by buried under 419s
Wed Jun 25, 2014 4:13 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 25 Jun 2014 12:32:10 -0700
Received: from mail-vc0-f194.google.com ([209.85.220.194]:41919)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1WzsvN-0006je-Fk
for ; Wed, 25 Jun 2014 12:32:10 -0700
Received: by mail-vc0-f194.google.com with SMTP id ij19so604161vcb.9
for <>; Wed, 25 Jun 2014 12:32:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=FH5YnbVMIrYtnUkZRigHWaOJr2zWFrrzB34oerEdWZA=;
b=Bw2PmcQZeAPEjCHk6P2OeYFcHlOXsSqHKwzj+dTEScVtNm1cLwZS3hdXofBuje5EeQ
zItHMZ9RvC/iPydlBed5Jd2D0Mw1hz4sUNpSasy0oO/DmMOYdsQNu6H/71SSyA350Tah
gbkPMDojO4DVLg7WvJpFLtmQ78in0b/0f5BQhoen5BC6W4Eay8jZY4RgTr3y3R9NvY+s
fyWPCX34M9Tbk1NkrsA19lXNvenM6fdjBcu1H2zBZSrMsdephFyP9ZKEVn9PH+4Fj4SL
s2sRusUGqYIIcZn7vJoTI8P9PcwYTIi8eeaUa1c5R6iXkoWo4s5SJf0MDDjBkB+1IlRw
kHaQ==
MIME-Version: 1.0
X-Received: by 10.221.68.135 with SMTP id xy7mr120698vcb.65.1403724724679;
Wed, 25 Jun 2014 12:32:04 -0700 (PDT)
Received: by 10.58.199.138 with HTTP; Wed, 25 Jun 2014 12:32:04 -0700 (PDT)
Reply-To: [email protected]
Date: Wed, 25 Jun 2014 12:32:04 -0700
Message-ID: <CAEwEN+z7N7nfV0FMAN_K0L6Qo0Fx_acjHhbmX68Wjs1=NP0SdA@mail.gmail.com>
From: Agent James Duru <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=18.2
X-Spam-Score: 182
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Beneficiary, My name is James Duru, The Un assigned
diplomatic agent by the IMF/UN and Minister of Finance after the meeting held
last month to deliver your fund worth ($10.5M) to you. I arrived at Reagan
National Airport Washington this morning.I also want you to know that i have
only 2 working days to deliver this money to you and go back to my country
because i have other assignment to carry out. I need you to reconfirm to
me your full name, address where to have your fund delivered and your direct
contact number to reach you. [...]
Content analysis details: (18.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.220.194 listed in list.dnswl.org]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(annablair001[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (annablair001[at]gmail.com)
2.9 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4863]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.3 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
3.8 MONEY_FRAUD_3 Lots of money and several fraud phrases
3.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Call me on 202-630-2291 Just arrived at Reagan National Airport
Washington this morning!
Attn: Beneficiary,
My name is James Duru, The Un assigned diplomatic agent by the IMF/UN
and Minister of Finance after the meeting held last month to deliver
your fund worth ($10.5M) to you. I arrived at Reagan National Airport
Washington this morning.I also want you to know
that i have only 2 working days to deliver this money to you and go
back to my country because i have other assignment to carry out. I
need you to reconfirm to me your full name, address where to have your
fund delivered and your direct contact number to reach you.
Here is my direct number where to reach me (202-630-2291)
I wait for your urgent response.
Regards,
Agent James Duru
Envelope-to:
Delivery-date: Wed, 25 Jun 2014 12:32:10 -0700
Received: from mail-vc0-f194.google.com ([209.85.220.194]:41919)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1WzsvN-0006je-Fk
for ; Wed, 25 Jun 2014 12:32:10 -0700
Received: by mail-vc0-f194.google.com with SMTP id ij19so604161vcb.9
for <>; Wed, 25 Jun 2014 12:32:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=FH5YnbVMIrYtnUkZRigHWaOJr2zWFrrzB34oerEdWZA=;
b=Bw2PmcQZeAPEjCHk6P2OeYFcHlOXsSqHKwzj+dTEScVtNm1cLwZS3hdXofBuje5EeQ
zItHMZ9RvC/iPydlBed5Jd2D0Mw1hz4sUNpSasy0oO/DmMOYdsQNu6H/71SSyA350Tah
gbkPMDojO4DVLg7WvJpFLtmQ78in0b/0f5BQhoen5BC6W4Eay8jZY4RgTr3y3R9NvY+s
fyWPCX34M9Tbk1NkrsA19lXNvenM6fdjBcu1H2zBZSrMsdephFyP9ZKEVn9PH+4Fj4SL
s2sRusUGqYIIcZn7vJoTI8P9PcwYTIi8eeaUa1c5R6iXkoWo4s5SJf0MDDjBkB+1IlRw
kHaQ==
MIME-Version: 1.0
X-Received: by 10.221.68.135 with SMTP id xy7mr120698vcb.65.1403724724679;
Wed, 25 Jun 2014 12:32:04 -0700 (PDT)
Received: by 10.58.199.138 with HTTP; Wed, 25 Jun 2014 12:32:04 -0700 (PDT)
Reply-To: [email protected]
Date: Wed, 25 Jun 2014 12:32:04 -0700
Message-ID: <CAEwEN+z7N7nfV0FMAN_K0L6Qo0Fx_acjHhbmX68Wjs1=NP0SdA@mail.gmail.com>
From: Agent James Duru <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=18.2
X-Spam-Score: 182
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Beneficiary, My name is James Duru, The Un assigned
diplomatic agent by the IMF/UN and Minister of Finance after the meeting held
last month to deliver your fund worth ($10.5M) to you. I arrived at Reagan
National Airport Washington this morning.I also want you to know that i have
only 2 working days to deliver this money to you and go back to my country
because i have other assignment to carry out. I need you to reconfirm to
me your full name, address where to have your fund delivered and your direct
contact number to reach you. [...]
Content analysis details: (18.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.220.194 listed in list.dnswl.org]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(annablair001[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (annablair001[at]gmail.com)
2.9 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4863]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.3 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
3.8 MONEY_FRAUD_3 Lots of money and several fraud phrases
3.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Call me on 202-630-2291 Just arrived at Reagan National Airport
Washington this morning!
Attn: Beneficiary,
My name is James Duru, The Un assigned diplomatic agent by the IMF/UN
and Minister of Finance after the meeting held last month to deliver
your fund worth ($10.5M) to you. I arrived at Reagan National Airport
Washington this morning.I also want you to know
that i have only 2 working days to deliver this money to you and go
back to my country because i have other assignment to carry out. I
need you to reconfirm to me your full name, address where to have your
fund delivered and your direct contact number to reach you.
Here is my direct number where to reach me (202-630-2291)
I wait for your urgent response.
Regards,
Agent James Duru
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces