by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id edUzM42ru1ioTQAAjbubUg
for <>; Sat, 04 Mar 2017 22:09:17 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 04 Mar 2017 22:09:17 -0800
Received: from mail-wm0-f68.google.com ([74.125.82.68]:34041)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1ckPM4-0005A6-3e
for ; Sat, 04 Mar 2017 22:09:17 -0800
Received: by mail-wm0-f68.google.com with SMTP id u132so804110wmg.1
for <>; Sat, 04 Mar 2017 22:08:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from
message-id:subject:to;
bh=rt6klFXbWLtY7sBQd82UV2L9Q6nxTcJElFU2hTJgWdk=;
b=QSrvRDPo7gjHMrdlU5tADEL+BmjmmMfNFjWen+tSwn4cvgTHfkhYBiras7pESeg4nz
yI1grQRM7QqvT5lD7z9Z2hB48WHaK8EFn73/q/bOSOcMRLXZGabhZd75x+EuD9L3Los0
2xlvvXf98+X/0u84XAa/D4+keI2EwrCeIDIqeVG2LNzpzOZfvD0PXbWkNC6gmZV9C2du
Uz+nxScMFp3xTNmuP4f5vbYP7c2bCjN5ob45HYRChbESs5HDbFa+tRbNUIwVYouDFKYQ
h5qPaAaLXxJ8hJKe6hjL224jriteQnCPOaG1UVyJ5eup0lQ2r4tKnACaGpKjF4emghPW
T6pA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from
message-id:subject:to;
bh=rt6klFXbWLtY7sBQd82UV2L9Q6nxTcJElFU2hTJgWdk=;
b=DMyREAc4BEGO4u2B5rdgl6Ct+3qUxIh79bERG9DMPfOVKtSkNuromIalyRQ41uGEEj
qxwNKGVZ6o/KfZ6tFT84xECO9kSFQKKzCVvqWxRHDvGBR7VwWgg8+UDUueen/aDQ2pv/
JaKmq+qB914gt9Fpi4KXKYT2T0d+l/aC9AczAgq/ebOTI4it0YtT3nbHn+JgTWR6dbmM
tp5aYJu+2nq2LXt3bbT8hDc8cRk5I910ojNhfVfCJ49fzlzs7qfiV89krudr+YAnlghO
xqm1P/x0Dy8ah2MxFk7BFdfJa5BjK35v1R7GsC9UZut+dHBktAx6eflJ+FouBlUR/C5k
Y1aw==
X-Gm-Message-State: AMke39n2JWsO3YuZjEVeqv1dfd4DOTFKGQopP66MvOX4qqkrxNl3PQAV6ult94+CktH8dTmmZLOJPIza2ZYFMg==
X-Received: by 10.28.9.15 with SMTP id 15mr9156499wmj.83.1488694114405; Sat,
04 Mar 2017 22:08:34 -0800 (PST)
MIME-Version: 1.0
Received: by 10.80.184.29 with HTTP; Sat, 4 Mar 2017 22:08:33 -0800 (PST)
From: American fbi <[email protected]>
Date: Sun, 5 Mar 2017 07:08:33 +0100
Message-ID: <CAB5jY=Zf6tyt6Nso7ecjfdt8E5UPB72zqFVQ99cpYTgP=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=7.6
X-Spam-Score: 76
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Fund Beneficiary, This is to inform you that the new
president of American, Donald Trump, Has Instruct Federal Bureau Of Investigation
(FBI) to know why some of the fund Beneficiary have not yet receive his or
her over due payment in Nigeria or any where in Africa if you have not receive
your fund get back to this office with your Information, Your House Address
Your Full Name And Your Phone Number, For our Investigation, [...]
Content analysis details: (7.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.68 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (americanfbi8[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(americanfbi8[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[74.125.82.68 listed in wl.mailspike.net]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[74.125.82.68 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** A Report Of Your Over Due Fund To FBI
Dear Fund Beneficiary,
This is to inform you that the new president of American, Donald
Trump, Has Instruct Federal Bureau Of Investigation (FBI) to know why
some of the fund Beneficiary have not yet receive his or her over due
payment in Nigeria or any where in Africa if you have not receive your
fund get back to this office with your Information, Your House Address
Your Full Name And Your Phone Number, For our Investigation,
Reply on this Email;[email protected]
Thanks for your co-operation.
Yours Faithfully.
For the FBI Office
Mr. James B. Comey, Jr
Associate Deputy Director,
Delivered-To:
Received: from
by (Dovecot) with LMTP id edUzM42ru1ioTQAAjbubUg
for <>; Sat, 04 Mar 2017 22:09:17 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 04 Mar 2017 22:09:17 -0800
Received: from mail-wm0-f68.google.com ([74.125.82.68]:34041)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1ckPM4-0005A6-3e
for ; Sat, 04 Mar 2017 22:09:17 -0800
Received: by mail-wm0-f68.google.com with SMTP id u132so804110wmg.1
for <>; Sat, 04 Mar 2017 22:08:56 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from
bh=rt6klFXbWLtY7sBQd82UV2L9Q6nxTcJElFU2hTJgWdk=;
b=QSrvRDPo7gjHMrdlU5tADEL+BmjmmMfNFjWen+tSwn4cvgTHfkhYBiras7pESeg4nz
yI1grQRM7QqvT5lD7z9Z2hB48WHaK8EFn73/q/bOSOcMRLXZGabhZd75x+EuD9L3Los0
2xlvvXf98+X/0u84XAa/D4+keI2EwrCeIDIqeVG2LNzpzOZfvD0PXbWkNC6gmZV9C2du
Uz+nxScMFp3xTNmuP4f5vbYP7c2bCjN5ob45HYRChbESs5HDbFa+tRbNUIwVYouDFKYQ
h5qPaAaLXxJ8hJKe6hjL224jriteQnCPOaG1UVyJ5eup0lQ2r4tKnACaGpKjF4emghPW
T6pA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from
bh=rt6klFXbWLtY7sBQd82UV2L9Q6nxTcJElFU2hTJgWdk=;
b=DMyREAc4BEGO4u2B5rdgl6Ct+3qUxIh79bERG9DMPfOVKtSkNuromIalyRQ41uGEEj
qxwNKGVZ6o/KfZ6tFT84xECO9kSFQKKzCVvqWxRHDvGBR7VwWgg8+UDUueen/aDQ2pv/
JaKmq+qB914gt9Fpi4KXKYT2T0d+l/aC9AczAgq/ebOTI4it0YtT3nbHn+JgTWR6dbmM
tp5aYJu+2nq2LXt3bbT8hDc8cRk5I910ojNhfVfCJ49fzlzs7qfiV89krudr+YAnlghO
xqm1P/x0Dy8ah2MxFk7BFdfJa5BjK35v1R7GsC9UZut+dHBktAx6eflJ+FouBlUR/C5k
Y1aw==
X-Gm-Message-State: AMke39n2JWsO3YuZjEVeqv1dfd4DOTFKGQopP66MvOX4qqkrxNl3PQAV6ult94+CktH8dTmmZLOJPIza2ZYFMg==
X-Received: by 10.28.9.15 with SMTP id 15mr9156499wmj.83.1488694114405; Sat,
04 Mar 2017 22:08:34 -0800 (PST)
MIME-Version: 1.0
Received: by 10.80.184.29 with HTTP; Sat, 4 Mar 2017 22:08:33 -0800 (PST)
From: American fbi <[email protected]>
Date: Sun, 5 Mar 2017 07:08:33 +0100
Message-ID: <CAB5jY=Zf6tyt6Nso7ecjfdt8E5UPB72zqFVQ99cpYTgP=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=7.6
X-Spam-Score: 76
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Fund Beneficiary, This is to inform you that the new
president of American, Donald Trump, Has Instruct Federal Bureau Of Investigation
(FBI) to know why some of the fund Beneficiary have not yet receive his or
her over due payment in Nigeria or any where in Africa if you have not receive
your fund get back to this office with your Information, Your House Address
Your Full Name And Your Phone Number, For our Investigation, [...]
Content analysis details: (7.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.68 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (americanfbi8[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(americanfbi8[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[74.125.82.68 listed in wl.mailspike.net]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[74.125.82.68 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** A Report Of Your Over Due Fund To FBI
Dear Fund Beneficiary,
This is to inform you that the new president of American, Donald
Trump, Has Instruct Federal Bureau Of Investigation (FBI) to know why
some of the fund Beneficiary have not yet receive his or her over due
payment in Nigeria or any where in Africa if you have not receive your
fund get back to this office with your Information, Your House Address
Your Full Name And Your Phone Number, For our Investigation,
Reply on this Email;[email protected]
Thanks for your co-operation.
Yours Faithfully.
For the FBI Office
Mr. James B. Comey, Jr
Associate Deputy Director,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

