by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id 9e/UDE+KNF6pqAAAibB4EA
(envelope-from <[email protected]>)
for <>; Fri, 31 Jan 2020 15:13:03 -0500
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 31 Jan 2020 15:13:03 -0500
Received: from mail-ua1-f66.google.com ([209.85.222.66]:44490)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1ixcf0-000BDf-3Z
for ; Fri, 31 Jan 2020 15:13:03 -0500
Received: by mail-ua1-f66.google.com with SMTP id x16so3036540uao.11
for <>; Fri, 31 Jan 2020 12:12:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=sp4KEYxd4cvUyzjrLwdJr6wVwQONpB+spyCq73w5+3g=;
b=XfpCHs3p8VTDi6DWaLX9DLmi7OUJ95v+mKlnDINOnpQoFaz1dTAyNJhFBemZdKl0DB
qst6fY/CGRTz1MEXhDk9oDL+Dk24yxJndE3dOMsLwCR66UUNKSecvFemuJWPg3AU4BjA
UKHIgKjgsZohUILvn2hem2YaLypDqyTRlI3ZeLKk5Vw3zO8ccOYfHDlt4C052FOVY16a
YF2QzeZAEipEDKUExmPffllKyzUdRPNiWBIZTZzS4Qcbz+vUJjZG9UHDPfsG2hJOixAF
Dsip9y8z3ayJ9S/IGwX5228lEvaHHWQFFDC+nmnCsXEXCB96JwH+m49Cm+v5n0xh05Kw
b18A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id
:subject:to;
bh=sp4KEYxd4cvUyzjrLwdJr6wVwQONpB+spyCq73w5+3g=;
b=cQLZ2k/BGvyr4J8Bi+nCtVnT+mm9Ha6Ze9OGqmmwNL606UHqnKP7S3HnF+pmPNP8C5
vo1cWJvskVFe0Yo7KaHRel3iIF9hb2yd4kPUpvAIfPT6vUrGyPX5C+IVVoCrmmIAHrV5
gg6VlVyXA7R8P+FODEKwKIQ1XOUlZAXuzFiPnkuSPg69GBiezC9Tc8fYTp5x5zQkJ0/u
vJY/tm4ewrKkv/8/VR8sqJ+fKlxxFjg5Zt6zybKO7zrK4grPIkn81DbwWjGQnlevrMgn
05mbwk+bQqJsKLqh8b580ST7sPBInDCaHhz0TaauHvnYuO3DFHuB+ujiwNZddMHoTedi
JShw==
X-Gm-Message-State: APjAAAXHVAtgK4Gv5VxWYDLvs6N41EXAvb4WV2XxSfkXVOud0/uow555
SfneAX+SqlPXo0Y2fh9/fAyMM0trV4jY2/iBQnM=
X-Google-Smtp-Source: APXvYqyExOKhcX1sW3wAX5eSAPdu0W5UdqVGCnX8QFMoOMQ4x7+LjwgjYeVP0nMHDMCp7H8BlIBk1zdOwCCBg/3+AWo=
X-Received: by 2002:ab0
: with SMTP id z21mr7437859uap.9.1580501539726;
Fri, 31 Jan 2020 12:12:19 -0800 (PST)
MIME-Version: 1.0
Reply-To: [email protected]
From: mrbello mohammed <[email protected]>
Date: Fri, 31 Jan 2020 12:12:08 -0800
Message-ID: <CABEVDUZUzg2P0Sgw2taFfT9VRYXDqzyZrOxsXJ3aZQ0OJ1cH2w@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000d7aa0e059d75302d"
Bcc:
X-Spam-Status: Yes, score=12.6
X-Spam-Score: 126
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *FROM THE DESK OF: MR BELLO MOHAMMED.DIRECTOR, INTERNATIONAL
REMITTANCE /FOREIGN OPERATIONS.DEAR SIR/MADAM,YOUR CONTRACTOR/INHERITANCE
FUNDS $10.5MILLION.THIS IS TO NOTIFY YOU THAT YOUR OVER DUE INHER [...]
Content analysis details: (12.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.222.66 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.66 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[bm8118921[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrbellomohammed431[at]gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrbellomohammed431[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** INHERITANCE FUND
--000000000000d7aa0e059d75302d
Content-Type: text/plain; charset="UTF-8
FROM THE DESK OF: MR BELLO MOHAMMED.
DIRECTOR, INTERNATIONAL REMITTANCE /
FOREIGN OPERATIONS.
DEAR SIR/MADAM,
YOUR CONTRACTOR/INHERITANCE FUNDS $10.5MILLION.
THISIS TO NOTIFY YOU THAT YOUR OVER DUE INHERITANCE FUNDS HAS BEEN GAZETTEDTO BE RELEASED, VIA TELEX TRANSFER (TT)DIRECT WIRE TRANSFER TO YOU BY THE SENATE COMMITTEE FOR FOREIGN OVER DUE FUND TRANSFER.MEANWHILE,A WOMAN CAME TO MY OFFICE FEW DAYS AGO WITH A LETTER,CLAIMING TO BE YOUR TRUE REPRESENTATIVE.HERE ARE HER INFORMATION:
NAME JANET WHITE
BANK NAME: CITI BANK
BANK ADDRESS:ARIZONA, USA.
ACCOUNT Number: 6503809428.
PLEASE,DO RECONFIRM TO THIS OFFICE, AS A MATTER OF URGENCY IF THIS WOMAN IS FROM YOU SO THAT THE FEDERAL GOVERNMENT WILL NOT BE HELD RESPONSIBLE FORPAYING INTO THE WRONG ACCOUNT NAME AND FOR IMMEDIATE RELEASE OF YOUR CONTRACT, INHERITANCE/AWARD WINNING CLAIM IS INFORMED THAT YOU ARE NOT ALLOWED TO CORRESPOND WITH ANY PERSON OR OFFICE ANYMORE, YOU ARE REQUIRED TO SEND BELLOW:INFORMATION REQUEST FOR YOUR TRANSFER.
(1) YOUR FULL NAME:
(2) FULL ADDRESS OF YOUR CITY, STATE AND COUNTRY:
(3) PHONE, FAX AND MOBILE:
(4) COMPANY NAME, POSITION AND ADDRESS:
(5) BANK INFORMATION:
(A) BANK NAME:
(B) BANK ADDRESS:
(C) ACCOUNT NUMBER:
(D) SWIFT CODE/
(E) ROUTING NUMBER:
(F) IBAN NUMBER
(6) PROFESSION, AGE AND MARITAL STATUS:
(7) A COPY OF YOUR INT'L PASSPORT/DRIVERS LICENSE.
THERESERVE BANK GOVERNOR, EXECUTIVE, BOARD OF DIRECTORS AND THE SENATE COMMITTEE FOR FOREIGN OVER DUE INHERITANCE FUND HAVE APPROVED AND ACCREDITED THIS REPUTABLE BANK WITH THE OFFICE OF THE DIRECTOR,INTERNATIONAL REMITTANCE /FOREIGN OPERATIONS,TO HANDLE AND TRANSFER ALL FOREIGN INHERITANCE FUNDS THIS THIRD QUARTER PAYMENT OF THEYEAR.HOWEVER,WE SHALL PROCEED TO ISSUE ALL PAYMENTS DETAILS TO THE SAIDMRS.WHITE,IF WE DO NOT HEAR FROM YOU WHITEN THE NEXT SEVEN WORKING DAYSFROM TODAY.
CONGRATULATIONS IN ADVANCE.
BEST REGARDS
MR.BELLO MOHAMMED.
Delivered-To:
Received: from
by with LMTP
id 9e/UDE+KNF6pqAAAibB4EA
(envelope-from <[email protected]>)
for <>; Fri, 31 Jan 2020 15:13:03 -0500
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 31 Jan 2020 15:13:03 -0500
Received: from mail-ua1-f66.google.com ([209.85.222.66]:44490)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1ixcf0-000BDf-3Z
for ; Fri, 31 Jan 2020 15:13:03 -0500
Received: by mail-ua1-f66.google.com with SMTP id x16so3036540uao.11
for <>; Fri, 31 Jan 2020 12:12:41 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
bh=sp4KEYxd4cvUyzjrLwdJr6wVwQONpB+spyCq73w5+3g=;
b=XfpCHs3p8VTDi6DWaLX9DLmi7OUJ95v+mKlnDINOnpQoFaz1dTAyNJhFBemZdKl0DB
qst6fY/CGRTz1MEXhDk9oDL+Dk24yxJndE3dOMsLwCR66UUNKSecvFemuJWPg3AU4BjA
UKHIgKjgsZohUILvn2hem2YaLypDqyTRlI3ZeLKk5Vw3zO8ccOYfHDlt4C052FOVY16a
YF2QzeZAEipEDKUExmPffllKyzUdRPNiWBIZTZzS4Qcbz+vUJjZG9UHDPfsG2hJOixAF
Dsip9y8z3ayJ9S/IGwX5228lEvaHHWQFFDC+nmnCsXEXCB96JwH+m49Cm+v5n0xh05Kw
b18A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
:subject:to;
bh=sp4KEYxd4cvUyzjrLwdJr6wVwQONpB+spyCq73w5+3g=;
b=cQLZ2k/BGvyr4J8Bi+nCtVnT+mm9Ha6Ze9OGqmmwNL606UHqnKP7S3HnF+pmPNP8C5
vo1cWJvskVFe0Yo7KaHRel3iIF9hb2yd4kPUpvAIfPT6vUrGyPX5C+IVVoCrmmIAHrV5
gg6VlVyXA7R8P+FODEKwKIQ1XOUlZAXuzFiPnkuSPg69GBiezC9Tc8fYTp5x5zQkJ0/u
vJY/tm4ewrKkv/8/VR8sqJ+fKlxxFjg5Zt6zybKO7zrK4grPIkn81DbwWjGQnlevrMgn
05mbwk+bQqJsKLqh8b580ST7sPBInDCaHhz0TaauHvnYuO3DFHuB+ujiwNZddMHoTedi
JShw==
X-Gm-Message-State: APjAAAXHVAtgK4Gv5VxWYDLvs6N41EXAvb4WV2XxSfkXVOud0/uow555
SfneAX+SqlPXo0Y2fh9/fAyMM0trV4jY2/iBQnM=
X-Google-Smtp-Source: APXvYqyExOKhcX1sW3wAX5eSAPdu0W5UdqVGCnX8QFMoOMQ4x7+LjwgjYeVP0nMHDMCp7H8BlIBk1zdOwCCBg/3+AWo=
X-Received: by 2002:ab0
Fri, 31 Jan 2020 12:12:19 -0800 (PST)
MIME-Version: 1.0
Reply-To: [email protected]
From: mrbello mohammed <[email protected]>
Date: Fri, 31 Jan 2020 12:12:08 -0800
Message-ID: <CABEVDUZUzg2P0Sgw2taFfT9VRYXDqzyZrOxsXJ3aZQ0OJ1cH2w@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000d7aa0e059d75302d"
Bcc:
X-Spam-Status: Yes, score=12.6
X-Spam-Score: 126
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *FROM THE DESK OF: MR BELLO MOHAMMED.DIRECTOR, INTERNATIONAL
REMITTANCE /FOREIGN OPERATIONS.DEAR SIR/MADAM,YOUR CONTRACTOR/INHERITANCE
FUNDS $10.5MILLION.THIS IS TO NOTIFY YOU THAT YOUR OVER DUE INHER [...]
Content analysis details: (12.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.222.66 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.66 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[bm8118921[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrbellomohammed431[at]gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrbellomohammed431[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** INHERITANCE FUND
--000000000000d7aa0e059d75302d
Content-Type: text/plain; charset="UTF-8
FROM THE DESK OF: MR BELLO MOHAMMED.
DIRECTOR, INTERNATIONAL REMITTANCE /
FOREIGN OPERATIONS.
DEAR SIR/MADAM,
YOUR CONTRACTOR/INHERITANCE FUNDS $10.5MILLION.
THISIS TO NOTIFY YOU THAT YOUR OVER DUE INHERITANCE FUNDS HAS BEEN GAZETTEDTO BE RELEASED, VIA TELEX TRANSFER (TT)DIRECT WIRE TRANSFER TO YOU BY THE SENATE COMMITTEE FOR FOREIGN OVER DUE FUND TRANSFER.MEANWHILE,A WOMAN CAME TO MY OFFICE FEW DAYS AGO WITH A LETTER,CLAIMING TO BE YOUR TRUE REPRESENTATIVE.HERE ARE HER INFORMATION:
NAME JANET WHITE
BANK NAME: CITI BANK
BANK ADDRESS:ARIZONA, USA.
ACCOUNT Number: 6503809428.
PLEASE,DO RECONFIRM TO THIS OFFICE, AS A MATTER OF URGENCY IF THIS WOMAN IS FROM YOU SO THAT THE FEDERAL GOVERNMENT WILL NOT BE HELD RESPONSIBLE FORPAYING INTO THE WRONG ACCOUNT NAME AND FOR IMMEDIATE RELEASE OF YOUR CONTRACT, INHERITANCE/AWARD WINNING CLAIM IS INFORMED THAT YOU ARE NOT ALLOWED TO CORRESPOND WITH ANY PERSON OR OFFICE ANYMORE, YOU ARE REQUIRED TO SEND BELLOW:INFORMATION REQUEST FOR YOUR TRANSFER.
(1) YOUR FULL NAME:
(2) FULL ADDRESS OF YOUR CITY, STATE AND COUNTRY:
(3) PHONE, FAX AND MOBILE:
(4) COMPANY NAME, POSITION AND ADDRESS:
(5) BANK INFORMATION:
(A) BANK NAME:
(B) BANK ADDRESS:
(C) ACCOUNT NUMBER:
(D) SWIFT CODE/
(E) ROUTING NUMBER:
(F) IBAN NUMBER
(6) PROFESSION, AGE AND MARITAL STATUS:
(7) A COPY OF YOUR INT'L PASSPORT/DRIVERS LICENSE.
THERESERVE BANK GOVERNOR, EXECUTIVE, BOARD OF DIRECTORS AND THE SENATE COMMITTEE FOR FOREIGN OVER DUE INHERITANCE FUND HAVE APPROVED AND ACCREDITED THIS REPUTABLE BANK WITH THE OFFICE OF THE DIRECTOR,INTERNATIONAL REMITTANCE /FOREIGN OPERATIONS,TO HANDLE AND TRANSFER ALL FOREIGN INHERITANCE FUNDS THIS THIRD QUARTER PAYMENT OF THEYEAR.HOWEVER,WE SHALL PROCEED TO ISSUE ALL PAYMENTS DETAILS TO THE SAIDMRS.WHITE,IF WE DO NOT HEAR FROM YOU WHITEN THE NEXT SEVEN WORKING DAYSFROM TODAY.
CONGRATULATIONS IN ADVANCE.
BEST REGARDS
MR.BELLO MOHAMMED.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

