#407110 by buried under 419s
Wed Mar 25, 2020 8:44 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id KxP7FaDye16QzAEAibB4EA
(envelope-from <[email protected]>)
for <>; Wed, 25 Mar 2020 20:09:04 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 25 Mar 2020 20:09:04 -0400
Received: from mx5.mail.bg ([193.201.172.121]:56167)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jHG50-000Uey-Qt
for ; Wed, 25 Mar 2020 20:09:04 -0400
Received: from [192.168.43.248] (unknown [102.89.1.31])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx5.mail.bg (Postfix) with ESMTPSA id 8570A8093A5D;
Thu, 26 Mar 2020 01:58:42 +0200 (EET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=mail.bg; s=default;
t=1585180725; bh=GDmSvxjTdAZhI7QR0G7Gs09+N6wSQBmFExV6/rmQtVc=;
h=Content-Type:MIME-Version:Content-Transfer-Encoding:
Content-Description:Subject:To:From:Date:Reply-To;
b=Zp7Ng/1Vd+XzUKMO3T2Jp3d++J7r58o4cnd6R6DrqtrBLTOcARVIQJLj1x8/kt8ug
8a0DGLGGUkTtP+9WAukM5i9F9IDIc8ns3qyi1xwtTFlW8BJl+9DBGGGOiHsp5fNDuL
pQLW2EAAceSXjRR9MUpEsbW6cm9Y/9AktT0p3aa0=
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: " Dr. Johnson Morgan" < [email protected]
Date: Wed, 25 Mar 2020 00:58:28 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=15.9
X-Spam-Score: 159
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From: Dr. Johnson Morgan. Lloyds Banking Group Plc 25 Gresham
Street London EC2V &HN United Kingdom Good Day Dear! How are you and your
family? I hope my letter meets you in your best mood today. My name is Dr.
Johnson Morgan., I am the Operation/Regional Branch Head Manager of Lloyds
Banking Group Plc London. I d [...]
Content analysis details: (15.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
0.6 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[193.201.172.121 listed in list.dnswl.org]
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[erjamz63[at]mail.bg]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ohnsonmorgan623[at]outlook.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[erjamz63[at]mail.bg]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 KAM_INVFROM Invalid From Header containing mismatched <>'s
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
X-Spam-Flag: YES
Subject: ***SPAM*** Re:Details
From: Dr. Johnson Morgan.
Lloyds Banking Group Plc
25 Gresham Street London
EC2V &HN United Kingdom
Good Day Dear!
How are you and your family? I hope my letter meets you in your best mood today. My name is Dr. Johnson Morgan., I am the Operation/Regional Branch Head Manager of Lloyds Banking Group Plc London. I decided to seek a top secret/confidential co-operation with you in the execution of a transactions deal described here-under for our both mutual benefit. During the annual bank audits, I discovered an abandoned/unclaimed fund, sum total of £19.100,000 GBP (Nineteen Million One Hundred Thousand British Pounds Sterling) in an account that belongs to one of our foreign customers (Late David McDowell Brown) an American from Arlington, Virginia, who unfortunately lost his life as a single with the entire crew on February 1, 2003 over the southern United States Space Shuttle Columbia.I discovered that he did not specify any next of kin or will beneficiary to his account after going through his file in our bank.
I sincerely and deliberately seek your consent to present you as the next of kin / will beneficiary to the deceased so that the sum valued at £19.1 Million British Pounds Sterling will be transferred to you, which will be shared in these percentage ratio: 50% for me and 40% to you respectively while 10% is for any expenses incurred during the transaction. I need your sincere co-operation, trust and utmost confidentiality to enable us conduct this transaction successfully. I assure and promise you that this transaction will be executed under a legitimate arrangement that will protect you from any breach of the law both in your country and here in London as the fund is transferred to your nominated bank account. Upon consideration and acceptance of this offer, kindly forward me the following information immediately to my private email address for more confidentiality: [email protected]
1. Your full name:
2. Your full contact address:
3. Your direct mobile telephone number:
4. Your email address:
5. Your date of birth
6. Your occupation:
To enable me upload your information in our bank database to reflect in the bank network system that you are the named next of kin/will beneficiary of this account, then I will guide you on communication with the bank for onward transfer of this fund to you.
NOTE: We have few banking days to execute this transaction deal.
Thanks in anticipation of your urgent response.
Regards,
Dr. Johnson Morgan.
Delivered-To:
Received: from
by with LMTP
id KxP7FaDye16QzAEAibB4EA
(envelope-from <[email protected]>)
for <>; Wed, 25 Mar 2020 20:09:04 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 25 Mar 2020 20:09:04 -0400
Received: from mx5.mail.bg ([193.201.172.121]:56167)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jHG50-000Uey-Qt
for ; Wed, 25 Mar 2020 20:09:04 -0400
Received: from [192.168.43.248] (unknown [102.89.1.31])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx5.mail.bg (Postfix) with ESMTPSA id 8570A8093A5D;
Thu, 26 Mar 2020 01:58:42 +0200 (EET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=mail.bg; s=default;
t=1585180725; bh=GDmSvxjTdAZhI7QR0G7Gs09+N6wSQBmFExV6/rmQtVc=;
h=Content-Type:MIME-Version:Content-Transfer-Encoding:
Content-Description:Subject:To:From:Date:Reply-To;
b=Zp7Ng/1Vd+XzUKMO3T2Jp3d++J7r58o4cnd6R6DrqtrBLTOcARVIQJLj1x8/kt8ug
8a0DGLGGUkTtP+9WAukM5i9F9IDIc8ns3qyi1xwtTFlW8BJl+9DBGGGOiHsp5fNDuL
pQLW2EAAceSXjRR9MUpEsbW6cm9Y/9AktT0p3aa0=
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: " Dr. Johnson Morgan" < [email protected]
Date: Wed, 25 Mar 2020 00:58:28 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=15.9
X-Spam-Score: 159
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: From: Dr. Johnson Morgan. Lloyds Banking Group Plc 25 Gresham
Street London EC2V &HN United Kingdom Good Day Dear! How are you and your
family? I hope my letter meets you in your best mood today. My name is Dr.
Johnson Morgan., I am the Operation/Regional Branch Head Manager of Lloyds
Banking Group Plc London. I d [...]
Content analysis details: (15.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
0.6 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[193.201.172.121 listed in list.dnswl.org]
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[erjamz63[at]mail.bg]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ohnsonmorgan623[at]outlook.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[erjamz63[at]mail.bg]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 KAM_INVFROM Invalid From Header containing mismatched <>'s
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
X-Spam-Flag: YES
Subject: ***SPAM*** Re:Details
From: Dr. Johnson Morgan.
Lloyds Banking Group Plc
25 Gresham Street London
EC2V &HN United Kingdom
Good Day Dear!
How are you and your family? I hope my letter meets you in your best mood today. My name is Dr. Johnson Morgan., I am the Operation/Regional Branch Head Manager of Lloyds Banking Group Plc London. I decided to seek a top secret/confidential co-operation with you in the execution of a transactions deal described here-under for our both mutual benefit. During the annual bank audits, I discovered an abandoned/unclaimed fund, sum total of £19.100,000 GBP (Nineteen Million One Hundred Thousand British Pounds Sterling) in an account that belongs to one of our foreign customers (Late David McDowell Brown) an American from Arlington, Virginia, who unfortunately lost his life as a single with the entire crew on February 1, 2003 over the southern United States Space Shuttle Columbia.I discovered that he did not specify any next of kin or will beneficiary to his account after going through his file in our bank.
I sincerely and deliberately seek your consent to present you as the next of kin / will beneficiary to the deceased so that the sum valued at £19.1 Million British Pounds Sterling will be transferred to you, which will be shared in these percentage ratio: 50% for me and 40% to you respectively while 10% is for any expenses incurred during the transaction. I need your sincere co-operation, trust and utmost confidentiality to enable us conduct this transaction successfully. I assure and promise you that this transaction will be executed under a legitimate arrangement that will protect you from any breach of the law both in your country and here in London as the fund is transferred to your nominated bank account. Upon consideration and acceptance of this offer, kindly forward me the following information immediately to my private email address for more confidentiality: [email protected]
1. Your full name:
2. Your full contact address:
3. Your direct mobile telephone number:
4. Your email address:
5. Your date of birth
6. Your occupation:
To enable me upload your information in our bank database to reflect in the bank network system that you are the named next of kin/will beneficiary of this account, then I will guide you on communication with the bank for onward transfer of this fund to you.
NOTE: We have few banking days to execute this transaction deal.
Thanks in anticipation of your urgent response.
Regards,
Dr. Johnson Morgan.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces