[email protected] Mr. James Dike,

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id JVZlKo2IFFn/bgAAjbubUg
for <>; Thu, 11 May 2017 08:51:41 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 11 May 2017 08:51:41 -0700
Received: from mail2.uog.edu.et ([213.55.79.206]:48275)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1d8qNQ-0007Nw-4E
for ; Thu, 11 May 2017 08:51:41 -0700
X-IronPort-AV: E=Sophos;i="5.04,848,1406581200";
d="scan'208";a="209073"
Received: from s-mac-exc-001.uog.local (HELO mail.uog.edu.et) ([10.139.5.20])
by mail2.uog.edu.et with ESMTP; 11 May 2017 18:37:31 +0300
Received: from [45.58.115.8] (45.58.115. by S-MAC-EXC-001.UOG.LOCAL
(10.139.5.20) with Microsoft SMTP Server id 14.2.347.0; Thu, 11 May 2017
18:37:30 +0300
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: <[email protected]>
Date: Thu, 11 May 2017 08:50:17 -0700
Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Originating-IP: [45.58.115.8]
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: GUARANTY TRUST BANK PLOT 109 JERRY GANA CLOSE, VICTORIA ISLAND,
LAGOS - NIGERIA. RE: $10.5Million, ATM Master Card Payment Dear Fund Beneficiary,
[...]

Content analysis details: (16.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[213.55.79.206 listed in dnsbl.sorbs.net]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[213.55.79.206 listed in bb.barracudacentral.org]
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.9 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(jamesdike461[at]outlook.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** VERY URGENT


GUARANTY TRUST BANK
PLOT 109 JERRY GANA CLOSE, VICTORIA ISLAND,
LAGOS - NIGERIA.


RE: $10.5Million, ATM
Master Card Payment

Dear Fund Beneficiary,

I am Mr. James Dike, the new director ATM Head of Operation Guaranty Trust Bank
Nigeria PLC, I resumed to this office on the 5th of April 2017 and during my
official research I discovered an abandoned ATM Master card valued sum of
$10.5Million belonging to you as the rightfully intimate beneficiary.

I tried to know why this card has not been released to you but I was told by the
GTBank management that the former director ATM head of operation who left this
office four months ago withhold your card for his own personal use without knowing
that his evil plans towards diverting your fund will be discovered.

Now that your ATM Master card is still available and ready for your receiving,
therefore you have to come down here to our bank to pick up your card direct from my
office or alternatively it can be arranged and shipped to your address through any
registered reliable courier service company that is attached to our bank and also
which you will take care of the courier charge only, hope it is cleared and
accepted by you?

I don’t know the courier cost of shipping the card to you but if you permit me and
accept the terms, then I can make an inquiry from the courier shipping company to
find out the cost, but in that case you will be required to forward to me your
address where you want to receive the card to enable me find out the shipping cost
to your location.

Your direct telephone number and address will be needed and more details of your ATM
card payment will be made known to you as soon as I receive your swift positive
response.

Do not hesitate to mail me as soon as you read this mail.

Thanks for your co-operation and i wait for your kind positive respond.

Yours Faithfully,

Mr. James Dike,
GTBank Management