[email protected] MR.GODWIN EMEFIELE

Return-path: <32o30XxQJAM05A.z7wF16x5xyx4xMLNLz5t14.v75@trix.bounces.google.com>
Envelope-to:
Delivery-date: Tue, 05 Jan 2021 16:04:20 +0000
Received: from mail-vk1-f198.google.com ([209.85.221.198]:41922)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <32o30XxQJAM05A.z7wF16x5xyx4xMLNLz5t14.v75@trix.bounces.google.com>)
id 1kwool-0008OF-Cy
for ; Tue, 05 Jan 2021 16:04:20 +0000
Received: by mail-vk1-f198.google.com with SMTP id h63so148272vkh.8
for <>; Tue, 05 Jan 2021 08:03:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id:date:subject:from:to;
bh=8e9Lf9HicShcp6sx8FILZvIVSKFuVYdxOD4JbEwtlWs=;
b=DiBZoG+4+Mbcgvn0GahJm87DtxG7/FCr7KG/9mabDl/YT48JQXna+5DhASAoKUADQ+
p6HP8ZkpuHM6wQKeWu5KhxhpDXwdArJiDvuG0VpEOAevLbWNDZwUzODA2J+M9t6TiUu5
PDI3e5nGuQfL4vzcKwCFhXLIwfag5o+QnipKVBT2ivcPEw6EUtJiCLvPUmdwdjrwsxfp
XGr5CspTRZbis0PvlU2qAyw8i5M1fM+KC8k+2m6qKs+1eSlJRVYxETOsWlYXUx7lnhYT
tmEMJdhS5Z1KkGDYdnHCLj/tzo9WeBVihkuBc7mutIK5rQzRyj71qQVODjewU5uUiviK
1RSw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-id:date:subject
:from:to;
bh=8e9Lf9HicShcp6sx8FILZvIVSKFuVYdxOD4JbEwtlWs=;
b=EEm29CLejT1hdkPwRiJTZCLXbsVPDLCRNvsmWk/A1n4Xq3rgVxbOV3RTR2rAB0Zdba
4gwoeFy3aDBC4JzKiI6vYsulPRZ86fmRmTaemyJkBOeDvxSRkSKQN/3hz3h2kBRiJH91
cQjr08KU/OazlSxq4VvbD5Pr22P4GeUzRnk49Mb9HzhlASQzRTxqjmZiDPSE8FxQnm4C
mzZuewsiMDMCf0AG6VXdL52Gk/ByGvnLAE1YpKf2Ft3u/0IYo083fbrlvc7OK4+CszGX
PqNYswX7f/mL3eVVLwxZr1bBzAHMbu4OxpJR1yyS4oKin4eaU+VUHf/A+XvJGndav3Cu
M4AA==
X-Gm-Message-State: AOAM533g90IEE0U8NstEkvFIvahMeUMxW6mbEpRgy9rcaqwdGkUotvHx
qg3SchzLeRwuvnyJoaKb6EgF2j4BIPacBQlmd3L7
MIME-Version: 1.0
X-Received: by 2002:a05:6102:7d8:: with SMTP id y24mt63002vsg.50.1609862618251;
Tue, 05 Jan 2021 08:03:38 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Tue, 05 Jan 2021 16:03:38 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="00000000000086403505b82959e5"
X-Spam-Status: Yes, score=13.1
X-Spam-Score: 131
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill out the following form: Untitled
form To fill it out, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link

Content analysis details: (13.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mr.godwinemefele3242[at]gmail.com]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_PASS SPF: sender matches SPF record
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mr.godwinemefele3242[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 ENVFROM_GOOG_TRIX From suspicious Google subdomain
0.6 URG_BIZ Contains urgent matter
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.0 GOOGLE_DOC_SUSP Suspicious use of Google Docs
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT RESPONSE NEEDED

--00000000000086403505b82959e5
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes


Attn: Beneficiary,



This is to remind you that Mr. John Edward (Your Courier Delivery Agent) is still at Oklahoma Tulsa International Airport (KTUL) with your award winning, contract / inheritance consignment Boxes worth usd $ 10 million dollars, which I MR.GODWIN EMEFIELE (Governor Central Bank of Nigeria) said to deliver to you, kindly get back to him with your information once again so that he will make the delivery to you or it will be abandon in the hands of the airport authorities.


Your urgent response is awaiting.


Name= Mr. John Edward,
email address= [email protected]
Telephone= Call me or text +1337-944-9363

Best Regards,


MR.GODWIN EMEFIELE,
NEW EXECUTIVE GOVERNOR,
CENTRAL BANK OF NIGERIA
MOBILE: +234-7018 140 3346

[Wiljames]

Still using this email address in 2021 - sent from [email protected]

INTERNATIONAL MONETARY FUND, FUND OFFICE UNITED NATIONS
885 SECOND AVE,26TH FLOOR
NEW YORK ,NY 10017

Attn: Beneficiary

Please i would want you to advice us on why you suddenly want to change your home address which we will use to deliver your funds to you through diplomatic means, you are making work too difficult for us here because we have almost completed the arrangement to deliver it to you today with the initial home address that you earlier provided to us as soon as you make the required payment.

Why do you want it to be delivered to a different name and address at this time, i hope you know the gravity of the offence and charges that this kind of action might attract you.

Mr Gregory Philips and His Attorney came to my office Yesterday handing over to me a Swooned Affidavit from the British Royal Court and A sworn Affidavit from you and an application for Change Of address Instructing me to redirect the delivery to the Following address below in the United States :

Mr Gregory Philips
1725 Constitution Road #5010 Pueblo, Colorado 81001

When trying to find out from him what transpired, I found out that he was too anxious, immediately as he was ready to offset all the delivery charges attached to your fund delivery and had all the legal documents to back up his claim. In order for them to give me room for further investigations I told them that the delivery could not be carried out immediately because of some errors on the documents and asked them to come back in the next 3
days.

Please respond to this immediately and let me know if they have your consent towards this because if i did not hear from you before 77 hours from now, i will not have any option than to dance to their tone.

I will wait to hear from you now, help us to serve you better..

I WILL WAIT TO HEAR FROM YOU.

BEST REGARD.
Mr. Adams Lerrick - [email protected]
DIRECTOR,INTERNATIONAL MONETARY FUND.
NEW YORK,UNITED STATES.