[email protected] JEH JOHNSON

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 22 Feb 2014 00:41:00 -0800
Received: from mail-vc0-f193.google.com ([209.85.220.193]:58248)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1WH88n-0005Ki-Jy
for ; Sat, 22 Feb 2014 00:41:00 -0800
Received: by mail-vc0-f193.google.com with SMTP id hq11so1385246vcb.0
for <>; Sat, 22 Feb 2014 00:40:58 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=RkFXEnGuYYast/jUsTtHFegIUeN4+5QfXN5HprPW0xg=;
b=wdWuAr79SQh5V/SfYEqoka2QqO72tYI0EmsacSucL7duI0TRBX2bvpZ/AAgyhwRbqg
os45rZ2Z/AZm2vNs3csKYofd0qigYZLX4XzhMqq2j+WJ06vGQfSZvcgUxbuopRN50ti9
XFycUtaSf5kzrhHbAsFkGLKLe8Ma4MksM5uJ5J6LRivjViOjmfkvPd7eCsLm8dGfnQIB
d6HugjapncpFmxt0qwm0cifGJ33Y0ztkwehJFyd33zEhqTnm/Hzrj+D/5T/MpFvoFW3Q
NV8YD0YAu+AfYqrxsc6N8sX1QNSqd23UhW3/fFkr3MNuXkL4P+u/IRo3It0EEDQASo+j
hmtg==
MIME-Version: 1.0
X-Received: by 10.220.58.202 with SMTP id i10mr7370613vch.23.1393058458739;
Sat, 22 Feb 2014 00:40:58 -0800 (PST)
Received: by 10.220.8.14 with HTTP; Sat, 22 Feb 2014 00:40:58 -0800 (PST)
Date: Sat, 22 Feb 2014 08:40:58 +0000
Message-ID: <CAPRJ60FgG9hNPt7pGQ5weQkNCmHx4Mg8jTMkmeyWdmsVnwbCow@mail.gmail.com>
From: DEPARTMENT OF HOMELAND SECURITY <[email protected]>
To:
Content-Type: multipart/alternative; boundary=001a11c2d70e95a8ee04f2fab2c4
X-Spam-Status: Yes, score=13.4
X-Spam-Score: 134
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: [image: UNITED STATES OFFICE OF HOMELAND SECURITY] U.S DEPARTMENT
OF HOMELAND SECURITY, MG Timothy J. Lowenberg,Adjutant General and Director
State Military Department Washington Military Dept., Bldg1 Camp Murry ,Wash
98430-5000 USA. [...]

Content analysis details: (13.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(investigation.org[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.220.193 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
2.9 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
3.8 MONEY_FRAUD_3 Lots of money and several fraud phrases
3.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** GOOD NEWS OVER THE RELEASE OF YOUR FUND VALUED $11.5 MILLION

--001a11c2d70e95a8ee04f2fab2c4
Content-Type: text/plain; charset=ISO-8859-1

[image: UNITED STATES OFFICE OF HOMELAND SECURITY]

U.S DEPARTMENT OF HOMELAND
SECURITY,
MG Timothy J. Lowenberg,Adjutant General and
Director State Military Department
Washington Military Dept., Bldg1 Camp Murry
,Wash 98430-5000 USA.


Attn: Beneficiary,

This is to notify you that your fund has been approved for immediate
release to your doorstep. A new agent have also been assignment to carry
out this delivery immediately and you are advise to respond back to us
immediately with your Address for the delivery and your direct contact
number where you can be reached.

This is as a result of the just concluded meeting which we held with the
United Nation and they also paid all the pending fee and the new agent have
just arrive to complete the delivery of your fund valued $11.5 Million
Dollars. This is to take place immediately or your fund will be send back
to United Nation according to the instruction given to you.

Your only obligation is the tax clearance certificate which has to be
procured immediately to enable the agent complete the delivery in the
morning. The cost for this certificate is $50 which has to be send to the
department to issue it through western union money transfer with this
information:

Receiver Name: Onuh Chinyere
City: Lagos
Country: Nigeria
Text: What Colour?
Answer: Green.

Make sure you send us the MTCN and sender's name after sending the money
including your address and contact number. Understand that this is your
opportunity to receive your fund which only comes but ones.

You can also reach Mr. William Steven the new agent on 303-647-8190. He has
only tomorrow to handle this delivery so make sure you do not fail in the
morning.

Sincerely

JEH JOHNSON
SECRETARY OF THE DEPARTMENT OF HOMELAND SECURITY

[same email different text]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 02 Jul 2014 00:44:07 -0700
Received: from mail-wi0-f195.google.com ([209.85.212.195]:49896)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1X2FD1-0004bX-42
for ; Wed, 02 Jul 2014 00:44:07 -0700
Received: by mail-wi0-f195.google.com with SMTP id hi2so3364513wib.10
for <m>; Wed, 02 Jul 2014 00:44:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=MAPCz84wX4bVrubuSk2GNifWyOSsMtB7B8zAAyspz2s=;
b=0N18OaJKVRArZGUd7CoP0r1qZFGl20wppsBvQq7v/T+sntHnWfsAbrH1RFhlnhRn2m
GjOtvMaRZYlOVGfHfNMoEh64vp8jCC5prRRnDJ9rZC4jM+aZHkigSgG39ekb9Lhl8UDi
qqW6OQz5TkJhbSS0YXhAI0fL3mamzoIoKfnEEyqB5ykigwa2YqU+R+s20yal0maXPjoj
lFOugVEH478823H1SItoycuhAr3dqoMODKyzbRsp/h0ZwMQTeGcgtjly/yew9xYZrVGA
6F1WY5zCkFC1lFxcNH3iH7W0TNT81Fy49GVyHhc/LuZ+U+PQZptVQwlHYFU/Svj0u5ZL
Ob4w==
MIME-Version: 1.0
X-Received: by 10.180.207.48 with SMTP id lt16mr1665560wic.32.1404287043138;
Wed, 02 Jul 2014 00:44:03 -0700 (PDT)
Received: by 10.216.10.4 with HTTP; Wed, 2 Jul 2014 00:44:03 -0700 (PDT)
Reply-To: [email protected]
Date: Wed, 2 Jul 2014 00:44:03 -0700
Message-ID: <CAGnRRcZYKqr6ZW3=s5jqMJ2g=Uz5ppL-+UpZdfmyE9BscDnUQQ@mail.gmail.com>
From: DEPARTMENT OF HOMELAND SECURITY <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=001a11c3f6ea5e7c5b04fd310e95
Bcc:
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: *Attention :Beneficiary.* I wish to notify you that we are
not happy with the information reaching us over your inability to claim your
consignment after the just concluded meeting with the US Customs and Border
Protection. [...]

Content analysis details: (12.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jacob.secretary[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.212.195 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4973]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.8 MONEY_FRAUD_3 Lots of money and several fraud phrases
3.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** FROM US SECRETARY OF THE TREASURY

--001a11c3f6ea5e7c5b04fd310e95
Content-Type: text/plain; charset=UTF-8

*Attention :Beneficiary.*

I wish to notify you that we are not happy with the information reaching us
over your inability to claim your consignment after the just concluded
meeting with the US Customs and Border Protection.

As a matter of urgency, you are here by giving another grace of 24hours to
finalize with this office, on the above subject or you forward an
authorization letter, authorizing this honorable office to revoke your
payment at this second quarter of the fiscal year 2014, and once this is
done, a want of no evidence smart card will be placed on your payment file
which means that your payment will be automatically be placed in the
government suspense consignment contract/inheritance funds.

So Due to the very fact that you are finding it difficult to claim your
consignment. We wish to inform you that you can now claim your consignment
by acquiring WAIVER CERTIFICATE, Note that you are only going to pay the
sum $150 dollar for the said certificate. Immediately the certificate is
issued to you, Your agent Mr. James Duru shall deliver your consignment to
you within 24hours. Pay the $150 dollar to the United Nation receiving
officer below via money gram or western union money transfer.

Receiver Name: John Malvin
City: Lagos
Country: Nigeria
Text Question: What Colour?
Answer: Green

You are advise to call James Duru immediately on 202-630-2291 because after
today he shall be leaving.

Shipment details.

CONSIGNMENT DETAILS
TAG#: BJ2661428986
REF: B762661428BJ
REG NO: 0229BJ
RECEIPT NO: 339331,
BATCH NO: 55674
RELEASE CODE NO: 0763
VALUED $11,500,000.00 USD
DIPLOMATIC AGENT: James Duru.

Please act timely.