#391417 by buried under 419s
Fri Jul 12, 2019 9:41 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id aOI3I+I5KF2sLAAAjbubUg
for <>; Fri, 12 Jul 2019 00:42:26 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 12 Jul 2019 00:42:26 -0700
Received: from mail.windstream.syn-alias.com ([69.168.106.36]:30693 helo=mail.windstream.net)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hlqCD-0002y5-5R
for; Fri, 12 Jul 2019 00:42:26 -0700
DKIM-Signature: v=1; a=rsa-sha1; d=windstream.net; s=20180222; c=relaxed/simple;
q=dns/txt; [email protected]; t=1562917299;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=w/9eZASRk+pP9GIEcgpRp4OCOJw=;
b=tJqRT8evXVQGVI5vdFpHhP3Kxp/C5KZkONcMxg1UmMHf+KVV5FtQOPkxLAYaqj1H
pUpBlSscxyrwpCP8snOlcrY8fI1wj6aMnNQ9FitnmjuXZMBaTZ1waKD6bLT+TnXQ
SzauMn5QTH7VtOZ+3HbawyXTynaD7uhdKZaD/KoXZnobaRl6uZz5S9b++SK8cHen
CP0917a1uhhYvIt3Yc1Q5/pbKlXU4noSWvFR2x/gIs3jcvuPAooDjb3BR0qmfLWw
YUr9YxKCqqafJba+2Mcp1beNkolOzwrFC6tgyRQO0LSrUJ1V/ANX9jRowwO53e8j
FQLJT2GGjY2M2h6wzNvJsA==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=NYak7CL4 c=1 sm=1 tr=0 a=fhLuDaO0N2qmM5hKYthsGg==:117 a=fhLuDaO0N2qmM5hKYthsGg==:17 a=KGjhK52YXX0A:10 a=0o9FgrsRnhwA:10 a=yzuLex_2n3YA:10 a=KXl77lDgDEgIEtoqJYcA:9 a=GP0xPcKIHEe8XiVTjooA:9 a=ZU6GNzbJPIhuYkMK:21 a=Ep4hc1Kl6ia27tEY:21 a=wPNLvfGTeEIA:10 a=OmXxNCvaBQD7FM0c_bcA:9 a=_W_S_7VecoQA:10 a=y3gxJGGnbrtUV2GOxcvc:22
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: ampkZWpvbmdAd2luZHN0cmVhbS5uZXQ=
Authentication-Results: smtp04.aqua.bos.sync.lan [email protected]; auth=pass (LOGIN)
Received: from [104.143.92.165] ([104.143.92.165:58898] helo=[10.8.8.10])
by mail.windstream.net (envelope-from <[email protected]>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-SHA)
id F3/E9-22080-619382D5; Fri, 12 Jul 2019 03:41:37 -0400
Content-Type: multipart/alternative; boundary="===============0512053983=="
Message-ID: <[email protected]>
MIME-Version: 1.0
To: [email protected]
From: Lynch <[email protected]>
Date: Fri, 12 Jul 2019 00:36:35 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, My name is Anthony Lynch, I am the Chief Accountant
of Yorkshire Bank. 30 St Vincent Place, Glasgow G1 2HL, United Kingdom I
require your assistance regarding the transaction stated here after. I have
packaged a financial transaction that will benefit both of us. As the Chief
Accountant of the Yorkshire Bank it is my duty to send ina financial report
to my head office at the end of each quarter. [...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[69.168.106.36 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 TEQF_USR_POLITE To and from user nearly same + polite greeting
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.6 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Very Important Information: Partnership Inquiry
Dear Friend,
My name is Anthony Lynch, I am the Chief Accountant of Yorkshire Bank. 30 St
Vincent Place, Glasgow G1 2HL, United Kingdom I require your assistance regarding
the transaction stated here after. I have packaged a financial transaction that will
benefit both of us. As the Chief Accountant of the Yorkshire Bank it is my duty to
send ina financial report to my head office at the end of each quarter.
On the course of last quarter financial report, I discovered that my branch in which
I am the Chief Accountant made six million seven hundred and fifty thousand U.S.
dollars ($6,750.000.00) which my head office is not made aware. This stated amount
accrued from fluctuation of the foreign exchange rate of the Western Union Money
transfer between the U.S. Dollar and the Great British pounds. I have since placed
this fund on what we call SUSPENSE ACCOUNT without any beneficiary.
As an officer of the bank I can not be directly connected to this money, so this
informed my contacting you for us to work together so that you can assist to receive
this money. All I need from you is to stand and receive this fund as the
beneficiary. If you accept this offer to work with me I will appreciate it very
much. As soon as I receive your information response i.e. Telephone number,
Home/office address,Present Location/residence,Age Sex Kind of work and nationality
I will forward details to you on how we can achieve it successfully.
Yours Sincerely,
Mr Anthony Lynch.
Yorkshire Bank. 30 St Vincent Place, Glasgow G1 2HL, United Kingdom
Delivered-To:
Received: from
by with LMTP id aOI3I+I5KF2sLAAAjbubUg
for <>; Fri, 12 Jul 2019 00:42:26 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 12 Jul 2019 00:42:26 -0700
Received: from mail.windstream.syn-alias.com ([69.168.106.36]:30693 helo=mail.windstream.net)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hlqCD-0002y5-5R
for; Fri, 12 Jul 2019 00:42:26 -0700
DKIM-Signature: v=1; a=rsa-sha1; d=windstream.net; s=20180222; c=relaxed/simple;
q=dns/txt; [email protected]; t=1562917299;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=w/9eZASRk+pP9GIEcgpRp4OCOJw=;
b=tJqRT8evXVQGVI5vdFpHhP3Kxp/C5KZkONcMxg1UmMHf+KVV5FtQOPkxLAYaqj1H
pUpBlSscxyrwpCP8snOlcrY8fI1wj6aMnNQ9FitnmjuXZMBaTZ1waKD6bLT+TnXQ
SzauMn5QTH7VtOZ+3HbawyXTynaD7uhdKZaD/KoXZnobaRl6uZz5S9b++SK8cHen
CP0917a1uhhYvIt3Yc1Q5/pbKlXU4noSWvFR2x/gIs3jcvuPAooDjb3BR0qmfLWw
YUr9YxKCqqafJba+2Mcp1beNkolOzwrFC6tgyRQO0LSrUJ1V/ANX9jRowwO53e8j
FQLJT2GGjY2M2h6wzNvJsA==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=NYak7CL4 c=1 sm=1 tr=0 a=fhLuDaO0N2qmM5hKYthsGg==:117 a=fhLuDaO0N2qmM5hKYthsGg==:17 a=KGjhK52YXX0A:10 a=0o9FgrsRnhwA:10 a=yzuLex_2n3YA:10 a=KXl77lDgDEgIEtoqJYcA:9 a=GP0xPcKIHEe8XiVTjooA:9 a=ZU6GNzbJPIhuYkMK:21 a=Ep4hc1Kl6ia27tEY:21 a=wPNLvfGTeEIA:10 a=OmXxNCvaBQD7FM0c_bcA:9 a=_W_S_7VecoQA:10 a=y3gxJGGnbrtUV2GOxcvc:22
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: ampkZWpvbmdAd2luZHN0cmVhbS5uZXQ=
Authentication-Results: smtp04.aqua.bos.sync.lan [email protected]; auth=pass (LOGIN)
Received: from [104.143.92.165] ([104.143.92.165:58898] helo=[10.8.8.10])
by mail.windstream.net (envelope-from <[email protected]>)
(ecelerity 3.6.25.56547 r(Core:3.6.25.0)) with ESMTPSA (cipher=DHE-RSA-AES256-SHA)
id F3/E9-22080-619382D5; Fri, 12 Jul 2019 03:41:37 -0400
Content-Type: multipart/alternative; boundary="===============0512053983=="
Message-ID: <[email protected]>
MIME-Version: 1.0
To: [email protected]
From: Lynch <[email protected]>
Date: Fri, 12 Jul 2019 00:36:35 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, My name is Anthony Lynch, I am the Chief Accountant
of Yorkshire Bank. 30 St Vincent Place, Glasgow G1 2HL, United Kingdom I
require your assistance regarding the transaction stated here after. I have
packaged a financial transaction that will benefit both of us. As the Chief
Accountant of the Yorkshire Bank it is my duty to send ina financial report
to my head office at the end of each quarter. [...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[69.168.106.36 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 TEQF_USR_POLITE To and from user nearly same + polite greeting
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.6 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Very Important Information: Partnership Inquiry
Dear Friend,
My name is Anthony Lynch, I am the Chief Accountant of Yorkshire Bank. 30 St
Vincent Place, Glasgow G1 2HL, United Kingdom I require your assistance regarding
the transaction stated here after. I have packaged a financial transaction that will
benefit both of us. As the Chief Accountant of the Yorkshire Bank it is my duty to
send ina financial report to my head office at the end of each quarter.
On the course of last quarter financial report, I discovered that my branch in which
I am the Chief Accountant made six million seven hundred and fifty thousand U.S.
dollars ($6,750.000.00) which my head office is not made aware. This stated amount
accrued from fluctuation of the foreign exchange rate of the Western Union Money
transfer between the U.S. Dollar and the Great British pounds. I have since placed
this fund on what we call SUSPENSE ACCOUNT without any beneficiary.
As an officer of the bank I can not be directly connected to this money, so this
informed my contacting you for us to work together so that you can assist to receive
this money. All I need from you is to stand and receive this fund as the
beneficiary. If you accept this offer to work with me I will appreciate it very
much. As soon as I receive your information response i.e. Telephone number,
Home/office address,Present Location/residence,Age Sex Kind of work and nationality
I will forward details to you on how we can achieve it successfully.
Yours Sincerely,
Mr Anthony Lynch.
Yorkshire Bank. 30 St Vincent Place, Glasgow G1 2HL, United Kingdom
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces