by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id 0YhQOCoZiVnlLgAAjbubUg
for <>; Mon, 07 Aug 2017 18:51:38 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 07 Aug 2017 18:51:38 -0700
Received: from smtp.knology.net ([64.8.71.112]:10983)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1detgD-000384-Ut
for ; Mon, 07 Aug 2017 18:51:38 -0700
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=XrK4AhN9 c=1 sm=1 tr=0 a=InK5ppthma2CLZZGiXmskQ==:117 a=InK5ppthma2CLZZGiXmskQ==:17 a=8nJEP1OIZ-IA:10 a=gVxA_rwVOPjoGr4PowYA:9 a=2RF9gxsiYPxtHGgZ:21 a=Pp0yPr-Umsjz89r0:21 a=wPNLvfGTeEIA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: cG9pbnRvbmUxQHdvd3dheS5jb20=
X_CMAE_Category: , ,
X-CNFS-Analysis:
X-CM-Score:
X-Scanned-by: Cloudmark Authority Engine
Authentication-Results: smtp02.wow.cmh.synacor.com smtp.user=pointone1; auth=pass (LOGIN)
Received: from [172.94.40.29] ([172.94.40.29:7056] helo=[172.94.40.29])
by smtp.mail.wowway.com (envelope-from <[email protected]>)
(ecelerity 3.6.1.42806 r(Platform:3.6.1.1)) with ESMTPA
id E0/9E-10817-FD819895; Mon, 07 Aug 2017 21:50:49 -0400
Content-Type: text/plain; charset="iso-8859-1"
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: [email protected]
From: Alexander Morgan <[email protected]>
Date: Tue, 08 Aug 2017 02:50:16 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: SANTANDER UK PLC From The Desk Of: Mr. Alexander Morgan (Funds-Transfer
Director) Attn: Sir, We are pleased to inform you that the International
Monetary Fund (IMF) in conjunction with the World Bank have successfully recovered
50% of funds belonging to various beneficiaries that's being held in Nigeria,Asia,and
Europe due to some bogus fees and charges. [...]
Content analysis details: (9.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[64.8.71.112 listed in list.dnswl.org]
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[64.8.71.112 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(alexmorgan[at]london.com)
1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[64.8.71.112 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Notification
SANTANDER UK PLC
From The Desk Of:
Mr. Alexander Morgan
(Funds-Transfer Director)
Attn: Sir,
We are pleased to inform you that the International Monetary Fund (IMF) in
conjunction with the World Bank have successfully recovered 50% of funds belonging
to various beneficiaries that's being held in Nigeria,Asia,and Europe due to some
bogus fees and charges.
Among the funds recovered is $9,500,000.00(Nine Million Five Hundred Thousand United
States Dollars) belonging to you as the beneficiary and it has been tagged
Abandoned.
We sent notice to you few days ago but no response has been receive from you till
this moment, we are sending you this email as a final notice and you are expected to
respond back within three days of receiving this email to enable us finalize
arrangement to transfer your fund into your Bank Account.
Your confirmation to the above matter will be appreciated. We look forward to
hearing from you soonest for further advise.
Sincerely Yours,
Mr. Alexander Morgan
Delivered-To:
Received: from
by (Dovecot) with LMTP id 0YhQOCoZiVnlLgAAjbubUg
for <>; Mon, 07 Aug 2017 18:51:38 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 07 Aug 2017 18:51:38 -0700
Received: from smtp.knology.net ([64.8.71.112]:10983)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1detgD-000384-Ut
for ; Mon, 07 Aug 2017 18:51:38 -0700
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.2 cv=XrK4AhN9 c=1 sm=1 tr=0 a=InK5ppthma2CLZZGiXmskQ==:117 a=InK5ppthma2CLZZGiXmskQ==:17 a=8nJEP1OIZ-IA:10 a=gVxA_rwVOPjoGr4PowYA:9 a=2RF9gxsiYPxtHGgZ:21 a=Pp0yPr-Umsjz89r0:21 a=wPNLvfGTeEIA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: cG9pbnRvbmUxQHdvd3dheS5jb20=
X_CMAE_Category: , ,
X-CNFS-Analysis:
X-CM-Score:
X-Scanned-by: Cloudmark Authority Engine
Authentication-Results: smtp02.wow.cmh.synacor.com smtp.user=pointone1; auth=pass (LOGIN)
Received: from [172.94.40.29] ([172.94.40.29:7056] helo=[172.94.40.29])
by smtp.mail.wowway.com (envelope-from <[email protected]>)
(ecelerity 3.6.1.42806 r(Platform:3.6.1.1)) with ESMTPA
id E0/9E-10817-FD819895; Mon, 07 Aug 2017 21:50:49 -0400
Content-Type: text/plain; charset="iso-8859-1"
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: [email protected]
From: Alexander Morgan <[email protected]>
Date: Tue, 08 Aug 2017 02:50:16 -0700
Reply-To: [email protected]
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: SANTANDER UK PLC From The Desk Of: Mr. Alexander Morgan (Funds-Transfer
Director) Attn: Sir, We are pleased to inform you that the International
Monetary Fund (IMF) in conjunction with the World Bank have successfully recovered
50% of funds belonging to various beneficiaries that's being held in Nigeria,Asia,and
Europe due to some bogus fees and charges. [...]
Content analysis details: (9.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[64.8.71.112 listed in list.dnswl.org]
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[64.8.71.112 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(alexmorgan[at]london.com)
1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[64.8.71.112 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Notification
SANTANDER UK PLC
From The Desk Of:
Mr. Alexander Morgan
(Funds-Transfer Director)
Attn: Sir,
We are pleased to inform you that the International Monetary Fund (IMF) in
conjunction with the World Bank have successfully recovered 50% of funds belonging
to various beneficiaries that's being held in Nigeria,Asia,and Europe due to some
bogus fees and charges.
Among the funds recovered is $9,500,000.00(Nine Million Five Hundred Thousand United
States Dollars) belonging to you as the beneficiary and it has been tagged
Abandoned.
We sent notice to you few days ago but no response has been receive from you till
this moment, we are sending you this email as a final notice and you are expected to
respond back within three days of receiving this email to enable us finalize
arrangement to transfer your fund into your Bank Account.
Your confirmation to the above matter will be appreciated. We look forward to
hearing from you soonest for further advise.
Sincerely Yours,
Mr. Alexander Morgan
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
