From: "MR.MICHEAL"<firstbank@bank.com>
Date: Sat, 13 Oct 2018 13:51:38 +0530
Subject: *****SPAM***** GOOD NEWS FROM BANK


This mail is probably spam. The original message
has been attached intact in RFC 822 format.

Content preview: MR. MICHEAL GODSWILL OF FIRST BANK OF NIGERIA PLC 35 Marina
P. O. Box 5216, LAGOS- NIGERIA EMAIL: ( firstbank9966@gmail.com ) DEAR BENEFICIARY
This letter is written to you in order to change your life from today. I
am Mr. Micheal Godswin the Director, International Remittance Department of
this Bank, my Boss, Mr. Jacobs M. Ajekigbe, the Managing Director/CEO of
this bank is now on compulsory leave and all power have been vested on me
to make all international payments. Also, due to reported cases of corrupt
practices in other Nigeria Banks including the Central Bank of Nigeria, the
Federal Government has revoked/cancelled all power vested on those banks
and has appointed our bank (First Bank of Nigeria) to make all foreign payments.
Be informed that the Federal Government have approved the release of part-payment
of$7.5M(Seven Million Five Hundred Thousand Dollars) out of your total funds,
which has been in this bank for many years unclaimed because my boss Mr.
Jacobs Ajekigbe, elaboration with the Governor of Central Bank of Nigeria
(CBN) have refused to tell you the truth on how to claim your fund this is
because he has been using the interest accumulated from your fund every year
to enrich himself without your knowledge, I want to help you pull out this
fund to your bank account using the easiest and the quickest method, which
have not been made known to you before. By this method, you will open a domiciliary
account with this bank (First Bank of Nigeria), your fund would be lodged
into this domiciliary acc ount and your fund will be paid in directly to
any bank of your choice. [...]

Content analysis details: (24.7 points, 6.3 required)

0.0 RDNS_NONE Delivered to trusted network by a host with no rDNS
3.4 FH_DATE_PAST_20XX The date is grossly in the future.
1.8 SUBJ_ALL_CAPS Subject is all capitals
1.6 MISSING_HEADERS Missing To: header
3.6 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
1.1 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[175.101.7.154 listed in dnsbl.sorbs.net]
4.0 NIGERIAN_BODY100 Looks like Nigerian Scam (custom test)
2.0 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
1.5 ADVANCE_FEE_4 Appears to be advance fee fraud (Nigerian 419)
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
-0.0 AWL AWL: From: address is in the auto white-list