by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by m (Dovecot) with LMTP id ma4tGDvYZ1neXgAAjbubUg
for <>; Thu, 13 Jul 2017 13:29:47 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Jul 2017 13:29:47 -0700
Received: from hostingnara.com ([211.172.241.50]:35267 helo=newhosting.local)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dVkk4-0006JL-Dq
for ; Thu, 13 Jul 2017 13:29:47 -0700
Received: from User (115.127.27.58.bracnet.net [115.127.27.58] (may be forged))
(authenticated bits=0)
by newhosting.local (8.13.1/8.13.1) with ESMTP id v6DKPHD8025372;
Fri, 14 Jul 2017 05:25:23 +0900
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "Rev Dr Valentine Samuel"<[email protected]>
Date: Thu, 13 Jul 2017 20:27:07 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=30.8
X-Spam-Score: 308
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Central Bank of Nigeria, Plot 33, Abubakar Tafawa Balewa Way
Central Business District, [...]
Content analysis details: (30.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.0 MISSING_HEADERS Missing To: header
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[211.172.241.50 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[115.127.27.58 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?211.172.241.50>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[211.172.241.50 listed in zen.spamhaus.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... .ac.th;ip=
]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(infoagentrobwoo1967[at]yahoo.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FUND WILL SOON DELIVER TO YOU
Central Bank of Nigeria,
Plot 33, Abubakar Tafawa Balewa Way
Central Business District,
Cadastral Zone,
Abuja, Federal Capital Territory,
Nigeria P.M.B. 0187,
Garki Abuja.
Nigeria
Dear
Good Day , this is to inform you that the Bank have come to the
final conclusion and finalized that it is mandatory that you have to
follow the final instruction given to you and proceed to the western union and
send the fee into the information we give you to enable us get
this Transaction done.
Further more, urgently note that you have been advice by the Bank to
follow the final instruction Authorized by all the Entire Board
Members United States of America for the susses of this Transaction to
be Release to you as well without any more delay again.
Final, bear in mind that you will pay the remaining balance once you
confirm your approved payment and have access to it as the Bank have
concluded every necessary arrangement and finalized over the final
meeting to get this Transaction done to you.
I thank you once again for your observation about the email and the
information's and I will appreciate you forward to me any strange
email of that nature you may receive in future because I know that
they will come through different means to contact you.
I will expect your urgent response.I tried to call but your line
wasn't free so I will appreciate your call i just want to tell you
that all your problem is over i promise you now with the name of God
you will never lost any other money i promise you this with the depth
of my heart ok.
Best Regards,
Rev Dr Valentine Samuel,
Consultant Director Central Bank of Nigeria
Email: [email protected]
Delivered-To:
Received: from
by m (Dovecot) with LMTP id ma4tGDvYZ1neXgAAjbubUg
for <>; Thu, 13 Jul 2017 13:29:47 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Jul 2017 13:29:47 -0700
Received: from hostingnara.com ([211.172.241.50]:35267 helo=newhosting.local)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dVkk4-0006JL-Dq
for ; Thu, 13 Jul 2017 13:29:47 -0700
Received: from User (115.127.27.58.bracnet.net [115.127.27.58] (may be forged))
(authenticated bits=0)
by newhosting.local (8.13.1/8.13.1) with ESMTP id v6DKPHD8025372;
Fri, 14 Jul 2017 05:25:23 +0900
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "Rev Dr Valentine Samuel"<[email protected]>
Date: Thu, 13 Jul 2017 20:27:07 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=30.8
X-Spam-Score: 308
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Central Bank of Nigeria, Plot 33, Abubakar Tafawa Balewa Way
Central Business District, [...]
Content analysis details: (30.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.0 MISSING_HEADERS Missing To: header
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[211.172.241.50 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[115.127.27.58 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?211.172.241.50>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[211.172.241.50 listed in zen.spamhaus.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... .ac.th;ip=
]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(infoagentrobwoo1967[at]yahoo.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR FUND WILL SOON DELIVER TO YOU
Central Bank of Nigeria,
Plot 33, Abubakar Tafawa Balewa Way
Central Business District,
Cadastral Zone,
Abuja, Federal Capital Territory,
Nigeria P.M.B. 0187,
Garki Abuja.
Nigeria
Dear
Good Day , this is to inform you that the Bank have come to the
final conclusion and finalized that it is mandatory that you have to
follow the final instruction given to you and proceed to the western union and
send the fee into the information we give you to enable us get
this Transaction done.
Further more, urgently note that you have been advice by the Bank to
follow the final instruction Authorized by all the Entire Board
Members United States of America for the susses of this Transaction to
be Release to you as well without any more delay again.
Final, bear in mind that you will pay the remaining balance once you
confirm your approved payment and have access to it as the Bank have
concluded every necessary arrangement and finalized over the final
meeting to get this Transaction done to you.
I thank you once again for your observation about the email and the
information's and I will appreciate you forward to me any strange
email of that nature you may receive in future because I know that
they will come through different means to contact you.
I will expect your urgent response.I tried to call but your line
wasn't free so I will appreciate your call i just want to tell you
that all your problem is over i promise you now with the name of God
you will never lost any other money i promise you this with the depth
of my heart ok.
Best Regards,
Rev Dr Valentine Samuel,
Consultant Director Central Bank of Nigeria
Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
