by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 0FLwCqCBQ1ssfwAAjbubUg
for <>; Mon, 09 Jul 2018 08:39:12 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Jul 2018 08:39:12 -0700
Received: from mail-it0-f68.google.com ([209.85.214.68]:53580)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fcYFn-0008Se-Lf
for ; Mon, 09 Jul 2018 08:39:12 -0700
Received: by mail-it0-f68.google.com with SMTP id a195-v6so25969466itd.3
for <>; Mon, 09 Jul 2018 08:38:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=TM+x8l+bawuYl0BuVT9qBGBsRn2DjpjTNwAKm1h5zNE=;
b=NZc+/MXfISpAwkU/Nsw678jNjO0edjs1Y3B653TGGKFQWGi2MPzIzXfWbHEBfxkRw/
8nqmLquq2voC9wJgAvWXL8RVsVlA/kctm9Kf2teylVHykJBjYJ2GjRBkp8U6hXEM+o+k
DQ7jJGwiuHTjlbzAtSH5KbIjSfvoTuNLNCvlQRjTNhOBYvmMNYb0FGm08IkitJRzdpom
8bTK6jxMTxl4JOjNPoBScp+USDuN43TDrFYS6HOAX8zK13va5ezazWQwUdFcu/hWNC5l
Zz1bkReYndnuuexC5BuKbf+D/Hci+2HvApB5vdgVbwVccIbYWjH3c8uaHA0GPDygrSaU
zg4A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id
:subject:to;
bh=TM+x8l+bawuYl0BuVT9qBGBsRn2DjpjTNwAKm1h5zNE=;
b=g/yNnGfxE4bHRqIhRyeNmbCfZT/Rkp9+TGXYcXhj/OgY2NFA0ILhvLwf9Kn1Py3Nv2
p5W6WrqfJl4jF4thv0dfepP7MuRvC40yjQtut2u3hLTd6jggq4A+iPJ4GbwQFjob/hhy
DCmODhePe9AWp1UCYkQsJXDesO78ES2Oga+GohVUIGf1V6Q9SGFpudjsEPdEjldgiOlP
GpJo24I8lYnkFShy0dc+NeB6qQiqPWWAaNXlipbed904uWlb6y2xALQS5QECew3Nqzmu
a7DIbMXL3GIJwL5kmz6vCdV2bmwJqjls289N45wpLQ10cYTxz5iFgycYKBtGu0fyrXRV
4AVA==
X-Gm-Message-State: APt69E0FJa6nOLy/8PPAke6UaEaq0nVoUoq3IT6tCdwpaAuWY5LngvJn
f2yaJI248Wj5z/7WTX4+serrEsgSb7k0Wx9lYX4=
X-Google-Smtp-Source: AAOMgpe1IwTmb/vQzuFdtSuzOjl8AbkzaSkYCTPJ94gOKLtAoyJ2T6RpdFYAnUcUUTxG3NagiJ6menizgWkSGdwaDI0=
X-Received: by 2002:a02:b80e:: with SMTP id o14-v6mr17784950jam.74.1531150706785;
Mon, 09 Jul 2018 08:38:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a6b:c916:0:0:0:0:0 with HTTP; Mon, 9 Jul 2018 08:38:26 -0700 (PDT)
Reply-To: [email protected]
From: "Mr. Godwin Emefiele" <[email protected]>
Date: Mon, 9 Jul 2018 16:38:26 +0100
Message-ID: <CALWJ5AQ8+yUtYhWfmeG_aKN4nOz7Jd=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=13.9
X-Spam-Score: 139
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- Attn : Sir/Madam, It was Agreed upon that your Funds $10.5million
would be released to you on a special method of payment which tag Name Reads"
CASH DELIVERY through Diplomatic Means to your door step". You are Advised
to Re-confirm YOUR NAME, ADDRESS, OCCUPATION, NEXT OF KIN. PHONE AND FAX
NUMBER FOR THE DELIVERY OF YOUR FUND. [...]
Content analysis details: (13.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (collinsobi14[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.68 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(collinsobi14[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(godwineemefiele2014[at]yahoo.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.68 listed in wl.mailspike.net]
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Immediate Payment Instruction
--
Attn : Sir/Madam,
It was Agreed upon that your Funds $10.5million would be released to
you on a special method of payment which tag Name Reads" CASH
DELIVERY through
Diplomatic Means to your door step". You are Advised to Re-confirm
YOUR NAME, ADDRESS, OCCUPATION, NEXT OF KIN. PHONE AND FAX NUMBER FOR
THE DELIVERY OF YOUR FUND.
Thanks,
Mr. Godwin Emefiele
Governor, Central Bank Of Nigeria
Delivered-To:
Received: from
by with LMTP id 0FLwCqCBQ1ssfwAAjbubUg
for <>; Mon, 09 Jul 2018 08:39:12 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Jul 2018 08:39:12 -0700
Received: from mail-it0-f68.google.com ([209.85.214.68]:53580)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fcYFn-0008Se-Lf
for ; Mon, 09 Jul 2018 08:39:12 -0700
Received: by mail-it0-f68.google.com with SMTP id a195-v6so25969466itd.3
for <>; Mon, 09 Jul 2018 08:38:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
bh=TM+x8l+bawuYl0BuVT9qBGBsRn2DjpjTNwAKm1h5zNE=;
b=NZc+/MXfISpAwkU/Nsw678jNjO0edjs1Y3B653TGGKFQWGi2MPzIzXfWbHEBfxkRw/
8nqmLquq2voC9wJgAvWXL8RVsVlA/kctm9Kf2teylVHykJBjYJ2GjRBkp8U6hXEM+o+k
DQ7jJGwiuHTjlbzAtSH5KbIjSfvoTuNLNCvlQRjTNhOBYvmMNYb0FGm08IkitJRzdpom
8bTK6jxMTxl4JOjNPoBScp+USDuN43TDrFYS6HOAX8zK13va5ezazWQwUdFcu/hWNC5l
Zz1bkReYndnuuexC5BuKbf+D/Hci+2HvApB5vdgVbwVccIbYWjH3c8uaHA0GPDygrSaU
zg4A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
:subject:to;
bh=TM+x8l+bawuYl0BuVT9qBGBsRn2DjpjTNwAKm1h5zNE=;
b=g/yNnGfxE4bHRqIhRyeNmbCfZT/Rkp9+TGXYcXhj/OgY2NFA0ILhvLwf9Kn1Py3Nv2
p5W6WrqfJl4jF4thv0dfepP7MuRvC40yjQtut2u3hLTd6jggq4A+iPJ4GbwQFjob/hhy
DCmODhePe9AWp1UCYkQsJXDesO78ES2Oga+GohVUIGf1V6Q9SGFpudjsEPdEjldgiOlP
GpJo24I8lYnkFShy0dc+NeB6qQiqPWWAaNXlipbed904uWlb6y2xALQS5QECew3Nqzmu
a7DIbMXL3GIJwL5kmz6vCdV2bmwJqjls289N45wpLQ10cYTxz5iFgycYKBtGu0fyrXRV
4AVA==
X-Gm-Message-State: APt69E0FJa6nOLy/8PPAke6UaEaq0nVoUoq3IT6tCdwpaAuWY5LngvJn
f2yaJI248Wj5z/7WTX4+serrEsgSb7k0Wx9lYX4=
X-Google-Smtp-Source: AAOMgpe1IwTmb/vQzuFdtSuzOjl8AbkzaSkYCTPJ94gOKLtAoyJ2T6RpdFYAnUcUUTxG3NagiJ6menizgWkSGdwaDI0=
X-Received: by 2002:a02:b80e:: with SMTP id o14-v6mr17784950jam.74.1531150706785;
Mon, 09 Jul 2018 08:38:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a6b:c916:0:0:0:0:0 with HTTP; Mon, 9 Jul 2018 08:38:26 -0700 (PDT)
Reply-To: [email protected]
From: "Mr. Godwin Emefiele" <[email protected]>
Date: Mon, 9 Jul 2018 16:38:26 +0100
Message-ID: <CALWJ5AQ8+yUtYhWfmeG_aKN4nOz7Jd=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=13.9
X-Spam-Score: 139
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- Attn : Sir/Madam, It was Agreed upon that your Funds $10.5million
would be released to you on a special method of payment which tag Name Reads"
CASH DELIVERY through Diplomatic Means to your door step". You are Advised
to Re-confirm YOUR NAME, ADDRESS, OCCUPATION, NEXT OF KIN. PHONE AND FAX
NUMBER FOR THE DELIVERY OF YOUR FUND. [...]
Content analysis details: (13.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (collinsobi14[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.68 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(collinsobi14[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(godwineemefiele2014[at]yahoo.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.68 listed in wl.mailspike.net]
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Immediate Payment Instruction
--
Attn : Sir/Madam,
It was Agreed upon that your Funds $10.5million would be released to
you on a special method of payment which tag Name Reads" CASH
DELIVERY through
Diplomatic Means to your door step". You are Advised to Re-confirm
YOUR NAME, ADDRESS, OCCUPATION, NEXT OF KIN. PHONE AND FAX NUMBER FOR
THE DELIVERY OF YOUR FUND.
Thanks,
Mr. Godwin Emefiele
Governor, Central Bank Of Nigeria
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

