#313406 by buried under 419s
Wed Nov 30, 2016 1:24 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 30 Nov 2016 07:16:05 -0800
Received: from mail-yb0-f193.google.com ([209.85.213.193]:36509)
by with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1cC6c8-0005XF-KT
for ; Wed, 30 Nov 2016 07:16:05 -0800
Received: by mail-yb0-f193.google.com with SMTP id d128so2284715ybh.3
for <>; Wed, 30 Nov 2016 07:48:27 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=uvpN/860+k2sNVbgt2sPvAjoweL78Tz7nxMUGP/8QiA=;
b=eBxtKbqWAVtMWUnhn2SPxnz968H0IY7mZSxJCblBJa73dWsZFCeKWh1gUMMsCpXhfk
41vhGuMwV77x/dHcLlA9P1SSse7y2gmlcpE3f+Xk3EAuNhbX/hUmODZCGQN4MMcgnPh2
H6lKXJGmJnDr9ZF/xoLAcSsxgm03sHVGt6OKi1cDlA6LCiIWh5lk3wedaVYfBRKPS+a/
cKhVwrPtqzFgfdL38DOgH6nTxT/NwVlApIS91uxYV1uHISumW/pSbMOG3zZPMyc4hm4T
DWq3O+a2CQS5eCZC2BM4CIuci/ShEaey/fZYuWIkQw3GVBfheVs6bovpNelxBLVZm+77
R87Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=uvpN/860+k2sNVbgt2sPvAjoweL78Tz7nxMUGP/8QiA=;
b=QO5dxGiFMiaT4WjlO9h3ww5WTEEtL41BMiooa/tUJalA/HGuL0OW6Ft3bZ6tXyS3s9
SNtPF8s3q+8NGXW9WizedACzMl67ncWfSQb3BBz+3792iBqvWWEZejCzyW7g2Kwr+ocH
mxN3fP/+rP2PFKKSZxgu54a3sFfwns2nCUSY7HiYbS758FIcw5tCv3AlapDucgckrJJf
YRsdofpmPoMg0kt7mxxO9xfJAhr5wvAeZcQOzigWvNyLatBh8p5m3bNsACRJr0sSLW+T
RaboGdPfpesatFEo1LXwW5n6NJj9fB1jOPF3ZHSosw69PL+Hf++rV3jAC6COxjutPp30
FYtw==
X-Gm-Message-State: AKaTC0389z/744MILi7vXxj09u4JnfpMv80PSnfGcdrDu92FKCTGX1qkRlSoYxbNVMQC0gvYS4JzXSDrkpRGaA==
X-Received: by 10.37.64.86 with SMTP id n83mr9133882yba.183.1480520904452;
Wed, 30 Nov 2016 07:48:24 -0800 (PST)
MIME-Version: 1.0
Received: by 10.37.165.36 with HTTP; Wed, 30 Nov 2016 07:48:23 -0800 (PST)
Reply-To: [email protected]
From: SHORE BNK <[email protected]>
Date: Wed, 30 Nov 2016 16:48:23 +0100
Message-ID: <CANx69Xj3r2nb9QTxnQyz2XLKNa1Emrj6fvtFK=ppxMH+sh4bmQ@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=001a11c024c497b46b054286a23b
Bcc:
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: SHORE BANK 540 East 105th Street Cleveland, Ohio 44108 330)
961-1671 DEAR CUSTOMER WE WRITE TO INFORM YOU THAT YOUR ATM CARD WHICH WAS
RETRIEVED FROM MR JOHNSON LOYD SINCE LAST YEAR BY THE F B I IS STILL IN OUR
BANK AND THE PRIMARY BANK THAT SEND THE CARD (HSBC BANK) HAS ASKED US TO
WIRE THE FUNDS DIRECT TO YOUR BANK ACCOUNT VIA BANK TO BANK WIRE TRANSFER
BASED ON THE NEW METHOD OF THIS FRAUDSTERS TO ACCESS ATM CARD/ DRAFTS WHILE
ON TRANSIT. FOLLOWING TO THIS NEW DEVELOPMENT, OUR BANK WILL IMMEDIATELY
WIRE DIRECTLY YOUR FUNDS TO YOUR ACCOUNT WITHIN 24 BANKING HOURS FROM THE
TIME YOUR ACCOUNT DETAILS IS RECEIVED BY OUR BANK , ALSO ADD YOUR PERSONAL
CELL PHONE NUMBER FOR CONFIDENTIAL PURPOSES. [...]
Content analysis details: (9.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9960]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(intercontinentalbnk[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.213.193 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
3.0 TVD_PH_BODY_META TVD_PH_BODY_META
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** PAYMENT VIA SHORE BANK USA
SHORE BANK
540 East 105th Street
Cleveland, Ohio 44108
330) 961-1671
DEAR CUSTOMER
WE WRITE TO INFORM YOU THAT YOUR ATM CARD WHICH WAS RETRIEVED FROM MR
JOHNSON LOYD SINCE LAST YEAR BY THE F B I IS STILL IN OUR BANK AND THE
PRIMARY BANK THAT SEND THE CARD (HSBC BANK) HAS ASKED US TO WIRE THE FUNDS
DIRECT TO YOUR BANK ACCOUNT VIA BANK TO BANK WIRE TRANSFER BASED ON THE NEW
METHOD OF THIS FRAUDSTERS TO ACCESS ATM CARD/ DRAFTS WHILE ON TRANSIT.
FOLLOWING TO THIS NEW DEVELOPMENT, OUR BANK WILL IMMEDIATELY WIRE DIRECTLY
YOUR FUNDS TO YOUR ACCOUNT WITHIN 24 BANKING HOURS FROM THE TIME YOUR
ACCOUNT DETAILS IS RECEIVED BY OUR BANK , ALSO ADD YOUR PERSONAL CELL PHONE
NUMBER FOR CONFIDENTIAL PURPOSES.
CONGRATULATIONS
MR GARRY MARTI
Envelope-to:
Delivery-date: Wed, 30 Nov 2016 07:16:05 -0800
Received: from mail-yb0-f193.google.com ([209.85.213.193]:36509)
by with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1cC6c8-0005XF-KT
for ; Wed, 30 Nov 2016 07:16:05 -0800
Received: by mail-yb0-f193.google.com with SMTP id d128so2284715ybh.3
for <>; Wed, 30 Nov 2016 07:48:27 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=uvpN/860+k2sNVbgt2sPvAjoweL78Tz7nxMUGP/8QiA=;
b=eBxtKbqWAVtMWUnhn2SPxnz968H0IY7mZSxJCblBJa73dWsZFCeKWh1gUMMsCpXhfk
41vhGuMwV77x/dHcLlA9P1SSse7y2gmlcpE3f+Xk3EAuNhbX/hUmODZCGQN4MMcgnPh2
H6lKXJGmJnDr9ZF/xoLAcSsxgm03sHVGt6OKi1cDlA6LCiIWh5lk3wedaVYfBRKPS+a/
cKhVwrPtqzFgfdL38DOgH6nTxT/NwVlApIS91uxYV1uHISumW/pSbMOG3zZPMyc4hm4T
DWq3O+a2CQS5eCZC2BM4CIuci/ShEaey/fZYuWIkQw3GVBfheVs6bovpNelxBLVZm+77
R87Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20130820;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=uvpN/860+k2sNVbgt2sPvAjoweL78Tz7nxMUGP/8QiA=;
b=QO5dxGiFMiaT4WjlO9h3ww5WTEEtL41BMiooa/tUJalA/HGuL0OW6Ft3bZ6tXyS3s9
SNtPF8s3q+8NGXW9WizedACzMl67ncWfSQb3BBz+3792iBqvWWEZejCzyW7g2Kwr+ocH
mxN3fP/+rP2PFKKSZxgu54a3sFfwns2nCUSY7HiYbS758FIcw5tCv3AlapDucgckrJJf
YRsdofpmPoMg0kt7mxxO9xfJAhr5wvAeZcQOzigWvNyLatBh8p5m3bNsACRJr0sSLW+T
RaboGdPfpesatFEo1LXwW5n6NJj9fB1jOPF3ZHSosw69PL+Hf++rV3jAC6COxjutPp30
FYtw==
X-Gm-Message-State: AKaTC0389z/744MILi7vXxj09u4JnfpMv80PSnfGcdrDu92FKCTGX1qkRlSoYxbNVMQC0gvYS4JzXSDrkpRGaA==
X-Received: by 10.37.64.86 with SMTP id n83mr9133882yba.183.1480520904452;
Wed, 30 Nov 2016 07:48:24 -0800 (PST)
MIME-Version: 1.0
Received: by 10.37.165.36 with HTTP; Wed, 30 Nov 2016 07:48:23 -0800 (PST)
Reply-To: [email protected]
From: SHORE BNK <[email protected]>
Date: Wed, 30 Nov 2016 16:48:23 +0100
Message-ID: <CANx69Xj3r2nb9QTxnQyz2XLKNa1Emrj6fvtFK=ppxMH+sh4bmQ@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=001a11c024c497b46b054286a23b
Bcc:
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: SHORE BANK 540 East 105th Street Cleveland, Ohio 44108 330)
961-1671 DEAR CUSTOMER WE WRITE TO INFORM YOU THAT YOUR ATM CARD WHICH WAS
RETRIEVED FROM MR JOHNSON LOYD SINCE LAST YEAR BY THE F B I IS STILL IN OUR
BANK AND THE PRIMARY BANK THAT SEND THE CARD (HSBC BANK) HAS ASKED US TO
WIRE THE FUNDS DIRECT TO YOUR BANK ACCOUNT VIA BANK TO BANK WIRE TRANSFER
BASED ON THE NEW METHOD OF THIS FRAUDSTERS TO ACCESS ATM CARD/ DRAFTS WHILE
ON TRANSIT. FOLLOWING TO THIS NEW DEVELOPMENT, OUR BANK WILL IMMEDIATELY
WIRE DIRECTLY YOUR FUNDS TO YOUR ACCOUNT WITHIN 24 BANKING HOURS FROM THE
TIME YOUR ACCOUNT DETAILS IS RECEIVED BY OUR BANK , ALSO ADD YOUR PERSONAL
CELL PHONE NUMBER FOR CONFIDENTIAL PURPOSES. [...]
Content analysis details: (9.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9960]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(intercontinentalbnk[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.213.193 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
3.0 TVD_PH_BODY_META TVD_PH_BODY_META
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** PAYMENT VIA SHORE BANK USA
SHORE BANK
540 East 105th Street
Cleveland, Ohio 44108
330) 961-1671
DEAR CUSTOMER
WE WRITE TO INFORM YOU THAT YOUR ATM CARD WHICH WAS RETRIEVED FROM MR
JOHNSON LOYD SINCE LAST YEAR BY THE F B I IS STILL IN OUR BANK AND THE
PRIMARY BANK THAT SEND THE CARD (HSBC BANK) HAS ASKED US TO WIRE THE FUNDS
DIRECT TO YOUR BANK ACCOUNT VIA BANK TO BANK WIRE TRANSFER BASED ON THE NEW
METHOD OF THIS FRAUDSTERS TO ACCESS ATM CARD/ DRAFTS WHILE ON TRANSIT.
FOLLOWING TO THIS NEW DEVELOPMENT, OUR BANK WILL IMMEDIATELY WIRE DIRECTLY
YOUR FUNDS TO YOUR ACCOUNT WITHIN 24 BANKING HOURS FROM THE TIME YOUR
ACCOUNT DETAILS IS RECEIVED BY OUR BANK , ALSO ADD YOUR PERSONAL CELL PHONE
NUMBER FOR CONFIDENTIAL PURPOSES.
CONGRATULATIONS
MR GARRY MARTI
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces