by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id K2g4DzcDylnbIQAAjbubUg
for <>; Tue, 26 Sep 2017 00:35:19 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 26 Sep 2017 00:35:19 -0700
Received: from mail-wm0-f68.google.com ([74.125.82.68]:33560)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dwkOg-0002FF-Tk
for ; Tue, 26 Sep 2017 00:35:19 -0700
Received: by mail-wm0-f68.google.com with SMTP id m127so8634188wmm.0
for <>; Tue, 26 Sep 2017 00:34:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from
message-id:subject:to;
bh=0fad8H98FyhilpzcOhhixLFi48uWMML0bdm1WmUZ+zM=;
b=PlqwQq35tL1GGQLNFlGyyxCr4RcYR9cvPOTooqh/loUvKjGna2lhlQr0zLpJXyyJcC
ApR6qUYf49XtJn2y8iBqIfVuPSqLWMaZkirzRxzXzpnXpsbf9bKm9s/YaRIVeu9EP7tt
f707tsTZifGyY1WosE6GrAuYGVgV3Q3rO3uF+V219irPQGnDRuRyhUeLYln/UeJ0rNra
F9dd27VdQ6+uuV6LVWT2lIOAAT/vdA5Ycf2Jh9Efc6LWxiMBaqfpHPUaCa3UtNwo8onr
bfNbEf5xQswV0hz0cd2Hf9VC6ijDJO5xMlMqXs7B5+JjiRnMozpOBcPOXWGSt7MYO3UK
79JQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from
message-id:subject:to;
bh=0fad8H98FyhilpzcOhhixLFi48uWMML0bdm1WmUZ+zM=;
b=Kx2CDGw4Wp9fiosHf4PFvIFvCn/2sYOWi9HD9QzjspGlMvZo8o6HV1JZ0M3/9rGq6n
y32Sl11/BtvQp4KjSHkLTk8DYZrmoJiSpVVqIFfBYZwUnANjNU3yu8g+PH5argps0iUW
70EOJgU+5+dR3DKAdNNKo57pnnH7JUwPOir5S8+HkKbMchVLp28VnOgJyezqRZboPMA9
Pqah6gi0mXRb5MxVyQGZDecSK8PIb6lSX7J/U/8Lgub7BTZIKPIe6/Tv1oPcVeYzZViF
sSx1mxWmXCBzI6/RA/QiS+OqmTSnzysZgQ/n7Y5TeyNP4VxW+XBpRKON5ipnUHgupWe9
AWHg==
X-Gm-Message-State: AHPjjUhyolCP86jElc3bcX128+KCk/ynd2U3RZEg7GRceFko1KLmNEHE
HjJAAybSK5rpb9fo4hxfiZWNxv2GO1eCexZr9jY=
X-Google-Smtp-Source: AOwi7QD81dLQI8W+5jQ/1TeBzr8XtOinkpL2hxmwXtxKBo2m6HzggBB9TXq2jBXM4vdiPsZ8wbVtGGKj7oBSoJmL32A=
X-Received: by 10.28.105.200 with SMTP id z69mr1990792wmh.20.1506411272966;
Tue, 26 Sep 2017 00:34:32 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.223.164.67 with HTTP; Tue, 26 Sep 2017 00:34:32 -0700 (PDT)
From: E-BANKING DEPARTMENT UBA <[email protected]>
Date: Tue, 26 Sep 2017 08:34:32 +0100
Message-ID: <CAMh9naRL0+1Eh-6UPpLFgBmd5_4yWmEJMSFD+sZz1FHGTH1_Hg@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="001a11467c0ecf9765055a12b465"
Bcc:
X-Spam-Status: Yes, score=7.7
X-Spam-Score: 77
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ATM – Activation Credit House Gateway Plaza, Plot 208, Zakariyahu,
, Off Hebert Macaulay Way, Central Business District [...]
Content analysis details: (7.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.68 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[74.125.82.68 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ubaebankingdepartment[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[74.125.82.68 listed in dnsbl.sorbs.net]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 LOTTO_DEPT Claims Department
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?Q?ATM_=E2=80=93_Activation_Credit_House?=
ATM – Activation Credit House
Gateway Plaza, Plot 208, Zakariyahu, ,
Off Hebert Macaulay Way, Central Business District
Garki, Abuja. Phone: +234,9027,930,613
Date 26th September 2017
Attn Beneficiaries
Sir
You are legally contacted regarding the release of your long awaited fund
ATMCARD payment. After a detailed review of your file, I wish to inform you
that you’re Debt Card payment is being processed and will be released to
you as soon as you respond to this office. Please re-confirm to us the
following, You’re Name, Your Address, Your Phone, Your Age, Occupation,
drivers license or international passport.
An official meeting was held yesterday. with the (IMF) International
Monetary Fund, the new President of Nigeria and Minister of Finance and
also the (EFCC) Economic and Financial Crimes Commission concerning unpaid
and unclaimed Compensations Funds to foreign beneficiaries for been a scam
victim, and your name was among those their embassy in Nigeria forwarded
their names .the UNITED NATIONS COMPENSATION UNIT will pay out your
COMPENSATION to you without any further delay.
We believe in giving you choice; which is why we offer a range of services
to
Received your fund, so you really can't go wrong. We are so certain that you
Will be completely satisfied with our wonderful greatly appreciated. Reply
via this Email,{ [email protected]}
Regard
Rev MOSES. IBE
Delivered-To:
Received: from
by (Dovecot) with LMTP id K2g4DzcDylnbIQAAjbubUg
for <>; Tue, 26 Sep 2017 00:35:19 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 26 Sep 2017 00:35:19 -0700
Received: from mail-wm0-f68.google.com ([74.125.82.68]:33560)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dwkOg-0002FF-Tk
for ; Tue, 26 Sep 2017 00:35:19 -0700
Received: by mail-wm0-f68.google.com with SMTP id m127so8634188wmm.0
for <>; Tue, 26 Sep 2017 00:34:54 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from
bh=0fad8H98FyhilpzcOhhixLFi48uWMML0bdm1WmUZ+zM=;
b=PlqwQq35tL1GGQLNFlGyyxCr4RcYR9cvPOTooqh/loUvKjGna2lhlQr0zLpJXyyJcC
ApR6qUYf49XtJn2y8iBqIfVuPSqLWMaZkirzRxzXzpnXpsbf9bKm9s/YaRIVeu9EP7tt
f707tsTZifGyY1WosE6GrAuYGVgV3Q3rO3uF+V219irPQGnDRuRyhUeLYln/UeJ0rNra
F9dd27VdQ6+uuV6LVWT2lIOAAT/vdA5Ycf2Jh9Efc6LWxiMBaqfpHPUaCa3UtNwo8onr
bfNbEf5xQswV0hz0cd2Hf9VC6ijDJO5xMlMqXs7B5+JjiRnMozpOBcPOXWGSt7MYO3UK
79JQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from
bh=0fad8H98FyhilpzcOhhixLFi48uWMML0bdm1WmUZ+zM=;
b=Kx2CDGw4Wp9fiosHf4PFvIFvCn/2sYOWi9HD9QzjspGlMvZo8o6HV1JZ0M3/9rGq6n
y32Sl11/BtvQp4KjSHkLTk8DYZrmoJiSpVVqIFfBYZwUnANjNU3yu8g+PH5argps0iUW
70EOJgU+5+dR3DKAdNNKo57pnnH7JUwPOir5S8+HkKbMchVLp28VnOgJyezqRZboPMA9
Pqah6gi0mXRb5MxVyQGZDecSK8PIb6lSX7J/U/8Lgub7BTZIKPIe6/Tv1oPcVeYzZViF
sSx1mxWmXCBzI6/RA/QiS+OqmTSnzysZgQ/n7Y5TeyNP4VxW+XBpRKON5ipnUHgupWe9
AWHg==
X-Gm-Message-State: AHPjjUhyolCP86jElc3bcX128+KCk/ynd2U3RZEg7GRceFko1KLmNEHE
HjJAAybSK5rpb9fo4hxfiZWNxv2GO1eCexZr9jY=
X-Google-Smtp-Source: AOwi7QD81dLQI8W+5jQ/1TeBzr8XtOinkpL2hxmwXtxKBo2m6HzggBB9TXq2jBXM4vdiPsZ8wbVtGGKj7oBSoJmL32A=
X-Received: by 10.28.105.200 with SMTP id z69mr1990792wmh.20.1506411272966;
Tue, 26 Sep 2017 00:34:32 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.223.164.67 with HTTP; Tue, 26 Sep 2017 00:34:32 -0700 (PDT)
From: E-BANKING DEPARTMENT UBA <[email protected]>
Date: Tue, 26 Sep 2017 08:34:32 +0100
Message-ID: <CAMh9naRL0+1Eh-6UPpLFgBmd5_4yWmEJMSFD+sZz1FHGTH1_Hg@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="001a11467c0ecf9765055a12b465"
Bcc:
X-Spam-Status: Yes, score=7.7
X-Spam-Score: 77
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ATM – Activation Credit House Gateway Plaza, Plot 208, Zakariyahu,
, Off Hebert Macaulay Way, Central Business District [...]
Content analysis details: (7.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.68 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[74.125.82.68 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ubaebankingdepartment[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[74.125.82.68 listed in dnsbl.sorbs.net]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 LOTTO_DEPT Claims Department
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?Q?ATM_=E2=80=93_Activation_Credit_House?=
ATM – Activation Credit House
Gateway Plaza, Plot 208, Zakariyahu, ,
Off Hebert Macaulay Way, Central Business District
Garki, Abuja. Phone: +234,9027,930,613
Date 26th September 2017
Attn Beneficiaries
Sir
You are legally contacted regarding the release of your long awaited fund
ATMCARD payment. After a detailed review of your file, I wish to inform you
that you’re Debt Card payment is being processed and will be released to
you as soon as you respond to this office. Please re-confirm to us the
following, You’re Name, Your Address, Your Phone, Your Age, Occupation,
drivers license or international passport.
An official meeting was held yesterday. with the (IMF) International
Monetary Fund, the new President of Nigeria and Minister of Finance and
also the (EFCC) Economic and Financial Crimes Commission concerning unpaid
and unclaimed Compensations Funds to foreign beneficiaries for been a scam
victim, and your name was among those their embassy in Nigeria forwarded
their names .the UNITED NATIONS COMPENSATION UNIT will pay out your
COMPENSATION to you without any further delay.
We believe in giving you choice; which is why we offer a range of services
to
Received your fund, so you really can't go wrong. We are so certain that you
Will be completely satisfied with our wonderful greatly appreciated. Reply
via this Email,{ [email protected]}
Regard
Rev MOSES. IBE
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

