by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 20 Jun 2015 03:43:26 -0700
Received: from mail-ig0-f180.google.com ([209.85.213.180]:33512)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1Z6GFA-0002u2-Vr
for ; Sat, 20 Jun 2015 03:43:25 -0700
Received: by igbqq3 with SMTP id qq3so33039768igb.0
for <>; Sat, 20 Jun 2015 03:50:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to
message-id:subject:from:to:content-type;
bh=J0F+KDMBFazcxsBkfVHVmN0TOJ6upyi1qvCFDvktTkQ=;
b=HTzKCms+6lvfPkH7JpEV/kLTwPB+mn4wkbPhlmWTVwxkS0N/it+rFZDaUMGuxufBMN
iccBaKcoZ146znrdEKsEemmg3M6XVF55XpVEzhnfckIdw7eF6BVwFMl7rh4GE1lNwaIn
7PJaToknMbPbd73Xcw+RFMj+EL7H2zlVOEv+7SNQn1ERQbxVBw5NFTg/pQhTbvwXE+P8
EnXudCISIXRwzPy+YtZnkxBbFYzDKFDrg3fLFkEf2bDFouXq1W7BlN6Z8qiTUcnw4XbD
6XyV75l5wKBT3+ZVjOwT7eAdR+0d2mhNerSxcKRvAvxI8XQX3IbIC3mx5ObrfsyRbQYV
zb/g==
MIME-Version: 1.0
X-Received: by 10.107.168.150 with SMTP id e22mr22998196ioj.9.1434797403779;
Sat, 20 Jun 2015 03:50:03 -0700 (PDT)
Received: by 10.107.155.68 with HTTP; Sat, 20 Jun 2015 03:50:03 -0700 (PDT)
Reply-To: [email protected]
Date: Sat, 20 Jun 2015 11:50:03 +0100
Message-ID: <CAMG5bUmNKob6ipNJxvrPqiKjG=[email protected]>
From: "General Muhammadu Buhari(G.C.F.R)" <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=001a11426eae93baad0518f0cdd3
Bcc:
X-Spam-Status: Yes, score=8.3
X-Spam-Score: 83
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [image: Image result for nigeria flag animation] FEDERAL
REPUBLIC OF NIGERIA *From: Office of the New President Commander in Chief
of Arm Forces and First Payment Guaranty Remittance.* * Destination: Presidential
Guest House **Aso - Rock Villa, Wusa Zone II Abuja - Nigeria.* [...]
Content analysis details: (8.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 HK_RANDOM_FROM From username looks random
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.213.180 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zenithbankplc0009[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zenithbankplc0009[at]gmail.com)
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.3656]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 LOTS_OF_MONEY Huge... sums of money
3.0 TVD_PH_BODY_META TVD_PH_BODY_META
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
1.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Immediate Payment Confirmation!!â€Ââ€Â
--001a11426eae93baad0518f0cdd3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
[image: Image result for nigeria flag animation]
FEDERAL REPUBLIC OF NIGERIA
*From: Office of the New President Commander in Chief of Arm Forces and
First Payment Guaranty Remittance.*
* Destination: Presidential Guest House **Aso - Rock Villa, Wusa Zone
II Abuja - Nigeria.*
*Our Ref: FGN/PRE/VP/FMF/2015.*
Attn: Beneficiary,
Greetings to you and your house hold.
I believe you have been expecting to receive an email from me regarding
your payment which was not paid to you by the past administration. Yes I am
talking to you about your unpaid fund and I was able to recover so many
unpaid files which your name is among the listed names I saw herein, and I
have found out that former President Dr. Goodluck Jonathan wasn't man
enough to stamp his authority over those who are suppose to transfer your
fund to you.
I have been elected by my people as the whole world saw how my victory was
emerged, and it is expected because my people know what I am capable of
doing and I have done immensely well before as a Military Head of State and
my second coming as a Civilian President under Democracy will be much more
intense as I am not a party to corruption. So you should count yourself
lucky as you will receive your fund under my authorization and you will
follow my instructions and you shall be paid. Suspend every transaction
you are dealing with any one,you have as i have cancelled all foreign
payments and i am now handling them by myself and it is for your own good
to end corruption and save your stress as well.
I don’t have time to mess with you or anyone else, and I saw how much you
owned herein but I am going to make your payment very easy for you to
receive your fund. I have approved USD$10.5000,000.00 to be transferred to
you, I don’t want to know how much you are suppose to receive before, so if
you want to receive your payment, then you will be ready to off-set the
bill for PAYMENT ACCEPTANCE FUND BOND FEE of $480.00 and that is all.
I am doing this to end your long awaited payment, and if you are not ready
to heed to my instructions and receive your payment, please do not bother
to reply me as I will not entertain any such mail from you. I believe in
Change and Excellency in Democracy will always stand.
Yours Sincerely
General Muhammadu Buhari(G.C.F.R).
President Federal Republic of Nigeria.
Envelope-to:
Delivery-date: Sat, 20 Jun 2015 03:43:26 -0700
Received: from mail-ig0-f180.google.com ([209.85.213.180]:33512)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1Z6GFA-0002u2-Vr
for ; Sat, 20 Jun 2015 03:43:25 -0700
Received: by igbqq3 with SMTP id qq3so33039768igb.0
for <>; Sat, 20 Jun 2015 03:50:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to
bh=J0F+KDMBFazcxsBkfVHVmN0TOJ6upyi1qvCFDvktTkQ=;
b=HTzKCms+6lvfPkH7JpEV/kLTwPB+mn4wkbPhlmWTVwxkS0N/it+rFZDaUMGuxufBMN
iccBaKcoZ146znrdEKsEemmg3M6XVF55XpVEzhnfckIdw7eF6BVwFMl7rh4GE1lNwaIn
7PJaToknMbPbd73Xcw+RFMj+EL7H2zlVOEv+7SNQn1ERQbxVBw5NFTg/pQhTbvwXE+P8
EnXudCISIXRwzPy+YtZnkxBbFYzDKFDrg3fLFkEf2bDFouXq1W7BlN6Z8qiTUcnw4XbD
6XyV75l5wKBT3+ZVjOwT7eAdR+0d2mhNerSxcKRvAvxI8XQX3IbIC3mx5ObrfsyRbQYV
zb/g==
MIME-Version: 1.0
X-Received: by 10.107.168.150 with SMTP id e22mr22998196ioj.9.1434797403779;
Sat, 20 Jun 2015 03:50:03 -0700 (PDT)
Received: by 10.107.155.68 with HTTP; Sat, 20 Jun 2015 03:50:03 -0700 (PDT)
Reply-To: [email protected]
Date: Sat, 20 Jun 2015 11:50:03 +0100
Message-ID: <CAMG5bUmNKob6ipNJxvrPqiKjG=[email protected]>
From: "General Muhammadu Buhari(G.C.F.R)" <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=001a11426eae93baad0518f0cdd3
Bcc:
X-Spam-Status: Yes, score=8.3
X-Spam-Score: 83
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [image: Image result for nigeria flag animation] FEDERAL
REPUBLIC OF NIGERIA *From: Office of the New President Commander in Chief
of Arm Forces and First Payment Guaranty Remittance.* * Destination: Presidential
Guest House **Aso - Rock Villa, Wusa Zone II Abuja - Nigeria.* [...]
Content analysis details: (8.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 HK_RANDOM_FROM From username looks random
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.213.180 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zenithbankplc0009[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zenithbankplc0009[at]gmail.com)
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.3656]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 LOTS_OF_MONEY Huge... sums of money
3.0 TVD_PH_BODY_META TVD_PH_BODY_META
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
1.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Immediate Payment Confirmation!!â€Ââ€Â
--001a11426eae93baad0518f0cdd3
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
[image: Image result for nigeria flag animation]
FEDERAL REPUBLIC OF NIGERIA
*From: Office of the New President Commander in Chief of Arm Forces and
First Payment Guaranty Remittance.*
* Destination: Presidential Guest House **Aso - Rock Villa, Wusa Zone
II Abuja - Nigeria.*
*Our Ref: FGN/PRE/VP/FMF/2015.*
Attn: Beneficiary,
Greetings to you and your house hold.
I believe you have been expecting to receive an email from me regarding
your payment which was not paid to you by the past administration. Yes I am
talking to you about your unpaid fund and I was able to recover so many
unpaid files which your name is among the listed names I saw herein, and I
have found out that former President Dr. Goodluck Jonathan wasn't man
enough to stamp his authority over those who are suppose to transfer your
fund to you.
I have been elected by my people as the whole world saw how my victory was
emerged, and it is expected because my people know what I am capable of
doing and I have done immensely well before as a Military Head of State and
my second coming as a Civilian President under Democracy will be much more
intense as I am not a party to corruption. So you should count yourself
lucky as you will receive your fund under my authorization and you will
follow my instructions and you shall be paid. Suspend every transaction
you are dealing with any one,you have as i have cancelled all foreign
payments and i am now handling them by myself and it is for your own good
to end corruption and save your stress as well.
I don’t have time to mess with you or anyone else, and I saw how much you
owned herein but I am going to make your payment very easy for you to
receive your fund. I have approved USD$10.5000,000.00 to be transferred to
you, I don’t want to know how much you are suppose to receive before, so if
you want to receive your payment, then you will be ready to off-set the
bill for PAYMENT ACCEPTANCE FUND BOND FEE of $480.00 and that is all.
I am doing this to end your long awaited payment, and if you are not ready
to heed to my instructions and receive your payment, please do not bother
to reply me as I will not entertain any such mail from you. I believe in
Change and Excellency in Democracy will always stand.
Yours Sincerely
General Muhammadu Buhari(G.C.F.R).
President Federal Republic of Nigeria.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

