#419281 by buried under 419s
Fri Oct 30, 2020 7:13 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id mq6dE+EtnF+4KgAAibB4EA
(envelope-from <[email protected]>)
for <>; Fri, 30 Oct 2020 15:14:41 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 30 Oct 2020 15:14:41 +0000
Received: from mail-lf1-f67.google.com ([209.85.167.67]:38597)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kYW6y-0002pt-Lo
for ; Fri, 30 Oct 2020 15:14:41 +0000
Received: by mail-lf1-f67.google.com with SMTP id 141so8331231lfn.5
for <>; Fri, 30 Oct 2020 08:14:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=TqQ6xPdeGermGIf6lZkkR9FHrTWUSpMVbB3hDEmuH7Q=;
b=moGCNAxMLwEA65VsjZMFzam8/NZM2oTMT7Dtqdc58eEL1rsIGnBn+lsi1P+piUbgRE
XF7nMkdycTT+TOx+oFH8olfd7oCHWAcO1olgsPquoMqiK+4eeipyqHXkeSfjRQvvLaT3
JsfG1UyZqpohrbSadvBiCSVwnHf88lX1y6x0KVqXpVXfLxjvrxWdmSJhbY/SL5iqiiBP
82l7ba8W/Xy/lNFTs4ZhtYeARC/jReme4/PFDUPtx+tfFbueSNIFHPLG4EckgrfHo5TW
eZysWFlm+qRyURaXrKKPXY0Vb3VIFvbBt4vJ0cWp5M8Oe0Gtjm3XyUwwDiVU5pPnZLrW
W7lA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=TqQ6xPdeGermGIf6lZkkR9FHrTWUSpMVbB3hDEmuH7Q=;
b=dSovOheUXDIHg4h7dgOHBqRedj+5wdF1pniYDuoVZqU1TJB7JeOq16nzlRlGwpymfF
39EMlXiLwJ4XlvDtA16ZvHk6+c0/DhGrw27UElKleu28DU7855oRPh7KIKUPVtIqpPDF
MVFWOnCy2DUDOE9tdcXLsLKZkKTcEYDV53+X1QblI8NaxMU67x37C+NNMsBY1Bb8WCIj
o+XVTOwmsHBhz0TcWMKM2GhfyCZFhnuE25F1mG7SPNfagUacdP2QRPrrqJNcILRKnxp2
gZYG0JqrvQx7ptZEjGFQRaR1U7jdIbHRBgPf9+CKrljhwR6ZB9dB2nHZTS82yaOG0b+U
1JzQ==
X-Gm-Message-State: AOAM533ZEev0Mh/9yAKgF93LvXX2fY9KvBTDoYXF0MTPqxyjXP23te6Z
Hw8yjpnl0mZRAVGfo6Ivbk4SE4TBZMyxyWPK880=
X-Google-Smtp-Source: ABdhPJxxfkR0+R80hfnXoUIbyDD9EBwNUdz1v5BSAXm98QQ6Sb6ZHSVcu/IuJm3nb92kQEMmEVakQTqo2IuYvoPEkJo=
X-Received: by 2002:a19:8c2:: with SMTP id 185mr1025432lfi.49.1604070838336;
Fri, 30 Oct 2020 08:13:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6520:43b0:b029:96:a9db:3bc5 with HTTP; Fri, 30 Oct 2020
08:13:58 -0700 (PDT)
Reply-To: [email protected]
From: American National Bank <[email protected]>
Date: Fri, 30 Oct 2020 16:13:58 +0100
Message-ID: <CAPDD16ofuGOw2_CbVZdiSRjxrx16bpMoxkx6ZA397SjnWCrBQQ@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- Sir, Your domiciliary account with a balance of $m1, 500,000.00
has been dormant, and I am to keep you posted. Please contact Mr. Tony McCurry
with your bank account details and a copy of your valid means [...]
Content analysis details: (7.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[kone66189[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kone66189[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[rohi53218[at]gmail.com]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Your Domiciliary Account Has Been Dormant
Sir,
Your domiciliary account with a balance of $m1, 500,000.00 has been
dormant, and I am to keep you posted. Please contact Mr. Tony McCurry
with your bank account details and a copy of your valid means of
Identification on this email: [email protected]
Thanks for banking with us
Ms. Rohi Arvind
Customer Care Unit, American National Bank of Texas
Delivered-To:
Received: from
by with LMTP
id mq6dE+EtnF+4KgAAibB4EA
(envelope-from <[email protected]>)
for <>; Fri, 30 Oct 2020 15:14:41 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 30 Oct 2020 15:14:41 +0000
Received: from mail-lf1-f67.google.com ([209.85.167.67]:38597)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kYW6y-0002pt-Lo
for ; Fri, 30 Oct 2020 15:14:41 +0000
Received: by mail-lf1-f67.google.com with SMTP id 141so8331231lfn.5
for <>; Fri, 30 Oct 2020 08:14:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=TqQ6xPdeGermGIf6lZkkR9FHrTWUSpMVbB3hDEmuH7Q=;
b=moGCNAxMLwEA65VsjZMFzam8/NZM2oTMT7Dtqdc58eEL1rsIGnBn+lsi1P+piUbgRE
XF7nMkdycTT+TOx+oFH8olfd7oCHWAcO1olgsPquoMqiK+4eeipyqHXkeSfjRQvvLaT3
JsfG1UyZqpohrbSadvBiCSVwnHf88lX1y6x0KVqXpVXfLxjvrxWdmSJhbY/SL5iqiiBP
82l7ba8W/Xy/lNFTs4ZhtYeARC/jReme4/PFDUPtx+tfFbueSNIFHPLG4EckgrfHo5TW
eZysWFlm+qRyURaXrKKPXY0Vb3VIFvbBt4vJ0cWp5M8Oe0Gtjm3XyUwwDiVU5pPnZLrW
W7lA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=TqQ6xPdeGermGIf6lZkkR9FHrTWUSpMVbB3hDEmuH7Q=;
b=dSovOheUXDIHg4h7dgOHBqRedj+5wdF1pniYDuoVZqU1TJB7JeOq16nzlRlGwpymfF
39EMlXiLwJ4XlvDtA16ZvHk6+c0/DhGrw27UElKleu28DU7855oRPh7KIKUPVtIqpPDF
MVFWOnCy2DUDOE9tdcXLsLKZkKTcEYDV53+X1QblI8NaxMU67x37C+NNMsBY1Bb8WCIj
o+XVTOwmsHBhz0TcWMKM2GhfyCZFhnuE25F1mG7SPNfagUacdP2QRPrrqJNcILRKnxp2
gZYG0JqrvQx7ptZEjGFQRaR1U7jdIbHRBgPf9+CKrljhwR6ZB9dB2nHZTS82yaOG0b+U
1JzQ==
X-Gm-Message-State: AOAM533ZEev0Mh/9yAKgF93LvXX2fY9KvBTDoYXF0MTPqxyjXP23te6Z
Hw8yjpnl0mZRAVGfo6Ivbk4SE4TBZMyxyWPK880=
X-Google-Smtp-Source: ABdhPJxxfkR0+R80hfnXoUIbyDD9EBwNUdz1v5BSAXm98QQ6Sb6ZHSVcu/IuJm3nb92kQEMmEVakQTqo2IuYvoPEkJo=
X-Received: by 2002:a19:8c2:: with SMTP id 185mr1025432lfi.49.1604070838336;
Fri, 30 Oct 2020 08:13:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6520:43b0:b029:96:a9db:3bc5 with HTTP; Fri, 30 Oct 2020
08:13:58 -0700 (PDT)
Reply-To: [email protected]
From: American National Bank <[email protected]>
Date: Fri, 30 Oct 2020 16:13:58 +0100
Message-ID: <CAPDD16ofuGOw2_CbVZdiSRjxrx16bpMoxkx6ZA397SjnWCrBQQ@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- Sir, Your domiciliary account with a balance of $m1, 500,000.00
has been dormant, and I am to keep you posted. Please contact Mr. Tony McCurry
with your bank account details and a copy of your valid means [...]
Content analysis details: (7.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[kone66189[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kone66189[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[rohi53218[at]gmail.com]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Your Domiciliary Account Has Been Dormant
Sir,
Your domiciliary account with a balance of $m1, 500,000.00 has been
dormant, and I am to keep you posted. Please contact Mr. Tony McCurry
with your bank account details and a copy of your valid means of
Identification on this email: [email protected]
Thanks for banking with us
Ms. Rohi Arvind
Customer Care Unit, American National Bank of Texas
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces