by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 01 Feb 2018 22:16:29 -0800
Received: from [201.7.233.182] (port=38148 helo=zimbra.rasador.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ehUe7-0007j3-LZ
for ; Thu, 01 Feb 2018 22:16:28 -0800
Received: from zimbra.rasador.com.br (localhost.localdomain [127.0.0.1])
by zimbra.rasador.com.br (Postfix) with ESMTPS id F390AECB758;
Fri, 2 Feb 2018 01:20:52 -0200 (-02)
Received: from localhost (localhost.localdomain [127.0.0.1])
by zimbra.rasador.com.br (Postfix) with ESMTP id 71007EC827F;
Thu, 1 Feb 2018 23:13:00 -0200 (-02)
Received: from zimbra.rasador.com.br ([127.0.0.1])
by localhost (zimbra.rasador.com.br [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id XtPKXxfEqq80; Thu, 1 Feb 2018 23:13:00 -0200 (-02)
Received: from User (138.pool85-52-224.static.orange.es [85.52.224.138])
by zimbra.rasador.com.br (Postfix) with ESMTPA id 45925EC823C;
Thu, 1 Feb 2018 23:12:25 -0200 (-02)
Reply-To: <[email protected]>
From: " Mr.Godwin I. Emefiele"<[email protected]>
To: ""
Date: Fri, 2 Feb 2018 02:15:19 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=36.2
X-Spam-Score: 362
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM THE ACTIVE OFFICE OF THE CBN GOVERNOR,GODWIN IFEANYI
EMEFIELE OFFICIAL PHONE#: +2348167725021 [...]
Content analysis details: (36.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.1 TO_MALFORMED To: has a malformed address
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[201.7.233.182 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[201.7.233.182 listed in psbl.surriel.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officialmail[at]advalvas.be)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_USER From misspaced, from "User"
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
3.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
0.0 FROM_MISSPACED From: missing whitespace
0.4 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
3.4 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** RE. HAPPY NEW YEAR, DID YOU SENT HER?..,./
FROM THE ACTIVE OFFICE OF THE CBN
GOVERNOR,GODWIN IFEANYI EMEFIELE
OFFICIAL PHONE#: +2348167725021
ATTN: Dear beneficiary;
Did you authorize Mrs. Anna Gray of 81725 Constitution Road #5010
Pueblo, Colorado 81001 USA, to claim your outstanding fund?. Please
get back at me immediately so that we know the next line of action to follow.
Call me direct or SMS me on +2348167725021 for immediate action.
Regards
Mr.Godwin I. Emefiele
NEW CBN Executive Governor.
PHONE#:+2348167725021
Envelope-to:
Delivery-date: Thu, 01 Feb 2018 22:16:29 -0800
Received: from [201.7.233.182] (port=38148 helo=zimbra.rasador.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ehUe7-0007j3-LZ
for ; Thu, 01 Feb 2018 22:16:28 -0800
Received: from zimbra.rasador.com.br (localhost.localdomain [127.0.0.1])
by zimbra.rasador.com.br (Postfix) with ESMTPS id F390AECB758;
Fri, 2 Feb 2018 01:20:52 -0200 (-02)
Received: from localhost (localhost.localdomain [127.0.0.1])
by zimbra.rasador.com.br (Postfix) with ESMTP id 71007EC827F;
Thu, 1 Feb 2018 23:13:00 -0200 (-02)
Received: from zimbra.rasador.com.br ([127.0.0.1])
by localhost (zimbra.rasador.com.br [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id XtPKXxfEqq80; Thu, 1 Feb 2018 23:13:00 -0200 (-02)
Received: from User (138.pool85-52-224.static.orange.es [85.52.224.138])
by zimbra.rasador.com.br (Postfix) with ESMTPA id 45925EC823C;
Thu, 1 Feb 2018 23:12:25 -0200 (-02)
Reply-To: <[email protected]>
From: " Mr.Godwin I. Emefiele"<[email protected]>
To: ""
Date: Fri, 2 Feb 2018 02:15:19 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=36.2
X-Spam-Score: 362
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM THE ACTIVE OFFICE OF THE CBN GOVERNOR,GODWIN IFEANYI
EMEFIELE OFFICIAL PHONE#: +2348167725021 [...]
Content analysis details: (36.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.1 TO_MALFORMED To: has a malformed address
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[201.7.233.182 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[201.7.233.182 listed in psbl.surriel.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officialmail[at]advalvas.be)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_USER From misspaced, from "User"
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
3.0 BOGUS_MSM_HDRS Apparently bogus Microsoft email headers
0.0 FROM_MISSPACED From: missing whitespace
0.4 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
3.4 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** RE. HAPPY NEW YEAR, DID YOU SENT HER?..,./
FROM THE ACTIVE OFFICE OF THE CBN
GOVERNOR,GODWIN IFEANYI EMEFIELE
OFFICIAL PHONE#: +2348167725021
ATTN: Dear beneficiary;
Did you authorize Mrs. Anna Gray of 81725 Constitution Road #5010
Pueblo, Colorado 81001 USA, to claim your outstanding fund?. Please
get back at me immediately so that we know the next line of action to follow.
Call me direct or SMS me on +2348167725021 for immediate action.
Regards
Mr.Godwin I. Emefiele
NEW CBN Executive Governor.
PHONE#:+2348167725021
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
