[email protected] MARK DERRICK

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 24 Jul 2015 03:39:43 -0700
Received: from mail-oi0-f68.google.com ([209.85.218.68]:33816)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1ZIaO1-0006ae-Mc
for ; Fri, 24 Jul 2015 03:39:43 -0700
Received: by oiho132 with SMTP id o132so1029842oih.1
for <>; Fri, 24 Jul 2015 03:47:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-versionmessage-id:subject:from:to:content-type;
bh=PtxR3/0RTNbioKYIeAK1xx1ZFoAKYUEQF3y/4o8wN0I=;
b=xoaEB0vR/roOB46oy2FVC+gIbc96BpmTIa0B7ovayxEr0ThheF2ZeC1LBLKsytE6q0
7yM5SyCg0OyPZuXPd7mgAYk5tNY7C7doBH23mcSRvQ5dce9YXEUtH1IACHMhK4YSkJYb
e5gsm7wT1yaiaNUSILIL7MucBxG8EHsjw3qxAf/l2FhUX7K7q4GQUUm83CCqi9BgGFPg
R493WWTXACovygTumzTVDQNE/YfYzWtCUnFQznawh65yZ30Qu9erOk9yBZvXKua378HL
Iw912MlJWUr5ky2MNe6IDjc2HCoMsBRxGd2rimfGXVzXqJmoCFmqGFnShZ6q3rRM7/vB
Utsg==
MIME-Version: 1.0
X-Received: by 10.60.96.35 with SMTP id dp3mr14827772oeb.47.1437734833817;
Fri, 24 Jul 2015 03:47:13 -0700 (PDT)
Received: by 10.202.212.151 with HTTP; Fri, 24 Jul 2015 03:47:13 -0700 (PDT)
Date: Fri, 24 Jul 2015 11:47:13 +0100
Message-ID: <CAHFQir__742GxJSGur=-[email protected]>
Subject: We are ready to proceed on your fund transfer via T-T
From: Barclays Bank PLC <[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=089e011775a70d0f90051b9cbaeb
Bcc:
X-Spam-Status: No, score=3.4
X-Spam-Score: 34
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: *ATTN; Beneficiary .* *Congratulation, Your consignment fund
has been brought back to England since it was not claim by you, Right now
you have another golden opportunity to get your fund as we are going to make
direct wire transfer into your designated bank account. You are here by advice
to send the following details for us to proceed with the transfer,* [...]


Content analysis details: (3.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(diplomatjamesearl[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.218.68 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.8 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: NO

--089e011775a70d0f90051b9cbaeb
Content-Type: text/plain; charset=UTF-8

*ATTN; Beneficiary .*

*Congratulation, Your consignment fund has been brought back to England
since it was not claim by you, Right now you have another golden
opportunity to get your fund as we are going to make direct wire transfer
into your designated bank account. You are here by advice to send the
following details for us to proceed with the transfer,*

*1,Your bank account details and address*

*2,Your direct cell phone or mobile number, This we enable the bank to send
you the transfer alert, Immediately transfer is done.*



*Waiting for your urgent reply.*



*MARK DERRICK *

*Barclays Bank PLC*

*CHURCHILL PLACE LONDON .*