#335030 by buried under 419s
Wed Jul 26, 2017 9:19 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id zNvFF7J6eFlUIwAAjbubUg
for <>; Wed, 26 Jul 2017 04:19:14 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 26 Jul 2017 04:19:14 -0700
Received: from smtp.knology.net ([64.8.71.112]:24028)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1daKLN-0002Kz-TB
for ; Wed, 26 Jul 2017 04:19:14 -0700
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=Y8S6iVWN c=1 sm=1 tr=0 a=H04Oz7/SChQc/xnV6zyOKg==:117 a=H04Oz7/SChQc/xnV6zyOKg==:17 a=8nJEP1OIZ-IA:10 a=x7bEGLp0ZPQA:10 a=u_xn0ts7t4sA:10 a=ry75HYCAQH6Rthzi4xwA:9 a=nptWrhSf3i4B97ut:21 a=6Cbngk5tp5dmtqgh:21 a=wPNLvfGTeEIA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: c3VlbGVza0B3b3d3YXkuY29t
X_CMAE_Category: , ,
X-CNFS-Analysis:
X-CM-Score:
X-Scanned-by: Cloudmark Authority Engine
Authentication-Results: smtp01.wow.cmh.synacor.com smtp.user=suelesk; auth=pass (LOGIN)
Received: from [172.94.41.172] ([172.94.41.172:24204] helo=[172.94.41.172])
by smtp.mail.wowway.com (envelope-from <[email protected]>)
(ecelerity 3.6.1.42806 r(Platform:3.6.1.1)) with ESMTPA
id 7A/3F-13812-56A78795; Wed, 26 Jul 2017 07:18:26 -0400
Content-Type: text/plain; charset="iso-8859-1"
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: [email protected]
From: "Terry" <[email protected]>
Date: Wed, 26 Jul 2017 04:17:56 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=12.3
X-Spam-Score: 123
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ATTN; BENEFICIARY. Payment Notification; NO UPFRONT PAYMENT
How are you doing today? Fine I hope. [...]
Content analysis details: (12.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[64.8.71.112 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[64.8.71.112 listed in dnsbl.sorbs.net]
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[64.8.71.112 listed in wl.mailspike.net]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.6 BILLION_DOLLARS BODY: Talks about lots of money
0.6 URG_BIZ BODY: Contains urgent matter
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=t ... er.com;ip=]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(terrynewb[at]financier.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification; NO UPFRONT PAYMENT
ATTN; BENEFICIARY.
Payment Notification; NO UPFRONT PAYMENT
How are you doing today? Fine I hope.
Note that your inheritance payment is still in our possession and there some tax
and transfer fee that is needed be paid before final transfer of your fund into
your nominated bank account Knowing fully well that you might not be able to pay
the fee involved before final transfer of your fund into your account . I have to
seek for the assistance of an investor who has agreed to loan us the needed fund,
But he gave a condition of 3% of the total fund immediately the transfer is made
into your bank account .you don't have To worry as I will sign all the document
involved with the loan, Please do reconfirm below information's below. If you have
Bank of America account it will be preferably.
1, Do send your full bank details with address,
2, Do also send your full address and your direct telephone number.
A promissory note that the fund that we be loan to you by the investor we be used to
finance the release of your 5million dollars inheritance fund with my bank. Note
that the loan from the investor is for the payment of the tax and proper
documentation of you fund and not for your personal use. WE HAVE ALSO NOTICED THAT
YOU ARE REQUIRED TO PAY BETWEEN $50,000 -$70,000 THESE BEING THE OUTSTANDING ARREARS
TO FINALIZE THIS TRANSACTION. NOTE THAT THE LOAN CAN ONLY BE PAY BACK AFTER THE
SUCCESSFUL TRANSFER OF THE 5MILLION DOLLAR INTO YOUR ACCOUNT.
Your urgent reply is needed,
Terry Newberty,
WELLS FARGO BANK
Delivered-To:
Received: from
by (Dovecot) with LMTP id zNvFF7J6eFlUIwAAjbubUg
for <>; Wed, 26 Jul 2017 04:19:14 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 26 Jul 2017 04:19:14 -0700
Received: from smtp.knology.net ([64.8.71.112]:24028)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1daKLN-0002Kz-TB
for ; Wed, 26 Jul 2017 04:19:14 -0700
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=Y8S6iVWN c=1 sm=1 tr=0 a=H04Oz7/SChQc/xnV6zyOKg==:117 a=H04Oz7/SChQc/xnV6zyOKg==:17 a=8nJEP1OIZ-IA:10 a=x7bEGLp0ZPQA:10 a=u_xn0ts7t4sA:10 a=ry75HYCAQH6Rthzi4xwA:9 a=nptWrhSf3i4B97ut:21 a=6Cbngk5tp5dmtqgh:21 a=wPNLvfGTeEIA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: c3VlbGVza0B3b3d3YXkuY29t
X_CMAE_Category: , ,
X-CNFS-Analysis:
X-CM-Score:
X-Scanned-by: Cloudmark Authority Engine
Authentication-Results: smtp01.wow.cmh.synacor.com smtp.user=suelesk; auth=pass (LOGIN)
Received: from [172.94.41.172] ([172.94.41.172:24204] helo=[172.94.41.172])
by smtp.mail.wowway.com (envelope-from <[email protected]>)
(ecelerity 3.6.1.42806 r(Platform:3.6.1.1)) with ESMTPA
id 7A/3F-13812-56A78795; Wed, 26 Jul 2017 07:18:26 -0400
Content-Type: text/plain; charset="iso-8859-1"
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: [email protected]
From: "Terry" <[email protected]>
Date: Wed, 26 Jul 2017 04:17:56 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=12.3
X-Spam-Score: 123
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ATTN; BENEFICIARY. Payment Notification; NO UPFRONT PAYMENT
How are you doing today? Fine I hope. [...]
Content analysis details: (12.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[64.8.71.112 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[64.8.71.112 listed in dnsbl.sorbs.net]
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[64.8.71.112 listed in wl.mailspike.net]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.6 BILLION_DOLLARS BODY: Talks about lots of money
0.6 URG_BIZ BODY: Contains urgent matter
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=t ... er.com;ip=]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(terrynewb[at]financier.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Payment Notification; NO UPFRONT PAYMENT
ATTN; BENEFICIARY.
Payment Notification; NO UPFRONT PAYMENT
How are you doing today? Fine I hope.
Note that your inheritance payment is still in our possession and there some tax
and transfer fee that is needed be paid before final transfer of your fund into
your nominated bank account Knowing fully well that you might not be able to pay
the fee involved before final transfer of your fund into your account . I have to
seek for the assistance of an investor who has agreed to loan us the needed fund,
But he gave a condition of 3% of the total fund immediately the transfer is made
into your bank account .you don't have To worry as I will sign all the document
involved with the loan, Please do reconfirm below information's below. If you have
Bank of America account it will be preferably.
1, Do send your full bank details with address,
2, Do also send your full address and your direct telephone number.
A promissory note that the fund that we be loan to you by the investor we be used to
finance the release of your 5million dollars inheritance fund with my bank. Note
that the loan from the investor is for the payment of the tax and proper
documentation of you fund and not for your personal use. WE HAVE ALSO NOTICED THAT
YOU ARE REQUIRED TO PAY BETWEEN $50,000 -$70,000 THESE BEING THE OUTSTANDING ARREARS
TO FINALIZE THIS TRANSACTION. NOTE THAT THE LOAN CAN ONLY BE PAY BACK AFTER THE
SUCCESSFUL TRANSFER OF THE 5MILLION DOLLAR INTO YOUR ACCOUNT.
Your urgent reply is needed,
Terry Newberty,
WELLS FARGO BANK
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces