by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by = (Dovecot) with LMTP id pS3/BPGPvlmvfgAAjbubUg
for <>; Sun, 17 Sep 2017 08:08:33 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 17 Sep 2017 08:08:33 -0700
Received: from ns3004516.ip-178-33-230.eu ([178.33.230.208]:41598 helo=cp4.rockhoster.biz)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dtbBM-0008QK-Ux
for ; Sun, 17 Sep 2017 08:08:32 -0700
Received: from [::1] (port=47451 helo=cp4.rockhoster.biz)
by cp4.rockhoster.biz with esmtpa (Exim 4.89)
(envelope-from <[email protected]>)
id 1dtbAf-001XYj-Tm; Sun, 17 Sep 2017 17:07:45 +0200
Received: from 105.112.40.61 ([105.112.40.61])
(SquirrelMail authenticated user [email protected])
by cp4.rockhoster.biz with HTTP;
Sun, 17 Sep 2017 17:07:45 +0200
Message-ID: <[email protected]>
Date: Sun, 17 Sep 2017 17:07:45 +0200
From: "JOHN JOHNSON" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.5.2 [SVN]
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cp4.rockhoster.biz
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - centbank.com
X-Get-Message-Sender-Via: cp4.rockhoster.biz: authenticated_id: [email protected]
X-Authenticated-Sender: cp4.rockhoster.biz: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=12.3
X-Spam-Score: 123
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, How are you doing today and hope this email
finds you well. My name is John Johnson with Central Bank of Nigeria/ United
Nation foreign debt settlement. I would have contacted you long before now
but was caught up with in the Hurricane Irma since on the 30th of last month.
I was sent here after the meeting and agreement with President Muhammadu
Buhari over the conclusion and strategy on how to release your fund but unfortunately
was caught up in the Hurricane Irma. [...]
Content analysis details: (12.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Notification about your fund
Dear Beneficiary,
How are you doing today and hope this email finds you well. My name is
John Johnson with Central Bank of Nigeria/ United Nation foreign debt
settlement. I would have contacted you long before now but was caught up
with in the Hurricane Irma since on the 30th of last month. I was sent
here after the meeting and agreement with President Muhammadu Buhari over
the conclusion and strategy on how to release your fund but unfortunately
was caught up in the Hurricane Irma.
The President set a goal and it was agreed that if you do not have the
original document of your fund, no bank or organization will make any
payment to you because all banks in Europe, Asia, London, USA that you
have been in contact with towards the release of this fund has revert back
to CBN treasury department. Any banks or organization contacting you or,
you might have been in contact with towards releasing any fund to you is
only deceiving you which at the end you will not receive anything from
them but lost your hard earned money.
That's why it was declared that all beneficiaries will have their original
documents of their contract/inheritance fund to proof that this fund is
legal and legitimate.
All agents in United States is aware of this meeting like FBI, Homeland
Security, CIA and without the beneficiary having this original documents
from the CBN, you will never be in any position to receive the fund as the
rightful owner of the fund.
In conclusion, you have been advise to comply with this instruction
accordingly to enable me complete the delivery of your bank draft valued
$10.6 Million Dollars which i have been sent over here to deliver to you.
I need you to send me a copy of the Fund Ownership Certificate issued to
you and signed by President Goodluck Jonathan to be presented to the
authority here and to complete the delivery. If you do not have it, let me
know immediately so they can send it to you by courier which is the only
thing you need to receive your fund.
Also send me your address where to make the delivery and direct contact
number. Meanwhile, you can reach me on the above number +1-786-763-3265
leave a message if i do not answer and i shall return your call.
Awaiting your immediate and urgent response.
Regards,
Mr. John Johnson.
Delivered-To:
Received: from
by = (Dovecot) with LMTP id pS3/BPGPvlmvfgAAjbubUg
for <>; Sun, 17 Sep 2017 08:08:33 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 17 Sep 2017 08:08:33 -0700
Received: from ns3004516.ip-178-33-230.eu ([178.33.230.208]:41598 helo=cp4.rockhoster.biz)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dtbBM-0008QK-Ux
for ; Sun, 17 Sep 2017 08:08:32 -0700
Received: from [::1] (port=47451 helo=cp4.rockhoster.biz)
by cp4.rockhoster.biz with esmtpa (Exim 4.89)
(envelope-from <[email protected]>)
id 1dtbAf-001XYj-Tm; Sun, 17 Sep 2017 17:07:45 +0200
Received: from 105.112.40.61 ([105.112.40.61])
(SquirrelMail authenticated user [email protected])
by cp4.rockhoster.biz with HTTP;
Sun, 17 Sep 2017 17:07:45 +0200
Message-ID: <[email protected]>
Date: Sun, 17 Sep 2017 17:07:45 +0200
From: "JOHN JOHNSON" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.5.2 [SVN]
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cp4.rockhoster.biz
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - centbank.com
X-Get-Message-Sender-Via: cp4.rockhoster.biz: authenticated_id: [email protected]
X-Authenticated-Sender: cp4.rockhoster.biz: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=12.3
X-Spam-Score: 123
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, How are you doing today and hope this email
finds you well. My name is John Johnson with Central Bank of Nigeria/ United
Nation foreign debt settlement. I would have contacted you long before now
but was caught up with in the Hurricane Irma since on the 30th of last month.
I was sent here after the meeting and agreement with President Muhammadu
Buhari over the conclusion and strategy on how to release your fund but unfortunately
was caught up in the Hurricane Irma. [...]
Content analysis details: (12.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Notification about your fund
Dear Beneficiary,
How are you doing today and hope this email finds you well. My name is
John Johnson with Central Bank of Nigeria/ United Nation foreign debt
settlement. I would have contacted you long before now but was caught up
with in the Hurricane Irma since on the 30th of last month. I was sent
here after the meeting and agreement with President Muhammadu Buhari over
the conclusion and strategy on how to release your fund but unfortunately
was caught up in the Hurricane Irma.
The President set a goal and it was agreed that if you do not have the
original document of your fund, no bank or organization will make any
payment to you because all banks in Europe, Asia, London, USA that you
have been in contact with towards the release of this fund has revert back
to CBN treasury department. Any banks or organization contacting you or,
you might have been in contact with towards releasing any fund to you is
only deceiving you which at the end you will not receive anything from
them but lost your hard earned money.
That's why it was declared that all beneficiaries will have their original
documents of their contract/inheritance fund to proof that this fund is
legal and legitimate.
All agents in United States is aware of this meeting like FBI, Homeland
Security, CIA and without the beneficiary having this original documents
from the CBN, you will never be in any position to receive the fund as the
rightful owner of the fund.
In conclusion, you have been advise to comply with this instruction
accordingly to enable me complete the delivery of your bank draft valued
$10.6 Million Dollars which i have been sent over here to deliver to you.
I need you to send me a copy of the Fund Ownership Certificate issued to
you and signed by President Goodluck Jonathan to be presented to the
authority here and to complete the delivery. If you do not have it, let me
know immediately so they can send it to you by courier which is the only
thing you need to receive your fund.
Also send me your address where to make the delivery and direct contact
number. Meanwhile, you can reach me on the above number +1-786-763-3265
leave a message if i do not answer and i shall return your call.
Awaiting your immediate and urgent response.
Regards,
Mr. John Johnson.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
