by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 6HHVEX653V3pWAAAjbubUg
for <>; Tue, 26 Nov 2019 15:47:10 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 26 Nov 2019 15:47:10 -0800
Received: from vlgmebel.ru ([95.181.230.9]:57674)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iZkY0-0005uX-N4
for ; Tue, 26 Nov 2019 15:47:10 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=vlgmebel.ru
; s=mail; h=Message-Id:Reply-To:Date:From:To:Subject:Content-Description:
Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Cc:Content-ID:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=Q+8fmNiKrxQiR4wzSGb2sv97fXjbOoD/oqZhPB5ATPg=; b=eTKaSzNZT+hl/Ce+5VTxnzYbws
HFBXrOdkhEixp8WpiYJJBeZGYdxAf0yeF467PAGB3ospGmjnyLcoZKnvIsVYrKZLTXvnUxYPOwtuU
s7mQIF6e5u3Ck5xIiu8IIkCqw4NcsEht/opDcQnj0gVWd8bjGduO1xEpYeuR8HdWSGY4=;
Received: from [41.58.251.38] (helo=[192.168.8.109])
by vlgmebel.ru with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.90_1)
(envelope-from <[email protected]>)
id 1iZD8c-0000xD-CS; Mon, 25 Nov 2019 15:06:42 +0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr.Daniel Brown" <[email protected]>
Date: Sun, 24 Nov 2019 13:06:27 -0800
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=13.9
X-Spam-Score: 139
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ATTENTION SIR/MADAM I WILL BE BRINGING YOUR FUNDS THROUGH
TO YOU AS SOON AS POSSIBLE YOU COMPLY TODAY/TOMORROW THIS TIME I WILL NOT
GO THROUGH CUSTOMS BECAUSE AS A SECRETARY TO AMBASSADOR TO NIGERIA,I AM A
US GOVERNMENT AGENT AND I HAVE THE VETO POWER TO GO THROUGH CUSTOMS. [...]
Content analysis details: (13.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[95.181.230.9 listed in zen.spamhaus.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(danielbrown1770[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
1.0 HK_NAME_MR_MRS No description available.
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** Confidential"...............SECRETARY TO THE US AMBASSADOR TO NIGERIA
ATTENTION SIR/MADAM
I WILL BE BRINGING YOUR FUNDS THROUGH TO YOU AS SOON AS POSSIBLE YOU COMPLY
TODAY/TOMORROW THIS TIME I WILL NOT GO
THROUGH CUSTOMS BECAUSE AS A SECRETARY TO AMBASSADOR TO NIGERIA,I AM A US GOVERNMENT
AGENT AND I HAVE THE VETO POWER TO GO THROUGH CUSTOMS.
AS SOON AS I AM THROUGH WITH THE MEETING TODAY I SHALL THEN PROCEED .(RESEND YOUR
CELL PHONE NUMBER AND THE ADDRESS WHERE YOU WANT ME TO BRING THE PACKAGE).
YOU HAVE REALLY PAID SO MUCH IN THIS DELIVERY THAT MAKES ME WONDER.YOU ARE A VERY
LUCKY PERSON BECAUSE I SHALL BE BRINGING IT MYSELF AND THERE IS NOTHING ANYONE CAN
DO ABOUT IT. FOR BETTER UNDERSTANDING THERE IS ABSOLUTELY GOING TO BE GREAT DOUBT
AND DISTRUST IN YOUR HEART IN RESPECT TO THIS EMAIL COUPLED WITH THE FACT THAT SO
MANY MISCREANTS AND IMPOSTORS HAVE TAKEN POSSESSION OF THE INTERNET TO FACILITATE
THEIR NEFARIOUS DEEDS,THEREBY MAKING IT EXTREMELY DIFFICULT FOR GENUINE AND
LEGITIMATE BUSINESS CLASS PERSONS TO GET ATTENTION AND RECONSECRATION YOUR PACKAGE
MUST BE REGISTERED AS AN AMBASSADORIAL PACKAGE FOR ME TO DEFEAT ALL ODDS AND THE
COST OF REGISTERING IT IS $350.00
YOU SHOULD SEND THE FEE DIRECTLY TO THE CARGO REGISTRATION OFFICER WITH THE INFO BELOW-
Receiver's Name: OKORO GAIL MARTINS
Receiver's Address: 868 DILLARD ROAD,ROCK HILL SC 29730 USA
AMOUNT :$350
AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME THE PAYMENT INFORMATION VIA EMAIL
ATTACHMENT,
I EXPECT YOU TO COMPLY BEFORE THEN SO THAT THE DELIVERY CAN BE COMPLETED.IF YOU DO
NOT COMPLY,THEN IT WILL NOT BE MY FAULT IF YOU DO NOT RECEIVE YOUR PACKAGE.
SIGN
MR DANIEL BROWN
SECRETARY TO THE US AMBASSADOR TO NIGERIA
Delivered-To:
Received: from
by with LMTP id 6HHVEX653V3pWAAAjbubUg
for <>; Tue, 26 Nov 2019 15:47:10 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 26 Nov 2019 15:47:10 -0800
Received: from vlgmebel.ru ([95.181.230.9]:57674)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iZkY0-0005uX-N4
for ; Tue, 26 Nov 2019 15:47:10 -0800
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=vlgmebel.ru
; s=mail; h=Message-Id:Reply-To:Date:From:To:Subject:Content-Description:
Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Cc:Content-ID:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=Q+8fmNiKrxQiR4wzSGb2sv97fXjbOoD/oqZhPB5ATPg=; b=eTKaSzNZT+hl/Ce+5VTxnzYbws
HFBXrOdkhEixp8WpiYJJBeZGYdxAf0yeF467PAGB3ospGmjnyLcoZKnvIsVYrKZLTXvnUxYPOwtuU
s7mQIF6e5u3Ck5xIiu8IIkCqw4NcsEht/opDcQnj0gVWd8bjGduO1xEpYeuR8HdWSGY4=;
Received: from [41.58.251.38] (helo=[192.168.8.109])
by vlgmebel.ru with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.90_1)
(envelope-from <[email protected]>)
id 1iZD8c-0000xD-CS; Mon, 25 Nov 2019 15:06:42 +0300
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr.Daniel Brown" <[email protected]>
Date: Sun, 24 Nov 2019 13:06:27 -0800
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=13.9
X-Spam-Score: 139
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ATTENTION SIR/MADAM I WILL BE BRINGING YOUR FUNDS THROUGH
TO YOU AS SOON AS POSSIBLE YOU COMPLY TODAY/TOMORROW THIS TIME I WILL NOT
GO THROUGH CUSTOMS BECAUSE AS A SECRETARY TO AMBASSADOR TO NIGERIA,I AM A
US GOVERNMENT AGENT AND I HAVE THE VETO POWER TO GO THROUGH CUSTOMS. [...]
Content analysis details: (13.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[95.181.230.9 listed in zen.spamhaus.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(danielbrown1770[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
1.0 HK_NAME_MR_MRS No description available.
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** Confidential"...............SECRETARY TO THE US AMBASSADOR TO NIGERIA
ATTENTION SIR/MADAM
I WILL BE BRINGING YOUR FUNDS THROUGH TO YOU AS SOON AS POSSIBLE YOU COMPLY
TODAY/TOMORROW THIS TIME I WILL NOT GO
THROUGH CUSTOMS BECAUSE AS A SECRETARY TO AMBASSADOR TO NIGERIA,I AM A US GOVERNMENT
AGENT AND I HAVE THE VETO POWER TO GO THROUGH CUSTOMS.
AS SOON AS I AM THROUGH WITH THE MEETING TODAY I SHALL THEN PROCEED .(RESEND YOUR
CELL PHONE NUMBER AND THE ADDRESS WHERE YOU WANT ME TO BRING THE PACKAGE).
YOU HAVE REALLY PAID SO MUCH IN THIS DELIVERY THAT MAKES ME WONDER.YOU ARE A VERY
LUCKY PERSON BECAUSE I SHALL BE BRINGING IT MYSELF AND THERE IS NOTHING ANYONE CAN
DO ABOUT IT. FOR BETTER UNDERSTANDING THERE IS ABSOLUTELY GOING TO BE GREAT DOUBT
AND DISTRUST IN YOUR HEART IN RESPECT TO THIS EMAIL COUPLED WITH THE FACT THAT SO
MANY MISCREANTS AND IMPOSTORS HAVE TAKEN POSSESSION OF THE INTERNET TO FACILITATE
THEIR NEFARIOUS DEEDS,THEREBY MAKING IT EXTREMELY DIFFICULT FOR GENUINE AND
LEGITIMATE BUSINESS CLASS PERSONS TO GET ATTENTION AND RECONSECRATION YOUR PACKAGE
MUST BE REGISTERED AS AN AMBASSADORIAL PACKAGE FOR ME TO DEFEAT ALL ODDS AND THE
COST OF REGISTERING IT IS $350.00
YOU SHOULD SEND THE FEE DIRECTLY TO THE CARGO REGISTRATION OFFICER WITH THE INFO BELOW-
Receiver's Name: OKORO GAIL MARTINS
Receiver's Address: 868 DILLARD ROAD,ROCK HILL SC 29730 USA
AMOUNT :$350
AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME THE PAYMENT INFORMATION VIA EMAIL
ATTACHMENT,
I EXPECT YOU TO COMPLY BEFORE THEN SO THAT THE DELIVERY CAN BE COMPLETED.IF YOU DO
NOT COMPLY,THEN IT WILL NOT BE MY FAULT IF YOU DO NOT RECEIVE YOUR PACKAGE.
SIGN
MR DANIEL BROWN
SECRETARY TO THE US AMBASSADOR TO NIGERIA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
