by buried under 419s
Tue Aug 07, 2012 11:37 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 07 Aug 2012 07:01:39 -0700
Received: from static90.bluefire.com.au ([202.146.6.90]:15488 helo=BF-OPT-DMZ5.BFCHOSTING.local)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SykLp-0005SS-UC
for ; Tue, 07 Aug 2012 07:01:39 -0700
Received: from User ([173.200.205.147]) by BF-OPT-DMZ5.BFCHOSTING.local with Microsoft SMTPSVC(6.0.3790.1830);
Tue, 7 Aug 2012 23:59:37 +1000
Reply-To: <[email protected]>
From: "GCFR OFFICE."<[email protected]>
Date: Tue, 7 Aug 2012 09:47:12 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 07 Aug 2012 13:59:38.0140 (UTC) FILETIME=[E228DDC0:01CD74A4]
X-Spam-Status: Yes, score=18.7
X-Spam-Score: 187
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: From: The presidency Federal republic of Nigeria Abuja – Nigeria
Official Gazette [...]
Content analysis details: (18.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[202.146.6.90 listed in bb.barracudacentral.org]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(csteudle[at]aol.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.1 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** ARE YOU STILL ALIVE?
From: The presidency
Federal republic of Nigeria Abuja – Nigeria
Official Gazette
Acts of Revocation of Agency Rights no.: 12,Government Notice No.:9024
Vol. 1 File No: 414/96cp
Attention:
Re: Fund Transfer.
I wish to express my anger in the manner at which your transaction which entails payment of your Fund has being treated by the official of the CBN and Federal Ministry of Finance. I am very upset because the rule of law has been neglected by the payment officials within the Central Bank of Nigeria and Federal Ministry of Finance. Having stepped into the matter, we need your full support in making sure that due process are strictly adhered to so that your rightful funds can be duly paid to you as quickly as possible. It is very Sad that after an in debt investigation into your fund payment, we have made some astonishing discoveries.
1: First there has been a solid plan on ground to divert /Steal your fund by corrupt officials within the Central Bank of Nigeria and Federal Ministry of Finance .The most annoying discovery is that it is this same Corrupt officials that has been responsible for all the hitch /delays in paying your funds, so that they will keep on enjoying the accumulated interest.
2: THE INTERNATIONAL FUND LEGALITY CLEARANCE ACCESS CODE initially issued to your payment that will facilitate the release / wire transfer of your fund by the paying bank has been deleted from your payment file as part of the plot to steal your Fund.
We found out that this was done by staffs of CBN and Federal Ministry of Finance IN A PLOT TO STEAL YOUR MONEY. Due to the ongoing, coupled with abuse of public office and gross fraud been witnessed at CBN and Federal Ministry of Finance, all outstanding payment files have hence been retrieved from the Central Bank of Nigeria and FMF and brought to my Office. I will personally oversee the prompt release of your fund to your nominated bank account. You are only going to pay the sum of $420 to get another THE INTERNATIONAL FUND LEGALITY CLEARANCE ACCESS CODE, That is the only money you will pay.
Be informed that Payment shall be made in foreign currency (U.S Dollar) in full value of the amount approved to your bank account through Telegraphic Wire Transfer to your designated bank account. CONTACT ME WITH THE THE BELOW EMAIL ADDRESS AND MY PHONE NUMBER.
Urgently Confirm receipt of this memo so that we can proceed to finally conclude your fund transfer ASAP.
Yours faithfully,
Arc. Dr. Namadi Sambo (GCFR)
Vice President,
Federal Republic of Nigeria.
Direct Line: +23412133737
Envelope-to:
Delivery-date: Tue, 07 Aug 2012 07:01:39 -0700
Received: from static90.bluefire.com.au ([202.146.6.90]:15488 helo=BF-OPT-DMZ5.BFCHOSTING.local)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SykLp-0005SS-UC
for ; Tue, 07 Aug 2012 07:01:39 -0700
Received: from User ([173.200.205.147]) by BF-OPT-DMZ5.BFCHOSTING.local with Microsoft SMTPSVC(6.0.3790.1830);
Tue, 7 Aug 2012 23:59:37 +1000
Reply-To: <[email protected]>
From: "GCFR OFFICE."<[email protected]>
Date: Tue, 7 Aug 2012 09:47:12 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 07 Aug 2012 13:59:38.0140 (UTC) FILETIME=[E228DDC0:01CD74A4]
X-Spam-Status: Yes, score=18.7
X-Spam-Score: 187
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: From: The presidency Federal republic of Nigeria Abuja – Nigeria
Official Gazette [...]
Content analysis details: (18.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[202.146.6.90 listed in bb.barracudacentral.org]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(csteudle[at]aol.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.1 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** ARE YOU STILL ALIVE?
From: The presidency
Federal republic of Nigeria Abuja – Nigeria
Official Gazette
Acts of Revocation of Agency Rights no.: 12,Government Notice No.:9024
Vol. 1 File No: 414/96cp
Attention:
Re: Fund Transfer.
I wish to express my anger in the manner at which your transaction which entails payment of your Fund has being treated by the official of the CBN and Federal Ministry of Finance. I am very upset because the rule of law has been neglected by the payment officials within the Central Bank of Nigeria and Federal Ministry of Finance. Having stepped into the matter, we need your full support in making sure that due process are strictly adhered to so that your rightful funds can be duly paid to you as quickly as possible. It is very Sad that after an in debt investigation into your fund payment, we have made some astonishing discoveries.
1: First there has been a solid plan on ground to divert /Steal your fund by corrupt officials within the Central Bank of Nigeria and Federal Ministry of Finance .The most annoying discovery is that it is this same Corrupt officials that has been responsible for all the hitch /delays in paying your funds, so that they will keep on enjoying the accumulated interest.
2: THE INTERNATIONAL FUND LEGALITY CLEARANCE ACCESS CODE initially issued to your payment that will facilitate the release / wire transfer of your fund by the paying bank has been deleted from your payment file as part of the plot to steal your Fund.
We found out that this was done by staffs of CBN and Federal Ministry of Finance IN A PLOT TO STEAL YOUR MONEY. Due to the ongoing, coupled with abuse of public office and gross fraud been witnessed at CBN and Federal Ministry of Finance, all outstanding payment files have hence been retrieved from the Central Bank of Nigeria and FMF and brought to my Office. I will personally oversee the prompt release of your fund to your nominated bank account. You are only going to pay the sum of $420 to get another THE INTERNATIONAL FUND LEGALITY CLEARANCE ACCESS CODE, That is the only money you will pay.
Be informed that Payment shall be made in foreign currency (U.S Dollar) in full value of the amount approved to your bank account through Telegraphic Wire Transfer to your designated bank account. CONTACT ME WITH THE THE BELOW EMAIL ADDRESS AND MY PHONE NUMBER.
Urgently Confirm receipt of this memo so that we can proceed to finally conclude your fund transfer ASAP.
Yours faithfully,
Arc. Dr. Namadi Sambo (GCFR)
Vice President,
Federal Republic of Nigeria.
Direct Line: +23412133737
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces