by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id ODxUIyNR0VsBSAAAjbubUg
for <>; Wed, 24 Oct 2018 22:14:11 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 24 Oct 2018 22:14:11 -0700
Received: from mail-lj1-f196.google.com ([209.85.208.196]:36281)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gFXyE-0004mp-Ax
for ; Wed, 24 Oct 2018 22:14:11 -0700
Received: by mail-lj1-f196.google.com with SMTP id s15-v6so6940259lji.3
for <>; Wed, 24 Oct 2018 22:13:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from
message-id:subject:to;
bh=ZhPTxvD2JdDzgQFB1xo3PcvDCDLVM4Hmuwgmj/Upda8=;
b=Gm7ifeXVvV+hEBIJOa0IuQZrJNIMdjxLWleJH9Fqy/6L8Ljbx9qTIi8Y3vCdXTu4Hp
UQOKJ8yJcBEHTBDVvpQR/kDDcBEPsRt5tW+QaZ6yHMB3rpSN12EJRhfKpyzPECEJUxrF
xX7by9Nt+3GmHuVACuTqrVSVmrnf1hAEI+I0aCsMZsx1F8P+HQoiFEVCIsmAxR6frepa
RtvmFUYQ7/sct5gN93TGNYBu/eQa2R5cgkc1LNGB5FTQHFNJi9NLIHs6/1hLUIQchK9o
F36sQVU+bHQ09HRnEncsCMsyzkzHCY39Lgq5mMJ5k6OIV8muq+F4ha0E/mXN95QAyJKT
i1Bg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:frommessage-id:subject:to;
bh=ZhPTxvD2JdDzgQFB1xo3PcvDCDLVM4Hmuwgmj/Upda8=;
b=uTtorNHefpvoZe0dO7ibYTZ6eSU+MSv+iv/boOhLqxxEiBSSPheUf3B2Qba22UGyvL
Om4/q2l+911UcifQlJbWPw2Zh+1uxTtXsEASqUbPtuTd6TrcIq6i1nSqCsvHH8ysszaq
XPyjuY54prSU3j+yECNcF4F8pMwex5/HOfUMho2rRLFtgv3tIClWquzh6sCYTzWNQyeu
Wc5xejJOAExfSvde1xQZ6qgO7PJvhlAFMi7SO7F/6uGsaCKADitmYNO2FOddXXxXiYP3
vJkRmKGqL2CBLLL3pCnXAd0NgUQcijdeIzpG4cLXkLv3W2e/mp5lwlBipIYFvyyl+BIP
eNZQ==
X-Gm-Message-State: AGRZ1gK+e8tt76WAqLwuHKkKKji4vo8s0zDVxsJZ7oHKaNiMaRCq+lRC
4g2/p24mBjghTMaRpeCCRNx8nrVXDQTPpwU0EX2i+q0jF7o=
X-Google-Smtp-Source: AJdET5e/2CJKPKofarYiG/VGLhE1Nw+oUKseqqEkaeoI4azBCAGoCeDFSRDfhGk7lyXT25snUl4HhebWVAuYLUjRBD4=
X-Received: by 2002:a2e:99d3:: with SMTP id l19-v6mr88250ljj.132.1540444407725;
Wed, 24 Oct 2018 22:13:27 -0700 (PDT)
MIME-Version: 1.0
From: "[email protected]" <[email protected]>
Date: Thu, 25 Oct 2018 22:13:08 -0700
Message-ID: <CAMnsoYR4ZpYKtyHe+HaiY5qcVzow87243J8P6gv=1mguq8uy=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000b8038c057906a95b"
Bcc:
X-Spam-Status: Yes, score=18.5
X-Spam-Score: 185
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *ATTN;* *Beneficiary.* *The loan amount is meant for the documentation
and the tax payment before your inheritance of 5million dollar will be transfer
into your account. Note that immediately the loan is transfer into your account.
I will personally direct you on how to send it to our * *Attorney who will
pay for the documentation and tax fee on your behalf. I am giving you a 100%
guarantee that this is legal and you are not breaking any law both domestic
and international.* [...]
Content analysis details: (18.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.196 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(davidkamal50[at]gmail.com)
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (davidkamal50[at]gmail.com)
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.8 YOU_INHERIT Discussing your inheritance
3.0 PDS_FROM_2_EMAILS No description available.
3.3 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** I am giving you a 100% guarantee that this transaction is legal
*ATTN;* *Beneficiary.*
*The loan amount is meant for the documentation and the tax payment before
your inheritance of 5million dollar will be transfer into your account.
Note that immediately the loan is transfer into your account. I will
personally direct you on how to send it to our * *Attorney who will pay
for the documentation and tax fee on your behalf. I am giving you a 100%
guarantee that this is legal and you are not breaking any law both domestic
and international.*
*Please all you need do is to follow all my directives to you and please do
not give your bank account details to anyone again in regard to this
transaction so that your bank account we not be compromise in any way
before the fund we start coming into your account. I want you to*
*understanding
the fact that our relationship is aimed at bringing a good life to our
families. All I need from you is to follow my instruction religiously and
be patient. Whatever any email you receive from any quarters in regard to
this transaction, do not respond to them and also forward it to me.*
*Yours Sincerely,*
HARRY WELLS*,*
*WELLS FARGO BANK*
Delivered-To:
Received: from
by with LMTP id ODxUIyNR0VsBSAAAjbubUg
for <>; Wed, 24 Oct 2018 22:14:11 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 24 Oct 2018 22:14:11 -0700
Received: from mail-lj1-f196.google.com ([209.85.208.196]:36281)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gFXyE-0004mp-Ax
for ; Wed, 24 Oct 2018 22:14:11 -0700
Received: by mail-lj1-f196.google.com with SMTP id s15-v6so6940259lji.3
for <>; Wed, 24 Oct 2018 22:13:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from
message-id:subject:to;bh=ZhPTxvD2JdDzgQFB1xo3PcvDCDLVM4Hmuwgmj/Upda8=;
b=Gm7ifeXVvV+hEBIJOa0IuQZrJNIMdjxLWleJH9Fqy/6L8Ljbx9qTIi8Y3vCdXTu4Hp
UQOKJ8yJcBEHTBDVvpQR/kDDcBEPsRt5tW+QaZ6yHMB3rpSN12EJRhfKpyzPECEJUxrF
xX7by9Nt+3GmHuVACuTqrVSVmrnf1hAEI+I0aCsMZsx1F8P+HQoiFEVCIsmAxR6frepa
RtvmFUYQ7/sct5gN93TGNYBu/eQa2R5cgkc1LNGB5FTQHFNJi9NLIHs6/1hLUIQchK9o
F36sQVU+bHQ09HRnEncsCMsyzkzHCY39Lgq5mMJ5k6OIV8muq+F4ha0E/mXN95QAyJKT
i1Bg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from
message-id:subject:to;bh=ZhPTxvD2JdDzgQFB1xo3PcvDCDLVM4Hmuwgmj/Upda8=;
b=uTtorNHefpvoZe0dO7ibYTZ6eSU+MSv+iv/boOhLqxxEiBSSPheUf3B2Qba22UGyvL
Om4/q2l+911UcifQlJbWPw2Zh+1uxTtXsEASqUbPtuTd6TrcIq6i1nSqCsvHH8ysszaq
XPyjuY54prSU3j+yECNcF4F8pMwex5/HOfUMho2rRLFtgv3tIClWquzh6sCYTzWNQyeu
Wc5xejJOAExfSvde1xQZ6qgO7PJvhlAFMi7SO7F/6uGsaCKADitmYNO2FOddXXxXiYP3
vJkRmKGqL2CBLLL3pCnXAd0NgUQcijdeIzpG4cLXkLv3W2e/mp5lwlBipIYFvyyl+BIP
eNZQ==
X-Gm-Message-State: AGRZ1gK+e8tt76WAqLwuHKkKKji4vo8s0zDVxsJZ7oHKaNiMaRCq+lRC
4g2/p24mBjghTMaRpeCCRNx8nrVXDQTPpwU0EX2i+q0jF7o=
X-Google-Smtp-Source: AJdET5e/2CJKPKofarYiG/VGLhE1Nw+oUKseqqEkaeoI4azBCAGoCeDFSRDfhGk7lyXT25snUl4HhebWVAuYLUjRBD4=
X-Received: by 2002:a2e:99d3:: with SMTP id l19-v6mr88250ljj.132.1540444407725;
Wed, 24 Oct 2018 22:13:27 -0700 (PDT)
MIME-Version: 1.0
From: "[email protected]" <[email protected]>
Date: Thu, 25 Oct 2018 22:13:08 -0700
Message-ID: <CAMnsoYR4ZpYKtyHe+HaiY5qcVzow87243J8P6gv=1mguq8uy=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000b8038c057906a95b"
Bcc:
X-Spam-Status: Yes, score=18.5
X-Spam-Score: 185
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *ATTN;* *Beneficiary.* *The loan amount is meant for the documentation
and the tax payment before your inheritance of 5million dollar will be transfer
into your account. Note that immediately the loan is transfer into your account.
I will personally direct you on how to send it to our * *Attorney who will
pay for the documentation and tax fee on your behalf. I am giving you a 100%
guarantee that this is legal and you are not breaking any law both domestic
and international.* [...]
Content analysis details: (18.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.196 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(davidkamal50[at]gmail.com)
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (davidkamal50[at]gmail.com)
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.8 YOU_INHERIT Discussing your inheritance
3.0 PDS_FROM_2_EMAILS No description available.
3.3 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** I am giving you a 100% guarantee that this transaction is legal
*ATTN;* *Beneficiary.*
*The loan amount is meant for the documentation and the tax payment before
your inheritance of 5million dollar will be transfer into your account.
Note that immediately the loan is transfer into your account. I will
personally direct you on how to send it to our * *Attorney who will pay
for the documentation and tax fee on your behalf. I am giving you a 100%
guarantee that this is legal and you are not breaking any law both domestic
and international.*
*Please all you need do is to follow all my directives to you and please do
not give your bank account details to anyone again in regard to this
transaction so that your bank account we not be compromise in any way
before the fund we start coming into your account. I want you to*
*understanding
the fact that our relationship is aimed at bringing a good life to our
families. All I need from you is to follow my instruction religiously and
be patient. Whatever any email you receive from any quarters in regard to
this transaction, do not respond to them and also forward it to me.*
*Yours Sincerely,*
HARRY WELLS*,*
*WELLS FARGO BANK*
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
