by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 6JgeJJt9XFp3agAAjbubUg
for <>; Mon, 15 Jan 2018 02:08:27 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 15 Jan 2018 02:08:27 -0800
Received: from mail-ot0-f193.google.com ([74.125.82.193]:41981)
by s with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eb1gk-00074o-T0
for ; Mon, 15 Jan 2018 02:08:27 -0800
Received: by mail-ot0-f193.google.com with SMTP id 44so9295747otk.8
for <>; Mon, 15 Jan 2018 02:08:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=ikJhpoxL75bN8rJFkeUvNoU0CD7XW2GQ35LpeHKOxRA=;
b=ZjYgfRAhge0LS0KcZOaIKQj3M0uj/pbH3yqyS+ZfdRbj0J/hkO+KqIo+JYfT/TEGoS
C58ijrjFO34GWT/WnntBBnPlNv+VGj1NSCRr2f7lONdrKsv/DgUcIQ4D1NH75tnjgqmu
4lIb+rGTvJa7yczV8Ss+2mKd4/VrhLA/f7Ff2ind59a+RT09YE22i9sIUCcoeiNM1bPu
xv/DE8pnxJMe9lJ9exkY7CU6XEJQYtIhtwgUVP05qg6Yp/qWep+y4Le0hCTezTtKte4i
MXshq/Omh9yjTeArQtuC9vUdIBtI08lTihxNYP65qls+yIx2aFGUqXNExpXvRtvu1oUd
XQTA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=ikJhpoxL75bN8rJFkeUvNoU0CD7XW2GQ35LpeHKOxRA=;
b=VUtkLBcIV9oOFWk7pX4ab26buCDaVfFBNYTNXgRbl1UP0QpW74CYrHGzwbnUZc50Hc
nYzWNpwIuncTFOwU/595NTQz7EHdFyjm0Io/8KjPVH/kSnMRoGQBDjVh9emeFeIWpK3k
m7Xhv1EI9BkgZmox9vfaeZd5nPeerN6aQks48mqrCZ5QKmHY3XfLgYFDg0kNkEfbpfgn
W5f+OrtcoxoMWswzY4+dnMokDYlcDRNi6k91tLfkWwifUl6fEkcQA1K/Tg4soiPZx0q3
36HrlhR4r4hPvY9t+7NLTEk8ChvFM8dXYibCtLEk5iY60eOSZs83esGjlN3cRP9BotZS
3fww==
X-Gm-Message-State: AKwxytd10IKNp+MExc9GJA9SXliEGiqSL4+Re5vuHzhlJ8cvyCL/y7AW
STQ6GMibxRQawajpRdsdGs/KBl7MhLKQaLhnoBg=
X-Google-Smtp-Source: ACJfBouyL+gS65+PzEPdvp3v816upL/qOmMEsKYZJX3O4+GSMDw2f99n6w9KESoHF0RGqAvO2nLjPHxiQ2Ho+TFXRuA=
X-Received: by 10.157.45.76 with SMTP id v70mr14353716ota.318.1516010862737;
Mon, 15 Jan 2018 02:07:42 -0800 (PST)
MIME-Version: 1.0
Received: by 10.157.37.145 with HTTP; Mon, 15 Jan 2018 02:07:42 -0800 (PST)
Reply-To: [email protected]
From: Agent Gommez Carcus <[email protected]>
Date: Mon, 15 Jan 2018 11:07:42 +0100
Message-ID: <CAJq25NSzuOWSQJAc8UxmFJapN0LUOXxmKUZ=h=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam, YOUR FUND PAYMENT {US$10 MILLION DOLLARS}
We have received a contradictory payment instruction from your partner; Mr
Robert Swick, to transfer your fund to a bank account with Bank Of America,NY.
[...]
Content analysis details: (16.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 BILLION_DOLLARS BODY: Talks about lots of money
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.2 HK_SCAM_N2 BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.193 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(gommez45[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jimenaguerra1[at]gmail.com)
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[74.125.82.193 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jimenaguerra1[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
3.1 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** PAYMENT OF YOUR OVER DUE FUNDs OF US$10 MILLION DOLLARS
Dear Sir/Madam,
YOUR FUND PAYMENT {US$10 MILLION DOLLARS}
We have received a contradictory payment instruction from your
partner; Mr Robert Swick, to transfer your fund to a bank account with
Bank Of America,NY.
We have established a formal investigation to verify your relationship
with Mr.Robert Swick, who claimed to be your partner and NEXT OF KIN .
I have distributed your
payment manifest, waiting for your response and position on the
authorised bank account for the transfer of your funds, all transfer
process shall be completed on or
before 20th January 2018.
Kindly, forward to us immediately, your authentic receiving bank
account, stating the following;
The Bank Name and Address
The Account Number
The Swift Code
The Account Name
The Amount to be transferred to you.
Your direct telephone number
Your immediate response is needed, otherwise, we may adhere to the
instructions of your partner, Mr Robert. I shall keep you in constant
communication as we progress
into the final remittance to your nominated bank account through
African Union Oil Trust Account.
Thank you so much in anticipation of your vital response.
Yours faithfully,
Agent Gommez Hans Carcus
Procurement/Payments, International Court Of Justice
International Court of Justice Court
Internationale de Justice, Hague Netherlands
Email: [email protected]
Delivered-To:
Received: from
by with LMTP id 6JgeJJt9XFp3agAAjbubUg
for <>; Mon, 15 Jan 2018 02:08:27 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 15 Jan 2018 02:08:27 -0800
Received: from mail-ot0-f193.google.com ([74.125.82.193]:41981)
by s with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eb1gk-00074o-T0
for ; Mon, 15 Jan 2018 02:08:27 -0800
Received: by mail-ot0-f193.google.com with SMTP id 44so9295747otk.8
for <>; Mon, 15 Jan 2018 02:08:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;bh=ikJhpoxL75bN8rJFkeUvNoU0CD7XW2GQ35LpeHKOxRA=;
b=ZjYgfRAhge0LS0KcZOaIKQj3M0uj/pbH3yqyS+ZfdRbj0J/hkO+KqIo+JYfT/TEGoS
C58ijrjFO34GWT/WnntBBnPlNv+VGj1NSCRr2f7lONdrKsv/DgUcIQ4D1NH75tnjgqmu
4lIb+rGTvJa7yczV8Ss+2mKd4/VrhLA/f7Ff2ind59a+RT09YE22i9sIUCcoeiNM1bPu
xv/DE8pnxJMe9lJ9exkY7CU6XEJQYtIhtwgUVP05qg6Yp/qWep+y4Le0hCTezTtKte4i
MXshq/Omh9yjTeArQtuC9vUdIBtI08lTihxNYP65qls+yIx2aFGUqXNExpXvRtvu1oUd
XQTA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id:subject:to;
bh=ikJhpoxL75bN8rJFkeUvNoU0CD7XW2GQ35LpeHKOxRA=;
b=VUtkLBcIV9oOFWk7pX4ab26buCDaVfFBNYTNXgRbl1UP0QpW74CYrHGzwbnUZc50Hc
nYzWNpwIuncTFOwU/595NTQz7EHdFyjm0Io/8KjPVH/kSnMRoGQBDjVh9emeFeIWpK3k
m7Xhv1EI9BkgZmox9vfaeZd5nPeerN6aQks48mqrCZ5QKmHY3XfLgYFDg0kNkEfbpfgn
W5f+OrtcoxoMWswzY4+dnMokDYlcDRNi6k91tLfkWwifUl6fEkcQA1K/Tg4soiPZx0q3
36HrlhR4r4hPvY9t+7NLTEk8ChvFM8dXYibCtLEk5iY60eOSZs83esGjlN3cRP9BotZS
3fww==
X-Gm-Message-State: AKwxytd10IKNp+MExc9GJA9SXliEGiqSL4+Re5vuHzhlJ8cvyCL/y7AW
STQ6GMibxRQawajpRdsdGs/KBl7MhLKQaLhnoBg=
X-Google-Smtp-Source: ACJfBouyL+gS65+PzEPdvp3v816upL/qOmMEsKYZJX3O4+GSMDw2f99n6w9KESoHF0RGqAvO2nLjPHxiQ2Ho+TFXRuA=
X-Received: by 10.157.45.76 with SMTP id v70mr14353716ota.318.1516010862737;
Mon, 15 Jan 2018 02:07:42 -0800 (PST)
MIME-Version: 1.0
Received: by 10.157.37.145 with HTTP; Mon, 15 Jan 2018 02:07:42 -0800 (PST)
Reply-To: [email protected]
From: Agent Gommez Carcus <[email protected]>
Date: Mon, 15 Jan 2018 11:07:42 +0100
Message-ID: <CAJq25NSzuOWSQJAc8UxmFJapN0LUOXxmKUZ=h=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam, YOUR FUND PAYMENT {US$10 MILLION DOLLARS}
We have received a contradictory payment instruction from your partner; Mr
Robert Swick, to transfer your fund to a bank account with Bank Of America,NY.
[...]
Content analysis details: (16.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 BILLION_DOLLARS BODY: Talks about lots of money
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.2 HK_SCAM_N2 BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.193 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(gommez45[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jimenaguerra1[at]gmail.com)
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[74.125.82.193 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jimenaguerra1[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
3.1 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** PAYMENT OF YOUR OVER DUE FUNDs OF US$10 MILLION DOLLARS
Dear Sir/Madam,
YOUR FUND PAYMENT {US$10 MILLION DOLLARS}
We have received a contradictory payment instruction from your
partner; Mr Robert Swick, to transfer your fund to a bank account with
Bank Of America,NY.
We have established a formal investigation to verify your relationship
with Mr.Robert Swick, who claimed to be your partner and NEXT OF KIN .
I have distributed your
payment manifest, waiting for your response and position on the
authorised bank account for the transfer of your funds, all transfer
process shall be completed on or
before 20th January 2018.
Kindly, forward to us immediately, your authentic receiving bank
account, stating the following;
The Bank Name and Address
The Account Number
The Swift Code
The Account Name
The Amount to be transferred to you.
Your direct telephone number
Your immediate response is needed, otherwise, we may adhere to the
instructions of your partner, Mr Robert. I shall keep you in constant
communication as we progress
into the final remittance to your nominated bank account through
African Union Oil Trust Account.
Thank you so much in anticipation of your vital response.
Yours faithfully,
Agent Gommez Hans Carcus
Procurement/Payments, International Court Of Justice
International Court of Justice Court
Internationale de Justice, Hague Netherlands
Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
