by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id iIHhD5byplr2ZwAAjbubUg
for <>; Mon, 12 Mar 2018 14:35:18 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 12 Mar 2018 14:35:18 -0700
Received: from sonic301-22.consmr.mail.ir2.yahoo.com ([77.238.176.99]:44658)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1evV6C-0006vB-51
for ; Mon, 12 Mar 2018 14:35:18 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.pt; s=s2048; t=1520890473; bh=grzViK9AoQKRUSycntoJbcQGEEaiJ/U0tow05xQ8iYQ=; h=Date:From:Reply-To:Subject:References:From:Subject; b=tlHZrwCIZ2+LaT8xTi06AZcTZpKrPaNcjqfCAed+McK8F9k96byF5CL5wImWNNW1tevbgl59NuBGOJui6skH46+FsIVQXBcmb52H9KSZTahgl9U8cMY3gL29lj5nCGFaHFb6qcXQGxAzewKYX6PvqOn5+lW3hg2LCw2T785ErPbjAhNVtP3AYldGJ/tHwU6Cio5gBNiQXErhFL2qXMJuZuKn2TvOwu1ba/GHLkTOUVcloVYW1qxTkN2oG6Q7fF8Nd0PcGlxVBemj0JietpYTxuWhS8+mjE0O/sjk12M5po1nXdcAPNRV/XyXKouS7d51VHJMfebJ3hgjFo+rjrloeQ==
X-YMail-OSG: OX8B9zwVM1l9BIiHDSrsB5bOAvUYfo5FKofeOEXww4l0rB.HE28DiEgDWizQgKN
uI71HBTiG8oSxh4IxlaXpHFQPfXNb9tDvXjLbG_Wv8tk2Hweju2q4AvXMwJXKc0cb7Q4zUo22TdF
GWweDz0L1InKrf6MKvHFiZgHhjzoJo2FWU9YC4FwLh_dAjweIPuMfSh3v1Wr5_9TOJda8ZJOgPjd
N33O7m3TUMZwzRourY7cNUeHmaPnmpSB2np4CRyI8Gsek1D_2pvWJ.Xz5AhjoRch0_aw5Yw7abcg
zyrC2X30uy9_hDPvGVOeOneYCneQAISXAZC7Vqu7BAn2Ib6eTOrtUOruzf7bqr9lgDMoZSvX4T89
.GKVWO8Ap3RPMQFFpLCcq6tLozmZ5GBQSQz5tX2v6xoaUmp2j59Eb5WyWSsAcmHEjvh0VjF0vao9
C6rxKdgXNTsE9tWlpqFSHNgL_wGJRybBYrUciLw--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic301.consmr.mail.ir2.yahoo.com with HTTP; Mon, 12 Mar 2018 21:34:33 +0000
Date: Mon, 12 Mar 2018 21:34:30 +0000 (UTC)
From: ATM card payment <[email protected]>
Reply-To: ATM card payment <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.11419 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:58.0) Gecko/20100101 Firefox/58.0
Content-Length: 1074
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM: MR GODWIN EMEFIELE EXECUTIVE GOVERNOR, CENTRAL BANK
OF NIGERIA DIRECT TELEPHONE NUMBER:+2348035294585 DEAR ESTEEMED CUSTOMERS
DURING OUR MEETING TODAY WITH CENTRAL BANK OF NIGERIA BOARD OF DIRECTORS WE
CONCLUDED TO PAY YOUR CONTRACT PAYMENT OF US$ 7.5 M BY ATM MASTER CARD. WE
WANT YOU TO RECONFIRM THE FOLLOWING INFORMATION FOR US TO PROCEED IN LOADING
YOUR FUND INTO AN ATM MASTER CARD THROUGH OUR ATM CARD INTER SWITCH DEPARTMENT
HERE IN CENTRAL BANK OF NIGERIA [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[77.238.176.99 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[77.238.176.99 listed in wl.mailspike.net]
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ikejohn50[at]yahoo.pt)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (ikejohn50[at]yahoo.pt)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.6 MONEY_ATM_CARD Lots of money on an ATM card
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
2.5 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR ATM MASTER CARD IS READY TO SHIP TO YOU
FROM: MR GODWIN EMEFIELE
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA
DIRECT TELEPHONE NUMBER:+2348035294585
DEAR ESTEEMED CUSTOMERS
DURING OUR MEETING TODAY WITH CENTRAL BANK OF NIGERIA BOARD OF
DIRECTORS WE CONCLUDED TO PAY YOUR CONTRACT PAYMENT OF US$ 7.5 M BY
ATM MASTER CARD. WE WANT YOU TO RECONFIRM THE FOLLOWING INFORMATION
FOR US TO PROCEED IN LOADING YOUR FUND INTO AN ATM MASTER CARD THROUGH
OUR ATM CARD INTER SWITCH DEPARTMENT HERE IN CENTRAL BANK OF NIGERIA
YOUR FULL NAME:...................................
YOUR HOME ADDRESS:................................
YOUR DIRECT MOBILE TELEPHONE NUMBER:...............
MARITAL STATUS:....................................
YOUR AGE:..........................................
YOUR OCCUPATION:...................................
A SCAN COPY OF YOUR IDENTIFICATION:.................
AS SOON AS WE RECEIVE THIS YOUR INFORMATION WE WILL SHIP YOUR MASTER
CARD TO YOU THROUGH FEDEX COURIER SERVICES DELIVERY TO YOUR
DESTINATION ADDRESS.
WAITING TO HEAR FROM YOU SOONEST.
GODWIN EMEFIELE
CENTRAL BANK OF NIGERIA GOVERNOR
Delivered-To:
Received: from
by with LMTP id iIHhD5byplr2ZwAAjbubUg
for <>; Mon, 12 Mar 2018 14:35:18 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 12 Mar 2018 14:35:18 -0700
Received: from sonic301-22.consmr.mail.ir2.yahoo.com ([77.238.176.99]:44658)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1evV6C-0006vB-51
for ; Mon, 12 Mar 2018 14:35:18 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.pt; s=s2048; t=1520890473; bh=grzViK9AoQKRUSycntoJbcQGEEaiJ/U0tow05xQ8iYQ=; h=Date:From:Reply-To:Subject:References:From:Subject; b=tlHZrwCIZ2+LaT8xTi06AZcTZpKrPaNcjqfCAed+McK8F9k96byF5CL5wImWNNW1tevbgl59NuBGOJui6skH46+FsIVQXBcmb52H9KSZTahgl9U8cMY3gL29lj5nCGFaHFb6qcXQGxAzewKYX6PvqOn5+lW3hg2LCw2T785ErPbjAhNVtP3AYldGJ/tHwU6Cio5gBNiQXErhFL2qXMJuZuKn2TvOwu1ba/GHLkTOUVcloVYW1qxTkN2oG6Q7fF8Nd0PcGlxVBemj0JietpYTxuWhS8+mjE0O/sjk12M5po1nXdcAPNRV/XyXKouS7d51VHJMfebJ3hgjFo+rjrloeQ==
X-YMail-OSG: OX8B9zwVM1l9BIiHDSrsB5bOAvUYfo5FKofeOEXww4l0rB.HE28DiEgDWizQgKN
uI71HBTiG8oSxh4IxlaXpHFQPfXNb9tDvXjLbG_Wv8tk2Hweju2q4AvXMwJXKc0cb7Q4zUo22TdF
GWweDz0L1InKrf6MKvHFiZgHhjzoJo2FWU9YC4FwLh_dAjweIPuMfSh3v1Wr5_9TOJda8ZJOgPjd
N33O7m3TUMZwzRourY7cNUeHmaPnmpSB2np4CRyI8Gsek1D_2pvWJ.Xz5AhjoRch0_aw5Yw7abcg
zyrC2X30uy9_hDPvGVOeOneYCneQAISXAZC7Vqu7BAn2Ib6eTOrtUOruzf7bqr9lgDMoZSvX4T89
.GKVWO8Ap3RPMQFFpLCcq6tLozmZ5GBQSQz5tX2v6xoaUmp2j59Eb5WyWSsAcmHEjvh0VjF0vao9
C6rxKdgXNTsE9tWlpqFSHNgL_wGJRybBYrUciLw--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic301.consmr.mail.ir2.yahoo.com with HTTP; Mon, 12 Mar 2018 21:34:33 +0000
Date: Mon, 12 Mar 2018 21:34:30 +0000 (UTC)
From: ATM card payment <[email protected]>
Reply-To: ATM card payment <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.11419 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:58.0) Gecko/20100101 Firefox/58.0
Content-Length: 1074
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM: MR GODWIN EMEFIELE EXECUTIVE GOVERNOR, CENTRAL BANK
OF NIGERIA DIRECT TELEPHONE NUMBER:+2348035294585 DEAR ESTEEMED CUSTOMERS
DURING OUR MEETING TODAY WITH CENTRAL BANK OF NIGERIA BOARD OF DIRECTORS WE
CONCLUDED TO PAY YOUR CONTRACT PAYMENT OF US$ 7.5 M BY ATM MASTER CARD. WE
WANT YOU TO RECONFIRM THE FOLLOWING INFORMATION FOR US TO PROCEED IN LOADING
YOUR FUND INTO AN ATM MASTER CARD THROUGH OUR ATM CARD INTER SWITCH DEPARTMENT
HERE IN CENTRAL BANK OF NIGERIA [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[77.238.176.99 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[77.238.176.99 listed in wl.mailspike.net]
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ikejohn50[at]yahoo.pt)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (ikejohn50[at]yahoo.pt)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.6 MONEY_ATM_CARD Lots of money on an ATM card
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
2.5 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR ATM MASTER CARD IS READY TO SHIP TO YOU
FROM: MR GODWIN EMEFIELE
EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA
DIRECT TELEPHONE NUMBER:+2348035294585
DEAR ESTEEMED CUSTOMERS
DURING OUR MEETING TODAY WITH CENTRAL BANK OF NIGERIA BOARD OF
DIRECTORS WE CONCLUDED TO PAY YOUR CONTRACT PAYMENT OF US$ 7.5 M BY
ATM MASTER CARD. WE WANT YOU TO RECONFIRM THE FOLLOWING INFORMATION
FOR US TO PROCEED IN LOADING YOUR FUND INTO AN ATM MASTER CARD THROUGH
OUR ATM CARD INTER SWITCH DEPARTMENT HERE IN CENTRAL BANK OF NIGERIA
YOUR FULL NAME:...................................
YOUR HOME ADDRESS:................................
YOUR DIRECT MOBILE TELEPHONE NUMBER:...............
MARITAL STATUS:....................................
YOUR AGE:..........................................
YOUR OCCUPATION:...................................
A SCAN COPY OF YOUR IDENTIFICATION:.................
AS SOON AS WE RECEIVE THIS YOUR INFORMATION WE WILL SHIP YOUR MASTER
CARD TO YOU THROUGH FEDEX COURIER SERVICES DELIVERY TO YOUR
DESTINATION ADDRESS.
WAITING TO HEAR FROM YOU SOONEST.
GODWIN EMEFIELE
CENTRAL BANK OF NIGERIA GOVERNOR
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
