by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id TYIuLjTAZFmuJAAAjbubUg
for <>; Tue, 11 Jul 2017 05:10:28 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 11 Jul 2017 05:10:28 -0700
Received: from mail-wr0-f194.google.com ([209.85.128.194]:34275)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dUtzn-0002R1-G7
for ; Tue, 11 Jul 2017 05:10:28 -0700
Received: by mail-wr0-f194.google.com with SMTP id k67so31701724wrc.1
for <>; Tue, 11 Jul 2017 05:10:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=pOBwTsw8jXTW7mCLsmnR1Jf+qEbmjxwRvSrbFQ5wWUg=;
b=b1y82Qfj45kFlcdtFGGbrZKOUzzXCOYrayFbO07A4UCUBile2tsQHSpv1veRVqO+Xg
zcr83Lw3pJyBnQKh5OP874Q/yL5xAbmIAr6mk0K31+XVkkk40BfjMqfVMRt+0ZddRutA
1u6rFkUmiQlbuUonryfnFpgRztJN3NoPe5+ZMDrjdTore68sScuu1SXMDv3T6+K/hQ74
wz2HpcRguoIN8H0kefHs1/o2zOx9GY89C5zApSZauxXohTNmNG9gicvmljVMyciyNN2E
99PnntvdP4JjMqGRoqVt9K+N/v86HZJR01+gTp8zWhS55rNmgZ/bAF18VzxgS8ZETqlv
Ax4Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id
:subject:to;
bh=pOBwTsw8jXTW7mCLsmnR1Jf+qEbmjxwRvSrbFQ5wWUg=;
b=PaPOeDRIZVL+k9ourzHGxeju3T6fHycsXcgcl/xJLPOaA6KccEo4X2MXBDJYi+PYq5
ii/rzwJR5SEuYFpbLFY2fjoAohhMrOc0EQggQXg6LNPQVAc234DQCDcIqT9cg0EnsZJO
IiuFzMiIzgeO126GXUt1kzqEHA0TYcbBhXs3iWGEILPzrgra98ESpezv6FrS2jL3+zO5
wMZBjSZhZ+vI/PUK42qu5X1SUvZInkGHId2BSA/9mOjssiKWvY4PDLue/cQO0kR+SOJw
4ryR7imW+VHKRdavQa4jmdmdI8zeQp7EvIln5IXRPDLJ4FAYIkeJPpEwUwB8y+0F7/Dd
rUeA==
X-Gm-Message-State: AIVw112D/Ft82UiKt5GKIp/pHqZk8IN6Lx5gfM8znK5JY2XBc+r+DvfG
T7fndlURk5dIO0OaPMGRE984DmeJFA==
X-Received: by 10.28.111.84 with SMTP id k81mr2247860wmc.67.1499774986001;
Tue, 11 Jul 2017 05:09:46 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.28.218.80 with HTTP; Tue, 11 Jul 2017 05:09:45 -0700 (PDT)
Reply-To: [email protected]
From: Alhaji Suleiman Barau <[email protected]>
Date: Tue, 11 Jul 2017 13:09:45 +0100
Message-ID: <CA+XvJgAs2SCHZ551p3Q__MhVPU7kDE1=[email protected]>
Subject: Re: Your payment Instructional release order
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention:, We write to notify you of the instructional payment
order that we received to remit your fund payment valued US$10.501M which
includes the principal's sum accrued interest. The instruction was alerted
on the 7th day of July 2017 being Friday with an immediate release order
approval certificate but we cannot remit the fund to you without you re-confirming
your banking coordinates to us. [...]
Content analysis details: (4.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (aburawei20[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.194 listed in list.dnswl.org]
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(aburawei20[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.128.194 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
Attention:,
We write to notify you of the instructional payment order that we
received to remit your fund payment valued US$10.501M which includes
the principal's sum accrued interest. The instruction was alerted on
the 7th day of July 2017 being Friday with an immediate release order
approval certificate but we cannot remit the fund to you without you
re-confirming your banking coordinates to us.
After the meeting that was held with Central Bank of Nigeria board of
directors, it was resolved that every beneficiary who have not
received their payment should be identified with their fund claim
Identification card number before we can perfect the releasing of the
US$10.501M into their nominated bank account or make their payment to
them through any payment mode they prefer to be paid with.
While re-confirming your banking coordinates to us kindly note to
attach your fund claim identification card to enable us commence swift
action releasing your payment to you, kindly notifying us with the
mode that you prefer to receive your payment with should you are not
comfortable with bank to bank wire transfer.
We are sorry for delaying your payment.
Regard's,
Alhaji Suleiman Barau (OON)
Delivered-To:
Received: from
by (Dovecot) with LMTP id TYIuLjTAZFmuJAAAjbubUg
for <>; Tue, 11 Jul 2017 05:10:28 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 11 Jul 2017 05:10:28 -0700
Received: from mail-wr0-f194.google.com ([209.85.128.194]:34275)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dUtzn-0002R1-G7
for ; Tue, 11 Jul 2017 05:10:28 -0700
Received: by mail-wr0-f194.google.com with SMTP id k67so31701724wrc.1
for <>; Tue, 11 Jul 2017 05:10:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
bh=pOBwTsw8jXTW7mCLsmnR1Jf+qEbmjxwRvSrbFQ5wWUg=;
b=b1y82Qfj45kFlcdtFGGbrZKOUzzXCOYrayFbO07A4UCUBile2tsQHSpv1veRVqO+Xg
zcr83Lw3pJyBnQKh5OP874Q/yL5xAbmIAr6mk0K31+XVkkk40BfjMqfVMRt+0ZddRutA
1u6rFkUmiQlbuUonryfnFpgRztJN3NoPe5+ZMDrjdTore68sScuu1SXMDv3T6+K/hQ74
wz2HpcRguoIN8H0kefHs1/o2zOx9GY89C5zApSZauxXohTNmNG9gicvmljVMyciyNN2E
99PnntvdP4JjMqGRoqVt9K+N/v86HZJR01+gTp8zWhS55rNmgZ/bAF18VzxgS8ZETqlv
Ax4Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
:subject:to;
bh=pOBwTsw8jXTW7mCLsmnR1Jf+qEbmjxwRvSrbFQ5wWUg=;
b=PaPOeDRIZVL+k9ourzHGxeju3T6fHycsXcgcl/xJLPOaA6KccEo4X2MXBDJYi+PYq5
ii/rzwJR5SEuYFpbLFY2fjoAohhMrOc0EQggQXg6LNPQVAc234DQCDcIqT9cg0EnsZJO
IiuFzMiIzgeO126GXUt1kzqEHA0TYcbBhXs3iWGEILPzrgra98ESpezv6FrS2jL3+zO5
wMZBjSZhZ+vI/PUK42qu5X1SUvZInkGHId2BSA/9mOjssiKWvY4PDLue/cQO0kR+SOJw
4ryR7imW+VHKRdavQa4jmdmdI8zeQp7EvIln5IXRPDLJ4FAYIkeJPpEwUwB8y+0F7/Dd
rUeA==
X-Gm-Message-State: AIVw112D/Ft82UiKt5GKIp/pHqZk8IN6Lx5gfM8znK5JY2XBc+r+DvfG
T7fndlURk5dIO0OaPMGRE984DmeJFA==
X-Received: by 10.28.111.84 with SMTP id k81mr2247860wmc.67.1499774986001;
Tue, 11 Jul 2017 05:09:46 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.28.218.80 with HTTP; Tue, 11 Jul 2017 05:09:45 -0700 (PDT)
Reply-To: [email protected]
From: Alhaji Suleiman Barau <[email protected]>
Date: Tue, 11 Jul 2017 13:09:45 +0100
Message-ID: <CA+XvJgAs2SCHZ551p3Q__MhVPU7kDE1=[email protected]>
Subject: Re: Your payment Instructional release order
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention:, We write to notify you of the instructional payment
order that we received to remit your fund payment valued US$10.501M which
includes the principal's sum accrued interest. The instruction was alerted
on the 7th day of July 2017 being Friday with an immediate release order
approval certificate but we cannot remit the fund to you without you re-confirming
your banking coordinates to us. [...]
Content analysis details: (4.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (aburawei20[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.194 listed in list.dnswl.org]
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(aburawei20[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.128.194 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
Attention:,
We write to notify you of the instructional payment order that we
received to remit your fund payment valued US$10.501M which includes
the principal's sum accrued interest. The instruction was alerted on
the 7th day of July 2017 being Friday with an immediate release order
approval certificate but we cannot remit the fund to you without you
re-confirming your banking coordinates to us.
After the meeting that was held with Central Bank of Nigeria board of
directors, it was resolved that every beneficiary who have not
received their payment should be identified with their fund claim
Identification card number before we can perfect the releasing of the
US$10.501M into their nominated bank account or make their payment to
them through any payment mode they prefer to be paid with.
While re-confirming your banking coordinates to us kindly note to
attach your fund claim identification card to enable us commence swift
action releasing your payment to you, kindly notifying us with the
mode that you prefer to receive your payment with should you are not
comfortable with bank to bank wire transfer.
We are sorry for delaying your payment.
Regard's,
Alhaji Suleiman Barau (OON)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

