#412537 by buried under 419s
Fri Jun 19, 2020 9:27 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id p1Y4KR5L7V40KgEAibB4EA
(envelope-from <[email protected]>)
for <>; Fri, 19 Jun 2020 19:32:46 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 19 Jun 2020 19:32:46 -0400
Received: from mail-qt1-f196.google.com ([209.85.160.196]:38723)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jmQV3-000Jr7-M5
for ; Fri, 19 Jun 2020 19:32:46 -0400
Received: by mail-qt1-f196.google.com with SMTP id z2so6464747qts.5
for <>; Fri, 19 Jun 2020 16:32:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=k3XeOv1D3FOpAY9F4UMy5TUR7DGpamM/bY4KwIxXr+g=;
b=ts4ZY2j+BoMz8M/2XjFf2C6DUBX+zno+0lB6EQJPEGXehR+hIuvfrxNIG8oj3A7G3e
FbP4YsKGdrWqneBkgbx2Rd1NHT9HUW7Idwjuy4EbD3LINQa5UCTZMTTS/whH/zoMRWZv
i1bL2RL8uVQuUkrV0NY89rHaZIGd0cid69AKWsAFmKt9piRtAX/qDs1H9L0u1GgEvM+Q
CHF8VcQOmfG2X+dvme/4FVwtzM/GTHjDwoCqjwi33u2IRW771jH5D+1e2dBB3moVePOd
2VRg6TJRXHNZUZuR63eIL8EmScayM11el5pGSPAGvjLuORAjkpfUMesUJrD3riU4dECA
FN4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=k3XeOv1D3FOpAY9F4UMy5TUR7DGpamM/bY4KwIxXr+g=;
b=WCkxlTG7xtEFEmGlb6gIKQe6ojee47XKen1nXjTTiR9F55XMHiLp6pGTZSjhBcyzS2
xTk549/MH8eQsPz25qrTnlFAEqIVuMSWQd3vxaZQEadotTB/g5JdmUvs7RmY8rS9/NVd
1Gxsl69xkUpGubxZerYYPnLwVZKNtDVnxz0F1LhhHn4ttaFK2CZJ0BShoNkXBS698iXH
KvbsN46FNQwC/N/3zjrON9TkWs7BbhfkjwucPErVhCYcfPesiHqiJ/aCwHq5TcIkv2cE
rWCxoZgY5WJhjLY2ELvn1lqsxcNjV383RuXo7jY7vSZT3dapzjL5otuMCYSgTzM12KE/
Sbaw==
X-Gm-Message-State: AOAM530s/Nl0bWFKGJA2tDcTpLv8UYE1cIqM1wU/6OO4Ykv1jblbHyg3
J1qOolmiE5Dl4geGRsd1498cYOCQfBg/9H57nJY=
X-Google-Smtp-Source: ABdhPJyBbLzt4yhuFSsF9Ncycn90WeNfce+Czy0QHp+QZehOmNIK5YZ+yqWWKx2IfXByJKqQPaXINP5sDK+Q/lMPuEg=
X-Received: by 2002:aed:2d44:: with SMTP id h62mr6096430qtd.167.1592609522249;
Fri, 19 Jun 2020 16:32:02 -0700 (PDT)
MIME-Version: 1.0
From: Mark Attah <[email protected]>
Date: Sat, 20 Jun 2020 00:31:55 +0100
Message-ID: <CAEARi51umQV+K0q2AYZ+XB_25G-S0xr-DhR+1pK2XyostJDCSA@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000d6f87905a8784cc2"
Bcc:
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I just recalled your were once ripped of while pursing your
inheritance funds which am sure you may forgotten but here is the god news
at last ,Hope your country has not been locked down due to Coron [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.160.196 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[markattah2[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[markattah2[at]gmail.com]
0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.196 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 YOU_INHERIT Discussing your inheritance
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT RESPONSE IS NEEDED
I just recalled your were once ripped of while pursing your inheritance funds which am sure you may forgotten
but here is the god news at last ,Hope your country has not been locked down due to Corona Virus outbreak.
Am happy to inform you that your fund has been mapped out for payment in Brussels Belgium next week through the Government owned offshore centre for fair and transparent payment channel.
Kindly contact the lawyer in charge of this payment process in Europe.
Name:Raymond Peter.
Email: [email protected]
Please contact him Immediately for the release of your long outstanding funds
n,b make sure you give me an update failure to that Raymond Peter. will not for any reason transfer your fund take note of the you are to re confirm your identity card and your mobile telephone number and your banking details
thank you
PLEASE I AM WORKING ON GIVING YOU A SOFT LOAN TO ENABLE ME USE THE MONEYAND PAY YOUR TRANSFER CHARGES I HOPE I CAN TRUST YOU SIR VERY VERY URGENT GET BACK TO ME I HOPE IF YOU RECEIVE THE LOAN INTO YOUR ACCOUNT YOU WILL BE ABLE TO RETURN IT BACK TO ENABLE US PAY YOUR BILLS AND YOUR OVER DUE FUND WILL BE WIRED TO YOU IMMEDIATELY
N,B
Delivered-To:
Received: from
by with LMTP
id p1Y4KR5L7V40KgEAibB4EA
(envelope-from <[email protected]>)
for <>; Fri, 19 Jun 2020 19:32:46 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 19 Jun 2020 19:32:46 -0400
Received: from mail-qt1-f196.google.com ([209.85.160.196]:38723)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jmQV3-000Jr7-M5
for ; Fri, 19 Jun 2020 19:32:46 -0400
Received: by mail-qt1-f196.google.com with SMTP id z2so6464747qts.5
for <>; Fri, 19 Jun 2020 16:32:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=k3XeOv1D3FOpAY9F4UMy5TUR7DGpamM/bY4KwIxXr+g=;
b=ts4ZY2j+BoMz8M/2XjFf2C6DUBX+zno+0lB6EQJPEGXehR+hIuvfrxNIG8oj3A7G3e
FbP4YsKGdrWqneBkgbx2Rd1NHT9HUW7Idwjuy4EbD3LINQa5UCTZMTTS/whH/zoMRWZv
i1bL2RL8uVQuUkrV0NY89rHaZIGd0cid69AKWsAFmKt9piRtAX/qDs1H9L0u1GgEvM+Q
CHF8VcQOmfG2X+dvme/4FVwtzM/GTHjDwoCqjwi33u2IRW771jH5D+1e2dBB3moVePOd
2VRg6TJRXHNZUZuR63eIL8EmScayM11el5pGSPAGvjLuORAjkpfUMesUJrD3riU4dECA
FN4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=k3XeOv1D3FOpAY9F4UMy5TUR7DGpamM/bY4KwIxXr+g=;
b=WCkxlTG7xtEFEmGlb6gIKQe6ojee47XKen1nXjTTiR9F55XMHiLp6pGTZSjhBcyzS2
xTk549/MH8eQsPz25qrTnlFAEqIVuMSWQd3vxaZQEadotTB/g5JdmUvs7RmY8rS9/NVd
1Gxsl69xkUpGubxZerYYPnLwVZKNtDVnxz0F1LhhHn4ttaFK2CZJ0BShoNkXBS698iXH
KvbsN46FNQwC/N/3zjrON9TkWs7BbhfkjwucPErVhCYcfPesiHqiJ/aCwHq5TcIkv2cE
rWCxoZgY5WJhjLY2ELvn1lqsxcNjV383RuXo7jY7vSZT3dapzjL5otuMCYSgTzM12KE/
Sbaw==
X-Gm-Message-State: AOAM530s/Nl0bWFKGJA2tDcTpLv8UYE1cIqM1wU/6OO4Ykv1jblbHyg3
J1qOolmiE5Dl4geGRsd1498cYOCQfBg/9H57nJY=
X-Google-Smtp-Source: ABdhPJyBbLzt4yhuFSsF9Ncycn90WeNfce+Czy0QHp+QZehOmNIK5YZ+yqWWKx2IfXByJKqQPaXINP5sDK+Q/lMPuEg=
X-Received: by 2002:aed:2d44:: with SMTP id h62mr6096430qtd.167.1592609522249;
Fri, 19 Jun 2020 16:32:02 -0700 (PDT)
MIME-Version: 1.0
From: Mark Attah <[email protected]>
Date: Sat, 20 Jun 2020 00:31:55 +0100
Message-ID: <CAEARi51umQV+K0q2AYZ+XB_25G-S0xr-DhR+1pK2XyostJDCSA@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000d6f87905a8784cc2"
Bcc:
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I just recalled your were once ripped of while pursing your
inheritance funds which am sure you may forgotten but here is the god news
at last ,Hope your country has not been locked down due to Coron [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.160.196 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[markattah2[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[markattah2[at]gmail.com]
0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.196 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 YOU_INHERIT Discussing your inheritance
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT RESPONSE IS NEEDED
I just recalled your were once ripped of while pursing your inheritance funds which am sure you may forgotten
but here is the god news at last ,Hope your country has not been locked down due to Corona Virus outbreak.
Am happy to inform you that your fund has been mapped out for payment in Brussels Belgium next week through the Government owned offshore centre for fair and transparent payment channel.
Kindly contact the lawyer in charge of this payment process in Europe.
Name:Raymond Peter.
Email: [email protected]
Please contact him Immediately for the release of your long outstanding funds
n,b make sure you give me an update failure to that Raymond Peter. will not for any reason transfer your fund take note of the you are to re confirm your identity card and your mobile telephone number and your banking details
thank you
PLEASE I AM WORKING ON GIVING YOU A SOFT LOAN TO ENABLE ME USE THE MONEYAND PAY YOUR TRANSFER CHARGES I HOPE I CAN TRUST YOU SIR VERY VERY URGENT GET BACK TO ME I HOPE IF YOU RECEIVE THE LOAN INTO YOUR ACCOUNT YOU WILL BE ABLE TO RETURN IT BACK TO ENABLE US PAY YOUR BILLS AND YOUR OVER DUE FUND WILL BE WIRED TO YOU IMMEDIATELY
N,B
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces