by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id oBCzMisum1uNUgAAjbubUg
for <>; Thu, 13 Sep 2018 20:42:35 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Sep 2018 20:42:35 -0700
Received: from mail-co1nam03hn0247.outbound.protection.outlook.com ([104.47.40.247]:34958 helo=NAM03-CO1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1g0f05-0005UZ-RD
for ; Thu, 13 Sep 2018 20:42:35 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=72BHsIsfUz1V1t/Ah2ljNC2zT9MXbjWGwWAxpc2qOr8=;
b=W3kjYvlgmfWLlviKB7RTvBy0gPoq9g1hROvxfW8Pdm57T+qd71YR5XFvVBePihQ3rR6jAITZ2tTOFT3eYOyt3nxGiaACVB6imKY43j0r97okeXETZaW7aiHF04kqcJ3surT8DAXT9fr9uG2MC8LZDo9hewuNgBccDoGY0PahGP9Mgh1UIqoqPuPQN/OyIPoJhC7ubBEfHtBBNtFq4JmoIpf4BFqQ95sWohYCeAVTovagKJrIJfHURmeZ5f4X6yRNxbZ3D4LF8jID/tdvazsAfggPghOp3zMxT1Zx1gB+9VzizagI8VgzSjGx+txUCTobbMhtsSifqCIY7/Cju9Bdgg==
Received: from CO1NAM03FT059.eop-NAM03.prod.protection.outlook.com
(10.152.80.54) by CO1NAM03HT021.eop-NAM03.prod.protection.outlook.com
(10.152.81.123) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.1143.11; Fri, 14
Sep 2018 03:41:46 +0000
Received: from MWHPR14MB1632.namprd14.prod.outlook.com (10.152.80.58) by
CO1NAM03FT059.mail.protection.outlook.com (10.152.81.192) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.1143.11 via Frontend Transport; Fri, 14 Sep 2018 03:41:46 +0000
Received: from MWHPR14MB1632.namprd14.prod.outlook.com
([fe80::c73:40c3:a604:3989]) by MWHPR14MB1632.namprd14.prod.outlook.com
([fe80::c73:40c3:a604:3989%4]) with mapi id 15.20.1143.014; Fri, 14 Sep 2018
03:41:46 +0000
From: "Mr. C" <[email protected]>
Thread-Topic: GOOD NEWS FOR YOU,
Thread-Index: AQHUS9zWg+2iPusakEutb4Nyiw69dA==
Date: Fri, 14 Sep 2018 03:41:46 +0000
Message-ID: <MWHPR14MB1632548EE569B08A8C364CD1EB190@MWHPR14MB1632.namprd14.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:0195F293A2D2A211FB128C2347836022D84423DEB4891C29E4BAFADBA89A5C5D;UpperCasedChecksum:B9BC40101D1463C65ACCC0026445827F057D955AB822920484AAC7BFD5CD8D38;SizeAsReceived:11835;Count:43
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn: [hLIRQBcP2VaGnAgAWTQ2PFKHdWcWTVnO]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;CO1NAM03HT021;6:7uystw4EIYIEvhM8Y3A+vcPKn6rh4IVnLVGzw0DHl5SiIUNJiT+BMLdUX0RCGZsVir+M0DilTNRivqGMpr5eTf0AV4VkiVQhV4EfQg/pYMbCZ21hbm1IItLEJWGGQfTiF3T52dqhZvklF/LZPukz18TJyJIiVQ6nlCuNQFEqi4KJPkiQeDvX6IYcqw+dtgfCTdWdoAb4rtqeMgU0WMp1zbO0vcJ2jB1HLLmqgbXIgFHwZjQ0mNUW1Ad26/6u3tFTrNAjlKhfVCaPLjdYjlVnoYEuaZwVfD4TX36QUTgPYah9BOMu5pMnT8qvy4dV3sFGasBKk+eJGhiCNM3lsZfEn0wz/03wEErWzLVqpUv5tUjUIeNyA4LOGeiEtDOBNKWQC2t/LWphlECUFq+r4pbTzhXMDsXACp8LcJApG9LPgScDCbyLjqTVWs+d1TlJiPB1iyOI/Bif/jwFeu575A7CzA==;5:eliS+UdTCoLjllhjGy1xTcmTKI+OIhNoTlADYs2675Eb91/FtpiWEJq8oiUPjAcLw37DGsrF1m9smj/LOtB0TCjJBc7irhqWVyDC/Ud4jztn41AV25oi02umRNM2WPyIm1rwyAQf7/H0XLg/BG6KUbSL4UZ1+JPSqFGPemSpXmE=;7:2Ex8xBl0jz7S2MwQI8PjVe3lmBdf0SH5D+CJDIcRAf1g4LdheCEzQ0XBcidmXSgjzF4+5Mss1zCT220CCR5KoO2XuT3phk7zuBZ/qXz5Sipj9hRCTe9codJ7cQxUVLLz/umpXUwjTOWW98rA9b3oN3NG4KnlZXghrn9OYEwSCZg8yWlBVn30miD/G1XVdh0EDuFDCMuIiygR/XPfkgW5sN/uW5cWy0S9NFT1dmRKIPQFxdpml5Jpy0CIBfkISYZ0
x-incomingheadercount: 43
x-eopattributedmessage: 0
x-ms-exchange-slblob-mailprops: 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
x-microsoft-antispam: BCL:0;PCL:0;RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1603101475)(1601125500)(1701031045);SRVR:CO1NAM03HT021;
x-ms-traffictypediagnostic: CO1NAM03HT021:
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(4566010)(82015058);SRVR:CO1NAM03HT021;BCL:0;PCL:0;RULEID:;SRVR:CO1NAM03HT021;
x-forefront-prvs: 07954CC105
x-forefront-antispam-report: SFV:SPM;SFS:(7070007)(1496009)(189003)(199004)(55016002)(7696005)(1671002)(25786009)(7416002)(9686003)(7406005)(7366002)(2900100001)(26005)(881003)(7336002)(54896002)(20460500001)(33656002)(6436002)(83332001)(8936002)(104016004)(99286004)(575854001)(6506007)(3480700004)(86362001)(81156014)(109986005)(153953002)(73972006)(68736007)(56003)(82202002)(39060400002)(476003)(14444005)(256004)(486006)(102836004)(5660300001)(106356001)(19627405001)(74316002)(105586002)(87572001)(14454004)(97736004)(8676002)(105004)(5250100002)(217873002)(6346003)(362954004);DIR:OUT;SFP:1501;SCL:5;SRVR:CO1NAM03HT021;H:MWHPR14MB1632.namprd14.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;
received-spf: None (protection.outlook.com: hotmail.com does not designate
permitted sender hosts)
authentication-results: spf=none (sender IP is )
smtp.mailfrom=[email protected];
x-microsoft-antispam-message-info: XfKPqaPRuyzhQyoB02RtMTju8qnW/R3swK1IoYI3zjpmbymJ761gKqnOJEI9K0pzKf/wgol6ZVYO+CMjjCGbt8+M865vU9Sbgd2jBLp1pI/V7qc1a7nGatLXtRwpA1LFXLfZKkvPjRbpBCFqy1MAsoFvCS91ry3IvW5gsNSHfrl+3XlLYGDMVtEB7aItTvB4j0RbBxvcmT/SuGERDg6cUg6cJ4lx1kceDTEDRuosUAQ=
Content-Type: multipart/alternative;
boundary="_000_MWHPR14MB1632548EE569B08A8C364CD1EB190MWHPR14MB1632namp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: c001924d-3e68-4f40-89c2-901a49278da7
X-MS-Exchange-CrossTenant-Network-Message-Id: a582d429-34cc-4cbc-5ca7-08d619f3fed3
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: c001924d-3e68-4f40-89c2-901a49278da7
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2018 03:41:46.1495
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1NAM03HT021
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary, NOTIFICATION FOR RELEASE OF PAYMENT
US$5.5 MILLION. This letter is written to you in order to change your life
from today. I am Rev. Dr.Chris David, the Head of Finance & Operations department
of this Bank. My boss Mr.Stephen Olabisi Onasanya, the MD/ CEO of this Bank
is now on compulsory leave and all power has been vested on me to direct
all international payment. Furthermore due to allegations of corrupt practices
against other Nigeria Banks, the Federal Government of Nigeria has appointed
this Bank to effect all foreign overdue payment. [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[104.47.40.247 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ciaroussey[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** GOOD NEWS FOR YOU,
Attention: Beneficiary,
NOTIFICATION FOR RELEASE OF PAYMENT US$5.5 MILLION.
This letter is written to you in order to change your life from today. I am Rev.
Dr.Chris David, the Head of Finance & Operations department of this Bank. My boss
Mr.Stephen Olabisi Onasanya, the MD/ CEO of this Bank is now on compulsory leave and
all power has been vested on me to direct all international payment. Furthermore due
to allegations of corrupt practices against other Nigeria Banks, the Federal
Government of Nigeria has appointed this Bank to effect all foreign overdue payment.
Be informed that the Federal Government have Approved the release of US$5.5M which
has been in this Bank for many years UNCLAIMED, my boss in collaboration with the
Governor of Central Bank of Nigeria (CBN) have refuse to tell you the truth on how
to claim your fund. This is because they have been using the interest accumulated
from your fund every year to enrich themselves without your knowledge. I want to
help you PULL OUT this fund to your Bank Account today using the easiest and
quickest method which has not been known to you before. By this method a Domiciliary
On line Account will be opened for you.
A domiciliary account is a secure account which we will open for you in our Bank and
Credit your payment of US$5.5M for further credit into your account. The essence of
this Domiciliary account is to secure and protect your payment from being diverted
by fraudulent people or making payment to a foreign account which do not belong to
you. The greatest advantage is that you can instruct us to credit your nominated
account bit by bit with small amount thereby saving yourself from the trouble of
Financial Authority in your country who monitors large transfer due to current trend
of terrorism. Another beauty of the domiciliary account is that you can retain the
balance left in your account in our Bank and can also instruct us to pay out money
to any Bank of your choice in the world, or issue you an ATM Card which you can use
in any part of the world when on a business trip.
I hope you now understand the advantages of a Domiciliary On line account and why
you need this account to receive your payment of US$5.5M now in our Bank... You are
advice to forward as a matter of urgency your full name, direct telephone and Fax
number and your contact address. as we have started the process of the account for
you. Call me on +23409066918760 so that I will issue you a payment release code
which must be given to you personally on telephone strictly for security reason.
This code is very important and it is what you will use to confirm your payment.
Yours faithfully,
Rev. Dr.Chris David
GOOD NEWS FOR YOU,
Delivered-To:
Received: from
by with LMTP id oBCzMisum1uNUgAAjbubUg
for <>; Thu, 13 Sep 2018 20:42:35 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Sep 2018 20:42:35 -0700
Received: from mail-co1nam03hn0247.outbound.protection.outlook.com ([104.47.40.247]:34958 helo=NAM03-CO1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1g0f05-0005UZ-RD
for ; Thu, 13 Sep 2018 20:42:35 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=72BHsIsfUz1V1t/Ah2ljNC2zT9MXbjWGwWAxpc2qOr8=;
b=W3kjYvlgmfWLlviKB7RTvBy0gPoq9g1hROvxfW8Pdm57T+qd71YR5XFvVBePihQ3rR6jAITZ2tTOFT3eYOyt3nxGiaACVB6imKY43j0r97okeXETZaW7aiHF04kqcJ3surT8DAXT9fr9uG2MC8LZDo9hewuNgBccDoGY0PahGP9Mgh1UIqoqPuPQN/OyIPoJhC7ubBEfHtBBNtFq4JmoIpf4BFqQ95sWohYCeAVTovagKJrIJfHURmeZ5f4X6yRNxbZ3D4LF8jID/tdvazsAfggPghOp3zMxT1Zx1gB+9VzizagI8VgzSjGx+txUCTobbMhtsSifqCIY7/Cju9Bdgg==
Received: from CO1NAM03FT059.eop-NAM03.prod.protection.outlook.com
(10.152.80.54) by CO1NAM03HT021.eop-NAM03.prod.protection.outlook.com
(10.152.81.123) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.1143.11; Fri, 14
Sep 2018 03:41:46 +0000
Received: from MWHPR14MB1632.namprd14.prod.outlook.com (10.152.80.58) by
CO1NAM03FT059.mail.protection.outlook.com (10.152.81.192) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.1143.11 via Frontend Transport; Fri, 14 Sep 2018 03:41:46 +0000
Received: from MWHPR14MB1632.namprd14.prod.outlook.com
([fe80::c73:40c3:a604:3989]) by MWHPR14MB1632.namprd14.prod.outlook.com
([fe80::c73:40c3:a604:3989%4]) with mapi id 15.20.1143.014; Fri, 14 Sep 2018
03:41:46 +0000
From: "Mr. C" <[email protected]>
Thread-Topic: GOOD NEWS FOR YOU,
Thread-Index: AQHUS9zWg+2iPusakEutb4Nyiw69dA==
Date: Fri, 14 Sep 2018 03:41:46 +0000
Message-ID: <MWHPR14MB1632548EE569B08A8C364CD1EB190@MWHPR14MB1632.namprd14.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:0195F293A2D2A211FB128C2347836022D84423DEB4891C29E4BAFADBA89A5C5D;UpperCasedChecksum:B9BC40101D1463C65ACCC0026445827F057D955AB822920484AAC7BFD5CD8D38;SizeAsReceived:11835;Count:43
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn: [hLIRQBcP2VaGnAgAWTQ2PFKHdWcWTVnO]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;CO1NAM03HT021;6:7uystw4EIYIEvhM8Y3A+vcPKn6rh4IVnLVGzw0DHl5SiIUNJiT+BMLdUX0RCGZsVir+M0DilTNRivqGMpr5eTf0AV4VkiVQhV4EfQg/pYMbCZ21hbm1IItLEJWGGQfTiF3T52dqhZvklF/LZPukz18TJyJIiVQ6nlCuNQFEqi4KJPkiQeDvX6IYcqw+dtgfCTdWdoAb4rtqeMgU0WMp1zbO0vcJ2jB1HLLmqgbXIgFHwZjQ0mNUW1Ad26/6u3tFTrNAjlKhfVCaPLjdYjlVnoYEuaZwVfD4TX36QUTgPYah9BOMu5pMnT8qvy4dV3sFGasBKk+eJGhiCNM3lsZfEn0wz/03wEErWzLVqpUv5tUjUIeNyA4LOGeiEtDOBNKWQC2t/LWphlECUFq+r4pbTzhXMDsXACp8LcJApG9LPgScDCbyLjqTVWs+d1TlJiPB1iyOI/Bif/jwFeu575A7CzA==;5:eliS+UdTCoLjllhjGy1xTcmTKI+OIhNoTlADYs2675Eb91/FtpiWEJq8oiUPjAcLw37DGsrF1m9smj/LOtB0TCjJBc7irhqWVyDC/Ud4jztn41AV25oi02umRNM2WPyIm1rwyAQf7/H0XLg/BG6KUbSL4UZ1+JPSqFGPemSpXmE=;7:2Ex8xBl0jz7S2MwQI8PjVe3lmBdf0SH5D+CJDIcRAf1g4LdheCEzQ0XBcidmXSgjzF4+5Mss1zCT220CCR5KoO2XuT3phk7zuBZ/qXz5Sipj9hRCTe9codJ7cQxUVLLz/umpXUwjTOWW98rA9b3oN3NG4KnlZXghrn9OYEwSCZg8yWlBVn30miD/G1XVdh0EDuFDCMuIiygR/XPfkgW5sN/uW5cWy0S9NFT1dmRKIPQFxdpml5Jpy0CIBfkISYZ0
x-incomingheadercount: 43
x-eopattributedmessage: 0
x-ms-exchange-slblob-mailprops: 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
x-microsoft-antispam: BCL:0;PCL:0;RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1603101475)(1601125500)(1701031045);SRVR:CO1NAM03HT021;
x-ms-traffictypediagnostic: CO1NAM03HT021:
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(4566010)(82015058);SRVR:CO1NAM03HT021;BCL:0;PCL:0;RULEID:;SRVR:CO1NAM03HT021;
x-forefront-prvs: 07954CC105
x-forefront-antispam-report: SFV:SPM;SFS:(7070007)(1496009)(189003)(199004)(55016002)(7696005)(1671002)(25786009)(7416002)(9686003)(7406005)(7366002)(2900100001)(26005)(881003)(7336002)(54896002)(20460500001)(33656002)(6436002)(83332001)(8936002)(104016004)(99286004)(575854001)(6506007)(3480700004)(86362001)(81156014)(109986005)(153953002)(73972006)(68736007)(56003)(82202002)(39060400002)(476003)(14444005)(256004)(486006)(102836004)(5660300001)(106356001)(19627405001)(74316002)(105586002)(87572001)(14454004)(97736004)(8676002)(105004)(5250100002)(217873002)(6346003)(362954004);DIR:OUT;SFP:1501;SCL:5;SRVR:CO1NAM03HT021;H:MWHPR14MB1632.namprd14.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;
received-spf: None (protection.outlook.com: hotmail.com does not designate
permitted sender hosts)
authentication-results: spf=none (sender IP is )
smtp.mailfrom=[email protected];
x-microsoft-antispam-message-info: XfKPqaPRuyzhQyoB02RtMTju8qnW/R3swK1IoYI3zjpmbymJ761gKqnOJEI9K0pzKf/wgol6ZVYO+CMjjCGbt8+M865vU9Sbgd2jBLp1pI/V7qc1a7nGatLXtRwpA1LFXLfZKkvPjRbpBCFqy1MAsoFvCS91ry3IvW5gsNSHfrl+3XlLYGDMVtEB7aItTvB4j0RbBxvcmT/SuGERDg6cUg6cJ4lx1kceDTEDRuosUAQ=
Content-Type: multipart/alternative;
boundary="_000_MWHPR14MB1632548EE569B08A8C364CD1EB190MWHPR14MB1632namp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: c001924d-3e68-4f40-89c2-901a49278da7
X-MS-Exchange-CrossTenant-Network-Message-Id: a582d429-34cc-4cbc-5ca7-08d619f3fed3
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: c001924d-3e68-4f40-89c2-901a49278da7
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2018 03:41:46.1495
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1NAM03HT021
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary, NOTIFICATION FOR RELEASE OF PAYMENT
US$5.5 MILLION. This letter is written to you in order to change your life
from today. I am Rev. Dr.Chris David, the Head of Finance & Operations department
of this Bank. My boss Mr.Stephen Olabisi Onasanya, the MD/ CEO of this Bank
is now on compulsory leave and all power has been vested on me to direct
all international payment. Furthermore due to allegations of corrupt practices
against other Nigeria Banks, the Federal Government of Nigeria has appointed
this Bank to effect all foreign overdue payment. [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[104.47.40.247 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ciaroussey[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** GOOD NEWS FOR YOU,
Attention: Beneficiary,
NOTIFICATION FOR RELEASE OF PAYMENT US$5.5 MILLION.
This letter is written to you in order to change your life from today. I am Rev.
Dr.Chris David, the Head of Finance & Operations department of this Bank. My boss
Mr.Stephen Olabisi Onasanya, the MD/ CEO of this Bank is now on compulsory leave and
all power has been vested on me to direct all international payment. Furthermore due
to allegations of corrupt practices against other Nigeria Banks, the Federal
Government of Nigeria has appointed this Bank to effect all foreign overdue payment.
Be informed that the Federal Government have Approved the release of US$5.5M which
has been in this Bank for many years UNCLAIMED, my boss in collaboration with the
Governor of Central Bank of Nigeria (CBN) have refuse to tell you the truth on how
to claim your fund. This is because they have been using the interest accumulated
from your fund every year to enrich themselves without your knowledge. I want to
help you PULL OUT this fund to your Bank Account today using the easiest and
quickest method which has not been known to you before. By this method a Domiciliary
On line Account will be opened for you.
A domiciliary account is a secure account which we will open for you in our Bank and
Credit your payment of US$5.5M for further credit into your account. The essence of
this Domiciliary account is to secure and protect your payment from being diverted
by fraudulent people or making payment to a foreign account which do not belong to
you. The greatest advantage is that you can instruct us to credit your nominated
account bit by bit with small amount thereby saving yourself from the trouble of
Financial Authority in your country who monitors large transfer due to current trend
of terrorism. Another beauty of the domiciliary account is that you can retain the
balance left in your account in our Bank and can also instruct us to pay out money
to any Bank of your choice in the world, or issue you an ATM Card which you can use
in any part of the world when on a business trip.
I hope you now understand the advantages of a Domiciliary On line account and why
you need this account to receive your payment of US$5.5M now in our Bank... You are
advice to forward as a matter of urgency your full name, direct telephone and Fax
number and your contact address. as we have started the process of the account for
you. Call me on +23409066918760 so that I will issue you a payment release code
which must be given to you personally on telephone strictly for security reason.
This code is very important and it is what you will use to confirm your payment.
Yours faithfully,
Rev. Dr.Chris David
GOOD NEWS FOR YOU,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
