#321628 by buried under 419s
Wed Mar 08, 2017 1:23 pm
Return-Path: <paymastergeneralfgn002@gmail.com>
Delivered-To:
Received: from
by (Dovecot) with LMTP id 0QQVBysQwFg2HQAAjbubUg
for <>; Wed, 08 Mar 2017 06:07:39 -0800
Return-path: <paymastergeneralfgn002@gmail.com>
Envelope-to:
Delivery-date: Wed, 08 Mar 2017 06:07:39 -0800
Received: from mail-ua0-f196.google.com ([209.85.217.196]:36035)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <paymastergeneralfgn002@gmail.com>)
id 1clcFd-0001xe-R5
for =; Wed, 08 Mar 2017 06:07:38 -0800
Received: by mail-ua0-f196.google.com with SMTP id y16so4771116uay.3
for <>; Wed, 08 Mar 2017 06:07:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=os0rWWCA/vWhsZHDN0+90C4GjCTxSNzXWoLS6NF6IGw=;
b=bWg7yg5b7PMqm1ZaGWfGf+PxNXUHt/vCVFaIvNiDPNfxFJUA7p3cK8s2TcI26V/Nwk
57dA1DMEeMqhvO0EDJAcJtl6DU3XucXfmTHRk6nva8caOXCfSAuwESfVPTkxs0zgh+YW
o6zj4hHzp3xBHVH6WGyfNEBnhwr98fXdYc8GYYYBD0qE3ksG5wxB9u0NQm9D4mJGBaXt
ndATUbMHhrZGzRxOjfdp7Q0Oqg2iKAU3jGh7obTKzMNOCYbHEnKRnxs6mOlePYaMxVB5
zaXp7eNeXNK3Z56l6iaqvGIDoXll8T/LBInyQtQ6JD9z6xwTeuglxUcOI1XZXxrSxceY
p1Xg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=os0rWWCA/vWhsZHDN0+90C4GjCTxSNzXWoLS6NF6IGw=;
b=jPD6/FTnVj97D0hC9HaM1dN7dLC57W0+zu2gtc3Bz4iHRnCS9GgkA6j1TOHO12Je2I
UvQkbQFUyqg9PcQY8punHNLK8HW6Q8klypxjoaBe/U1zPe0/Un3Ho5R3LL1Q80a4uh7Q
6wh8lzR07OnmH8Xi5sVkzb+/iXFKoy3D7RM9sOv+6gbPX4fc3LvvNWjJ+lrySe9LF1yA
06SgswfpQjS7oSCWr2MSQkeTSr2PxyiIsz/X0vxqPZo2lmvt0WK8piTfBmivl+mBCTf/
1YJ7zlaRd9EY5+qr+GhVaSwelvBGWD2/hXrWjd2UfG5JdZ+xHNUbyn61365lXOo3utMF
ZwhQ==
X-Gm-Message-State: AMke39l8N40bV8e/ye2KK5UBRFrTGQYxzo6UdDju0mimlwSGWWF/UaZ8Q6hRfwVye8DOEV0WFkskUFUy5LiVGQ==
X-Received: by 10.176.0.200 with SMTP id 66mr3827239uaj.116.1488982016694;
Wed, 08 Mar 2017 06:06:56 -0800 (PST)
MIME-Version: 1.0
Received: by 10.159.35.233 with HTTP; Wed, 8 Mar 2017 06:06:56 -0800 (PST)
From: PATRICK UBA <paymastergeneralfgn002@gmail.com>
Date: Wed, 8 Mar 2017 06:06:56 -0800
Message-ID: <CAPbByXz=gFVYj=wNYSUvTfrOnxOuyiucOac5qvC6jVgS6BqrRA@mail.gmail.com>
Subject: Attention: Beneficiary
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: No, score=6.6
X-Spam-Score: 66
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM THE DESK OF: MR PATRICK UBA PAY MASTER GENERAL FEDERAL
REPUBLIC OF NIGERIA Attention: Beneficiary, I Write to inform you based on
the information we received few hours ago and the same person is still with
us claiming to be your true Representative you sent from your Country to
pick up your ATM VISA CARD due to your poor health condition. [...]
Content analysis details: (6.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.217.196 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.217.196 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.217.196 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paymastergeneralfgn002[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (paymastergeneralfgn002[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO
FROM THE DESK OF: MR PATRICK UBA
PAY MASTER GENERAL
FEDERAL REPUBLIC OF NIGERIA
Attention: Beneficiary,
I Write to inform you based on the information we received few hours
ago and the same person is still with us claiming to be your true
Representative you sent from your Country to pick up your ATM VISA
CARD due to your poor health condition.
It was directed by the World Bank and FBI to all African Head of
States to pay all Foreign Beneficiaries part payment of $3.5 Million
who directly or indirectly executed contract in Africa as Compensation
for those who fail to receive their due Contract/Inheritance Payment
from the past Government.
We write to let you know that before we can release this ATM VISA CARD
to this man, we will confirm from you and verify if truly you sent
him.
This is the data of the Representative that claimed you sent him.
Name: Mrs Janet Drummer
Occupation: Driver
Marital Status: Divorced
Age: 57 years.
Please, do reconfirm to this office, as a matter of urgency if this
man is from you to enable me release the Card to him and do not blame
us for any wrong payment.
If not, then do kindly update Me immediately You receive this message.
Your urgent respond is needed as soon as you receive this mail do also
call me:+234 705 872 4232.
Best Regards,
Mr. Patrick Uba
Pay Master General
Federal Republic of Nigeria
Tel: +234 705 872 4232
Delivered-To:
Received: from
by (Dovecot) with LMTP id 0QQVBysQwFg2HQAAjbubUg
for <>; Wed, 08 Mar 2017 06:07:39 -0800
Return-path: <paymastergeneralfgn002@gmail.com>
Envelope-to:
Delivery-date: Wed, 08 Mar 2017 06:07:39 -0800
Received: from mail-ua0-f196.google.com ([209.85.217.196]:36035)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.88)
(envelope-from <paymastergeneralfgn002@gmail.com>)
id 1clcFd-0001xe-R5
for =; Wed, 08 Mar 2017 06:07:38 -0800
Received: by mail-ua0-f196.google.com with SMTP id y16so4771116uay.3
for <>; Wed, 08 Mar 2017 06:07:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=os0rWWCA/vWhsZHDN0+90C4GjCTxSNzXWoLS6NF6IGw=;
b=bWg7yg5b7PMqm1ZaGWfGf+PxNXUHt/vCVFaIvNiDPNfxFJUA7p3cK8s2TcI26V/Nwk
57dA1DMEeMqhvO0EDJAcJtl6DU3XucXfmTHRk6nva8caOXCfSAuwESfVPTkxs0zgh+YW
o6zj4hHzp3xBHVH6WGyfNEBnhwr98fXdYc8GYYYBD0qE3ksG5wxB9u0NQm9D4mJGBaXt
ndATUbMHhrZGzRxOjfdp7Q0Oqg2iKAU3jGh7obTKzMNOCYbHEnKRnxs6mOlePYaMxVB5
zaXp7eNeXNK3Z56l6iaqvGIDoXll8T/LBInyQtQ6JD9z6xwTeuglxUcOI1XZXxrSxceY
p1Xg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=os0rWWCA/vWhsZHDN0+90C4GjCTxSNzXWoLS6NF6IGw=;
b=jPD6/FTnVj97D0hC9HaM1dN7dLC57W0+zu2gtc3Bz4iHRnCS9GgkA6j1TOHO12Je2I
UvQkbQFUyqg9PcQY8punHNLK8HW6Q8klypxjoaBe/U1zPe0/Un3Ho5R3LL1Q80a4uh7Q
6wh8lzR07OnmH8Xi5sVkzb+/iXFKoy3D7RM9sOv+6gbPX4fc3LvvNWjJ+lrySe9LF1yA
06SgswfpQjS7oSCWr2MSQkeTSr2PxyiIsz/X0vxqPZo2lmvt0WK8piTfBmivl+mBCTf/
1YJ7zlaRd9EY5+qr+GhVaSwelvBGWD2/hXrWjd2UfG5JdZ+xHNUbyn61365lXOo3utMF
ZwhQ==
X-Gm-Message-State: AMke39l8N40bV8e/ye2KK5UBRFrTGQYxzo6UdDju0mimlwSGWWF/UaZ8Q6hRfwVye8DOEV0WFkskUFUy5LiVGQ==
X-Received: by 10.176.0.200 with SMTP id 66mr3827239uaj.116.1488982016694;
Wed, 08 Mar 2017 06:06:56 -0800 (PST)
MIME-Version: 1.0
Received: by 10.159.35.233 with HTTP; Wed, 8 Mar 2017 06:06:56 -0800 (PST)
From: PATRICK UBA <paymastergeneralfgn002@gmail.com>
Date: Wed, 8 Mar 2017 06:06:56 -0800
Message-ID: <CAPbByXz=gFVYj=wNYSUvTfrOnxOuyiucOac5qvC6jVgS6BqrRA@mail.gmail.com>
Subject: Attention: Beneficiary
To: undisclosed-recipients:;
Content-Type: text/plain; charset=UTF-8
Bcc:
X-Spam-Status: No, score=6.6
X-Spam-Score: 66
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FROM THE DESK OF: MR PATRICK UBA PAY MASTER GENERAL FEDERAL
REPUBLIC OF NIGERIA Attention: Beneficiary, I Write to inform you based on
the information we received few hours ago and the same person is still with
us claiming to be your true Representative you sent from your Country to
pick up your ATM VISA CARD due to your poor health condition. [...]
Content analysis details: (6.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.217.196 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.217.196 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.217.196 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paymastergeneralfgn002[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (paymastergeneralfgn002[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: NO
FROM THE DESK OF: MR PATRICK UBA
PAY MASTER GENERAL
FEDERAL REPUBLIC OF NIGERIA
Attention: Beneficiary,
I Write to inform you based on the information we received few hours
ago and the same person is still with us claiming to be your true
Representative you sent from your Country to pick up your ATM VISA
CARD due to your poor health condition.
It was directed by the World Bank and FBI to all African Head of
States to pay all Foreign Beneficiaries part payment of $3.5 Million
who directly or indirectly executed contract in Africa as Compensation
for those who fail to receive their due Contract/Inheritance Payment
from the past Government.
We write to let you know that before we can release this ATM VISA CARD
to this man, we will confirm from you and verify if truly you sent
him.
This is the data of the Representative that claimed you sent him.
Name: Mrs Janet Drummer
Occupation: Driver
Marital Status: Divorced
Age: 57 years.
Please, do reconfirm to this office, as a matter of urgency if this
man is from you to enable me release the Card to him and do not blame
us for any wrong payment.
If not, then do kindly update Me immediately You receive this message.
Your urgent respond is needed as soon as you receive this mail do also
call me:+234 705 872 4232.
Best Regards,
Mr. Patrick Uba
Pay Master General
Federal Republic of Nigeria
Tel: +234 705 872 4232
Last edited by buried under 419s on Sat Dec 29, 2018 2:39 pm, edited 1 time in total.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces