by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 4G33HthGqVoMagAAjbubUg
for <>; Wed, 14 Mar 2018 08:59:20 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 14 Mar 2018 08:59:20 -0700
Received: from mail-vk0-f65.google.com ([209.85.213.65]:46033)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ew8oA-00073J-1j
for ; Wed, 14 Mar 2018 08:59:20 -0700
Received: by mail-vk0-f65.google.com with SMTP id k187so2281144vke.12
for <>; Wed, 14 Mar 2018 08:58:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=8BtY7QnVYlHs8ILN+9bP7eE5kgsZPlS48eYgV/Y8oZA=;
b=AsXgOabVcOsrVJDCLqATyKdmupTaaMo6d8pH4cJdwOcPsc7itLV3wsccl1cXUCNq9l
98OH2h8TiklaFjUZtpoBk+/qiTsHFfu/SHrG2Qp+FiVgvbkjgUCK9+scc6wnPJiZB7IB
4KHeXNgg15h7Sj1CsjNIIHGssEaKCbCMwggqqkcfPXKYfQq616XUK67Y9g2mrjO+3Cs1
xbsprY6F+K9juZJuCLkV1vVdgyK0d462yzJW5E8I9L5gvtvt6uxp/DTw7thVwvXCxbWM
0mZOCLBXvrQ2Hku00mtDphBsu3ey3BkCR8lJywBGvqFdnKQeqAlDgKRVng+o5Q+7/jud
TMyQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=8BtY7QnVYlHs8ILN+9bP7eE5kgsZPlS48eYgV/Y8oZA=;
b=i64tP1MQYCOegtiYMmj4ZIbFWMVcL0bgK2T2dPgBW1uNFtd0ZQ2nZmX9ISxTtsAKx2
17aRrn2GsMUYKgKrSzdGNsyXUQ+oWEgvU9fgvi+q5LRd0IBycQBJFpc8LWWvBDZeCxPo
F19sNFbet/AVkZS6l2aWARONjogh1IqpJ1N9S5iJ6bK/sFrl6c6b4lRADQfaAJRs1LYQ
AeemWXIqeuwtB04PrkVYmJ39IYQbb4xPpFtIxiHnfnADseRNDj7iz6XkuDkyf5ol6ARL
OylJtwGF3cyCtSuase2YWSlK73A6ojuyfnm8HkmDJQc1ndOhZ0W5qnxIGfJ8PkkO+nwN
Edhg==
X-Gm-Message-State: AElRT7Gyi0czLu92LMtQL2ye1g1SP/3xbgJY5UrmqLtM6iHA6t8VwVUJ
rZ+k7pF2V/Pg+2hsf605LCcFnZUBsu9nH7hmF34=
X-Google-Smtp-Source: AG47ELtXILMFMfO2w8vD5nB+WmOreW2+tavu3LyeLW/QfAWMo03le7f2oEGnluKZc6gUml796CThIUfxXmeeoSh6kCI=
X-Received: by 10.31.107.137 with SMTP id k9mr3679373vki.198.1521043116875;
Wed, 14 Mar 2018 08:58:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.103.123.193 with HTTP; Wed, 14 Mar 2018 08:58:36 -0700 (PDT)
Reply-To: [email protected]
From: Santander Bank <[email protected]>
Date: Wed, 14 Mar 2018 15:58:36 +0000
Message-ID: <CAMuwWSOq5TT76+4grhqi=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="001a11478ec2ab67fa0567617274"
Bcc:
X-Spam-Status: Yes, score=18.2
X-Spam-Score: 182
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *WELCOME TO SANTANDER BANK (SBUS) ONLINE BANKING DEPARTMENT.Address
864 8TH AVE, NEW YORK, NY 10019 USAE-mail Offical: [email protected]
<[email protected]>Update: March 14, 2018.Dear Beneficiary.Compensation
Payment of US$18.5 Millions(SBUS) RSANTANDER BANK of USA writes in regards
to the transfer of your fund which your payment file was deposited in this
bank for urgent transfer of your fund through our online banking system.You
may be wondering how this fund of US$18.500,000.00 belongs to you. This fund
was deposited with this bank on 5th March 2018 by Mr. Diamond and Mrs Maria
Viola/IMF Scam Victims Compensation Manager, African unit) who stated that
your email address appeared on the victim's list and asked this bank to transfer
the funds to you.The director in charge of foreign transfers in this bank
and (Chief B. O. Lord) tried to reach you with the phone number provided
but no avail. After 3 days when I was employed as the new Retail Banking Branch
Manager, I didn't have any idea of this transaction until this week when
a man come to my office and needed to claim his father's overdue fund. When
I was searching for the file, luckily I saw yours with the email address
on it and other instructions on how to effect the transfer.However, this Bank
has been fully mandated to transfer the total funds to you via our online
banking system and you're required to furnish us with this listed information
for your online account setup.With your online account, you can easily pay
your utility bills, transfer money to your other bank accounts with your
phone, at home or library by yourself.THESE ARE THE INFORMATION NEEDED TO
CREATE YOUR ONLINE BANKING ACCOUNT SETUP, AND WE WILL LODGE YOUR FUNDS IN
THE ACCOUNT AND SEND YOU THE ACCOUNT DETAILS IN 24 HOURS TODAY.Please, All
fields with asterisk(*) must be filled.Personal InformationFirst Name*:Last
Name*:State of Origin*:Nationality*:National ID Card.*:Phone [...]
Content analysis details: (18.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.213.65 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.213.65 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(charlesobi767[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (charlesobi767[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.7 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Compensation Payment of US$18.5 Millions
*WELCOME TO SANTANDER BANK (SBUS) ONLINE BANKING DEPARTMENT.Address 864 8TH
AVE, NEW YORK, NY 10019 USAE-mail Offical:
[email protected]
<[email protected]>Update: March 14, 2018.Dear
Beneficiary.Compensation Payment of US$18.5 Millions(SBUS) RSANTANDER BANK
of USA writes in regards to the transfer of your fund which your payment
file was deposited in this bank for urgent transfer of your fund through
our online banking system.You may be wondering how this fund of
US$18.500,000.00 belongs to you. This fund was deposited with this bank on
5th March 2018 by Mr. Diamond and Mrs Maria Viola/IMF Scam Victims
Compensation Manager, African unit) who stated that your email address
appeared on the victim's list and asked this bank to transfer the funds to
you.The director in charge of foreign transfers in this bank and (Chief B.
O. Lord) tried to reach you with the phone number provided but no avail.
After 3 days when I was employed as the new Retail Banking Branch Manager,
I didn't have any idea of this transaction until this week when a man come
to my office and needed to claim his father's overdue fund. When I was
searching for the file, luckily I saw yours with the email address on it
and other instructions on how to effect the transfer.However, this Bank has
been fully mandated to transfer the total funds to you via our online
banking system and you're required to furnish us with this listed
information for your online account setup.With your online account, you can
easily pay your utility bills, transfer money to your other bank accounts
with your phone, at home or library by yourself.THESE ARE THE INFORMATION
NEEDED TO CREATE YOUR ONLINE BANKING ACCOUNT SETUP, AND WE WILL LODGE YOUR
FUNDS IN THE ACCOUNT AND SEND YOU THE ACCOUNT DETAILS IN 24 HOURS
TODAY.Please, All fields with asterisk(*) must be filled.Personal
InformationFirst Name*:...............Last Name*:...............State of
Origin*:...............Nationality*:...............National ID
Card.*:...............Phone Number*:...............Fax
Number*:...............Marital
Status*:...............Gender*:...............Birthday*:...............Occupation*:...............Indicate
Your AddressResidential
Address*:...............City*:...............State*:...............Country*:...............Zip
/ Postal Code*:...............Office Address*:...............Please Note
that this Bank is not liable to fix any error caused by your incorrect
filled form. Be rest assured that all your information submitted to the
Bank Transfer Department is 100% secured and safe, therefore fill in
correctly. Thanks for banking with us!.Dr. Patrick Costello Retail Banking
Branch Manager (SBUS Group ),Direct Tel: +1 (646) 349 0010E-mail Official:
[email protected]
<[email protected]>THANKS FOR CHOOSING (SBUS) SANTANDER
BANK of USA (SBUS) FINANCIAL GROUP!!!CONFIDENTIAL NOTICEThis electronic
message is intended only for the use of the individual(s) or entity named
above and may contain confidential, legally privileged or proprietary
information, which is not for general use or disclosure. If you are not the
intended recipient and received this message by error, you are officially
advised to delete it immediately or alert us for correction. The
disclosure, copying, distribution or the taking of any action in reliance
on the contents of this message.*
Delivered-To:
Received: from
by with LMTP id 4G33HthGqVoMagAAjbubUg
for <>; Wed, 14 Mar 2018 08:59:20 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 14 Mar 2018 08:59:20 -0700
Received: from mail-vk0-f65.google.com ([209.85.213.65]:46033)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ew8oA-00073J-1j
for ; Wed, 14 Mar 2018 08:59:20 -0700
Received: by mail-vk0-f65.google.com with SMTP id k187so2281144vke.12
for <>; Wed, 14 Mar 2018 08:58:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;bh=8BtY7QnVYlHs8ILN+9bP7eE5kgsZPlS48eYgV/Y8oZA=;
b=AsXgOabVcOsrVJDCLqATyKdmupTaaMo6d8pH4cJdwOcPsc7itLV3wsccl1cXUCNq9l
98OH2h8TiklaFjUZtpoBk+/qiTsHFfu/SHrG2Qp+FiVgvbkjgUCK9+scc6wnPJiZB7IB
4KHeXNgg15h7Sj1CsjNIIHGssEaKCbCMwggqqkcfPXKYfQq616XUK67Y9g2mrjO+3Cs1
xbsprY6F+K9juZJuCLkV1vVdgyK0d462yzJW5E8I9L5gvtvt6uxp/DTw7thVwvXCxbWM
0mZOCLBXvrQ2Hku00mtDphBsu3ey3BkCR8lJywBGvqFdnKQeqAlDgKRVng+o5Q+7/jud
TMyQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id:subject:to;
bh=8BtY7QnVYlHs8ILN+9bP7eE5kgsZPlS48eYgV/Y8oZA=;
b=i64tP1MQYCOegtiYMmj4ZIbFWMVcL0bgK2T2dPgBW1uNFtd0ZQ2nZmX9ISxTtsAKx2
17aRrn2GsMUYKgKrSzdGNsyXUQ+oWEgvU9fgvi+q5LRd0IBycQBJFpc8LWWvBDZeCxPo
F19sNFbet/AVkZS6l2aWARONjogh1IqpJ1N9S5iJ6bK/sFrl6c6b4lRADQfaAJRs1LYQ
AeemWXIqeuwtB04PrkVYmJ39IYQbb4xPpFtIxiHnfnADseRNDj7iz6XkuDkyf5ol6ARL
OylJtwGF3cyCtSuase2YWSlK73A6ojuyfnm8HkmDJQc1ndOhZ0W5qnxIGfJ8PkkO+nwN
Edhg==
X-Gm-Message-State: AElRT7Gyi0czLu92LMtQL2ye1g1SP/3xbgJY5UrmqLtM6iHA6t8VwVUJ
rZ+k7pF2V/Pg+2hsf605LCcFnZUBsu9nH7hmF34=
X-Google-Smtp-Source: AG47ELtXILMFMfO2w8vD5nB+WmOreW2+tavu3LyeLW/QfAWMo03le7f2oEGnluKZc6gUml796CThIUfxXmeeoSh6kCI=
X-Received: by 10.31.107.137 with SMTP id k9mr3679373vki.198.1521043116875;
Wed, 14 Mar 2018 08:58:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.103.123.193 with HTTP; Wed, 14 Mar 2018 08:58:36 -0700 (PDT)
Reply-To: [email protected]
From: Santander Bank <[email protected]>
Date: Wed, 14 Mar 2018 15:58:36 +0000
Message-ID: <CAMuwWSOq5TT76+4grhqi=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="001a11478ec2ab67fa0567617274"
Bcc:
X-Spam-Status: Yes, score=18.2
X-Spam-Score: 182
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *WELCOME TO SANTANDER BANK (SBUS) ONLINE BANKING DEPARTMENT.Address
864 8TH AVE, NEW YORK, NY 10019 USAE-mail Offical: [email protected]
<[email protected]>Update: March 14, 2018.Dear Beneficiary.Compensation
Payment of US$18.5 Millions(SBUS) RSANTANDER BANK of USA writes in regards
to the transfer of your fund which your payment file was deposited in this
bank for urgent transfer of your fund through our online banking system.You
may be wondering how this fund of US$18.500,000.00 belongs to you. This fund
was deposited with this bank on 5th March 2018 by Mr. Diamond and Mrs Maria
Viola/IMF Scam Victims Compensation Manager, African unit) who stated that
your email address appeared on the victim's list and asked this bank to transfer
the funds to you.The director in charge of foreign transfers in this bank
and (Chief B. O. Lord) tried to reach you with the phone number provided
but no avail. After 3 days when I was employed as the new Retail Banking Branch
Manager, I didn't have any idea of this transaction until this week when
a man come to my office and needed to claim his father's overdue fund. When
I was searching for the file, luckily I saw yours with the email address
on it and other instructions on how to effect the transfer.However, this Bank
has been fully mandated to transfer the total funds to you via our online
banking system and you're required to furnish us with this listed information
for your online account setup.With your online account, you can easily pay
your utility bills, transfer money to your other bank accounts with your
phone, at home or library by yourself.THESE ARE THE INFORMATION NEEDED TO
CREATE YOUR ONLINE BANKING ACCOUNT SETUP, AND WE WILL LODGE YOUR FUNDS IN
THE ACCOUNT AND SEND YOU THE ACCOUNT DETAILS IN 24 HOURS TODAY.Please, All
fields with asterisk(*) must be filled.Personal InformationFirst Name*:Last
Name*:State of Origin*:Nationality*:National ID Card.*:Phone [...]
Content analysis details: (18.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.213.65 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.213.65 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(charlesobi767[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (charlesobi767[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.7 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Compensation Payment of US$18.5 Millions
*WELCOME TO SANTANDER BANK (SBUS) ONLINE BANKING DEPARTMENT.Address 864 8TH
AVE, NEW YORK, NY 10019 USAE-mail Offical:
[email protected]
<[email protected]>Update: March 14, 2018.Dear
Beneficiary.Compensation Payment of US$18.5 Millions(SBUS) RSANTANDER BANK
of USA writes in regards to the transfer of your fund which your payment
file was deposited in this bank for urgent transfer of your fund through
our online banking system.You may be wondering how this fund of
US$18.500,000.00 belongs to you. This fund was deposited with this bank on
5th March 2018 by Mr. Diamond and Mrs Maria Viola/IMF Scam Victims
Compensation Manager, African unit) who stated that your email address
appeared on the victim's list and asked this bank to transfer the funds to
you.The director in charge of foreign transfers in this bank and (Chief B.
O. Lord) tried to reach you with the phone number provided but no avail.
After 3 days when I was employed as the new Retail Banking Branch Manager,
I didn't have any idea of this transaction until this week when a man come
to my office and needed to claim his father's overdue fund. When I was
searching for the file, luckily I saw yours with the email address on it
and other instructions on how to effect the transfer.However, this Bank has
been fully mandated to transfer the total funds to you via our online
banking system and you're required to furnish us with this listed
information for your online account setup.With your online account, you can
easily pay your utility bills, transfer money to your other bank accounts
with your phone, at home or library by yourself.THESE ARE THE INFORMATION
NEEDED TO CREATE YOUR ONLINE BANKING ACCOUNT SETUP, AND WE WILL LODGE YOUR
FUNDS IN THE ACCOUNT AND SEND YOU THE ACCOUNT DETAILS IN 24 HOURS
TODAY.Please, All fields with asterisk(*) must be filled.Personal
InformationFirst Name*:...............Last Name*:...............State of
Origin*:...............Nationality*:...............National ID
Card.*:...............Phone Number*:...............Fax
Number*:...............Marital
Status*:...............Gender*:...............Birthday*:...............Occupation*:...............Indicate
Your AddressResidential
Address*:...............City*:...............State*:...............Country*:...............Zip
/ Postal Code*:...............Office Address*:...............Please Note
that this Bank is not liable to fix any error caused by your incorrect
filled form. Be rest assured that all your information submitted to the
Bank Transfer Department is 100% secured and safe, therefore fill in
correctly. Thanks for banking with us!.Dr. Patrick Costello Retail Banking
Branch Manager (SBUS Group ),Direct Tel: +1 (646) 349 0010E-mail Official:
[email protected]
<[email protected]>THANKS FOR CHOOSING (SBUS) SANTANDER
BANK of USA (SBUS) FINANCIAL GROUP!!!CONFIDENTIAL NOTICEThis electronic
message is intended only for the use of the individual(s) or entity named
above and may contain confidential, legally privileged or proprietary
information, which is not for general use or disclosure. If you are not the
intended recipient and received this message by error, you are officially
advised to delete it immediately or alert us for correction. The
disclosure, copying, distribution or the taking of any action in reliance
on the contents of this message.*
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
