by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id ECVZDfkBaFyZHQAAjbubUg
for <>; Sat, 16 Feb 2019 04:28:41 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 16 Feb 2019 04:28:41 -0800
Received: from mail-oln040092065065.outbound.protection.outlook.com ([40.92.65.65]:34542 helo=EUR01-HE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1guz5A-0001xR-Db
for ; Sat, 16 Feb 2019 04:28:41 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=KJsiIS7ZiPk4/mO610rWyfhKzzh/UFdE7GVhcGzO7Bw=;
b=f3heoLryOTP6g1Fu2kWn11KtphaZf9yxFy0C95pQMTTqYr7MewbXfaiNFk3fUbX/y00TO3ScclPZdodCMUEZcZgpcjBN8G39D0Ml2kaxVAec79BZ9gwdFz1QmnqXwEJ0VyLNCxU2Bgu19RuSwok1aKofFyFNBRZ3Qz0MSZC8KKn+IkdfbuRcTH9kLTL/JWjPwXKrUn8Ow9dVanOIYlkYCcRhiWuWEq2GCwku7jPHSEAo/dG0lS79M/4werhQs4MNk3LC3XVIT6MLztq3uehoVzSx0ga9KH+QmVc4wLTjMcTqLx4Xl0y4sF6/rRUUy98+H7hMD0iP0TdSLefMX3JY+Q==
Received: from HE1EUR01FT034.eop-EUR01.prod.protection.outlook.com
(10.152.0.56) by HE1EUR01HT079.eop-EUR01.prod.protection.outlook.com
(10.152.0.248) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1580.10; Sat, 16 Feb
2019 12:27:49 +0000
Received: from DB6P195MB0327.EURP195.PROD.OUTLOOK.COM (10.152.0.57) by
HE1EUR01FT034.mail.protection.outlook.com (10.152.0.172) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
15.20.1580.10 via Frontend Transport; Sat, 16 Feb 2019 12:27:49 +0000
Received: from DB6P195MB0327.EURP195.PROD.OUTLOOK.COM
([fe80:
c6df:751d:f6ee]) by DB6P195MB0327.EURP195.PROD.OUTLOOK.COM
([fe80:c6df:751d:f6ee%2]) with mapi id 15.20.1601.023; Sat, 16 Feb 2019
12:27:49 +0000
From: MICHAEL CHIJIOKE <[email protected]>
Thread-Topic: PLEASE GET BACK TO ME TO RECEIVE MY FUNDS FROM THE BANK
Thread-Index: AQHUxfLfJx9SkULgDUaqNw9yG6l2JQ==
Date: Sat, 16 Feb 2019 12:27:49 +0000
Message-ID: <DB6P195MB032762BAF35A047461A35F85B3610@DB6P195MB0327.EURP195.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:02A051439C64BA9C334356CB6ED9AD2D5E318C3869099F37C076039A93A36496;UpperCasedChecksum:C9964E245CA802BC5171B815B73E097AFFE4F614C8F9A1FB21FD333A4110E9DA;SizeAsReceived:11597;Count:40
x-tmn: [7fCtQNe6oSbC74r9ljlhVflUmVTbpIvo]
x-ms-publictraffictype: Email
x-incomingheadercount: 40
x-eopattributedmessage: 0
x-ms-exchange-slblob-mailprops: 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
x-microsoft-antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(201702181274)(2017031323274)(2017031324274)(2017031322404)(1601125500)(1603101475)(1701031045);SRVR:HE1EUR01HT079;
x-ms-traffictypediagnostic: HE1EUR01HT079:
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(4566010)(82015058);SRVR:HE1EUR01HT079;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR01HT079;
x-microsoft-antispam-message-info: KxDPgsDYJKe0tQtQdEtfDRaHBNrG2vAeAClPdKkaDxq+n2rwOfQTcH6Cwb/JxbWC
Content-Type: multipart/alternative;
boundary="_000_DB6P195MB032762BAF35A047461A35F85B3610DB6P195MB0327EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-Network-Message-Id: 3031dd97-fed2-40de-8b6e-08d6940a2a2e
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Feb 2019 12:27:49.7240
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR01HT079
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello dear how are you doing? Please read my message properly
and get back to me. I am Mrs Cheryl David' from Long beach, California USA.
I am 79 years Old. My Husband and 2 kids died on a plane crash on their journey
to Australia in March 1987, since then i couldn't remarry because i became
a cancer patient when I lost my husband "Mr David Charlie" and now I am getting
older and my cancer illness is getting more serious, while my doctor and
attorney has advised me to release my inheritance to someone I can trust that
can take care of them, including the huge amount of funds that my late husband
has in First Bank PLC of West Africa. So I need to know if you can handle
the funds to help the less privilege and Charity homes, so I can hand them
over to your possession. [...]
Content analysis details: (9.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.65.65 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(michaelchijioke1988[at]outlook.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (michaelchijioke1988[at]outlook.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** PLEASE GET BACK TO ME TO RECEIVE MY FUNDS FROM THE BANK
Hello dear how are you doing? Please read my message properly and get back to me.
I am Mrs Cheryl David' from Long beach, California USA. I am 79 years Old.
My Husband and 2 kids died on a plane crash on their journey to Australia in March
1987, since then i couldn't remarry because i became a cancer patient when I lost my
husband "Mr David Charlie" and now I am getting older and my cancer illness is
getting more serious, while my doctor and attorney has advised me to release my
inheritance to someone I can trust that can take care of them, including the huge
amount of funds that my late husband has in First Bank PLC of West Africa. So I need
to know if you can handle the funds to help the less privilege and Charity homes, so
I can hand them over to your possession.
Please let me know briefly if you can handle this funds when it reaches your
possession so i can refer you to the Bank manager in west Africa to receive the
funds and use it for the good work to help the Less Privilege and Charity Homes.
Thank you very much. I will be waiting to hear from you so i can refer you to the
Bank manager in west Africa to add your name to the account as our next of kin to
have access to the funds and start using them for the good work i desired you to do,
and i will instruct the bank manager to give you an online access and ATM debit card
to access the account, unlike transferring funds to the Charity organizations and
Orphanage homes and using the ATM debit card to withdraw funds any where in the
world from the ATM machine.
Please you should only contact me here on my personal Email address (
[email protected] ) so i can get back to you as soon as possible.
Remain Bless
Mrs Cheryl David
Delivered-To:
Received: from
by with LMTP id ECVZDfkBaFyZHQAAjbubUg
for <>; Sat, 16 Feb 2019 04:28:41 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 16 Feb 2019 04:28:41 -0800
Received: from mail-oln040092065065.outbound.protection.outlook.com ([40.92.65.65]:34542 helo=EUR01-HE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1guz5A-0001xR-Db
for ; Sat, 16 Feb 2019 04:28:41 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=KJsiIS7ZiPk4/mO610rWyfhKzzh/UFdE7GVhcGzO7Bw=;
b=f3heoLryOTP6g1Fu2kWn11KtphaZf9yxFy0C95pQMTTqYr7MewbXfaiNFk3fUbX/y00TO3ScclPZdodCMUEZcZgpcjBN8G39D0Ml2kaxVAec79BZ9gwdFz1QmnqXwEJ0VyLNCxU2Bgu19RuSwok1aKofFyFNBRZ3Qz0MSZC8KKn+IkdfbuRcTH9kLTL/JWjPwXKrUn8Ow9dVanOIYlkYCcRhiWuWEq2GCwku7jPHSEAo/dG0lS79M/4werhQs4MNk3LC3XVIT6MLztq3uehoVzSx0ga9KH+QmVc4wLTjMcTqLx4Xl0y4sF6/rRUUy98+H7hMD0iP0TdSLefMX3JY+Q==
Received: from HE1EUR01FT034.eop-EUR01.prod.protection.outlook.com
(10.152.0.56) by HE1EUR01HT079.eop-EUR01.prod.protection.outlook.com
(10.152.0.248) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1580.10; Sat, 16 Feb
2019 12:27:49 +0000
Received: from DB6P195MB0327.EURP195.PROD.OUTLOOK.COM (10.152.0.57) by
HE1EUR01FT034.mail.protection.outlook.com (10.152.0.172) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
15.20.1580.10 via Frontend Transport; Sat, 16 Feb 2019 12:27:49 +0000
Received: from DB6P195MB0327.EURP195.PROD.OUTLOOK.COM
([fe80:
c6df:751d:f6ee]) by DB6P195MB0327.EURP195.PROD.OUTLOOK.COM([fe80:
c6df:751d:f6ee%2]) with mapi id 15.20.1601.023; Sat, 16 Feb 201912:27:49 +0000
From: MICHAEL CHIJIOKE <[email protected]>
Thread-Topic: PLEASE GET BACK TO ME TO RECEIVE MY FUNDS FROM THE BANK
Thread-Index: AQHUxfLfJx9SkULgDUaqNw9yG6l2JQ==
Date: Sat, 16 Feb 2019 12:27:49 +0000
Message-ID: <DB6P195MB032762BAF35A047461A35F85B3610@DB6P195MB0327.EURP195.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker: OriginalChecksum:02A051439C64BA9C334356CB6ED9AD2D5E318C3869099F37C076039A93A36496;UpperCasedChecksum:C9964E245CA802BC5171B815B73E097AFFE4F614C8F9A1FB21FD333A4110E9DA;SizeAsReceived:11597;Count:40
x-tmn: [7fCtQNe6oSbC74r9ljlhVflUmVTbpIvo]
x-ms-publictraffictype: Email
x-incomingheadercount: 40
x-eopattributedmessage: 0
x-ms-exchange-slblob-mailprops: 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
x-microsoft-antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(201702181274)(2017031323274)(2017031324274)(2017031322404)(1601125500)(1603101475)(1701031045);SRVR:HE1EUR01HT079;
x-ms-traffictypediagnostic: HE1EUR01HT079:
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(4566010)(82015058);SRVR:HE1EUR01HT079;BCL:0;PCL:0;RULEID:;SRVR:HE1EUR01HT079;
x-microsoft-antispam-message-info: KxDPgsDYJKe0tQtQdEtfDRaHBNrG2vAeAClPdKkaDxq+n2rwOfQTcH6Cwb/JxbWC
Content-Type: multipart/alternative;
boundary="_000_DB6P195MB032762BAF35A047461A35F85B3610DB6P195MB0327EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-Network-Message-Id: 3031dd97-fed2-40de-8b6e-08d6940a2a2e
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 5dab7a8a-ebdc-4bd9-9cfd-67cde50b170b
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Feb 2019 12:27:49.7240
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR01HT079
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello dear how are you doing? Please read my message properly
and get back to me. I am Mrs Cheryl David' from Long beach, California USA.
I am 79 years Old. My Husband and 2 kids died on a plane crash on their journey
to Australia in March 1987, since then i couldn't remarry because i became
a cancer patient when I lost my husband "Mr David Charlie" and now I am getting
older and my cancer illness is getting more serious, while my doctor and
attorney has advised me to release my inheritance to someone I can trust that
can take care of them, including the huge amount of funds that my late husband
has in First Bank PLC of West Africa. So I need to know if you can handle
the funds to help the less privilege and Charity homes, so I can hand them
over to your possession. [...]
Content analysis details: (9.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.65.65 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(michaelchijioke1988[at]outlook.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (michaelchijioke1988[at]outlook.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** PLEASE GET BACK TO ME TO RECEIVE MY FUNDS FROM THE BANK
Hello dear how are you doing? Please read my message properly and get back to me.
I am Mrs Cheryl David' from Long beach, California USA. I am 79 years Old.
My Husband and 2 kids died on a plane crash on their journey to Australia in March
1987, since then i couldn't remarry because i became a cancer patient when I lost my
husband "Mr David Charlie" and now I am getting older and my cancer illness is
getting more serious, while my doctor and attorney has advised me to release my
inheritance to someone I can trust that can take care of them, including the huge
amount of funds that my late husband has in First Bank PLC of West Africa. So I need
to know if you can handle the funds to help the less privilege and Charity homes, so
I can hand them over to your possession.
Please let me know briefly if you can handle this funds when it reaches your
possession so i can refer you to the Bank manager in west Africa to receive the
funds and use it for the good work to help the Less Privilege and Charity Homes.
Thank you very much. I will be waiting to hear from you so i can refer you to the
Bank manager in west Africa to add your name to the account as our next of kin to
have access to the funds and start using them for the good work i desired you to do,
and i will instruct the bank manager to give you an online access and ATM debit card
to access the account, unlike transferring funds to the Charity organizations and
Orphanage homes and using the ATM debit card to withdraw funds any where in the
world from the ATM machine.
Please you should only contact me here on my personal Email address (
[email protected] ) so i can get back to you as soon as possible.
Remain Bless
Mrs Cheryl David
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
