by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 31 Aug 2017 03:17:30 -0700
Received: from [218.56.49.2] (port=45844 helo=mail.sdbb.gov.cn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dnMXN-0008Cq-SK
for ; Thu, 31 Aug 2017 03:17:30 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.sdbb.gov.cn (QZEOS V3.0) with ESMTP id 436FD2C0D9E;
Thu, 31 Aug 2017 17:56:48 +0800 (CST)
X-Virus-Scanned: amavisd-new at sdbb.gov.cn
X-Spam-Level: *****
Received: from mail.sdbb.gov.cn ([127.0.0.1])
by localhost (mail.sdbb.gov.cn [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Z3EdTq4ER3ky; Thu, 31 Aug 2017 17:56:47 +0800 (CST)
Received: from User (unknown [149.255.36.227])
by mail.sdbb.gov.cn (QZEOS V3.0) with ESMTPA id 3FB6C2C0DB0;
Thu, 31 Aug 2017 17:56:39 +0800 (CST)
Reply-To: <[email protected]>
From: "PRESIDENT MUHAMMADU BUHARI"<[email protected]>
Date: Thu, 31 Aug 2017 03:16:20 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=24.9
X-Spam-Score: 249
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM THE OFFICE OF MUHAMMADU BUHARI, THE PRESIDENT AND COMMANDER-IN-CHIEF
OF THE ARMED FORCES OF THE FEDERAL REPUBLIC OF NIGERIA. Dear Beneficiary,
I write to inform you that i am not happy with the reports i have received
so far both from western union and money gram over how much you have sent
to impostors in quest to receive to your payment valued $5.5 Million Dollars
which has been long overdue. It was interest you to understand that without
my approval you will never receive anything from anybody. It pains me a lot
that you are patronising the people who has given this country bad names
in the name of being in charge over your payment. [...]
Content analysis details: (24.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[218.56.49.2 listed in bb.barracudacentral.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[149.255.36.227 listed in zen.spamhaus.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FROM_MISSP_USER From misspaced, from "User"
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** VERY IMPORTANT MESSAGE FROM OFFICE OF THE PRESIDENT
FROM THE OFFICE OF MUHAMMADU BUHARI, THE PRESIDENT AND COMMANDER-IN-CHIEF OF THE
ARMED FORCES OF THE FEDERAL REPUBLIC OF NIGERIA.
Dear Beneficiary,
I write to inform you that i am not happy with the reports i have received so far
both from western union and money gram over how much you have sent to impostors in
quest to receive to your payment valued $5.5 Million Dollars which has been long
overdue. It was interest you to understand that without my approval you will never
receive anything from anybody. It pains me a lot that you are patronising the people
who has given this country bad names in the name of being in charge over your
payment.
A word is enough for the wise they said and i believe it is time for you to take a
step back and rethink of how much you have spent. If this people truly have access
to your fund you would have received it long before now.
I have decided to take charge of your payment and I need you to get back to me
immediately for direction on what to do to have your fund release without any
further delay, hassles and extortion of money from you...
Kind Regards,
Muhammadu Buhari,
(President and Commander-In-Chief of the Armed Forces of the Federal Republic of
Nigeria).
Envelope-to:
Delivery-date: Thu, 31 Aug 2017 03:17:30 -0700
Received: from [218.56.49.2] (port=45844 helo=mail.sdbb.gov.cn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dnMXN-0008Cq-SK
for ; Thu, 31 Aug 2017 03:17:30 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.sdbb.gov.cn (QZEOS V3.0) with ESMTP id 436FD2C0D9E;
Thu, 31 Aug 2017 17:56:48 +0800 (CST)
X-Virus-Scanned: amavisd-new at sdbb.gov.cn
X-Spam-Level: *****
Received: from mail.sdbb.gov.cn ([127.0.0.1])
by localhost (mail.sdbb.gov.cn [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Z3EdTq4ER3ky; Thu, 31 Aug 2017 17:56:47 +0800 (CST)
Received: from User (unknown [149.255.36.227])
by mail.sdbb.gov.cn (QZEOS V3.0) with ESMTPA id 3FB6C2C0DB0;
Thu, 31 Aug 2017 17:56:39 +0800 (CST)
Reply-To: <[email protected]>
From: "PRESIDENT MUHAMMADU BUHARI"<[email protected]>
Date: Thu, 31 Aug 2017 03:16:20 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=24.9
X-Spam-Score: 249
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM THE OFFICE OF MUHAMMADU BUHARI, THE PRESIDENT AND COMMANDER-IN-CHIEF
OF THE ARMED FORCES OF THE FEDERAL REPUBLIC OF NIGERIA. Dear Beneficiary,
I write to inform you that i am not happy with the reports i have received
so far both from western union and money gram over how much you have sent
to impostors in quest to receive to your payment valued $5.5 Million Dollars
which has been long overdue. It was interest you to understand that without
my approval you will never receive anything from anybody. It pains me a lot
that you are patronising the people who has given this country bad names
in the name of being in charge over your payment. [...]
Content analysis details: (24.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[218.56.49.2 listed in bb.barracudacentral.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[149.255.36.227 listed in zen.spamhaus.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FROM_MISSP_USER From misspaced, from "User"
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** VERY IMPORTANT MESSAGE FROM OFFICE OF THE PRESIDENT
FROM THE OFFICE OF MUHAMMADU BUHARI, THE PRESIDENT AND COMMANDER-IN-CHIEF OF THE
ARMED FORCES OF THE FEDERAL REPUBLIC OF NIGERIA.
Dear Beneficiary,
I write to inform you that i am not happy with the reports i have received so far
both from western union and money gram over how much you have sent to impostors in
quest to receive to your payment valued $5.5 Million Dollars which has been long
overdue. It was interest you to understand that without my approval you will never
receive anything from anybody. It pains me a lot that you are patronising the people
who has given this country bad names in the name of being in charge over your
payment.
A word is enough for the wise they said and i believe it is time for you to take a
step back and rethink of how much you have spent. If this people truly have access
to your fund you would have received it long before now.
I have decided to take charge of your payment and I need you to get back to me
immediately for direction on what to do to have your fund release without any
further delay, hassles and extortion of money from you...
Kind Regards,
Muhammadu Buhari,
(President and Commander-In-Chief of the Armed Forces of the Federal Republic of
Nigeria).
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

