by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 19 Jan 2017 08:08:17 -0800
Received: from smtp-out-03c.arnet.com.ar ([200.45.0.212]:52526)
by with esmtp (Exim 4.87)
(envelope-from <[email protected]>)
id 1cUFFi-0003PB-KB
for ; Thu, 19 Jan 2017 08:08:17 -0800
X-IPAS-Result: A2D//wAM44BY/wLkqMAEAgICIhwFERwBFwEGAQUBQoIbJQEBAQEYDwEBAQEBBwEBAQIBAQgBXoETg1GBK4MqIJIDgk+BIgaDQyckgU+DRIUbiCGBeAwBBQQoBIRygn5HAQIBAQEBAQKBCAIBgQYBAQEBAQ4BAQEBAQMBAQFgBQYBARMBAQGCNQEBAQIBAQIBAQETGAgcGiwUHgIVAiMKAwEBDgEkAQMJCBiFKQEBAQEBASOCIQEBAQEBTwEBAguuOIFOgiUSFAKBHy0BgUkFEAKBE4IKAiEEChkNYQGCTIYHhHaCC4ECgUIBdIINDC4RLoIfBYgOhxt+hR9ahGw4AYFKhhGGAwGDfAkaT4EOhQ+DGyZ1QQxVhBAghlGDKoRCg0JRgjI6XwsMGYJdAQtDHIF+VYcFARyBfRUBAQE
X-Arnet-Spam: 100-97
X-Arnet-Anti-Spam: Activado
X-Arnet-AV: Activado
Received: from unknown (HELO webmail.arnet.com.ar) ([192.168.228.2])
by smtp-route-06.arnet.com.ar with ESMTP; 19 Jan 2017 15:03:18 -0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_adc3fb1c9e07bc3d9543a5e9de100254"
Date: Thu, 19 Jan 2017 11:07:06 -0500
From: "Mr.James william" <[email protected]>
To: undisclosed-recipients:;
Organization: Bank of America
Reply-To: <[email protected]>
Mail-Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Webmail Arnet/5.8.77
X-Spam-Status: Yes, score=10.8
X-Spam-Score: 108
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- BANK OF AMERICA CORPORATE OFFICE HEADQUARTERS 100 N.TRYON
ST CHARLOTTE,NC 28255 OUR REF:BOA/IRU/SFE/15.5/WD/013 UNITED STATES OF AMERICA
E-MAIL.([email protected] ) ATTENTION DEAREST BENEFICIARY
[...]
Content analysis details: (10.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[200.45.0.212 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[200.45.0.212 listed in dnsbl.sorbs.net]
-3.2 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(bankofamericaoffice793[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(bonorino[at]arnet.com.ar)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Bank of America Corporate Office Headquarters
--
BANK OF AMERICA CORPORATE OFFICE HEADQUARTERS
100 N.TRYON ST
CHARLOTTE,NC 28255
OUR REF:BOA/IRU/SFE/15.5/WD/013
UNITED STATES OF
AMERICA
E-MAIL.( [email protected] )
ATTENTION DEAREST
BENEFICIARY
THE MANAGEMENT OF THE BANK OF AMERICA CORPORATE OFFICE
HEADQUARTERS HERE IN 100 N.TRYON ST CHARLOTTE,NC 28255 WISHES TO INFORM
YOU THAT AFTER A BRIEF MEETING HELD BY
THE BANK EXECUTIVES ON,THE 27TH
DAY OF NOVEMBER 2016 AT PRECISELY 8 A.M. EASTERN DAYLIGHT TIME(EDT), WE
DEEM IT APPROPRIATE TO INTIMATE YOU THAT YOUR FUNDS WILL BE
TRANSFERRED INTO THE UNITED STATES TREASURY ACCOUNT WITH THE JP MORGAN
CHASE HEADQUARTERS AT 270 PARK AVENUE IN NEW YORK ACCORDING TO THE
RECORD WE GOT FROM AFRICA DUE
TO YOUR INABILITY TO COMPLETE THE
TRANSACTION AND YOUR FAILURE TO MEET UP WITH A MINOR PAYMENT
OBLIGATION.THE ACTUAL TRANSFER OF YOUR FUNDS($8,500,000.00) INTO THE
GOVERNMENT ACCOUNT COMES UP NEXT
THIS IS IN LINE WITH THE
INSTRUCTIONS OF THE USA TREASURER,MRS.ROSA GUMATAOTAO RIOS THAT ALL
UNCLAIMED FUNDS SHOULD BE PAID INTO THE UNITED STATES GOVERNMENT
TREASURY
ACCOUNT AS UNSERVICEABLE FUNDS IN COMPLIANCE TO SECTION 3
SUBSECTION 1(A) OF THE UNITED STATES FINANCIAL LAW ENACTED IN 2001 AFTER
AN ATTACK ON OUR DEAR COUNTRY ON
SEPTEMBER 11,2001.FIND BELOW ARE THE
PROFILE OF THE BANKING INSTITUTION WHERE YOUR FUNDS WILL BE TRANSFERRED
INTO FOLLOWING THE GOVERNMENT DIRECTIVE:,
NAME OF BANK:______JP MORGAN
CHASE HEADQUARTERS AT 270 PARK AVENUE IN NEW YORK.
AC
NO:_______68302345093
ROUTING NO:________021109593
ACCOUNT
NAME:_______MRS.ROSA GUMATAOTAO RIOS
NOTE THAT IF YOU STILL WISH TO
RECEIVE YOUR FUNDS DO GET BACK TO US IMMEDIATELY SO THAT WE WILL REMOVE
YOUR FUNDS TRANSFER FROM THE LIST OF THOSE TRANSACTIONS TO BE
SEIZED
BY THE UNITED STATES GOVERNMENT.ALSO BE INFORMED THAT WE NEED YOU TO
OBTAIN THE FUND OWNERSHIP CERTIFICATE WHICH WAS REDUCED FROM $879 TO
$120 AND NO OTHER FEE
IS INVOLVED.YOU ARE REQUIRED TO SEND THE $120 BY
MONEY GRAM TO THE ISSUING OFFICER AT THE CENTRAL BANK OF AFRICA (CBA)
WHERE YOUR FUND SUM OF $8.500.000.00 ORIGINATED
AS STATED
BELOW:
INFORMATION
RECEIVERS NAME:.. FRANK UBAKA
COUNTRY ...BENIN
REPUBLIC
CITY ....COTONOU
TEST QUESTION.... BE REST
ANSWER
...ASSURE
AMOUNT TO SEND:... $120
SENDER'S NAME:.......
MTCN OR
REFERENCE NUMBER.......
IF WE RECEIVE THE MTCN TODAY,WE WILL TRANSFER
YOUR FUNDS ($8,500,000.00) BEFORE WE CLOSE OFFICE AND THE FUNDS WILL
REFLECT 24HOURS.NOTE, WE WILL SEND YOU ALL THE
TRANSFER DOCUMENTS TO
ENABLE YOU START MAKING CASH WITHDRAWALS FROM YOUR BANK ACCOUNT AFTER
24HRS THE FUNDS ARE TRANSFERRED.WE HAVE WAITED FOR SO LONG AND WE
CANNOT
CONTINUE TO WAIT.
PLEASE RECONFIRM YOUR BANK INFORMATION SUCH AS
LISTED.
YOUR BANK NAME__________
BANK ADDRESS__________
ACCOUNT
NAME__________
ACCOUNT NUMBER__________
ROUTING NUMBER_________
BANK
PHONE NUMBER_______
NEXT OF KIN_________
YOUR HOME ADDRESS_________
YOUR
CELL NUMBER__________
YOUR OFFICE NUMBER_________
A COPY OF YOUR ID CARD
OR DRIVER LICENSE__________
YOUR
OCCUPATION________
STATUS_________
THANK YOU FOR GIVING US THE
OPPORTUNITY TO SERVE YOUR BANKING NEEDS.
YOURS FAITHFULLY,
MR.JAMES
WILLIAM (CEO)
BANK OF AMERICA(R)
CORPORATE OFFICE
HEADQUARTERS,CHARLOTTE,N.C.
BANK OF AMERICA, N.A. MEMBER FDIC.
Envelope-to:
Delivery-date: Thu, 19 Jan 2017 08:08:17 -0800
Received: from smtp-out-03c.arnet.com.ar ([200.45.0.212]:52526)
by with esmtp (Exim 4.87)
(envelope-from <[email protected]>)
id 1cUFFi-0003PB-KB
for ; Thu, 19 Jan 2017 08:08:17 -0800
X-IPAS-Result: A2D//wAM44BY/wLkqMAEAgICIhwFERwBFwEGAQUBQoIbJQEBAQEYDwEBAQEBBwEBAQIBAQgBXoETg1GBK4MqIJIDgk+BIgaDQyckgU+DRIUbiCGBeAwBBQQoBIRygn5HAQIBAQEBAQKBCAIBgQYBAQEBAQ4BAQEBAQMBAQFgBQYBARMBAQGCNQEBAQIBAQIBAQETGAgcGiwUHgIVAiMKAwEBDgEkAQMJCBiFKQEBAQEBASOCIQEBAQEBTwEBAguuOIFOgiUSFAKBHy0BgUkFEAKBE4IKAiEEChkNYQGCTIYHhHaCC4ECgUIBdIINDC4RLoIfBYgOhxt+hR9ahGw4AYFKhhGGAwGDfAkaT4EOhQ+DGyZ1QQxVhBAghlGDKoRCg0JRgjI6XwsMGYJdAQtDHIF+VYcFARyBfRUBAQE
X-Arnet-Spam: 100-97
X-Arnet-Anti-Spam: Activado
X-Arnet-AV: Activado
Received: from unknown (HELO webmail.arnet.com.ar) ([192.168.228.2])
by smtp-route-06.arnet.com.ar with ESMTP; 19 Jan 2017 15:03:18 -0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_adc3fb1c9e07bc3d9543a5e9de100254"
Date: Thu, 19 Jan 2017 11:07:06 -0500
From: "Mr.James william" <[email protected]>
To: undisclosed-recipients:;
Organization: Bank of America
Reply-To: <[email protected]>
Mail-Reply-To: <[email protected]>
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Webmail Arnet/5.8.77
X-Spam-Status: Yes, score=10.8
X-Spam-Score: 108
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- BANK OF AMERICA CORPORATE OFFICE HEADQUARTERS 100 N.TRYON
ST CHARLOTTE,NC 28255 OUR REF:BOA/IRU/SFE/15.5/WD/013 UNITED STATES OF AMERICA
E-MAIL.([email protected] ) ATTENTION DEAREST BENEFICIARY
[...]
Content analysis details: (10.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[200.45.0.212 listed in list.dnswl.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[200.45.0.212 listed in dnsbl.sorbs.net]
-3.2 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(bankofamericaoffice793[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(bonorino[at]arnet.com.ar)
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Bank of America Corporate Office Headquarters
--
BANK OF AMERICA CORPORATE OFFICE HEADQUARTERS
100 N.TRYON ST
CHARLOTTE,NC 28255
OUR REF:BOA/IRU/SFE/15.5/WD/013
UNITED STATES OF
AMERICA
E-MAIL.( [email protected] )
ATTENTION DEAREST
BENEFICIARY
THE MANAGEMENT OF THE BANK OF AMERICA CORPORATE OFFICE
HEADQUARTERS HERE IN 100 N.TRYON ST CHARLOTTE,NC 28255 WISHES TO INFORM
YOU THAT AFTER A BRIEF MEETING HELD BY
THE BANK EXECUTIVES ON,THE 27TH
DAY OF NOVEMBER 2016 AT PRECISELY 8 A.M. EASTERN DAYLIGHT TIME(EDT), WE
DEEM IT APPROPRIATE TO INTIMATE YOU THAT YOUR FUNDS WILL BE
TRANSFERRED INTO THE UNITED STATES TREASURY ACCOUNT WITH THE JP MORGAN
CHASE HEADQUARTERS AT 270 PARK AVENUE IN NEW YORK ACCORDING TO THE
RECORD WE GOT FROM AFRICA DUE
TO YOUR INABILITY TO COMPLETE THE
TRANSACTION AND YOUR FAILURE TO MEET UP WITH A MINOR PAYMENT
OBLIGATION.THE ACTUAL TRANSFER OF YOUR FUNDS($8,500,000.00) INTO THE
GOVERNMENT ACCOUNT COMES UP NEXT
THIS IS IN LINE WITH THE
INSTRUCTIONS OF THE USA TREASURER,MRS.ROSA GUMATAOTAO RIOS THAT ALL
UNCLAIMED FUNDS SHOULD BE PAID INTO THE UNITED STATES GOVERNMENT
TREASURY
ACCOUNT AS UNSERVICEABLE FUNDS IN COMPLIANCE TO SECTION 3
SUBSECTION 1(A) OF THE UNITED STATES FINANCIAL LAW ENACTED IN 2001 AFTER
AN ATTACK ON OUR DEAR COUNTRY ON
SEPTEMBER 11,2001.FIND BELOW ARE THE
PROFILE OF THE BANKING INSTITUTION WHERE YOUR FUNDS WILL BE TRANSFERRED
INTO FOLLOWING THE GOVERNMENT DIRECTIVE:,
NAME OF BANK:______JP MORGAN
CHASE HEADQUARTERS AT 270 PARK AVENUE IN NEW YORK.
AC
NO:_______68302345093
ROUTING NO:________021109593
ACCOUNT
NAME:_______MRS.ROSA GUMATAOTAO RIOS
NOTE THAT IF YOU STILL WISH TO
RECEIVE YOUR FUNDS DO GET BACK TO US IMMEDIATELY SO THAT WE WILL REMOVE
YOUR FUNDS TRANSFER FROM THE LIST OF THOSE TRANSACTIONS TO BE
SEIZED
BY THE UNITED STATES GOVERNMENT.ALSO BE INFORMED THAT WE NEED YOU TO
OBTAIN THE FUND OWNERSHIP CERTIFICATE WHICH WAS REDUCED FROM $879 TO
$120 AND NO OTHER FEE
IS INVOLVED.YOU ARE REQUIRED TO SEND THE $120 BY
MONEY GRAM TO THE ISSUING OFFICER AT THE CENTRAL BANK OF AFRICA (CBA)
WHERE YOUR FUND SUM OF $8.500.000.00 ORIGINATED
AS STATED
BELOW:
INFORMATION
RECEIVERS NAME:.. FRANK UBAKA
COUNTRY ...BENIN
REPUBLIC
CITY ....COTONOU
TEST QUESTION.... BE REST
ANSWER
...ASSURE
AMOUNT TO SEND:... $120
SENDER'S NAME:.......
MTCN OR
REFERENCE NUMBER.......
IF WE RECEIVE THE MTCN TODAY,WE WILL TRANSFER
YOUR FUNDS ($8,500,000.00) BEFORE WE CLOSE OFFICE AND THE FUNDS WILL
REFLECT 24HOURS.NOTE, WE WILL SEND YOU ALL THE
TRANSFER DOCUMENTS TO
ENABLE YOU START MAKING CASH WITHDRAWALS FROM YOUR BANK ACCOUNT AFTER
24HRS THE FUNDS ARE TRANSFERRED.WE HAVE WAITED FOR SO LONG AND WE
CANNOT
CONTINUE TO WAIT.
PLEASE RECONFIRM YOUR BANK INFORMATION SUCH AS
LISTED.
YOUR BANK NAME__________
BANK ADDRESS__________
ACCOUNT
NAME__________
ACCOUNT NUMBER__________
ROUTING NUMBER_________
BANK
PHONE NUMBER_______
NEXT OF KIN_________
YOUR HOME ADDRESS_________
YOUR
CELL NUMBER__________
YOUR OFFICE NUMBER_________
A COPY OF YOUR ID CARD
OR DRIVER LICENSE__________
YOUR
OCCUPATION________
STATUS_________
THANK YOU FOR GIVING US THE
OPPORTUNITY TO SERVE YOUR BANKING NEEDS.
YOURS FAITHFULLY,
MR.JAMES
WILLIAM (CEO)
BANK OF AMERICA(R)
CORPORATE OFFICE
HEADQUARTERS,CHARLOTTE,N.C.
BANK OF AMERICA, N.A. MEMBER FDIC.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
