#381372 by buried under 419s
Fri Feb 08, 2019 9:48 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id eAfHJ0DVXVyfJAAAjbubUg
for <>; Fri, 08 Feb 2019 11:15:12 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Feb 2019 11:15:12 -0800
Received: from esa17.hc49497.c3s2.iphmx.com ([68.232.156.251]:31937)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gsBcE-0002Qu-T6
for ; Fri, 08 Feb 2019 11:15:12 -0800
X-IronPort-AV: E=Sophos;i="5.58,348,1544515200";
d="scan'208,217";a="208573097"
Received: from ec2-34-240-168-86.eu-west-1.compute.amazonaws.com (HELO 5c0a99661066.walla.co.il) ([34.240.168.86])
by ob1.hc49497.c3s2.iphmx.com with ESMTP; 08 Feb 2019 11:14:25 -0800
Received: by 5c0a99661066.walla.co.il (Postfix, from userid 33)
id 14C45232E6; Fri, 8 Feb 2019 19:14:25 +0000 (UTC)
To:
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_7bd36c989f56fe21709ef1b459718447"
X-Provider: walla.mail/v
From: =?UTF-8?B?Q2hyaXN0b3BoZXIgSmFtZXM=?= <[email protected]>
Date: Fri, 08 Feb 2019 21:14:24 +0200
Reply-To: <[email protected]>
Message-Id: <^[email protected]>
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Only HTML is provided DO NOT REPLY HERE IF YOU DO I WILL NOT
ATTEND TO YOUR EMAIL TAKE NOTE Attn how are you doing today i hope you are
doing fine the information below is the contact of the paying bank in Spain
take note that you are expected to re activate your newly opened online account
and you will be given an instruction on how to go about doing the transfer
by your self any a mouth you use in activating the account will still be
added to your main balance OK so if you do not activate the account the bank
will not give a listening ear to you and make sure you update me failure
to do so your transfer will be delayed From the desk of Bank: Banco Financial
Corporation Address: Head Office Casa De Banco Financial Corporation 99,Real
de Argandao 28001 Madrid, Espana Director: Don Pedro Santos Email: [email protected]
Tel:+34 604 221 287 Fax: +34 917 692 682 PLEASE DO COPY THE FEDERAL GOVERNMENT
ACCREDITED ATTORNEY BARRISTER JULIE PEDRO ON HER E MAIL Kindly re-confirm
the under-mentioned information immediately to facilitate the issuance of
Final fund release order document on your behalf which will be submitted
to the Authorized Online Bank for an immediate release of your funds. [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[68.232.156.251 listed in list.dnswl.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(christopherjames2[at]walla.co.il)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (christopherjames2[at]walla.co.il)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(christopherjames2[at]walla.co.il)
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL
blocklist
[URIs: bancofinancialcorps.com]
1.6 URIBL_SBL Contains an URL's NS IP listed in the Spamhaus SBL
blocklist
[URIs: bancofinancialcorps.com]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?aSBhd2FpdCB5b3VyIHJlcGx5IEp1bGllIFBlZHJvIERPIENPUFkgVE8gVEhFIFRXTyBFTUFJTFMgQkVMT1cgRW1haWw6IHRyYW5zZmVyQGJhbmNvZmluYW5jaWFsY29ycHMuY29tIEFORCBETyBDT1BZIFRPIEJBUlJJU1RFUiBKVUxJRVBFRFJPNDA0MEBZQUhPTy5DT00=?=
DO NOT REPLY HERE IF YOU DO I WILL NOT ATTEND TO YOUR EMAIL TAKE NOTE
Attn
how are you doing today i hope you are doing fine the information below is the contact of the paying bank in Spain take note that you are expected to re activate your newly opened online account and you will be given an instruction on how to go about doing the transfer by your self
any a mouth you use in activating the account will still be added to your main balance OK
so if you do not activate the account the bank will not give a listening ear to you and make sure you update me failure to do so your transfer will be delayed
From the desk of
Bank: Banco Financial Corporation
Address: Head Office
Casa De Banco Financial Corporation
99,Real de Argandao 28001 Madrid, Espana
Director: Don Pedro Santos
Email: [email protected]
Tel:+34 604 221 287
Fax: +34 917 692 682
PLEASE DO COPY THE FEDERAL GOVERNMENT ACCREDITED ATTORNEY BARRISTER JULIE PEDRO ON HER E
MAIL
Kindly re-confirm the under-mentioned information immediately to facilitate the issuance of Final fund release order document
on your behalf which will be submitted to the Authorized Online Bank for an immediate release of your funds.
1) Your full name:
2) Contact address:
3) Nationality:
4) Phone number:
5) Gender:
6) D.O.B
(7) Amount:
(8) Purpose of claim…{Contract , Inheritance or Lottery Winning}
(9) Email Address:
i await your reply
Julie Pedro
DO COPY TO THE TWO EMAILS BELOW
Email: [email protected] AND DO COPY TO BARRISTER [email protected]
Delivered-To:
Received: from
by with LMTP id eAfHJ0DVXVyfJAAAjbubUg
for <>; Fri, 08 Feb 2019 11:15:12 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Feb 2019 11:15:12 -0800
Received: from esa17.hc49497.c3s2.iphmx.com ([68.232.156.251]:31937)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gsBcE-0002Qu-T6
for ; Fri, 08 Feb 2019 11:15:12 -0800
X-IronPort-AV: E=Sophos;i="5.58,348,1544515200";
d="scan'208,217";a="208573097"
Received: from ec2-34-240-168-86.eu-west-1.compute.amazonaws.com (HELO 5c0a99661066.walla.co.il) ([34.240.168.86])
by ob1.hc49497.c3s2.iphmx.com with ESMTP; 08 Feb 2019 11:14:25 -0800
Received: by 5c0a99661066.walla.co.il (Postfix, from userid 33)
id 14C45232E6; Fri, 8 Feb 2019 19:14:25 +0000 (UTC)
To:
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_7bd36c989f56fe21709ef1b459718447"
X-Provider: walla.mail/v
From: =?UTF-8?B?Q2hyaXN0b3BoZXIgSmFtZXM=?= <[email protected]>
Date: Fri, 08 Feb 2019 21:14:24 +0200
Reply-To: <[email protected]>
Message-Id: <^[email protected]>
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Only HTML is provided DO NOT REPLY HERE IF YOU DO I WILL NOT
ATTEND TO YOUR EMAIL TAKE NOTE Attn how are you doing today i hope you are
doing fine the information below is the contact of the paying bank in Spain
take note that you are expected to re activate your newly opened online account
and you will be given an instruction on how to go about doing the transfer
by your self any a mouth you use in activating the account will still be
added to your main balance OK so if you do not activate the account the bank
will not give a listening ear to you and make sure you update me failure
to do so your transfer will be delayed From the desk of Bank: Banco Financial
Corporation Address: Head Office Casa De Banco Financial Corporation 99,Real
de Argandao 28001 Madrid, Espana Director: Don Pedro Santos Email: [email protected]
Tel:+34 604 221 287 Fax: +34 917 692 682 PLEASE DO COPY THE FEDERAL GOVERNMENT
ACCREDITED ATTORNEY BARRISTER JULIE PEDRO ON HER E MAIL Kindly re-confirm
the under-mentioned information immediately to facilitate the issuance of
Final fund release order document on your behalf which will be submitted
to the Authorized Online Bank for an immediate release of your funds. [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[68.232.156.251 listed in list.dnswl.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(christopherjames2[at]walla.co.il)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (christopherjames2[at]walla.co.il)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(christopherjames2[at]walla.co.il)
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL
blocklist
[URIs: bancofinancialcorps.com]
1.6 URIBL_SBL Contains an URL's NS IP listed in the Spamhaus SBL
blocklist
[URIs: bancofinancialcorps.com]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?aSBhd2FpdCB5b3VyIHJlcGx5IEp1bGllIFBlZHJvIERPIENPUFkgVE8gVEhFIFRXTyBFTUFJTFMgQkVMT1cgRW1haWw6IHRyYW5zZmVyQGJhbmNvZmluYW5jaWFsY29ycHMuY29tIEFORCBETyBDT1BZIFRPIEJBUlJJU1RFUiBKVUxJRVBFRFJPNDA0MEBZQUhPTy5DT00=?=
DO NOT REPLY HERE IF YOU DO I WILL NOT ATTEND TO YOUR EMAIL TAKE NOTE
Attn
how are you doing today i hope you are doing fine the information below is the contact of the paying bank in Spain take note that you are expected to re activate your newly opened online account and you will be given an instruction on how to go about doing the transfer by your self
any a mouth you use in activating the account will still be added to your main balance OK
so if you do not activate the account the bank will not give a listening ear to you and make sure you update me failure to do so your transfer will be delayed
From the desk of
Bank: Banco Financial Corporation
Address: Head Office
Casa De Banco Financial Corporation
99,Real de Argandao 28001 Madrid, Espana
Director: Don Pedro Santos
Email: [email protected]
Tel:+34 604 221 287
Fax: +34 917 692 682
PLEASE DO COPY THE FEDERAL GOVERNMENT ACCREDITED ATTORNEY BARRISTER JULIE PEDRO ON HER E
Kindly re-confirm the under-mentioned information immediately to facilitate the issuance of Final fund release order document
on your behalf which will be submitted to the Authorized Online Bank for an immediate release of your funds.
1) Your full name:
2) Contact address:
3) Nationality:
4) Phone number:
5) Gender:
6) D.O.B
(7) Amount:
(8) Purpose of claim…{Contract , Inheritance or Lottery Winning}
(9) Email Address:
i await your reply
Julie Pedro
DO COPY TO THE TWO EMAILS BELOW
Email: [email protected] AND DO COPY TO BARRISTER [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces