by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 4APGN3d3bFowNAAAjbubUg
for <>; Sat, 27 Jan 2018 04:58:31 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 27 Jan 2018 04:58:31 -0800
Received: from [195.43.82.62] (port=55876 helo=ds404.dosug38.ru)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1efQ3s-0003T8-24
for ; Sat, 27 Jan 2018 04:58:31 -0800
Received: from User (unknown [195.43.82.62])
by ds404.dosug38.ru (Postfix) with SMTP id C5D1418043D;
Sat, 27 Jan 2018 16:12:23 +0200 (EET)
Reply-To: <[email protected]>
From: "MR. GODWIN EMEFIELE"<[email protected]>
To: [email protected]
Date: Sat, 27 Jan 2018 13:57:38 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=33.6
X-Spam-Score: 336
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM THE DESK MR GODWIN EMEFIELE EXECUTIVE GOVERNOR, CENTRAL
BANK OF NIGERIA (CBN) [...]
Content analysis details: (33.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[195.43.82.62 listed in bb.barracudacentral.org]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[195.43.82.62 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrgodrefebbnnv[at]outlook.com)
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
1.3 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.1 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR DIPLOMAT HAS ARRIVED WITH YOUR CONSIGNMENT BOXES.
FROM THE DESK MR GODWIN EMEFIELE
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA (CBN)
(OFFICE OF THE GOVERNOR)
CONTRACT #: MAV/NNPC/FGN/MIN/010,
Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678
CENTRAL BANK NIGERIA.
Our Ref: CBN/IRD/CBX/021/07
Be informed that the Scotland Yard Police, Interpol, Federal Bureau of
Investigation, (FBI) United States of America, the Economic and Financial Crimes
Commission (EFCC) of Nigeria and all the African Crime fighter leaders have come
together to stop scam/internet fraud in Nigeria and all round Africa. We have
recovered over US$5.3 Billion Dollars from the people we have behind bars.
Our duty is to make sure we stop Internet scam and money laundering. As for today we
have put a lot of fraudsters in jail. We go all over Africa to pick this
thieves/Internet rats. We have over 8,273 of them in our jails round Africa and we
are still looking for more. We are aware that a lot of foreigners out there have
been deceived and lost their hard earn money to these fraudsters after promising
them percentages in their letters/e-mails for their impending help to move funds out
of Africa including fake lottery winning notification and at the end of the day,
they will collect thousands of dollars from you without a successful end.
Please, watch the video links below as some of these fraud-stars were arrested here
in Nigeria:http://www.youtube.com /watch?v=ISMgGdaGOJM
It was agreed that to retain the good image of Nigeria and the rest of African
countries, all the victims who lost his/her hard earn money to these faceless
thieves will be compensated with just US$5M (Five Million Dollars Only). This we
assume will help you to start a new life.
Please, you have to accept the money like that because the people (victims) in our
pay list are too much. We are paying back from the money we recovered from these
fraudsters.
THIS IS TO INFORM YOU THAT YOUR DIPLOMAT HAS ARRIVED WITH YOUR CONSIGNMENT BOXES AT
HARTSFIELD-JACKSON ATLANTA INT'L AIPORT GEORGIA USA CONTACT HIM NOW: (706) 505-2072
OR send him an email at ([email protected]) I want you to know that you have
24 hours to call the diplomat in person of MR. STEPHEN MARCUS with these phone
number (706) 505-2072 in the United States, let us know if you are still interested
to get your consignments deliver to you today? As they have been waiting to hear
from you to help them complete this delivery to you right now the diplomat has
arrived United States with your consignment boxes.
Note; that you must reconfirm your Full Name, Address and Valid Phone# to him
through this email: ([email protected]) immediately you receive this email to
enable him deliver your cash consignment to you without any mistake.
I appreciate your good sympathetic and collaboration, Hope to hear from you swiftly.
CONGRATULATIONS!!!
MR. GODWIN EMEFIELE,
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA
MY DIRECT PHONE:+234-8129298?544
Email: [email protected]
Delivered-To:
Received: from
by with LMTP id 4APGN3d3bFowNAAAjbubUg
for <>; Sat, 27 Jan 2018 04:58:31 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 27 Jan 2018 04:58:31 -0800
Received: from [195.43.82.62] (port=55876 helo=ds404.dosug38.ru)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1efQ3s-0003T8-24
for ; Sat, 27 Jan 2018 04:58:31 -0800
Received: from User (unknown [195.43.82.62])
by ds404.dosug38.ru (Postfix) with SMTP id C5D1418043D;
Sat, 27 Jan 2018 16:12:23 +0200 (EET)
Reply-To: <[email protected]>
From: "MR. GODWIN EMEFIELE"<[email protected]>
To: [email protected]
Date: Sat, 27 Jan 2018 13:57:38 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=33.6
X-Spam-Score: 336
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM THE DESK MR GODWIN EMEFIELE EXECUTIVE GOVERNOR, CENTRAL
BANK OF NIGERIA (CBN) [...]
Content analysis details: (33.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[195.43.82.62 listed in bb.barracudacentral.org]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[195.43.82.62 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrgodrefebbnnv[at]outlook.com)
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
1.3 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.1 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR DIPLOMAT HAS ARRIVED WITH YOUR CONSIGNMENT BOXES.
FROM THE DESK MR GODWIN EMEFIELE
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA (CBN)
(OFFICE OF THE GOVERNOR)
CONTRACT #: MAV/NNPC/FGN/MIN/010,
Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678
CENTRAL BANK NIGERIA.
Our Ref: CBN/IRD/CBX/021/07
Be informed that the Scotland Yard Police, Interpol, Federal Bureau of
Investigation, (FBI) United States of America, the Economic and Financial Crimes
Commission (EFCC) of Nigeria and all the African Crime fighter leaders have come
together to stop scam/internet fraud in Nigeria and all round Africa. We have
recovered over US$5.3 Billion Dollars from the people we have behind bars.
Our duty is to make sure we stop Internet scam and money laundering. As for today we
have put a lot of fraudsters in jail. We go all over Africa to pick this
thieves/Internet rats. We have over 8,273 of them in our jails round Africa and we
are still looking for more. We are aware that a lot of foreigners out there have
been deceived and lost their hard earn money to these fraudsters after promising
them percentages in their letters/e-mails for their impending help to move funds out
of Africa including fake lottery winning notification and at the end of the day,
they will collect thousands of dollars from you without a successful end.
Please, watch the video links below as some of these fraud-stars were arrested here
in Nigeria:http://www.youtube.com /watch?v=ISMgGdaGOJM
It was agreed that to retain the good image of Nigeria and the rest of African
countries, all the victims who lost his/her hard earn money to these faceless
thieves will be compensated with just US$5M (Five Million Dollars Only). This we
assume will help you to start a new life.
Please, you have to accept the money like that because the people (victims) in our
pay list are too much. We are paying back from the money we recovered from these
fraudsters.
THIS IS TO INFORM YOU THAT YOUR DIPLOMAT HAS ARRIVED WITH YOUR CONSIGNMENT BOXES AT
HARTSFIELD-JACKSON ATLANTA INT'L AIPORT GEORGIA USA CONTACT HIM NOW: (706) 505-2072
OR send him an email at ([email protected]) I want you to know that you have
24 hours to call the diplomat in person of MR. STEPHEN MARCUS with these phone
number (706) 505-2072 in the United States, let us know if you are still interested
to get your consignments deliver to you today? As they have been waiting to hear
from you to help them complete this delivery to you right now the diplomat has
arrived United States with your consignment boxes.
Note; that you must reconfirm your Full Name, Address and Valid Phone# to him
through this email: ([email protected]) immediately you receive this email to
enable him deliver your cash consignment to you without any mistake.
I appreciate your good sympathetic and collaboration, Hope to hear from you swiftly.
CONGRATULATIONS!!!
MR. GODWIN EMEFIELE,
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA
MY DIRECT PHONE:+234-8129298?544
Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
