[email protected] Mr. Patrick Terry.

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id GBmoOj8T11u+NwAAjbubUg
for <>; Mon, 29 Oct 2018 07:03:43 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 29 Oct 2018 07:03:43 -0700
Received: from mbkd0226.ocn.ad.jp ([153.149.233.27]:52551)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gH88r-0003ij-Kz
for ; Mon, 29 Oct 2018 07:03:43 -0700
Received: from mf-smf-ucb020c1 (mf-smf-ucb020c1.ocn.ad.jp [153.153.66.133])
by mbkd0226.ocn.ad.jp (Postfix) with ESMTP id CFDF3D040F2;
Mon, 29 Oct 2018 22:32:22 +0900 (JST)
Received: from ocn-vc-mts-106c1.ocn.ad.jp ([153.138.237.145])
by mf-smf-ucb020c1 with ESMTP
id H7cugeV2KbYTZH7eYgNG7I; Mon, 29 Oct 2018 22:32:22 +0900
Received: from vcair.ocn.ne.jp ([153.149.227.134])
by ocn-vc-mts-106c1.ocn.ad.jp with ESMTP
id H7dtgb8qEygxgH7dtg5rrh; Mon, 29 Oct 2018 22:32:22 +0900
Message-ID: <[email protected]>
Received: from User (p5016-ipadfx01tenjmi.oita.ocn.ne.jp [219.165.94.144])
by vcair.ocn.ne.jp (Postfix) with SMTP;
Mon, 29 Oct 2018 22:31:40 +0900 (JST)
Reply-To: <[email protected]>
From: "FROM THE CENTRAL BANK OF NIGERIA."<[email protected]>
Date: Mon, 29 Oct 2018 06:32:09 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=17.7
X-Spam-Score: 177
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Dear Beneficiary, This is to officially inform you that your
payment file has been forwarded to our offshore correspondence bank in the
USA for onward release of your funds through an online banking. [...]

Content analysis details: (17.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[153.149.233.27 listed in zen.spamhaus.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?153.149.227.134>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[153.149.233.27 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_HK_NAME_FROM No description available.
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
2.4 FROM_MISSP_PHISH Malformed, claims to be from financial organization
- possible phish
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.5 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** OFFICIAL INFORMATION.(ITE)

Dear Beneficiary,
This is to officially inform you that your payment file has been forwarded to our
offshore correspondence bank in the USA for onward release of your funds through an
online banking.

Get back to me urgently by calling me on my telephone number, 234-8080804988, so
that i will inform you what next to do and to give you the contact details of the
bank in the USA for you to contact them for the release of your funds worth the sum
of $3.5 Million.

Your urgent call through to me will determine your seriousness to receive your
funds. And bear in mind that IT IS FIRST COME, FIRST SERVE.

Best Regards,

Mr. Patrick Terry.
Director Foreign Operation (CBN).