Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#378000 by buried under 419s Sat Dec 08, 2018 11:34 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by m with LMTP id uJKSGKUiC1zIOwAAjbubUg
for <>; Fri, 07 Dec 2018 17:47:17 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 07 Dec 2018 17:47:17 -0800
Received: from mail-ed1-f67.google.com ([209.85.208.67]:46489)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gVRi7-0003yL-Nq
for ; Fri, 07 Dec 2018 17:47:17 -0800
Received: by mail-ed1-f67.google.com with SMTP id o10so5123730edt.13
for <>; Fri, 07 Dec 2018 17:46:55 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=XjbYKbm/YE+I5ic007l57zV/8UMCvQKPUPIasRILTgo=;
b=f9FPbg+15jepRblBjJ+3Imy99917OqoKWfU5U7T8kpQfmIY340KW4GyJSsd9oA9T/g
HmyXe42CwMZ6wuURd0GrPzHpnaoIo2ekUOlLr8xvl4kY/m/JoepqrGMEq5gCW85ZxkJQ
Ph1TYZeUX6lSRjEa1hC3PUaMBXULkRefP1FpjL4A8BpK4QFjRytRv9mv96ads2xnYvYo
/dZK4347yaCKplmkgKzPwGtmWkQ1dit0rgbe1g/5jX+uaD4wA1Y2ZbJk9eM36pCq/bSt
m+WSG6E5IfhiCF4F4mxmpIGj52T4JhjAJlysKAamf8bZMhXABa8/T8uf8SD4F2zZiLBv
CNMw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=XjbYKbm/YE+I5ic007l57zV/8UMCvQKPUPIasRILTgo=;
b=CZM8YNMI4MVfhcQiUaMDWCpdiIKUyifdy5IYlVJBUDM3UQdhdGYGBbJhcndnjl0lub
1fz4RyWMm6AD4a/LyhAzzw8zz20tfIEQ601j1jnIlX29x0k52+tbPOVtPGjYk5mfcSDv
Qafh8ychT8cokygGUwXId9/jqe8F0f4y4iVPqCUvZ9xE9Kbh6KxEeN5V6JngdPCY+ClS
OUUBtdYFPhkgZwOUn5f44MsUGPA89MtSqFpMJP7zTbzbohsjbY99yT3algyt/cWKGQQJ
sirGbg1z3iItR4JLnLo4D6fQ6bjHgrHDnkviURoo4QzwG3R32vGk4K97460/ShWpyhEh
PSmQ==
X-Gm-Message-State: AA+aEWaHpoYS7iz8Qxhv1Uv161RFpFrf/kFqAquDH2SMU7K0aObo4PXJ
ktEU7JXQ+x3g7kfolWOmRC5+kFPGG/MMd1MpHFU=
X-Google-Smtp-Source: AFSGD/UpXMpYOpw99FfozaKGihzTLp5UJdSnCRq8sk/VZIs/ljDBNEJOBPgV0JI3SOqHagSx+zz6rIEbYsZQzg9QfMk=
X-Received: by 2002:a17:906:1a49:: with SMTP id j9-v6mr3455697ejf.45.1544233593708;
Fri, 07 Dec 2018 17:46:33 -0800 (PST)
MIME-Version: 1.0
From: SHORE BNK <[email protected]>
Date: Sat, 8 Dec 2018 02:46:23 +0100
Message-ID: <CACjn-8JdTWzjXhgxt94uV_afpecYnH9rTFsVOyZLxAi83L9x1w@mail.gmail.com>
Subject: APPROVED
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000cda6aa057c78e6e5"
Bcc:
X-Spam-Status: No, score=6.5
X-Spam-Score: 65
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: [image: Image result for shore bank logo] SHORE BANK 540 East
105th Street Cleveland, Ohio 44108 330) 961-1671 DEAR CUSTOMER WE WRITE TO
INFORM YOU THAT YOUR DRAFT (VALUED $4.500.000.00) WHICH WAS RETRIEVED FROM
MR JOHNSON LOYD SINCE LAST YEAR BY THE F B I IS STILL IN OUR BANK AND THE
PRIMARY BANK THAT SEND THE HSBC (HSBC BANK) HAS ASK US TO DELIVERY IT DIRECTLY
TO YOU. KINDLY SEND YOUR DELIVERY ADDRESS AND A COPY OF YOUR IDENTITY CARD
INCLUDING YOUR PERSONAL CELL PHONE FOR DELIVERY. CONGRATULATIONS MR GARRY
MARTI [...]

Content analysis details: (6.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (contactinfo85[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(contactinfo85[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.67 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.67 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
X-Spam-Flag: NO


SHORE BANK
540 East 105th Street
Cleveland, Ohio 44108
330) 961-1671


DEAR CUSTOMER

WE WRITE TO INFORM YOU THAT YOUR DRAFT (VALUED $4.500.000.00) WHICH WAS
RETRIEVED FROM MR JOHNSON LOYD SINCE LAST YEAR BY THE F B I IS STILL IN OUR
BANK AND THE PRIMARY BANK THAT SEND THE HSBC (HSBC BANK) HAS ASK US TO
DELIVERY IT DIRECTLY TO YOU.
KINDLY SEND YOUR DELIVERY ADDRESS AND A COPY OF YOUR IDENTITY CARD
INCLUDING YOUR PERSONAL CELL PHONE FOR DELIVERY.
CONGRATULATIONS
MR GARRY MARTI

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: Bing [Bot], Google [Bot] and 112 guests