by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 25 Oct 2017 17:49:08 -0700
Received: from redencao.grupojcc.com.br ([177.36.241.26]:54435 helo=sv01.jc.net.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e7WM7-0006de-4Q
for ; Wed, 25 Oct 2017 17:49:08 -0700
Received: from [23.227.199.186] (helo=User)
by sv01.jc.net.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1e7VLZ-00016b-6g; Wed, 25 Oct 2017 21:44:29 -0200
Reply-To: <[email protected]>
From: "PASTOR MARK RICHARD"<[email protected]>
Date: Wed, 25 Oct 2017 21:45:32 -0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=32.4
X-Spam-Score: 324
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Sir/Madam This is to Inform you that your MASTER ATM CARD
is ready for delivery with card Number: 5399 4111 0244 8161, which will be
attached in our next email and It has been approved and upgraded in your
favor. Meanwhile, your Secret Pin Number is 6312. The ATM Card Value is $5Million
Dollars Only. You are advised for a maximum withdrawal value of US $5000.000
daily. It has been accredited in your favor for shipment. We are mandated
to pay those scammed victims from Asia, America,and Europe, your Name and
Email Address where among listed as one of the lucky beneficiaries due to
be compensated. we are only doing this to retain the good image of this country
Nigeria West Africa, Do revert back to us with your co-ordinates listed below
information to enable us educate you on the modalities for a successful claims
of your $5Million compensation. Details below for re-confirmation: [...]
Content analysis details: (32.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.36.241.26 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[177.36.241.26 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[177.36.241.26 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.36.241.26 listed in zen.spamhaus.org]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[177.36.241.26 listed in bl.mailspike.net]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(richardmark874[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.36.241.26>]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT ATTENTION NEEDED FROM YOU.
Sir/Madam
This is to Inform you that your MASTER ATM CARD is ready for delivery with card
Number: 5399 4111 0244 8161, which will be attached in our next email and It has
been approved and upgraded in your favor. Meanwhile, your Secret Pin Number is 6312.
The ATM Card Value is $5Million Dollars Only. You are advised for a maximum
withdrawal value of US $5000.000 daily. It has been accredited in your favor for
shipment. We are mandated to pay those scammed victims from Asia, America,and
Europe, your Name and Email Address where among listed as one of the lucky
beneficiaries due to be compensated. we are only doing this to retain the good image
of this country Nigeria West Africa, Do revert back to us with your co-ordinates
listed below information to enable us educate you on the modalities for a successful
claims of your $5Million compensation. Details below for re-confirmation:
Your Full Name_______________________
Your Address________________________
P.O.BOX_________________________________
Country__________________________
Telephone Number________________________
Mobile Number_________________
Fax Number______________________________
Occupation________________________
Marital Status_______________________
Age_________Sex_____________
Please do feel free to direct your email back with required information to person in
charged of ATM Program/Delivery from ZENITH BANK PLC, the swift card has been
specially prepared to enable you withdraw your money in any ATM machine in any part
of the world, but the maximum is Five Thousand Dollars Only per day, due to security
reasons, so you are therefore advised to direct all your mails to me with the
required information as stated below.
Pastor Mark Richard
EMAIL: [email protected]
Phone: +234-811-820-1497
These will enhance the immediate processing of this transaction to a successful one.
Yours Faithfully,
Hon. Ekpo NTA
Chairman ICPC Nigeria.
(Independent Corrupt Practice Commission,ICPC
..........................................................................................................................
CONFIDENTIALITY NOTICE: This E-Mail is intended only for the use of the individual
or entity to which it is addressed and may contain information that is privileged,
confidential and exempt from Disclosure under applicable law.
Envelope-to:
Delivery-date: Wed, 25 Oct 2017 17:49:08 -0700
Received: from redencao.grupojcc.com.br ([177.36.241.26]:54435 helo=sv01.jc.net.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e7WM7-0006de-4Q
for ; Wed, 25 Oct 2017 17:49:08 -0700
Received: from [23.227.199.186] (helo=User)
by sv01.jc.net.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1e7VLZ-00016b-6g; Wed, 25 Oct 2017 21:44:29 -0200
Reply-To: <[email protected]>
From: "PASTOR MARK RICHARD"<[email protected]>
Date: Wed, 25 Oct 2017 21:45:32 -0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=32.4
X-Spam-Score: 324
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Sir/Madam This is to Inform you that your MASTER ATM CARD
is ready for delivery with card Number: 5399 4111 0244 8161, which will be
attached in our next email and It has been approved and upgraded in your
favor. Meanwhile, your Secret Pin Number is 6312. The ATM Card Value is $5Million
Dollars Only. You are advised for a maximum withdrawal value of US $5000.000
daily. It has been accredited in your favor for shipment. We are mandated
to pay those scammed victims from Asia, America,and Europe, your Name and
Email Address where among listed as one of the lucky beneficiaries due to
be compensated. we are only doing this to retain the good image of this country
Nigeria West Africa, Do revert back to us with your co-ordinates listed below
information to enable us educate you on the modalities for a successful claims
of your $5Million compensation. Details below for re-confirmation: [...]
Content analysis details: (32.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.36.241.26 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[177.36.241.26 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[177.36.241.26 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.36.241.26 listed in zen.spamhaus.org]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[177.36.241.26 listed in bl.mailspike.net]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(richardmark874[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.36.241.26>]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT ATTENTION NEEDED FROM YOU.
Sir/Madam
This is to Inform you that your MASTER ATM CARD is ready for delivery with card
Number: 5399 4111 0244 8161, which will be attached in our next email and It has
been approved and upgraded in your favor. Meanwhile, your Secret Pin Number is 6312.
The ATM Card Value is $5Million Dollars Only. You are advised for a maximum
withdrawal value of US $5000.000 daily. It has been accredited in your favor for
shipment. We are mandated to pay those scammed victims from Asia, America,and
Europe, your Name and Email Address where among listed as one of the lucky
beneficiaries due to be compensated. we are only doing this to retain the good image
of this country Nigeria West Africa, Do revert back to us with your co-ordinates
listed below information to enable us educate you on the modalities for a successful
claims of your $5Million compensation. Details below for re-confirmation:
Your Full Name_______________________
Your Address________________________
P.O.BOX_________________________________
Country__________________________
Telephone Number________________________
Mobile Number_________________
Fax Number______________________________
Occupation________________________
Marital Status_______________________
Age_________Sex_____________
Please do feel free to direct your email back with required information to person in
charged of ATM Program/Delivery from ZENITH BANK PLC, the swift card has been
specially prepared to enable you withdraw your money in any ATM machine in any part
of the world, but the maximum is Five Thousand Dollars Only per day, due to security
reasons, so you are therefore advised to direct all your mails to me with the
required information as stated below.
Pastor Mark Richard
EMAIL: [email protected]
Phone: +234-811-820-1497
These will enhance the immediate processing of this transaction to a successful one.
Yours Faithfully,
Hon. Ekpo NTA
Chairman ICPC Nigeria.
(Independent Corrupt Practice Commission,ICPC
..........................................................................................................................
CONFIDENTIALITY NOTICE: This E-Mail is intended only for the use of the individual
or entity to which it is addressed and may contain information that is privileged,
confidential and exempt from Disclosure under applicable law.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
