by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 03 Aug 2019 14:38:14 -0700
Received: from server88-208-200-241.live-servers.net ([88.208.200.241]:57588 helo=DSVR024786.harptec.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1hu1j5-0005Dj-GH
for ; Sat, 03 Aug 2019 14:38:13 -0700
Received: from User ([41.203.78.139]) by harptec.com with MailEnable ESMTP; Sat, 3 Aug 2019 20:29:31 +0100
Reply-To: < [email protected]>
From: "FIRST BANK OF NIGERIA"<[email protected]>
Date: Sat, 3 Aug 2019 07:35:51 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=77.2
X-Spam-Score: 772
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM INTERNATIONAL REMITTANCE DEPARTMENT FIRST BANK NIGERIA
PLC 35 ASABA HOUSE LAGOS NIGERIA CONTACT EMAIL:CONTACT EMAIL: [email protected]
Dear Beloved Beneficiary This letter is written to inform you the reason
behind your delay payment.I am Rev,Ashii Ashii the Director,International
Remittance Department of this Bank,my Formal Boss,Mr.Jacobs M.Ajekigbe,the
Managing Director/CEO of this bank is now on compulsory leave and all power
have been vested on me to make all international payments.Also,due to reported
cases of corrupt practices in other Nigeria Banks including the Central Bank
of Nigeria,the Federal Government has revoked/canceled all power vested on
those banks and has appointed our bank (First Bank of Nigeria) to make all
foreign payments.Be informed that the Federal Government have approved the
release of part-payment of$7.5M(Seven Million Five Hundred Thousand Dollars)
out of your total funds,which has been in this bank for many years unclaimed
because Mr.Jacobs Ajekigbe,Collaborated with the Governor of Central Bank
of Nigeria (CBN)and have refused to tell you the truth on how to claim your
fund this is because he has been using the interest accumulated f [...]
Content analysis details: (77.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.6 DEAR_BENEFICIARY BODY: Dear Beneficiary:
3.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
1.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[41.203.78.139 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[88.208.200.241 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?41.203.78.139>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[88.208.200.241 listed in bl.score.senderscore.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (
nigoffice11[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officeofficeofficeo8[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officeofficeofficeo8[at]gmail.com)
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.5 SUBJ_ALL_CAPS Subject is all capitals
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
[88.208.200.241 listed in dnsbl.sorbs.net]
0.5 FSL_NEW_HELO_USER Spam's using Helo and User
1.7 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 FROM_MISSP_USER From misspaced, from "User"
3.6 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.3 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
4.5 KAM_GRABBAG9 Garbage email from a garbage freemail account
0.0 FROM_MISSPACED From: missing whitespace
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 MONEY_FROM_41 Lots of money from Africa
3.2 TO_NO_BRKTS_DYNIP To: lacks brackets and dynamic rDNS
0.0 FILL_THIS_FORM Fill in a form with personal information
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.1 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** FIRST BANK NIGERIA PLC
FROM INTERNATIONAL REMITTANCE DEPARTMENT
FIRST BANK NIGERIA PLC
35 ASABA HOUSE LAGOS NIGERIA
CONTACT EMAIL:CONTACT EMAIL: [email protected]
Dear Beloved Beneficiary
This letter is written to inform you the reason behind your delay payment.I am
Rev,Ashii Ashii the Director,International Remittance Department of this Bank,my
Formal Boss,Mr.Jacobs M.Ajekigbe,the Managing Director/CEO of this bank is now on
compulsory leave and all power have been vested on me to make all international
payments.Also,due to reported cases of corrupt practices in other Nigeria Banks
including the Central Bank of Nigeria,the Federal Government has revoked/canceled
all power vested on those banks and has appointed our bank (First Bank of Nigeria)
to make all foreign payments.Be informed that the Federal Government have approved
the release of part-payment of$7.5M(Seven Million Five Hundred Thousand Dollars) out
of your total funds,which has been in this bank for many years unclaimed because
Mr.Jacobs Ajekigbe,Collaborated with the Governor of Central Bank of Nigeria
(CBN)and have refused to tell you the truth on how to claim your fund this is
because he has been using the interest accumulated f
After the transfer,you will confirm the fund in your bank account within 5hours the
same day.No Cost of Transfer (COT) and no stoppage from any Government departments
as the transfer will be done within the bank alone and it is very safe.The method
which was introduced to you before is the Telegraphic Transfer (TT) for which
confirmation was 48hrs,because of the time factor,petitions could come from various
organizations stopping your payment and asking you to pay huge fee which would be
difficult for you to pay so that they can benefit from the huge interest your fund
generates while still in the Bank.
This method is not safe for you because it is not done within the bank alone as
information of the payment would be sent to the Central Control Unit (CCU) of the
Federal Ministry of Finance and office of the Accountant General of the
Federation.As a good Christian, I have nothing to gain by keeping your fund,I want
to assist you receive your fund Before it accumulate Dumurrage.You have to follow up
and work with me now.
Ensure that you keep this very confidential because of fraudsters and impostors who
go about presenting various bank accounts in order to divert another beneficiary's
fund.
your advise to reconfirm the following details below to us with valid account
co-ordinates and amount to be claimed.
Note your transfer code is FBXNZ7XX5M you must keep it confidential to avoid
intruder or claim by anyone so that I do not transfer your
fund to the wrong Bank Account.
1.Account Holders Name..........
2.Bank Name.............
3.Bank Address.........
4.Home Address.........
5.Swift Code..........
6.Your Contact Cell Phone......
7.Occupation..........
8.Age.................
9.A Copy of your id
Finally i ask for your mutual understanding and cooperation to serve you
better.
Yours truly,
Rev,Ashii Ashii
First Bank Nigeria Plc.
CONTACT EMAIL:[email protected]
+2348149184944
Envelope-to:
Delivery-date: Sat, 03 Aug 2019 14:38:14 -0700
Received: from server88-208-200-241.live-servers.net ([88.208.200.241]:57588 helo=DSVR024786.harptec.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1hu1j5-0005Dj-GH
for ; Sat, 03 Aug 2019 14:38:13 -0700
Received: from User ([41.203.78.139]) by harptec.com with MailEnable ESMTP; Sat, 3 Aug 2019 20:29:31 +0100
Reply-To: < [email protected]>
From: "FIRST BANK OF NIGERIA"<[email protected]>
Date: Sat, 3 Aug 2019 07:35:51 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=77.2
X-Spam-Score: 772
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM INTERNATIONAL REMITTANCE DEPARTMENT FIRST BANK NIGERIA
PLC 35 ASABA HOUSE LAGOS NIGERIA CONTACT EMAIL:CONTACT EMAIL: [email protected]
Dear Beloved Beneficiary This letter is written to inform you the reason
behind your delay payment.I am Rev,Ashii Ashii the Director,International
Remittance Department of this Bank,my Formal Boss,Mr.Jacobs M.Ajekigbe,the
Managing Director/CEO of this bank is now on compulsory leave and all power
have been vested on me to make all international payments.Also,due to reported
cases of corrupt practices in other Nigeria Banks including the Central Bank
of Nigeria,the Federal Government has revoked/canceled all power vested on
those banks and has appointed our bank (First Bank of Nigeria) to make all
foreign payments.Be informed that the Federal Government have approved the
release of part-payment of$7.5M(Seven Million Five Hundred Thousand Dollars)
out of your total funds,which has been in this bank for many years unclaimed
because Mr.Jacobs Ajekigbe,Collaborated with the Governor of Central Bank
of Nigeria (CBN)and have refused to tell you the truth on how to claim your
fund this is because he has been using the interest accumulated f [...]
Content analysis details: (77.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.6 DEAR_BENEFICIARY BODY: Dear Beneficiary:
3.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
1.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[41.203.78.139 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[88.208.200.241 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?41.203.78.139>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[88.208.200.241 listed in bl.score.senderscore.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (
nigoffice11[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officeofficeofficeo8[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officeofficeofficeo8[at]gmail.com)
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.5 SUBJ_ALL_CAPS Subject is all capitals
2.6 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
[88.208.200.241 listed in dnsbl.sorbs.net]
0.5 FSL_NEW_HELO_USER Spam's using Helo and User
1.7 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 FROM_MISSP_USER From misspaced, from "User"
3.6 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.3 FROM_MISSP_DYNIP From misspaced + dynamic rDNS
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
4.5 KAM_GRABBAG9 Garbage email from a garbage freemail account
0.0 FROM_MISSPACED From: missing whitespace
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 MONEY_FROM_41 Lots of money from Africa
3.2 TO_NO_BRKTS_DYNIP To: lacks brackets and dynamic rDNS
0.0 FILL_THIS_FORM Fill in a form with personal information
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
3.1 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** FIRST BANK NIGERIA PLC
FROM INTERNATIONAL REMITTANCE DEPARTMENT
FIRST BANK NIGERIA PLC
35 ASABA HOUSE LAGOS NIGERIA
CONTACT EMAIL:CONTACT EMAIL: [email protected]
Dear Beloved Beneficiary
This letter is written to inform you the reason behind your delay payment.I am
Rev,Ashii Ashii the Director,International Remittance Department of this Bank,my
Formal Boss,Mr.Jacobs M.Ajekigbe,the Managing Director/CEO of this bank is now on
compulsory leave and all power have been vested on me to make all international
payments.Also,due to reported cases of corrupt practices in other Nigeria Banks
including the Central Bank of Nigeria,the Federal Government has revoked/canceled
all power vested on those banks and has appointed our bank (First Bank of Nigeria)
to make all foreign payments.Be informed that the Federal Government have approved
the release of part-payment of$7.5M(Seven Million Five Hundred Thousand Dollars) out
of your total funds,which has been in this bank for many years unclaimed because
Mr.Jacobs Ajekigbe,Collaborated with the Governor of Central Bank of Nigeria
(CBN)and have refused to tell you the truth on how to claim your fund this is
because he has been using the interest accumulated f
After the transfer,you will confirm the fund in your bank account within 5hours the
same day.No Cost of Transfer (COT) and no stoppage from any Government departments
as the transfer will be done within the bank alone and it is very safe.The method
which was introduced to you before is the Telegraphic Transfer (TT) for which
confirmation was 48hrs,because of the time factor,petitions could come from various
organizations stopping your payment and asking you to pay huge fee which would be
difficult for you to pay so that they can benefit from the huge interest your fund
generates while still in the Bank.
This method is not safe for you because it is not done within the bank alone as
information of the payment would be sent to the Central Control Unit (CCU) of the
Federal Ministry of Finance and office of the Accountant General of the
Federation.As a good Christian, I have nothing to gain by keeping your fund,I want
to assist you receive your fund Before it accumulate Dumurrage.You have to follow up
and work with me now.
Ensure that you keep this very confidential because of fraudsters and impostors who
go about presenting various bank accounts in order to divert another beneficiary's
fund.
your advise to reconfirm the following details below to us with valid account
co-ordinates and amount to be claimed.
Note your transfer code is FBXNZ7XX5M you must keep it confidential to avoid
intruder or claim by anyone so that I do not transfer your
fund to the wrong Bank Account.
1.Account Holders Name..........
2.Bank Name.............
3.Bank Address.........
4.Home Address.........
5.Swift Code..........
6.Your Contact Cell Phone......
7.Occupation..........
8.Age.................
9.A Copy of your id
Finally i ask for your mutual understanding and cooperation to serve you
better.
Yours truly,
Rev,Ashii Ashii
First Bank Nigeria Plc.
CONTACT EMAIL:[email protected]
+2348149184944
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
