[email protected] Mrs.Linda Cook

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id gPhYAZYmFFq+MQAAjbubUg
for <>; Tue, 21 Nov 2017 05:13:58 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 21 Nov 2017 05:13:58 -0800
Received: from mail-wm0-f66.google.com ([74.125.82.66]:35638)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eH8N6-0003Ir-NC
for ; Tue, 21 Nov 2017 05:13:57 -0800
Received: by mail-wm0-f66.google.com with SMTP id y80so3270453wmd.0
for <>; Tue, 21 Nov 2017 05:13:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:frommessage-id:subject:to;
bh=B+y62dFWohASgX5U7oT9jtRw9AM4B17aFOx799rADu0=;
b=P8GeE+7LlLZzgQTrAS0+sZc+L6mvRA4G2jOGH0Z7pBQ5MZMZbbbw4slWafVbAnRAaM
d6iZXj0xIS8dML8AlnsolN6dhkF/kyq49UczClv5U9BDSOZHbzjv0F7B2TXWfcZtSZIq
+TvwFThwCiXiGIStZ5ZNtBqgVP5SEL7+lgiFemj3fze8+LLkZEC8IxxSrDlt/1F6nEOP
63/5ZwwPTBY6vlaHFke7Mv5ZUZtimZC5gF513XCFkrhZtPNloBuVbmPhEbyI3rMT2zdT
rhIYVVhbl7O5SlW3fHY87SDu7KOluPEQNDXLZ8GWKBAAC6w3V4LvWl/CcDNrqLCLOhsh
csRA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:frommessage-id:subject:to;
bh=B+y62dFWohASgX5U7oT9jtRw9AM4B17aFOx799rADu0=;
b=teOXaiFyEXZZLNd2z+tgfqdyjtKhidR5RsOD8gkllp4337rVxIVa31dOd7UsSX0jdo
mI9IolKkQ5hCmAvusql9xySaOQrQmkbM4zk/7wmNdxRB3Jutzr1wLmz0dvl56XsB8Jkv
cA7uf6qxYyM35ZvuS27Mw8cVtKHSKJae/DmANqMbqedCd9bmJXUWz8SHz+EIl9jUfkoj
iJkeCQwVmqqHf/uUZIYog0oPysWgLEG6J1QgHMsi2cNYb1R4estEa+e/3cx0qn8Zg98m
AjoxY/RDlPuyMsiUt0wzJMN4DYVZ3pxemalnazfi9BFYaULBBvEvLwtqGWADC5wed7hu
qm4g==
X-Gm-Message-State: AJaThX4qqNHU7aP8ayrCemqmGJT+EN+wt7WzoYPwqAnIA2z7B/35NYta
avXomBOtojV3/8+mDyofJKvgscMEojZ4t9MGDrw=
X-Google-Smtp-Source: AGs4zMbONsq5HeEJ36wPdZMs4Mz90LCk5RQ8EJCrUZM9MM7nSM+4/6G0dBahHJnA5XTTQAgOlYLaFGeFtqw6P8pcuH0=
X-Received: by 10.80.164.87 with SMTP id v23mr14908736edb.99.1511269991406;
Tue, 21 Nov 2017 05:13:11 -0800 (PST)
MIME-Version: 1.0
Received: by 10.80.150.101 with HTTP; Tue, 21 Nov 2017 05:13:10 -0800 (PST)
From: Boa Bank <[email protected]>
Date: Tue, 21 Nov 2017 14:13:10 +0100
Message-ID: <CALRD=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Dear:Beneficiary, I contacted you privately to inform you
that the approved part payment of US$8.5M in your favor has been programmed
in our micro chips of compartmental central computer for further crediting
into your nominated bank account. However, we received a "Deed of Assignment"
from one Mr. Marc.A.Wiener of USA who told us that he is your next of kin
and that you died in a fire outbreak last week.His contact phone number is
1-516 316-3952 We want to hear from you before we can make the transfer to
confirm if you are dead or not. Yours truly, Mrs.Linda Cook Senior managing
Director Security & Investigation Bank of America Wire transfer Processing
Division +1 347 412 1306 [...]

Content analysis details: (9.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.7 HK_SCAM_N2 BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.66 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[74.125.82.66 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(bankboa.onlinebanking[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.6 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.1 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Fund Payment


Dear:Beneficiary,
I contacted you privately to inform you that the approved part payment
of US$8.5M in your favor has been programmed in our micro chips of
compartmental central computer for further crediting into your
nominated bank account.
However, we received a "Deed of Assignment" from one Mr. Marc.A.Wiener
of USA who told us that he is your next of kin and that you died in a
fire outbreak last week.His contact phone number is 1-516 316-3952
We want to hear from you before we can make the transfer to confirm if
you are dead or not. Yours truly,
Mrs.Linda Cook
Senior managing Director Security & Investigation
Bank of America Wire transfer Processing Division
+1 347 412 1306