by buried under 419s
Viewing Full Header - View message
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id YJaEFpCX21k9CQAAjbubUg
for <>; Mon, 09 Oct 2017 08:36:48 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Oct 2017 08:36:48 -0700
Received: from mail-oln040092069046.outbound.protection.outlook.com ([40.92.69.46]:49960 helo=EUR02-VE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e1a6m-0000bB-VW
for ; Mon, 09 Oct 2017 08:36:48 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=MMxhOVFlMTKcn893PeltJTTLy2rD6Cahegpc38gjrnw=;
b=PFL2ttW2DyfuBQGljEjIN7SpiBM2LgytsZ1RYdZRUnBcX0Pwf3FXmufu7JxoE4L0AmHiXs682EO9EZPZqXozFhy9SH5/yZ5Ww76YT1s1e8hYE3dJHPlJUU9jCpWeRFyPNKQprjYNE7S8kStPd6VwGzZ2S0IjTAgCEr36Ld/vzSVRJ0u2XYSAf1aDWFuJ+W47XKKfQdkWd+bRfiOrILGbL5w8/gA5nh16HyHmEejmB0OQB1KptXOqlM56/n19U2CW0ewhmDkrizlqcJMcqxROa4RrrG/Bopf465yd09rlMCVcK6j0f9tvaSZN53g28GwYakbWvMTCp51enMRw6ND60g==
Received: from VE1EUR02FT034.eop-EUR02.prod.protection.outlook.com
(10.152.12.58) by VE1EUR02HT038.eop-EUR02.prod.protection.outlook.com
(10.152.13.142) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.77.10; Mon, 9 Oct
2017 15:36:00 +0000
Received: from HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM (10.152.12.56) by
VE1EUR02FT034.mail.protection.outlook.com (10.152.12.125) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.77.10 via Frontend Transport; Mon, 9 Oct 2017 15:36:00 +0000
Received: from HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM
([fe80::b1a6:e096
b644]) by HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM
([fe80::b1a6:e096b644%13]) with mapi id 15.20.0077.020; Mon, 9 Oct 2017
15:36:00 +0000
From: gaskins griffiths <[email protected]>
Thread-Topic: ATTENTION
Thread-Index: AQHTIRB3kiZvM2nHuka78i6NQUaEmw==
Date: Mon, 9 Oct 2017 15:35:59 +0000
Message-ID: <HE1PR10MB05216CB580228F7908EC0651CC9F0@HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: travelcraft.com; dkim=none (message not signed)
header.d=none;travelcraft.com; dmarc=none action=none
header.from=outlook.com;
x-incomingtopheadermarker: OriginalChecksum:99B8C3B3F7C9E1C8205571230B2DDFEB5CAF9F7F19225F9A871A36D991CDBC24;UpperCasedChecksum:E25AF281B538FC06B2B1E67A2E53FC18763D4EF152B5A8B1D0710AE75FAC3C69;SizeAsReceived:9227;Count:42
x-tmn: [/tViI8wnVsIObcMSYxknbYOoKfpPLNoy]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;VE1EUR02HT038;6:QhqU52UGWeDd3Z2LP/fbdaMNnO2WffLbbIo6QQXAk/S8ymiRzwkiMOVgYuszVc6CNEnrQjwF9K3i+4IRsWifEKkKXbkI8/Jo2cO0P3BzNO7LVgKfRdmJFUvg8BlCBWfjmFC2kGjRPccTnM4uLp48yjWpKRn9OW3L8OAIvjYAgCfgjLhk9YSldb0X0cihmja2GEr0bCEqnm9KmOo7BcTC7IZFJ1kkAyOmiA3W2QtFSamEk4+NmacAIJZSp5LdRgcIPyK2N5lCcOUTvBVGzxg6FIa8mF6EGMTUZ8GHBj0PuP4Qztl6WjvyNt+BkoKqeGWgRrxEZUoCvgDfUcvhoCqAtw==;5:m5oMPNtBC86ZZMrV//+pGx1g63sto01bl2drABpWr56k/11maKGyAAZhVqS90z/9Sb/HzVg4ybK35U4iyPgGDTqJmZI00lC8VgJZncM2xD+2SS4FTuVkNM4LQ/5C9CihGZ7Jp8cJy9c6vkbME1o6Vw==;24:hUSdGsYvpa03D/Z5B4pC+UIqWYYkTBZnR/avdlX3VmazZQwiBO63nnbc4WbXtMexswCDSX9tZ8S6jmIlAsmVvkWAy3C1RQHwCu3eKlb+mZU=;7:3fe4CC/tsw5vpCL0Qov22YXuCE5GOF6KYb4MGkS964UcW/ztbWrdA/LILKRB0UCS4olsh1cFqEpw/ZKaeurt7vZ1uD9t16DKjLcnq2cWNmdgenWhuJJosDccpwRhHotHdgeCJcVPMrDqCauz7cJtUanIVvVxf8QwvXlz0gj4Y2IZ0eu6e9KdQ3BVxb1aVsO/j7qc8q72qryHdcZX+Mk5BZJDKLNqgkBjuw4m77q+nYY=
x-incomingheadercount: 42
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 8750d2a9-b7e1-40fc-61f9-08d50f2b7152
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1603101448)(1601125374)(1701031045);SRVR:VE1EUR02HT038;
x-ms-exchange-slblob-mailprops: 7B6i23oPIUjUDfWyjQdPpAgZAEwL4bmsSia0bp+Mw81obVtkLLae8Enwyhb7V7h4ldUnHfVwPPWEgKj1ZbYXJy7mB4Gy9aq5jb/xe1zegZNwsnX4dfQJSz9IFQKKAlZVl8UhhbBurlHIkUCYLaVCtAn7nY1814BQ6Da6uKIl45LtAF/Jq3+RVhh5UpwmRgZDI52S4d2Z26zrgW0KuSOsjrAlnOnwi/lPO9PHyI7AcQOMuxLCZEjGUvYHLmeEtoMr4rYxo7YQketv7w+Uq6irGe2epQOpaNJNOrqgBM6nNdejnyrCvRHKYMYyw5a+6vVSFsgYspfXY34dCReqyTyP/ZW8JNM2/IUVh66MGbWlt+NHO2fQHgiS1ztWg2Yc5ckX85+eMCgV/kNHIKwWsk14muyMIvUoL2mwhoWR5UM13aB66ibsRfDIDetBrqcmGEgKWXUxQX4isJoqYV/G2j6ZdFNh6BlAHr09j/P2Kp1EZj1w2ICW6Mdf8WemOpahDna2Q3aTr04ZHGE1u+obLGg4dmfU14hsRRgzzIKBynxAVI9PxLK6DmuuJstq73MWuVKRLZAn8pL/CQMyTdjI8Cca3nlLbvlXdXkf9ohhxLRgX5cZzoJoXYE2DA==
x-ms-traffictypediagnostic: VE1EUR02HT038:
x-exchange-antispam-report-test: UriScan:(209352067349851);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031);SRVR:VE1EUR02HT038;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:VE1EUR02HT038;
x-forefront-prvs: 045584D28C
x-forefront-antispam-report: SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:VE1EUR02HT038;H:HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM;FPR:;SPF:None;LANG:;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
boundary="_000_HE1PR10MB05216CB580228F7908EC0651CC9F0HE1PR10MB0521EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Oct 2017 15:36:00.1090
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR02HT038
X-Spam-Status: Yes, score=7.2
X-Spam-Score: 72
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary, CHANGE OF BENEFICIARY, In our office
today,was a present of One Mr. John T. Kehoe of 122 Fitch Way, Sacramento,CA.USA
95864 filing application [...]
Content analysis details: (7.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.69.46 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)
[40.92.69.46 listed in wl.mailspike.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gaskinsgriffiths5050[at]outlook.com)
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gaskinsgriffiths5050[at]outlook.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION
Attention: Beneficiary,
CHANGE OF BENEFICIARY,
In our office today,was a present of One Mr. John T. Kehoe
of 122 Fitch Way, Sacramento,CA.USA 95864 filing application
contrary to your pending fund transfer. The above mentioned
person visited this Bank yesterday with a power of attorney
given in his favor by your good self, granting him the
benefit to process and claim your inheritance of
$32,000,000.00(Thirty Two Million United States Dollars
Only) for personal reasons. He further Stated that the
online account will be Terminated while the fund should be
wired to his
Bank account with Bank Of America,
Account Number # 12908576457
Routing Number# 121000358.
Our office have ask Mr. John T. Kehoe to return back to the
Bank within 48hours to enable us have a personal
confirmation from you being hitherto the beneficiary.We are
sorry to have delayed your instruction in giving out this
fund since we must adhere to the modus operandi of this
honorable bank by making sure this request is verified and
confirmed by the beneficiary and his existing attorney.
Your confirmation to the above will be appreciated. We look
forward to hear from you soon.Reply to this
email; [email protected]
Yours sincerely
MR Douglas Fountain
Group MD/CEO
Access BANK.
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id YJaEFpCX21k9CQAAjbubUg
for <>; Mon, 09 Oct 2017 08:36:48 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Oct 2017 08:36:48 -0700
Received: from mail-oln040092069046.outbound.protection.outlook.com ([40.92.69.46]:49960 helo=EUR02-VE1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e1a6m-0000bB-VW
for ; Mon, 09 Oct 2017 08:36:48 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=MMxhOVFlMTKcn893PeltJTTLy2rD6Cahegpc38gjrnw=;
b=PFL2ttW2DyfuBQGljEjIN7SpiBM2LgytsZ1RYdZRUnBcX0Pwf3FXmufu7JxoE4L0AmHiXs682EO9EZPZqXozFhy9SH5/yZ5Ww76YT1s1e8hYE3dJHPlJUU9jCpWeRFyPNKQprjYNE7S8kStPd6VwGzZ2S0IjTAgCEr36Ld/vzSVRJ0u2XYSAf1aDWFuJ+W47XKKfQdkWd+bRfiOrILGbL5w8/gA5nh16HyHmEejmB0OQB1KptXOqlM56/n19U2CW0ewhmDkrizlqcJMcqxROa4RrrG/Bopf465yd09rlMCVcK6j0f9tvaSZN53g28GwYakbWvMTCp51enMRw6ND60g==
Received: from VE1EUR02FT034.eop-EUR02.prod.protection.outlook.com
(10.152.12.58) by VE1EUR02HT038.eop-EUR02.prod.protection.outlook.com
(10.152.13.142) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.77.10; Mon, 9 Oct
2017 15:36:00 +0000
Received: from HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM (10.152.12.56) by
VE1EUR02FT034.mail.protection.outlook.com (10.152.12.125) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.77.10 via Frontend Transport; Mon, 9 Oct 2017 15:36:00 +0000
Received: from HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM
([fe80::b1a6:e096
b644]) by HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM([fe80::b1a6:e096
b644%13]) with mapi id 15.20.0077.020; Mon, 9 Oct 201715:36:00 +0000
From: gaskins griffiths <[email protected]>
Thread-Topic: ATTENTION
Thread-Index: AQHTIRB3kiZvM2nHuka78i6NQUaEmw==
Date: Mon, 9 Oct 2017 15:35:59 +0000
Message-ID: <HE1PR10MB05216CB580228F7908EC0651CC9F0@HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: travelcraft.com; dkim=none (message not signed)
header.d=none;travelcraft.com; dmarc=none action=none
header.from=outlook.com;
x-incomingtopheadermarker: OriginalChecksum:99B8C3B3F7C9E1C8205571230B2DDFEB5CAF9F7F19225F9A871A36D991CDBC24;UpperCasedChecksum:E25AF281B538FC06B2B1E67A2E53FC18763D4EF152B5A8B1D0710AE75FAC3C69;SizeAsReceived:9227;Count:42
x-tmn: [/tViI8wnVsIObcMSYxknbYOoKfpPLNoy]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;VE1EUR02HT038;6:QhqU52UGWeDd3Z2LP/fbdaMNnO2WffLbbIo6QQXAk/S8ymiRzwkiMOVgYuszVc6CNEnrQjwF9K3i+4IRsWifEKkKXbkI8/Jo2cO0P3BzNO7LVgKfRdmJFUvg8BlCBWfjmFC2kGjRPccTnM4uLp48yjWpKRn9OW3L8OAIvjYAgCfgjLhk9YSldb0X0cihmja2GEr0bCEqnm9KmOo7BcTC7IZFJ1kkAyOmiA3W2QtFSamEk4+NmacAIJZSp5LdRgcIPyK2N5lCcOUTvBVGzxg6FIa8mF6EGMTUZ8GHBj0PuP4Qztl6WjvyNt+BkoKqeGWgRrxEZUoCvgDfUcvhoCqAtw==;5:m5oMPNtBC86ZZMrV//+pGx1g63sto01bl2drABpWr56k/11maKGyAAZhVqS90z/9Sb/HzVg4ybK35U4iyPgGDTqJmZI00lC8VgJZncM2xD+2SS4FTuVkNM4LQ/5C9CihGZ7Jp8cJy9c6vkbME1o6Vw==;24:hUSdGsYvpa03D/Z5B4pC+UIqWYYkTBZnR/avdlX3VmazZQwiBO63nnbc4WbXtMexswCDSX9tZ8S6jmIlAsmVvkWAy3C1RQHwCu3eKlb+mZU=;7:3fe4CC/tsw5vpCL0Qov22YXuCE5GOF6KYb4MGkS964UcW/ztbWrdA/LILKRB0UCS4olsh1cFqEpw/ZKaeurt7vZ1uD9t16DKjLcnq2cWNmdgenWhuJJosDccpwRhHotHdgeCJcVPMrDqCauz7cJtUanIVvVxf8QwvXlz0gj4Y2IZ0eu6e9KdQ3BVxb1aVsO/j7qc8q72qryHdcZX+Mk5BZJDKLNqgkBjuw4m77q+nYY=
x-incomingheadercount: 42
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 8750d2a9-b7e1-40fc-61f9-08d50f2b7152
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(201702061074)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(201702181274)(2017031322404)(1603101448)(1601125374)(1701031045);SRVR:VE1EUR02HT038;
x-ms-exchange-slblob-mailprops: 7B6i23oPIUjUDfWyjQdPpAgZAEwL4bmsSia0bp+Mw81obVtkLLae8Enwyhb7V7h4ldUnHfVwPPWEgKj1ZbYXJy7mB4Gy9aq5jb/xe1zegZNwsnX4dfQJSz9IFQKKAlZVl8UhhbBurlHIkUCYLaVCtAn7nY1814BQ6Da6uKIl45LtAF/Jq3+RVhh5UpwmRgZDI52S4d2Z26zrgW0KuSOsjrAlnOnwi/lPO9PHyI7AcQOMuxLCZEjGUvYHLmeEtoMr4rYxo7YQketv7w+Uq6irGe2epQOpaNJNOrqgBM6nNdejnyrCvRHKYMYyw5a+6vVSFsgYspfXY34dCReqyTyP/ZW8JNM2/IUVh66MGbWlt+NHO2fQHgiS1ztWg2Yc5ckX85+eMCgV/kNHIKwWsk14muyMIvUoL2mwhoWR5UM13aB66ibsRfDIDetBrqcmGEgKWXUxQX4isJoqYV/G2j6ZdFNh6BlAHr09j/P2Kp1EZj1w2ICW6Mdf8WemOpahDna2Q3aTr04ZHGE1u+obLGg4dmfU14hsRRgzzIKBynxAVI9PxLK6DmuuJstq73MWuVKRLZAn8pL/CQMyTdjI8Cca3nlLbvlXdXkf9ohhxLRgX5cZzoJoXYE2DA==
x-ms-traffictypediagnostic: VE1EUR02HT038:
x-exchange-antispam-report-test: UriScan:(209352067349851);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031);SRVR:VE1EUR02HT038;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:VE1EUR02HT038;
x-forefront-prvs: 045584D28C
x-forefront-antispam-report: SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:VE1EUR02HT038;H:HE1PR10MB0521.EURPRD10.PROD.OUTLOOK.COM;FPR:;SPF:None;LANG:;
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
boundary="_000_HE1PR10MB05216CB580228F7908EC0651CC9F0HE1PR10MB0521EURP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Oct 2017 15:36:00.1090
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR02HT038
X-Spam-Status: Yes, score=7.2
X-Spam-Score: 72
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary, CHANGE OF BENEFICIARY, In our office
today,was a present of One Mr. John T. Kehoe of 122 Fitch Way, Sacramento,CA.USA
95864 filing application [...]
Content analysis details: (7.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.92.69.46 listed in list.dnswl.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)
[40.92.69.46 listed in wl.mailspike.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gaskinsgriffiths5050[at]outlook.com)
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gaskinsgriffiths5050[at]outlook.com)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION
Attention: Beneficiary,
CHANGE OF BENEFICIARY,
In our office today,was a present of One Mr. John T. Kehoe
of 122 Fitch Way, Sacramento,CA.USA 95864 filing application
contrary to your pending fund transfer. The above mentioned
person visited this Bank yesterday with a power of attorney
given in his favor by your good self, granting him the
benefit to process and claim your inheritance of
$32,000,000.00(Thirty Two Million United States Dollars
Only) for personal reasons. He further Stated that the
online account will be Terminated while the fund should be
wired to his
Bank account with Bank Of America,
Account Number # 12908576457
Routing Number# 121000358.
Our office have ask Mr. John T. Kehoe to return back to the
Bank within 48hours to enable us have a personal
confirmation from you being hitherto the beneficiary.We are
sorry to have delayed your instruction in giving out this
fund since we must adhere to the modus operandi of this
honorable bank by making sure this request is verified and
confirmed by the beneficiary and his existing attorney.
Your confirmation to the above will be appreciated. We look
forward to hear from you soon.Reply to this
email; [email protected]
Yours sincerely
MR Douglas Fountain
Group MD/CEO
Access BANK.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
