by buried under 419s
Fri Jun 27, 2014 12:16 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 27 Jun 2014 08:52:57 -0700
Received: from mail-we0-f194.google.com ([74.125.82.194]:60317)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1X0YSK-0000cs-L2
for ; Fri, 27 Jun 2014 08:52:57 -0700
Received: by mail-we0-f194.google.com with SMTP id t60so1570029wes.5
for <>; Fri, 27 Jun 2014 08:52:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=jBgtX/CzrrznvDjg9xMDxrfCTa+sLw9zJZ/OiY6b92E=;
b=Dte58f3xZj25yAE48HnaEYjY0Z4cx3Xjo98BgE1jI50H5j5zopeC3RTASNIS6wBGZi
SWu9w5vnS14MGnP19fOCJRpDNz69MSRNKSqW7Y27rQ9l6dEWl8n7xrlEB/ruQamsRbfS
+PPonyqPkNsTZM1INhDeB/Sf/z3OvOXZ/Rczc0bXwbSeQIyDuGWACDKZCxLKpZ6qHADZ
OeyqQRBCA+efmTipxVzZPBMI12iGJUdXWrqzlLoBJP5NqjouYPl6wPyxcxQwWndcelFZ
IVAIDHL97xjNYq3ycLnlnQBtzurBgk9Zu/u8d5dzehRP5ozrP52j7+LEUVAL/rmiPj30
ST5A==
MIME-Version: 1.0
X-Received: by 10.194.10.130 with SMTP id i2mr27200377wjb.70.1403884370010;
Fri, 27 Jun 2014 08:52:50 -0700 (PDT)
Received: by 10.217.12.74 with HTTP; Fri, 27 Jun 2014 08:52:49 -0700 (PDT)
Reply-To: [email protected]
Date: Fri, 27 Jun 2014 08:52:49 -0700
Message-ID: <CAC-jQpjgv-8codTDb+_emkYcPhwqrTfeawjzqqQmmE-bW9uUPg@mail.gmail.com>
From: Agent James Duru <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=18.2
X-Spam-Score: 182
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Beneficiary, My name is James Duru, The Un assigned
diplomatic agent by the IMF/UN and Minister of Finance after the meeting held
last month to deliver your fund worth ($10.5M) to you. I arrived at Reagan
National Airport Washington this morning.I also want you to know that i have
only 2 working days to deliver this money to you and go back to my country
because i have other assignment to carry out. I need you to reconfirm to
me your full name, address where to have your fund delivered and your direct
contact number to reach you. [...]
Content analysis details: (18.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[74.125.82.194 listed in list.dnswl.org]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrsannagateswishfund208[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mrsannagateswishfund208[at]gmail.com)
2.9 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.3 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
3.8 MONEY_FRAUD_3 Lots of money and several fraud phrases
3.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Call me on 202-630-2291 Just arrived at Reagan National Airport
Washington this morning!
Attn: Beneficiary,
My name is James Duru, The Un assigned diplomatic agent by the IMF/UN
and Minister of Finance after the meeting held last month to deliver
your fund worth ($10.5M) to you. I arrived at Reagan National Airport
Washington this morning.I also want you to know that i have only 2
working days to deliver this money to you and go back to my country
because i have other assignment to carry out. I need you to reconfirm
to me your full name, address where to have your fund delivered and
your direct contact number to reach you.
Here is my direct number where to reach me (202-630-2291)
I wait for your urgent response.
Regards,
Agent James Duru
Envelope-to:
Delivery-date: Fri, 27 Jun 2014 08:52:57 -0700
Received: from mail-we0-f194.google.com ([74.125.82.194]:60317)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1X0YSK-0000cs-L2
for ; Fri, 27 Jun 2014 08:52:57 -0700
Received: by mail-we0-f194.google.com with SMTP id t60so1570029wes.5
for <>; Fri, 27 Jun 2014 08:52:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=jBgtX/CzrrznvDjg9xMDxrfCTa+sLw9zJZ/OiY6b92E=;
b=Dte58f3xZj25yAE48HnaEYjY0Z4cx3Xjo98BgE1jI50H5j5zopeC3RTASNIS6wBGZi
SWu9w5vnS14MGnP19fOCJRpDNz69MSRNKSqW7Y27rQ9l6dEWl8n7xrlEB/ruQamsRbfS
+PPonyqPkNsTZM1INhDeB/Sf/z3OvOXZ/Rczc0bXwbSeQIyDuGWACDKZCxLKpZ6qHADZ
OeyqQRBCA+efmTipxVzZPBMI12iGJUdXWrqzlLoBJP5NqjouYPl6wPyxcxQwWndcelFZ
IVAIDHL97xjNYq3ycLnlnQBtzurBgk9Zu/u8d5dzehRP5ozrP52j7+LEUVAL/rmiPj30
ST5A==
MIME-Version: 1.0
X-Received: by 10.194.10.130 with SMTP id i2mr27200377wjb.70.1403884370010;
Fri, 27 Jun 2014 08:52:50 -0700 (PDT)
Received: by 10.217.12.74 with HTTP; Fri, 27 Jun 2014 08:52:49 -0700 (PDT)
Reply-To: [email protected]
Date: Fri, 27 Jun 2014 08:52:49 -0700
Message-ID: <CAC-jQpjgv-8codTDb+_emkYcPhwqrTfeawjzqqQmmE-bW9uUPg@mail.gmail.com>
From: Agent James Duru <[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: Yes, score=18.2
X-Spam-Score: 182
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Beneficiary, My name is James Duru, The Un assigned
diplomatic agent by the IMF/UN and Minister of Finance after the meeting held
last month to deliver your fund worth ($10.5M) to you. I arrived at Reagan
National Airport Washington this morning.I also want you to know that i have
only 2 working days to deliver this money to you and go back to my country
because i have other assignment to carry out. I need you to reconfirm to
me your full name, address where to have your fund delivered and your direct
contact number to reach you. [...]
Content analysis details: (18.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[74.125.82.194 listed in list.dnswl.org]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrsannagateswishfund208[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mrsannagateswishfund208[at]gmail.com)
2.9 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.3 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
3.8 MONEY_FRAUD_3 Lots of money and several fraud phrases
3.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Call me on 202-630-2291 Just arrived at Reagan National Airport
Washington this morning!
Attn: Beneficiary,
My name is James Duru, The Un assigned diplomatic agent by the IMF/UN
and Minister of Finance after the meeting held last month to deliver
your fund worth ($10.5M) to you. I arrived at Reagan National Airport
Washington this morning.I also want you to know that i have only 2
working days to deliver this money to you and go back to my country
because i have other assignment to carry out. I need you to reconfirm
to me your full name, address where to have your fund delivered and
your direct contact number to reach you.
Here is my direct number where to reach me (202-630-2291)
I wait for your urgent response.
Regards,
Agent James Duru
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces