by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received:
by with LMTP id 8M0sH9LkW1thVQAAjbubUg
for <>; Fri, 27 Jul 2018 20:36:50 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 27 Jul 2018 20:36:50 -0700
Received: from mail-it0-f67.google.com ([209.85.214.67]:40629)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fjG2A-0005g3-7X
for ; Fri, 27 Jul 2018 20:36:50 -0700
Received: by mail-it0-f67.google.com with SMTP id h23-v6so10040201ita.5
for <>; Fri, 27 Jul 2018 20:36:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from
message-id:subject:to;
bh=Wi2TGrwQKFk6gh0AkIVeejJo+8+A2mEnOys9GOtTXJQ=;
b=gbRRIox4QmfHSnjul5CGqoDtG3kQ+ybPZSpwgw+ZZ0TkSi8SVRzBxZxUSFAJKhGAQJ
PuDsK3UTArJhz9ENJS5D1xypVhD+Y240g19d2aJukHa2bPp1uTPB9O01fE48T3X4yGwC
3WSdBsanxmfjKaIxTQh2ERrNlRUpS00taa5tWlZxmtN6T8O+l9894UXgEtVVoIBolAdZ
ZaHD4ROlRLsz5UHDzfVUZ/Vj9ysJAkKWMaoTnFNUIIKFHA+CZcVEEhyWxlyvA600O/s6
+DKVm0mYQNM30ux+72kY+wjeWCkLz1XV+VbLF39p/dqI0znkL+t3mOC85d4hO5nUPtp2
VPZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:frommessage-id:subject:to;
bh=Wi2TGrwQKFk6gh0AkIVeejJo+8+A2mEnOys9GOtTXJQ=;
b=gNUrgEdsplf7zCLVt4oemlWIM6wz1x15EJ92Ja6AytOvBuyxPBvKrTjCbdFzx8TLYl
/vGW9SJfWdVIV7QAcZydPUjFEpOfAsQH03HMBMnyJCSJvh55yeqYKgWt93R5R7sTpAn3
yZayr0X2o4bMIwoAp5LSUjhdFWyYL4ZfiJgT4TuVe5w+Tqv9+RfpUZEAqFpuLBrSCQ/5
PUAZy2hx0doyxdMICKqE6BtsxC87Joispwhnic6NM13kWNDP5+j8ADVPh3aKHIXMg5DF
d2rBsfu0R8APwojDo3xwdudxRYRm8hqrTFN3Ml2NFPPFHrf3xURQQep3iJY/yfYHshvN
ga4Q==
X-Gm-Message-State: AOUpUlFPpLbnVhki6w6znHvGjE/yZnwIKNrrA8So0cTCrjchUPb60R2Q
KGdVafycrl43iVY42INnDLxFmLc1990abXO7z28=
X-Google-Smtp-Source: AAOMgpcMePe1siuMlZEVad+y9cYZ8igJL5XfBBIKEoVDqyFVoq3b+PFs2hTlSMa52+e1J8JRRtz9JhFwHo5JyW4NwK4=
X-Received: by 2002:a02:9833:: with SMTP id t48-v6mr8639003jaj.111.1532748965618;
Fri, 27 Jul 2018 20:36:05 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a02:8d25:0:0:0:0:0 with HTTP; Fri, 27 Jul 2018 20:36:05
-0700 (PDT)
From: Mr John Rusher <[email protected]>
Date: Fri, 27 Jul 2018 21:36:05 -0600
Message-ID: <CAFMxa_EA_C6C5QpzRfN+J0fH=bG-QKD=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a029a4057206ed58"
Bcc:
X-Spam-Status: Yes, score=11.5
X-Spam-Score: 115
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, I have made new arrangements with an international
experts in funds managements here with (CIBC FIRST CARIBBEAN BANK CAYMAN
ISLAND)After the account opening over there in Cayman Island in the new Bank
(CIBC FIRST CARIBBEAN BANK, CAYMAN ISLAND) then she will help you lodge into
your new opened account with (CIBC FIRST CARIBBEAN BANK, CAYMAN ISLAND) into
your account with the same bank, this arrangements is for safekeeping of
your funds because you can not bring all your funds at once to your country
because of the new rules and regulations on moving huge sum of funds from
one place or the other, [...]
Content analysis details: (11.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BANG_GUAR BODY: Something is emphatically guaranteed
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.67 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mrjohnrusher11[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrjohnrusher11[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.67 listed in wl.mailspike.net]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
2.9 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** I have made new arrangements
Dear Beneficiary,
I have made new arrangements with an international experts in funds
managements here with (CIBC FIRST CARIBBEAN BANK CAYMAN ISLAND)After the
account opening over there in Cayman Island in the new Bank (CIBC FIRST
CARIBBEAN BANK, CAYMAN ISLAND) then she will help you lodge into your new
opened account with (CIBC FIRST CARIBBEAN BANK, CAYMAN ISLAND) into your
account with the same bank, this arrangements is for safekeeping of your
funds because you can not bring all your funds at once to your country
because of the new rules and regulations on moving huge sum of funds from
one place or the other,
with this arrangements, you will be officially protected and there will be
no more records of your funds to your governments, you will only make
transfers from your offshore account once you need money to settle matters
like payments of your mortgage, payments of your cash loan, children school
fees, official business payments and lots of others payments from your
side, this is all supported with the official bank to bank transfer system.
Here is all the Benefits:
Transperency - Best Services
NO Taxes for foreigners !
Personalised account manager
24/7 Internet banking and payments
Send -/receive funds by international wire
IBAN and SWIFT -/BIC payments
NO personal visit to Cayman Islands required
Multicurrency account management
Approval guaranteed!
Thanks
Yours Faithfully
Mr. JOHN RUSHER
Delivered-To:
Received:
by with LMTP id 8M0sH9LkW1thVQAAjbubUg
for <>; Fri, 27 Jul 2018 20:36:50 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 27 Jul 2018 20:36:50 -0700
Received: from mail-it0-f67.google.com ([209.85.214.67]:40629)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fjG2A-0005g3-7X
for ; Fri, 27 Jul 2018 20:36:50 -0700
Received: by mail-it0-f67.google.com with SMTP id h23-v6so10040201ita.5
for <>; Fri, 27 Jul 2018 20:36:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from
message-id:subject:to;bh=Wi2TGrwQKFk6gh0AkIVeejJo+8+A2mEnOys9GOtTXJQ=;
b=gbRRIox4QmfHSnjul5CGqoDtG3kQ+ybPZSpwgw+ZZ0TkSi8SVRzBxZxUSFAJKhGAQJ
PuDsK3UTArJhz9ENJS5D1xypVhD+Y240g19d2aJukHa2bPp1uTPB9O01fE48T3X4yGwC
3WSdBsanxmfjKaIxTQh2ERrNlRUpS00taa5tWlZxmtN6T8O+l9894UXgEtVVoIBolAdZ
ZaHD4ROlRLsz5UHDzfVUZ/Vj9ysJAkKWMaoTnFNUIIKFHA+CZcVEEhyWxlyvA600O/s6
+DKVm0mYQNM30ux+72kY+wjeWCkLz1XV+VbLF39p/dqI0znkL+t3mOC85d4hO5nUPtp2
VPZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from
message-id:subject:to;bh=Wi2TGrwQKFk6gh0AkIVeejJo+8+A2mEnOys9GOtTXJQ=;
b=gNUrgEdsplf7zCLVt4oemlWIM6wz1x15EJ92Ja6AytOvBuyxPBvKrTjCbdFzx8TLYl
/vGW9SJfWdVIV7QAcZydPUjFEpOfAsQH03HMBMnyJCSJvh55yeqYKgWt93R5R7sTpAn3
yZayr0X2o4bMIwoAp5LSUjhdFWyYL4ZfiJgT4TuVe5w+Tqv9+RfpUZEAqFpuLBrSCQ/5
PUAZy2hx0doyxdMICKqE6BtsxC87Joispwhnic6NM13kWNDP5+j8ADVPh3aKHIXMg5DF
d2rBsfu0R8APwojDo3xwdudxRYRm8hqrTFN3Ml2NFPPFHrf3xURQQep3iJY/yfYHshvN
ga4Q==
X-Gm-Message-State: AOUpUlFPpLbnVhki6w6znHvGjE/yZnwIKNrrA8So0cTCrjchUPb60R2Q
KGdVafycrl43iVY42INnDLxFmLc1990abXO7z28=
X-Google-Smtp-Source: AAOMgpcMePe1siuMlZEVad+y9cYZ8igJL5XfBBIKEoVDqyFVoq3b+PFs2hTlSMa52+e1J8JRRtz9JhFwHo5JyW4NwK4=
X-Received: by 2002:a02:9833:: with SMTP id t48-v6mr8639003jaj.111.1532748965618;
Fri, 27 Jul 2018 20:36:05 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a02:8d25:0:0:0:0:0 with HTTP; Fri, 27 Jul 2018 20:36:05
-0700 (PDT)
From: Mr John Rusher <[email protected]>
Date: Fri, 27 Jul 2018 21:36:05 -0600
Message-ID: <CAFMxa_EA_C6C5QpzRfN+J0fH=bG-QKD=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a029a4057206ed58"
Bcc:
X-Spam-Status: Yes, score=11.5
X-Spam-Score: 115
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, I have made new arrangements with an international
experts in funds managements here with (CIBC FIRST CARIBBEAN BANK CAYMAN
ISLAND)After the account opening over there in Cayman Island in the new Bank
(CIBC FIRST CARIBBEAN BANK, CAYMAN ISLAND) then she will help you lodge into
your new opened account with (CIBC FIRST CARIBBEAN BANK, CAYMAN ISLAND) into
your account with the same bank, this arrangements is for safekeeping of
your funds because you can not bring all your funds at once to your country
because of the new rules and regulations on moving huge sum of funds from
one place or the other, [...]
Content analysis details: (11.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BANG_GUAR BODY: Something is emphatically guaranteed
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.67 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mrjohnrusher11[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrjohnrusher11[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.67 listed in wl.mailspike.net]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
2.9 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** I have made new arrangements
Dear Beneficiary,
I have made new arrangements with an international experts in funds
managements here with (CIBC FIRST CARIBBEAN BANK CAYMAN ISLAND)After the
account opening over there in Cayman Island in the new Bank (CIBC FIRST
CARIBBEAN BANK, CAYMAN ISLAND) then she will help you lodge into your new
opened account with (CIBC FIRST CARIBBEAN BANK, CAYMAN ISLAND) into your
account with the same bank, this arrangements is for safekeeping of your
funds because you can not bring all your funds at once to your country
because of the new rules and regulations on moving huge sum of funds from
one place or the other,
with this arrangements, you will be officially protected and there will be
no more records of your funds to your governments, you will only make
transfers from your offshore account once you need money to settle matters
like payments of your mortgage, payments of your cash loan, children school
fees, official business payments and lots of others payments from your
side, this is all supported with the official bank to bank transfer system.
Here is all the Benefits:
Transperency - Best Services
NO Taxes for foreigners !
Personalised account manager
24/7 Internet banking and payments
Send -/receive funds by international wire
IBAN and SWIFT -/BIC payments
NO personal visit to Cayman Islands required
Multicurrency account management
Approval guaranteed!
Thanks
Yours Faithfully
Mr. JOHN RUSHER
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
