fraudsters and scam
Artists in Western part of Africa With the help of United
States Government and the United Nations and some corrupt
official adminstrators Mr Ibrahim Lamorde has been sacked
who happen to be the former EFCC chairman.
This email is being directed to you
because your email address was found in one of the scam
Artists file and computer hard disk in our custody here in
Nigeria and with the information gartered from this Scam
artist, you notice that you have been scammed of so much
money and have decided to compensate you with a little token
to recover the lost of your fund. You are therefore being
compensated with the total sum $ 2.5 Million Dollars. We have
also arrested all those who claim that they are barristers,
bank officials, Inheritance, Lottery Agents who has money for transfer or
want you to be the next of kin of such funds which does not
exist.
Since your name appeared among the
lucky beneficiaries who will receive a compensation of
US $ 2.5 Million, we have made arrangement to register an
Online Banking through our Global Bank, where you will have
full access to your Online Banking Account Fund, to transfer
your fund personally to your Private Bank Account with no
complication of things or questioning as the Account will be
fully registered in your Name.
Feel free to contact the processing
officer MISS ESTHER EMMANUEL. The online Banking Processing
It is made much easier for you to transfer your fund to your
private Bank Account personally, to avoid any delay or
complication of things. With this Online Banking Transfer
Processing, you can only transfer the Maximum Amount of
US $ 500.000.00 daily / install mentally until the total amount
of your Compensated / deposited fund is transferred and
completely paid to you and also if you choose to recieve your
payment VIA ATM CARD its is still accepted so you get back to her
with your choice of payment.
So you are advice to contact,
processing officer MISS ESTHER EMMANUEL with your provided
information? required for verification below.
CONTACT PERSON: MISS ESTHER EMMANUEL
CONTACT EMAIL ADDRESS: [email protected]
CELL PHONE: +234 9024 690 348
Provide the information below to enable
the processing of your Online Banking Account for deposition
of your total compensated fund.
1) YOUR FULL NAME.
2) YOUR ADDRESS.
3) YOUR TELEPHONE NUMBER.
4) YOUR OCCUPATION
5) YOUR IDENTITY.
6) COUNTRY
Contact MISS ESTHER EMMANUEL with the
information required for verification to enable her start
the processing of your Online Banking Account
Registration.
We guarantee your safety and wish you
the best of luck.
Best Regard,
Mr. Ibrahim Mustafa Magu
CHAIRMAN ECONOMIC & FINANCIAL CRIME
COMMISSION
(EFCC) FOREIGN OPERATIONS
DEPT
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
