#383303 by buried under 419s
Mon Mar 25, 2019 9:17 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id SMnqHGuymFx1NQAAjbubUg
for <>; Mon, 25 Mar 2019 03:50:19 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Mar 2019 03:50:19 -0700
Received: from mail-ot1-f65.google.com ([209.85.210.65]:42800)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1h8NBK-0003X8-1P
for ; Mon, 25 Mar 2019 03:50:19 -0700
Received: by mail-ot1-f65.google.com with SMTP id 103so7549390otd.9
for <>; Mon, 25 Mar 2019 03:49:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=bJNG5eTMi/pIKJ83sYB5maMybkFpF2pRmnTl8/pKcM4=;
b=XkhQO1WpI/ndXjRIKBuM9Lt/R+XAOPMUovViucnKgX6IAHp4gErfGuJHt9qVNWaSH9
/Y4U0GathTY0qgSI5PMsQA3fj9EY6o2BSSec9idNR+NRFUfCFvxaYo0TLZ1d5DhbnxfR
zMMz0H2/GYm4wJTFyzGZ1ayxuqzkXSVMY1ZKxzLUtn4Y9x+81U3+ONXwx+cJKqZx8FXg
ARGGfACktpHFaWuE1ArfDbv2IOXjjJxMIVOBg7nYpjJBqSS1pAksM+WzpWsH1PY2OmiH
FjYSX7XpgcnsVBEIswKOxNpc0uIsO212FiUsWhvQ1P9Emqb1E3Qruy2D3RRv+1s8Hw7c
YRAw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=bJNG5eTMi/pIKJ83sYB5maMybkFpF2pRmnTl8/pKcM4=;
b=JkZUXTTqITF9pHwnGMNlQeMbi6WXE9iHlyZxKFOIj85bUd+qpR9qf06Jzvfb1INnEf
tpGH2XgB4hJkafg1c8PlB+U/ZyTJD2GCg/mewUabc9KsadV5YMPf1tB/avwcdduivGoq
KbF7KvTQoXwhFDmsmulB0S3hGQNt7+jG4Ii7zC/pYxhyILOv6n1lXtPcyO5mprECMkTX
3OX78cjApw9zcFinGVLoFmVCoLuWSYPfXYA/8W+wGtBffdTF6n/aZXX2UNVRKZ9wcRTv
jxwdCKgIFuY9C5m80icKiKZ2ISPI8boMoWcWDHs3qiAbMXMDFTPEMMuc1ZOizegSPvka
0G7w==
X-Gm-Message-State: APjAAAVm4IGpwXoaGcQlMlIBc9pP0JUoaaunutXFVPYMiy3ekkjmkl/J
2XDP7EB82OqbfCdebx8D0kdaZ6VC8LhrXXUIBjI=
X-Google-Smtp-Source: APXvYqxpibeLqjAPhoSgh8BYPKVw+yYFdaoRR/PZJ93qddcGXNZH1OV1SIAu3csHKerf+GYqxMW18nKe3TrChQ1ZwLI=
X-Received: by 2002:a9d:7d95:: with SMTP id j21mr7166962otn.141.1553510977090;
Mon, 25 Mar 2019 03:49:37 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6830:1186:0:0:0:0 with HTTP; Mon, 25 Mar 2019 03:49:35
-0700 (PDT)
Reply-To: [email protected]
From: David Hind <[email protected]>
Date: Mon, 25 Mar 2019 11:49:35 +0100
Message-ID: <CA+jR-YEadw2gDAXNjZA8YSHmPa4LTm8F-FfpObaHpbEFUGDFDw@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=16.2
X-Spam-Score: 162
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, How are you today? I am David Hind, an assistant
finance security officer working in Coin Finance Security Group London. I
am a British National and I live in London. I need your help and support
to transfer the sum of Forty Million Five Hundred Thousand US Dollars US$40,500.000.00
from the finance security company to your bank account in your Country. You
will be rewarded with 40% of the total sum for your partnership and I will
come over to meet you in your country, for sharing of the money, immediately
the money is transferred to your bank account. Can you handle this? [...]
Content analysis details: (16.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.210.65 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(davidhind101[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(cptferdinandoponti[at]gmail.com)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** GOOD DAY
Dear Friend,
How are you today? I am David Hind, an assistant finance security
officer working in Coin Finance Security Group London. I am a British
National and I live in London. I need your help and support to
transfer the sum of Forty Million Five Hundred Thousand US Dollars
US$40,500.000.00 from the finance security company to your bank
account in your Country. You will be rewarded with 40% of the total
sum for your partnership and I will come over to meet you in your
country, for sharing of the money, immediately the money is
transferred to your bank account. Can you handle this?
The money was abandoned by a late customer Alan Williams, a British
tycoon who died with his family in car accident on 20th of October
2008. The money was left unclaimed in the Coin Finance Security Group
London for safe keeping without a beneficiary.
You are to stand as beneficiary of the unclaimed funds, to enable the
Coin Finance Security Group to facilitate the fund release and
transfer to your bank account. I need your personal information and ID
to re-profile the funds with your data, to enable the finance company
to transfer the sum to you. The whole process of the transaction will
take not more than 10 days to successfully complete the fund transfer
to your bank account.
I will send you more details about the transaction as soon as I get
your response, to enable us to begin the transaction. I look forward
to hearing from you soon.
You can reply me back on these email: [email protected]
Yours Sincerely,
Mr. David Hind
Delivered-To:
Received: from
by with LMTP id SMnqHGuymFx1NQAAjbubUg
for <>; Mon, 25 Mar 2019 03:50:19 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Mar 2019 03:50:19 -0700
Received: from mail-ot1-f65.google.com ([209.85.210.65]:42800)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1h8NBK-0003X8-1P
for ; Mon, 25 Mar 2019 03:50:19 -0700
Received: by mail-ot1-f65.google.com with SMTP id 103so7549390otd.9
for <>; Mon, 25 Mar 2019 03:49:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=bJNG5eTMi/pIKJ83sYB5maMybkFpF2pRmnTl8/pKcM4=;
b=XkhQO1WpI/ndXjRIKBuM9Lt/R+XAOPMUovViucnKgX6IAHp4gErfGuJHt9qVNWaSH9
/Y4U0GathTY0qgSI5PMsQA3fj9EY6o2BSSec9idNR+NRFUfCFvxaYo0TLZ1d5DhbnxfR
zMMz0H2/GYm4wJTFyzGZ1ayxuqzkXSVMY1ZKxzLUtn4Y9x+81U3+ONXwx+cJKqZx8FXg
ARGGfACktpHFaWuE1ArfDbv2IOXjjJxMIVOBg7nYpjJBqSS1pAksM+WzpWsH1PY2OmiH
FjYSX7XpgcnsVBEIswKOxNpc0uIsO212FiUsWhvQ1P9Emqb1E3Qruy2D3RRv+1s8Hw7c
YRAw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=bJNG5eTMi/pIKJ83sYB5maMybkFpF2pRmnTl8/pKcM4=;
b=JkZUXTTqITF9pHwnGMNlQeMbi6WXE9iHlyZxKFOIj85bUd+qpR9qf06Jzvfb1INnEf
tpGH2XgB4hJkafg1c8PlB+U/ZyTJD2GCg/mewUabc9KsadV5YMPf1tB/avwcdduivGoq
KbF7KvTQoXwhFDmsmulB0S3hGQNt7+jG4Ii7zC/pYxhyILOv6n1lXtPcyO5mprECMkTX
3OX78cjApw9zcFinGVLoFmVCoLuWSYPfXYA/8W+wGtBffdTF6n/aZXX2UNVRKZ9wcRTv
jxwdCKgIFuY9C5m80icKiKZ2ISPI8boMoWcWDHs3qiAbMXMDFTPEMMuc1ZOizegSPvka
0G7w==
X-Gm-Message-State: APjAAAVm4IGpwXoaGcQlMlIBc9pP0JUoaaunutXFVPYMiy3ekkjmkl/J
2XDP7EB82OqbfCdebx8D0kdaZ6VC8LhrXXUIBjI=
X-Google-Smtp-Source: APXvYqxpibeLqjAPhoSgh8BYPKVw+yYFdaoRR/PZJ93qddcGXNZH1OV1SIAu3csHKerf+GYqxMW18nKe3TrChQ1ZwLI=
X-Received: by 2002:a9d:7d95:: with SMTP id j21mr7166962otn.141.1553510977090;
Mon, 25 Mar 2019 03:49:37 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6830:1186:0:0:0:0 with HTTP; Mon, 25 Mar 2019 03:49:35
-0700 (PDT)
Reply-To: [email protected]
From: David Hind <[email protected]>
Date: Mon, 25 Mar 2019 11:49:35 +0100
Message-ID: <CA+jR-YEadw2gDAXNjZA8YSHmPa4LTm8F-FfpObaHpbEFUGDFDw@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=16.2
X-Spam-Score: 162
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, How are you today? I am David Hind, an assistant
finance security officer working in Coin Finance Security Group London. I
am a British National and I live in London. I need your help and support
to transfer the sum of Forty Million Five Hundred Thousand US Dollars US$40,500.000.00
from the finance security company to your bank account in your Country. You
will be rewarded with 40% of the total sum for your partnership and I will
come over to meet you in your country, for sharing of the money, immediately
the money is transferred to your bank account. Can you handle this? [...]
Content analysis details: (16.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.210.65 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(davidhind101[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(cptferdinandoponti[at]gmail.com)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** GOOD DAY
Dear Friend,
How are you today? I am David Hind, an assistant finance security
officer working in Coin Finance Security Group London. I am a British
National and I live in London. I need your help and support to
transfer the sum of Forty Million Five Hundred Thousand US Dollars
US$40,500.000.00 from the finance security company to your bank
account in your Country. You will be rewarded with 40% of the total
sum for your partnership and I will come over to meet you in your
country, for sharing of the money, immediately the money is
transferred to your bank account. Can you handle this?
The money was abandoned by a late customer Alan Williams, a British
tycoon who died with his family in car accident on 20th of October
2008. The money was left unclaimed in the Coin Finance Security Group
London for safe keeping without a beneficiary.
You are to stand as beneficiary of the unclaimed funds, to enable the
Coin Finance Security Group to facilitate the fund release and
transfer to your bank account. I need your personal information and ID
to re-profile the funds with your data, to enable the finance company
to transfer the sum to you. The whole process of the transaction will
take not more than 10 days to successfully complete the fund transfer
to your bank account.
I will send you more details about the transaction as soon as I get
your response, to enable us to begin the transaction. I look forward
to hearing from you soon.
You can reply me back on these email: [email protected]
Yours Sincerely,
Mr. David Hind
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces