by buried under 419s
Thu Dec 11, 2014 5:39 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 11 Dec 2014 12:06:35 -0800
Received: from chrisbailes82.plus.com ([84.92.32.110]:47031 helo=chrisbailes.dyndns.tv)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1XzA0Q-0000kI-3R
for ; Thu, 11 Dec 2014 12:06:35 -0800
Received: from User (ks3370821.kimsufi.com [37.187.6.5])
(Authenticated sender: stephen)
by chrisbailes.dyndns.tv (Postfix) with ESMTPA id BCC44D5E2B;
Thu, 11 Dec 2014 18:09:01 +0000 (GMT)
Reply-To: <[email protected]>
From: "Mr, Fred Mba"<[email protected]>
Date: Thu, 11 Dec 2014 18:54:49 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.4
X-Spam-Score: 194
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: THE PRESIDENCY OFFICE OF THE CHIEF AUDITOR TO THE PRESIDENT
INTERNATIONAL CREDIT SETTLEMENT DEPT FEDERAL MINISTRY OF FINANCE From the
Desk of [...]
Content analysis details: (19.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[84.92.32.110 listed in bb.barracudacentral.org]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tescoenquiry09[at]gmail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[84.92.32.110 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?37.187.6.5>]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (tescoenquiry09[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.5 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** Reference code Number: (005)
THE PRESIDENCY OFFICE OF THE CHIEF AUDITOR TO THE PRESIDENT
INTERNATIONAL CREDIT SETTLEMENT DEPT FEDERAL MINISTRY OF FINANCE
From the Desk of
Mr, Fred Mba
Director ATM Swift Card Centre.
Attn:
This is to inform you that we got the email you sent to the office and the content are well noted by me, i want to inform you that everything is under control and also we want to inform you that you have to contact the central bank for the release and transfer of your fund into your account, you will have to contact the central bank with the followings.
Payment Reference No.-321909871, Allocation No: 8790122 ,Password No :AB931001, Pin Code No:02877 and your Certificate of Merit Payment No :143, Released Code No: 0011; Immediate Telex confirmation No:ws3018439 ; Secret Code No: XXFGN019XX, with this codes the central bank will know that you are the right person and your fund will be transferred into your account immediately, i want you to always update me and let me know when your fund is transferred into your account, below is the contact address of the Central Bank. the below person is in charge of the transfer of your fund.
Miss Vivian Okoro
Email address: [email protected]
go ahead and contact the central bank for the transfer of your fund and also i want you to know that as soon as you contact them and everything is done let me know immediately.
From the Desk of
Mr, Fred Mba
Director ATM Swift Card Centre
Envelope-to:
Delivery-date: Thu, 11 Dec 2014 12:06:35 -0800
Received: from chrisbailes82.plus.com ([84.92.32.110]:47031 helo=chrisbailes.dyndns.tv)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1XzA0Q-0000kI-3R
for ; Thu, 11 Dec 2014 12:06:35 -0800
Received: from User (ks3370821.kimsufi.com [37.187.6.5])
(Authenticated sender: stephen)
by chrisbailes.dyndns.tv (Postfix) with ESMTPA id BCC44D5E2B;
Thu, 11 Dec 2014 18:09:01 +0000 (GMT)
Reply-To: <[email protected]>
From: "Mr, Fred Mba"<[email protected]>
Date: Thu, 11 Dec 2014 18:54:49 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.4
X-Spam-Score: 194
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: THE PRESIDENCY OFFICE OF THE CHIEF AUDITOR TO THE PRESIDENT
INTERNATIONAL CREDIT SETTLEMENT DEPT FEDERAL MINISTRY OF FINANCE From the
Desk of [...]
Content analysis details: (19.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[84.92.32.110 listed in bb.barracudacentral.org]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tescoenquiry09[at]gmail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[84.92.32.110 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?37.187.6.5>]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (tescoenquiry09[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.5 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** Reference code Number: (005)
THE PRESIDENCY OFFICE OF THE CHIEF AUDITOR TO THE PRESIDENT
INTERNATIONAL CREDIT SETTLEMENT DEPT FEDERAL MINISTRY OF FINANCE
From the Desk of
Mr, Fred Mba
Director ATM Swift Card Centre.
Attn:
This is to inform you that we got the email you sent to the office and the content are well noted by me, i want to inform you that everything is under control and also we want to inform you that you have to contact the central bank for the release and transfer of your fund into your account, you will have to contact the central bank with the followings.
Payment Reference No.-321909871, Allocation No: 8790122 ,Password No :AB931001, Pin Code No:02877 and your Certificate of Merit Payment No :143, Released Code No: 0011; Immediate Telex confirmation No:ws3018439 ; Secret Code No: XXFGN019XX, with this codes the central bank will know that you are the right person and your fund will be transferred into your account immediately, i want you to always update me and let me know when your fund is transferred into your account, below is the contact address of the Central Bank. the below person is in charge of the transfer of your fund.
Miss Vivian Okoro
Email address: [email protected]
go ahead and contact the central bank for the transfer of your fund and also i want you to know that as soon as you contact them and everything is done let me know immediately.
From the Desk of
Mr, Fred Mba
Director ATM Swift Card Centre
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces