by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id YOLnNORbgFoKWQAAjbubUg
for <>; Sun, 11 Feb 2018 07:06:12 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 11 Feb 2018 07:06:12 -0800
Received: from linxtek.ru ([91.121.121.21]:35740)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ektCl-0005vA-9J
for ; Sun, 11 Feb 2018 07:06:12 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=citi-moskva.ru; s=mail;
h=Message-Id:Content-Transfer-Encoding:Content-Type:MIME-Version:Date:Subject:From:Reply-To; bh=oP0aahlajtROJyZC0Q8SueCFydQR71+DJ6RAzoJNf0Q=;
b=ezx+r5zsgCGjkYQjRIhmxeHblFT7XfQ34xmccavy4CJePt0EkeMLbwdUfSPKQda7ONyIeJ470tEb3OspeX/j9EOoaC4NFzwwfe+qAvqnhM3V3d3GVtfPRgLc57B4uzZHxvqLs1s1uNfXx4xsk9wxQpEzYIz1KjeCGPO3LKKZ+IQ=;
Received: from [197.210.227.155] (helo=User)
by linxtek.ru with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1ekt9Z-0000an-VF; Sun, 11 Feb 2018 18:02:54 +0300
Reply-To: <[email protected]>
From: "Suleiman"<[email protected]>
Date: Sat, 10 Feb 2018 16:03:10 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=30.8
X-Spam-Score: 308
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello my Dear, This is the proof or origin of US$15.5 Million
coming to you. There was an over-invoiced contract claim payment US$31 Million
originated from a French Company; Boughes International of France. Both the
past Governor of Central Bank of Nigeria (Mr. Sanusi Lamido Sanusi) and present
Governor, Mr. Godwin Emefiele did not know that the over-invoiced contract
amount US$31 Million was intentionally assigned or designated to a French
Company; Boughes International of France. [...]
Content analysis details: (30.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.1 NSL_RCVD_HELO_USER Received from HELO User
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.210.227.155 listed in zen.spamhaus.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(alh.suleiman.barau22[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
1.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FROM_MISSPACED From: missing whitespace
1.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
3.2 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Proof or Origin of Funds coming to you
Hello my Dear,
This is the proof or origin of US$15.5 Million coming to you. There was an
over-invoiced contract claim payment US$31 Million originated from a French Company;
Boughes International of France. Both the past Governor of Central Bank of Nigeria
(Mr. Sanusi Lamido Sanusi) and present Governor, Mr. Godwin Emefiele did not know
that the over-invoiced contract amount US$31 Million was intentionally assigned or
designated to a French Company; Boughes International of France.
This Company, Boughes International of France has been duly paid half of the agreed
contract amount US$15.5 Million. A contract of Laying Pipeline, Turbines Supply and
Installation in Escravos and Forcados linking up Kaduna Refinery to Nasarawa State,
which was awarded to Boughes International of France.
I contacted you to change the ownership of remaining US$15.5 Million in the Treasury
to your name as a real claimant or beneficiary. As Deputy Governor, I and my
colleagues at Central Bank of Nigeria had knowledge of US$15.5 Million kept in the
Treasury waiting for wire transfer into your account for our benefits. All the
required documents related to Anti-drug, Money Laundering and Terrorism are in place
and will move with the wire.
I am waiting for your response as soon as possible.
Sincerely,
Suleiman
Delivered-To:
Received: from
by with LMTP id YOLnNORbgFoKWQAAjbubUg
for <>; Sun, 11 Feb 2018 07:06:12 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 11 Feb 2018 07:06:12 -0800
Received: from linxtek.ru ([91.121.121.21]:35740)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ektCl-0005vA-9J
for ; Sun, 11 Feb 2018 07:06:12 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=citi-moskva.ru; s=mail;
h=Message-Id:Content-Transfer-Encoding:Content-Type:MIME-Version:Date:Subject:From:Reply-To; bh=oP0aahlajtROJyZC0Q8SueCFydQR71+DJ6RAzoJNf0Q=;
b=ezx+r5zsgCGjkYQjRIhmxeHblFT7XfQ34xmccavy4CJePt0EkeMLbwdUfSPKQda7ONyIeJ470tEb3OspeX/j9EOoaC4NFzwwfe+qAvqnhM3V3d3GVtfPRgLc57B4uzZHxvqLs1s1uNfXx4xsk9wxQpEzYIz1KjeCGPO3LKKZ+IQ=;
Received: from [197.210.227.155] (helo=User)
by linxtek.ru with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1ekt9Z-0000an-VF; Sun, 11 Feb 2018 18:02:54 +0300
Reply-To: <[email protected]>
From: "Suleiman"<[email protected]>
Date: Sat, 10 Feb 2018 16:03:10 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=30.8
X-Spam-Score: 308
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello my Dear, This is the proof or origin of US$15.5 Million
coming to you. There was an over-invoiced contract claim payment US$31 Million
originated from a French Company; Boughes International of France. Both the
past Governor of Central Bank of Nigeria (Mr. Sanusi Lamido Sanusi) and present
Governor, Mr. Godwin Emefiele did not know that the over-invoiced contract
amount US$31 Million was intentionally assigned or designated to a French
Company; Boughes International of France. [...]
Content analysis details: (30.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.1 NSL_RCVD_HELO_USER Received from HELO User
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.210.227.155 listed in zen.spamhaus.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(alh.suleiman.barau22[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 FAKE_REPLY_C No description available.
1.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FROM_MISSPACED From: missing whitespace
1.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
3.2 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Proof or Origin of Funds coming to you
Hello my Dear,
This is the proof or origin of US$15.5 Million coming to you. There was an
over-invoiced contract claim payment US$31 Million originated from a French Company;
Boughes International of France. Both the past Governor of Central Bank of Nigeria
(Mr. Sanusi Lamido Sanusi) and present Governor, Mr. Godwin Emefiele did not know
that the over-invoiced contract amount US$31 Million was intentionally assigned or
designated to a French Company; Boughes International of France.
This Company, Boughes International of France has been duly paid half of the agreed
contract amount US$15.5 Million. A contract of Laying Pipeline, Turbines Supply and
Installation in Escravos and Forcados linking up Kaduna Refinery to Nasarawa State,
which was awarded to Boughes International of France.
I contacted you to change the ownership of remaining US$15.5 Million in the Treasury
to your name as a real claimant or beneficiary. As Deputy Governor, I and my
colleagues at Central Bank of Nigeria had knowledge of US$15.5 Million kept in the
Treasury waiting for wire transfer into your account for our benefits. All the
required documents related to Anti-drug, Money Laundering and Terrorism are in place
and will move with the wire.
I am waiting for your response as soon as possible.
Sincerely,
Suleiman
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
