#392855 by buried under 419s
Sat Aug 03, 2019 10:29 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id CMYCNJRmRV1OVQAAjbubUg
for <>; Sat, 03 Aug 2019 03:48:52 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 03 Aug 2019 03:48:52 -0700
Received: from mail-io1-f65.google.com ([209.85.166.65]:45697)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1htral-0005fd-QN
for ; Sat, 03 Aug 2019 03:48:52 -0700
Received: by mail-io1-f65.google.com with SMTP id g20so157866335ioc.12
for <>; Sat, 03 Aug 2019 03:48:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Y5RSfm/ASl71b+rOJ+Tz+NxTK6WBb3gm5FO5YDHAgZ8=;
b=DYWLVutNDomHV7CsgctPZn1rQfIRHekSO2cXUFRz0MS3N4bDvZB0vFzWE03DFEs7R4
d425i1spW5g/bBiAQE4S5ycOrRyjnjDZQ097iZ8WnSM5F54J143xr+eGVfCdIZXsncFK
6yQVPRCAr80vVmfLaE1qLpKuHtZ/br3hX1/GEx+gUfsQTHkMwthkDVEuby0APV23drya
jVHrZJuJGFfb05D9Jxueahp+hu7udRkODGoKQ3jvDhXyEUI7qbG3yQJkK53r5h7ACozi
p0A8lVg9b5CSKa2t1QoU1XRBe0IQN0jJucSpYO3TOcaYs3IFhVGucVWB0sHufXhOETwl
pshw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Y5RSfm/ASl71b+rOJ+Tz+NxTK6WBb3gm5FO5YDHAgZ8=;
b=VBn4naL7wuXKp0qSUFcM3c9JFAnaSqehEm5SKrMUQBCvpELIYYQcgldD5IL0RvDgsr
Rfqxu7t9Iy0/R0KspA4tWMEvQMiyak3Z/wGaAYF4403xfVAA0AyIJe6NOZC/Bri0VqQj
TSMAzdyvnOcHOfZoW8CwfrwPPz7coXIeS6S+7rkcz28dPuFLFhNwCj75UTwJYDcznkXf
lRk3IVXBxckmxfDady5JCB9o3MBn4su6I2NXdIIBHPR+XlTrfIEpl0zyYMWZLkGjVgJU
idcZsj6f7UBhgEWCdGrxIU6NiJl9hm1/pT4kRur5zjXCNqMWCekw4+WyVGagk78upx+f
I/Tw==
X-Gm-Message-State: APjAAAUnnZfdzjpOBfQ0b4oeJGg1a4p1h1fVRrAjb7Lq2Ih/2tlu9+wT
zg0h0k9Y7uWdfiAFKX2yfoS7+Os0MP4ySV1KY9o=
X-Google-Smtp-Source: APXvYqzQbOb0EBUmXW5rdirJK7HnZSBysk8FBtfFm/fvGGsoGbz8BupmtL7B0NC1ri0md04/vzXPCsLve1DalUiZI6A=
X-Received: by 2002:a5d:94d7:: with SMTP id y23mr14517193ior.296.1564829291258;
Sat, 03 Aug 2019 03:48:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a92:da8d:0:0:0:0:0 with HTTP; Sat, 3 Aug 2019 03:48:10 -0700 (PDT)
Reply-To: [email protected]
From: "Mrs. Aishah N, Ahmad" <[email protected]>
Date: Sat, 3 Aug 2019 03:48:10 -0700
Message-ID: <CAOOqKu5ru2F+rzDYSLQA=Do7aJVhnFOAFRgp9PorrTmYQOW4rw@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=12.5
X-Spam-Score: 125
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Central Bank of Nigeria Zaria Street, Garki II, Nigeria -
P.M.B. 0187, Garki, Abuja Tell/Fax:+234-81 35554903 Telex: 23405 REF: FINAL
PAYMENT OF $10.5M Please kindly confirm to us if you have any payment in
Nigeria or London because received today from Mr.James Wilkinson, as your
next of kin, instructing us to effect payment through your new nominated account.
[...]
Content analysis details: (12.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.166.65 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paymentofficedetails1271[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(paymentoffice337[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (paymentofficedetails1271[at]gmail.com)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 HK_SCAM No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Sir,
Central Bank of Nigeria
Zaria Street, Garki II, Nigeria - P.M.B. 0187, Garki, Abuja
Tell/Fax:+234-81 35554903
Telex: 23405
REF: FINAL PAYMENT OF $10.5M
Please kindly confirm to us if you have any payment in Nigeria or
London because received today from Mr.James Wilkinson, as your next of
kin, instructing us to effect payment through your new nominated
account.
BANQUE NATIONAL DE CANADA
540 1ST STREET IBERVILLE
QUEBEC, CANADA.
A/NO 20-181-51 TRANSIT: 04431006
Expectably, your payment will be released to your new account within
48 hours of receiving your confirmation. We shall at the same time be
sending to you, the receipt including your telex copy for onward
confirmation of your fund from our bank. This is a follow upon the
resolution reached by the WORLD BANK and IMF to intervene in the
situation and release all impending inheritance funds in this
bank,yours inclusive.
We have made effort to reach you on the telephone number presented
also by your next of kin but we are unable. Hence, we decided to reach
you via your email address. You are therefore advised,to confirm to
this office immediately you receive this letter before the transfer
would be made.
Thank you for your anticipated cooperation
Waiting for your soonest response.
Mrs. Aishah N, Ahmad
Deputy Governor,
Delivered-To:
Received: from
by with LMTP id CMYCNJRmRV1OVQAAjbubUg
for <>; Sat, 03 Aug 2019 03:48:52 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 03 Aug 2019 03:48:52 -0700
Received: from mail-io1-f65.google.com ([209.85.166.65]:45697)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1htral-0005fd-QN
for ; Sat, 03 Aug 2019 03:48:52 -0700
Received: by mail-io1-f65.google.com with SMTP id g20so157866335ioc.12
for <>; Sat, 03 Aug 2019 03:48:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Y5RSfm/ASl71b+rOJ+Tz+NxTK6WBb3gm5FO5YDHAgZ8=;
b=DYWLVutNDomHV7CsgctPZn1rQfIRHekSO2cXUFRz0MS3N4bDvZB0vFzWE03DFEs7R4
d425i1spW5g/bBiAQE4S5ycOrRyjnjDZQ097iZ8WnSM5F54J143xr+eGVfCdIZXsncFK
6yQVPRCAr80vVmfLaE1qLpKuHtZ/br3hX1/GEx+gUfsQTHkMwthkDVEuby0APV23drya
jVHrZJuJGFfb05D9Jxueahp+hu7udRkODGoKQ3jvDhXyEUI7qbG3yQJkK53r5h7ACozi
p0A8lVg9b5CSKa2t1QoU1XRBe0IQN0jJucSpYO3TOcaYs3IFhVGucVWB0sHufXhOETwl
pshw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Y5RSfm/ASl71b+rOJ+Tz+NxTK6WBb3gm5FO5YDHAgZ8=;
b=VBn4naL7wuXKp0qSUFcM3c9JFAnaSqehEm5SKrMUQBCvpELIYYQcgldD5IL0RvDgsr
Rfqxu7t9Iy0/R0KspA4tWMEvQMiyak3Z/wGaAYF4403xfVAA0AyIJe6NOZC/Bri0VqQj
TSMAzdyvnOcHOfZoW8CwfrwPPz7coXIeS6S+7rkcz28dPuFLFhNwCj75UTwJYDcznkXf
lRk3IVXBxckmxfDady5JCB9o3MBn4su6I2NXdIIBHPR+XlTrfIEpl0zyYMWZLkGjVgJU
idcZsj6f7UBhgEWCdGrxIU6NiJl9hm1/pT4kRur5zjXCNqMWCekw4+WyVGagk78upx+f
I/Tw==
X-Gm-Message-State: APjAAAUnnZfdzjpOBfQ0b4oeJGg1a4p1h1fVRrAjb7Lq2Ih/2tlu9+wT
zg0h0k9Y7uWdfiAFKX2yfoS7+Os0MP4ySV1KY9o=
X-Google-Smtp-Source: APXvYqzQbOb0EBUmXW5rdirJK7HnZSBysk8FBtfFm/fvGGsoGbz8BupmtL7B0NC1ri0md04/vzXPCsLve1DalUiZI6A=
X-Received: by 2002:a5d:94d7:: with SMTP id y23mr14517193ior.296.1564829291258;
Sat, 03 Aug 2019 03:48:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a92:da8d:0:0:0:0:0 with HTTP; Sat, 3 Aug 2019 03:48:10 -0700 (PDT)
Reply-To: [email protected]
From: "Mrs. Aishah N, Ahmad" <[email protected]>
Date: Sat, 3 Aug 2019 03:48:10 -0700
Message-ID: <CAOOqKu5ru2F+rzDYSLQA=Do7aJVhnFOAFRgp9PorrTmYQOW4rw@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=12.5
X-Spam-Score: 125
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Central Bank of Nigeria Zaria Street, Garki II, Nigeria -
P.M.B. 0187, Garki, Abuja Tell/Fax:+234-81 35554903 Telex: 23405 REF: FINAL
PAYMENT OF $10.5M Please kindly confirm to us if you have any payment in
Nigeria or London because received today from Mr.James Wilkinson, as your
next of kin, instructing us to effect payment through your new nominated account.
[...]
Content analysis details: (12.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.166.65 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paymentofficedetails1271[at]gmail.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(paymentoffice337[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (paymentofficedetails1271[at]gmail.com)
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 HK_SCAM No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Sir,
Central Bank of Nigeria
Zaria Street, Garki II, Nigeria - P.M.B. 0187, Garki, Abuja
Tell/Fax:+234-81 35554903
Telex: 23405
REF: FINAL PAYMENT OF $10.5M
Please kindly confirm to us if you have any payment in Nigeria or
London because received today from Mr.James Wilkinson, as your next of
kin, instructing us to effect payment through your new nominated
account.
BANQUE NATIONAL DE CANADA
540 1ST STREET IBERVILLE
QUEBEC, CANADA.
A/NO 20-181-51 TRANSIT: 04431006
Expectably, your payment will be released to your new account within
48 hours of receiving your confirmation. We shall at the same time be
sending to you, the receipt including your telex copy for onward
confirmation of your fund from our bank. This is a follow upon the
resolution reached by the WORLD BANK and IMF to intervene in the
situation and release all impending inheritance funds in this
bank,yours inclusive.
We have made effort to reach you on the telephone number presented
also by your next of kin but we are unable. Hence, we decided to reach
you via your email address. You are therefore advised,to confirm to
this office immediately you receive this letter before the transfer
would be made.
Thank you for your anticipated cooperation
Waiting for your soonest response.
Mrs. Aishah N, Ahmad
Deputy Governor,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces