by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 05 Sep 2019 15:56:43 -0700
Received: from [121.15.135.251] (port=53616 helo=mail.belle.cn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1i60g8-0003my-Ka
for ; Thu, 05 Sep 2019 15:56:43 -0700
Message-Id: <2b36de$[email protected]>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A2gH9gAf199Z/369QNIEFQItFoEEgVSCREMYIAKCY4EEhFeFFoEmi2gVK4pdgXOFOYF0eYVFDYERc4ECNYQIBBkMBYQYETgPAwEBAQEBAQECaSiFFQECEAQBAQECEwQCBQoCHwEBAQQnAggCAQcGEQYKLwEEBgIJBQEDBgUBOwECAgEBhTgphBQBAhSMWoJNjEOQBgyCJg+DR4EbgigEChkNL2KEH4IejS4QARIBg0QBgk4FgSuGTYEZCogrgRCGJIgOJxUCHIhXjgmLOA9hhFSWUlJJAQ2BAwt4gVQPJ4FchCIziViCNQEFAQ
X-IronPort-AV: E=Sophos;i="5.43,368,1503331200";
d="scan'208,217";a="333786189"
Received: from h126-210-64-189.geoinfor.com.tw (HELO User) ([210.64.189.126])
by mail.belle.cn with ESMTP; 06 Sep 2019 06:55:34 +0800
Reply-To: <[email protected]>
From: "CBN COMPENSATION COMMITTEE"<[email protected]>
Date: Fri, 6 Sep 2019 06:55:54 +0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=74.4
X-Spam-Score: 744
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Beneficiary , This is to officially inform you that
your email was short-listed by the Central Bank Compensation Award Committee,
To compensate huge losses of the individuals who were victims of the long
time running internet scam/fraud schemes , especially from our beloved nation
Nigeria .Therefore You are also warned to discontinue & disassociate yourself
from any present or future pursuit of unlearned transactions. [...]
Content analysis details: (74.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[121.15.135.251 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[121.15.135.251 listed in bl.score.senderscore.com]
3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
3.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.8 NSL_RCVD_HELO_USER Received from HELO User
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(edaservices34[at]gmail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=m ... en.com;ip=
0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.4 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
10 KAM_MARK Email arrived marked as Spam
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.0 FROM_MISSP_SPF_FAIL No description available.
3.7 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 HK_SCAM No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.8 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.2 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 LOTTO_DEPT Claims Department
1.7 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.3 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.1 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** [SPAM] Apologies & Reconciliation
Attention Beneficiary ,
This is to officially inform you that your email was short-listed by the Central
Bank Compensation Award Committee, To compensate huge losses of the individuals who
were victims of the long time running internet scam/fraud schemes , especially from
our beloved nation Nigeria .Therefore You are also warned to discontinue &
disassociate yourself from any present or future pursuit of unlearned transactions.
However, Your Compensation Payment of $8,500,000 is due for you to decide on a
preferrable way you would like to receive your compensational victim rights .
You are hereby advised to provide the useful informations below to this e-mail
address : ([email protected]) ,for further directives on the next line of
action.
1. Full Name:
2. Home address:
3. Direct/personal cell number
4. Copy of any valid identification:
5. Your occupation:
6. Next of kin:
This reward would be available for a short time, It's best advised that you respond
swiftly or you miss out, Thank You.
Yours Truly,
Mr Godwin Emefiele
Governor
Envelope-to:
Delivery-date: Thu, 05 Sep 2019 15:56:43 -0700
Received: from [121.15.135.251] (port=53616 helo=mail.belle.cn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1i60g8-0003my-Ka
for ; Thu, 05 Sep 2019 15:56:43 -0700
Message-Id: <2b36de$[email protected]>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: A2gH9gAf199Z/369QNIEFQItFoEEgVSCREMYIAKCY4EEhFeFFoEmi2gVK4pdgXOFOYF0eYVFDYERc4ECNYQIBBkMBYQYETgPAwEBAQEBAQECaSiFFQECEAQBAQECEwQCBQoCHwEBAQQnAggCAQcGEQYKLwEEBgIJBQEDBgUBOwECAgEBhTgphBQBAhSMWoJNjEOQBgyCJg+DR4EbgigEChkNL2KEH4IejS4QARIBg0QBgk4FgSuGTYEZCogrgRCGJIgOJxUCHIhXjgmLOA9hhFSWUlJJAQ2BAwt4gVQPJ4FchCIziViCNQEFAQ
X-IronPort-AV: E=Sophos;i="5.43,368,1503331200";
d="scan'208,217";a="333786189"
Received: from h126-210-64-189.geoinfor.com.tw (HELO User) ([210.64.189.126])
by mail.belle.cn with ESMTP; 06 Sep 2019 06:55:34 +0800
Reply-To: <[email protected]>
From: "CBN COMPENSATION COMMITTEE"<[email protected]>
Date: Fri, 6 Sep 2019 06:55:54 +0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=74.4
X-Spam-Score: 744
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Beneficiary , This is to officially inform you that
your email was short-listed by the Central Bank Compensation Award Committee,
To compensate huge losses of the individuals who were victims of the long
time running internet scam/fraud schemes , especially from our beloved nation
Nigeria .Therefore You are also warned to discontinue & disassociate yourself
from any present or future pursuit of unlearned transactions. [...]
Content analysis details: (74.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[121.15.135.251 listed in zen.spamhaus.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[121.15.135.251 listed in bl.score.senderscore.com]
3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
3.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.8 NSL_RCVD_HELO_USER Received from HELO User
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(edaservices34[at]gmail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=m ... en.com;ip=
0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.4 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
10 KAM_MARK Email arrived marked as Spam
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.0 FROM_MISSP_SPF_FAIL No description available.
3.7 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 HK_SCAM No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.8 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.2 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 LOTTO_DEPT Claims Department
1.7 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.3 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.1 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** [SPAM] Apologies & Reconciliation
Attention Beneficiary ,
This is to officially inform you that your email was short-listed by the Central
Bank Compensation Award Committee, To compensate huge losses of the individuals who
were victims of the long time running internet scam/fraud schemes , especially from
our beloved nation Nigeria .Therefore You are also warned to discontinue &
disassociate yourself from any present or future pursuit of unlearned transactions.
However, Your Compensation Payment of $8,500,000 is due for you to decide on a
preferrable way you would like to receive your compensational victim rights .
You are hereby advised to provide the useful informations below to this e-mail
address : ([email protected]) ,for further directives on the next line of
action.
1. Full Name:
2. Home address:
3. Direct/personal cell number
4. Copy of any valid identification:
5. Your occupation:
6. Next of kin:
This reward would be available for a short time, It's best advised that you respond
swiftly or you miss out, Thank You.
Yours Truly,
Mr Godwin Emefiele
Governor
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

