by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 28 Aug 2017 21:51:25 -0700
Received: from mail.promaak.com ([164.215.130.107]:50892 helo=mail.lotusnet.ir)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dmYUl-0005ej-SI
for ; Mon, 28 Aug 2017 21:51:25 -0700
Received: from User
by mail.lotusnet.ir (IceWarp 11.4.6.0 x64) with ASMTP id 201708290920333991;
Tue, 29 Aug 2017 09:20:33 +0430
Reply-To: <[email protected]>
From: "Christopher A. Wray"<[email protected]>
Date: Mon, 28 Aug 2017 21:50:30 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=24.7
X-Spam-Score: 247
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Office Of The Director, Christopher A. Wray, Federal Bureau
Of Investigation, [...]
Content analysis details: (24.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[164.215.130.107 listed in bb.barracudacentral.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(central.bnk015[at]aol.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 FAKE_REPLY_C No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Urgent Attention:
Office Of The Director,
Christopher A. Wray,
Federal Bureau Of Investigation,
935 Pennsylvania Avenue,
NW, Washington, D.C. 20535-0001, USA.
Attention: Beneficiary,
Greetings of the day to you and your family. It has come to the notice of the
Financial Crimes Section (FCS) of the Federal Bureau Of Investigation (FBI),
International Monetary Fund (IMF), United Nations (UN) and other world governing
bodies about your outrageous dealings with internet scammers/impostors.
From the intelligence report made available to us, we found out that you have been
in communication with these hoodlums, who are bent on extorting money from you
endlessly and have been using your data in perpetrating frauds. The report also
revealed that they have filed for the claim of your over due inheritance/contract
payment of US$8,000,000.00 in an escrow account of the Central Bank of Nigeria with
your personal data (provided to them by you) through their foreign cohort, in person
of Mrs. Joan B Melvin of New York.
In view of this, you are strictly advised to STOP further communications with those
scammers. And thereby contact the governor's office of the Central Bank of Nigeria
via the below details for the transfer of your inheritance/contract payment.
NAME: MR. GODWIN EMEFIELE
OFFICE ADDRESS: Central Bank of Nigeria,
Central Business District,
Cadastral Zone, Abuja, Federal.
Capital Territory, Nigeria.
Email: [email protected]
NOTE: You should ignore any message that does not come from the above email address
and phone number for security reasons. And to enable the Central Bank of Nigeria to
process and release the fund to you, you are demanded to re-confirm your full
details such as
FULL NAMES:
CITY:
STATE:
ZIP:
COUNTRY:
SEX:
AGE:
TELEPHONE NUMBER:
Ensure that you follow the Central Bank of Nigeria due process as enshrined in the
International Banking Secrecy Act to avoid any form of discrepancy, which may hinder
your fund transfer. It is also recommendable important you forward your email
communications with those scammers/impostors to my special account below for
adequate investigations.
Thanks for your understanding and cooperation as we earnestly await your urgent reply.
Best Regards,
Christopher A. Wray,
Federal Bureau of Investigation
J. Edgar Hoover Building,
935 Pennsylvania Avenue,
NW, Washington, D.C.
E-mail: [email protected]
Envelope-to:
Delivery-date: Mon, 28 Aug 2017 21:51:25 -0700
Received: from mail.promaak.com ([164.215.130.107]:50892 helo=mail.lotusnet.ir)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dmYUl-0005ej-SI
for ; Mon, 28 Aug 2017 21:51:25 -0700
Received: from User
by mail.lotusnet.ir (IceWarp 11.4.6.0 x64) with ASMTP id 201708290920333991;
Tue, 29 Aug 2017 09:20:33 +0430
Reply-To: <[email protected]>
From: "Christopher A. Wray"<[email protected]>
Date: Mon, 28 Aug 2017 21:50:30 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=24.7
X-Spam-Score: 247
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Office Of The Director, Christopher A. Wray, Federal Bureau
Of Investigation, [...]
Content analysis details: (24.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[164.215.130.107 listed in bb.barracudacentral.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(central.bnk015[at]aol.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 FAKE_REPLY_C No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Urgent Attention:
Office Of The Director,
Christopher A. Wray,
Federal Bureau Of Investigation,
935 Pennsylvania Avenue,
NW, Washington, D.C. 20535-0001, USA.
Attention: Beneficiary,
Greetings of the day to you and your family. It has come to the notice of the
Financial Crimes Section (FCS) of the Federal Bureau Of Investigation (FBI),
International Monetary Fund (IMF), United Nations (UN) and other world governing
bodies about your outrageous dealings with internet scammers/impostors.
From the intelligence report made available to us, we found out that you have been
in communication with these hoodlums, who are bent on extorting money from you
endlessly and have been using your data in perpetrating frauds. The report also
revealed that they have filed for the claim of your over due inheritance/contract
payment of US$8,000,000.00 in an escrow account of the Central Bank of Nigeria with
your personal data (provided to them by you) through their foreign cohort, in person
of Mrs. Joan B Melvin of New York.
In view of this, you are strictly advised to STOP further communications with those
scammers. And thereby contact the governor's office of the Central Bank of Nigeria
via the below details for the transfer of your inheritance/contract payment.
NAME: MR. GODWIN EMEFIELE
OFFICE ADDRESS: Central Bank of Nigeria,
Central Business District,
Cadastral Zone, Abuja, Federal.
Capital Territory, Nigeria.
Email: [email protected]
NOTE: You should ignore any message that does not come from the above email address
and phone number for security reasons. And to enable the Central Bank of Nigeria to
process and release the fund to you, you are demanded to re-confirm your full
details such as
FULL NAMES:
CITY:
STATE:
ZIP:
COUNTRY:
SEX:
AGE:
TELEPHONE NUMBER:
Ensure that you follow the Central Bank of Nigeria due process as enshrined in the
International Banking Secrecy Act to avoid any form of discrepancy, which may hinder
your fund transfer. It is also recommendable important you forward your email
communications with those scammers/impostors to my special account below for
adequate investigations.
Thanks for your understanding and cooperation as we earnestly await your urgent reply.
Best Regards,
Christopher A. Wray,
Federal Bureau of Investigation
J. Edgar Hoover Building,
935 Pennsylvania Avenue,
NW, Washington, D.C.
E-mail: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
