by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id YCYSOqRwrlxxVQAAjbubUg
for <>; Wed, 10 Apr 2019 15:39:32 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 10 Apr 2019 15:39:32 -0700
Received: from mail-ua1-f67.google.com ([209.85.222.67]:41513)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hELsR-0005gE-Dc
for ; Wed, 10 Apr 2019 15:39:32 -0700
Received: by mail-ua1-f67.google.com with SMTP id l22so1353739uao.8
for <>; Wed, 10 Apr 2019 15:39:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=7W39cgFrF4owDyIQY/6m9RibdGqLWjvnb1e7IkRs6YQ=;
b=aWNcukZ6TtKQ+3V4PydETuHSA16F7ruLdJn3Uj7SzgnK7nbENpwNhl/cNprpz+Idah
h8CIMHPGr75omgB5U2cbqh4ONCrAsWcn7sRuKXidge4PecLLG8Dqw0hMgwrhCija1PX+
H3TKBBXxd6I5B/OGiIl/L7cDZTPdXgVNXg/cmYEnLF4ocJyT6XtSA98KGJo/ywBpZba2
9cGSl/Ip2W9SGLOAy3cTEDWhFNujkAZrrJvtkuFtOtaLhGnmRoAfAiocoyWIJV71/RUM
RoeB47BQp0mnCepps3iQvWLcQ1s/l+b4RvRV3rMPK/8Jj17I8rFulIstV5j4rMiSCMZy
PEnA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=7W39cgFrF4owDyIQY/6m9RibdGqLWjvnb1e7IkRs6YQ=;
b=A3mH4SbJTTWu4v/Unr2oktEXeYBPbyEDwPJ5YICFoTllg0cCtZ/Yz9t/m/PU4mJ0sS
35prN1clW1m4Z14Y3InLhGS/zfytErMlHpGCZpu3UDg0P5RIM10Szf0BeObkIasUUyzz
7+4kdinG9P5QQfQa9oHQGZDQB1mvkQU14VGs9garWOzZi84/tdrv3H71HpZLEfnOc17a
kIidBgvr6WnxlrGLX+u+OjnMmfS3jnY7LBrUp6MTNewj0GgAnJOsfptzdTfd5x5/TKh+
hG/gmSIXDKTqDnt7vZSJdU7qAcp0mE52VRiksmwGZJC48kshxYkKk11C2NwdwMoViOBq
eZRQ==
X-Gm-Message-State: APjAAAW1ncvezYNn5qLK+tw5wWHos2n5PnruUrUvJw69x7bshp5Ebc8T
DT7FZEHxZWTIVVuQKsAvQoh400dZLvT52gcP0q4=
X-Google-Smtp-Source: APXvYqxtctGGHJWRHx5bzkmYO39BRtoR4sLMEdScm7DsbEvFus+gCj4A4TSR3GN/JTfaN4rTwPJC4fptWucGVJzUbwA=
X-Received: by 2002:ab0:738e:: with SMTP id l14mr15136836uap.38.1554935930127;
Wed, 10 Apr 2019 15:38:50 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: "Susan S. Liberman: [email protected]" <[email protected]>
Date: Thu, 11 Apr 2019 00:38:40 +0200
Message-ID: <CAMJu6D4gA=-5Cuyq26ttBeuOK8rUJ1=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000c38de4058634bba0"
Bcc:
X-Spam-Status: Yes, score=14.4
X-Spam-Score: 144
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Bank of America Financial Center Metro Center Station 700
13th St NW, Washington, DC 20005, United States Office of Ms. Christine P.
Katziff Corporate General Auditor (BOA) Wire Transfer & Audit Department
Direct Tell: +12024555966 [...]
Content analysis details: (14.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 KAM_NUMSUBJECT Subject ends in numbers
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.222.67 listed in list.dnswl.org]
-0.3 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.67 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(viktobon55[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sussanmesay34[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (sussanmesay34[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 YOU_INHERIT Discussing your inheritance
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.2 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Your Payment, Confirm or Call Me: +12024555966
Bank of America Financial Center
Metro Center Station 700 13th St NW,
Washington, DC 20005, United States
Office of Ms. Christine P. Katziff
Corporate General Auditor (BOA)
Wire Transfer & Audit Department
Direct Tell: +12024555966
Attention:,
I am Ms. Christine P. Katziff, Corporate General Auditor, Bank of America.
Be informed of the arrival and availability of your long awaiting
inheritance fund Part Payment value, ($7, 000,000.00) only as received.
This occurred on the march 21st 2018, through great effort by the USA
Office of the Comptroller of the Currency (OCC). But our Bank Board of
Directors, refused to get you informed for reasons best known to them,
which I believe, must be selfish interest.
I made my research in our Bank database and confirmed I can wire the fund
to your choice of Bank account and have the wire tracer wiped out from the
system, where the fund wire transfer cannot be traced to your Bank account
by any Financial Authority.
Therefore, I urge you to trust my skill and assure me the absolute
confidentiality of this information, and I will have your fund wired via
the fastest method of wire transfer, (MT202 Cov), If you agree or can trust
my skill on this matter, reconfirm your details as listed bellow, and I
will transfer your fund as you will confirm it in your Bank account same
day.
If you have any doubt or negative thought about this, please, don't bother
to reply this message, I cannot persuade you, I am only here to exercise my
hatred on cheating and cheaters, using my perfect professional skill.
Be assured of a successful completion of this deal upon adhering to my
directives by acting at the right time where necessary.
No INTERFERENCE from the Government or any Financial Authorities, no one
will have the right to intervene on the transaction following my perfect
plans to make it happen.
Reconfirm the following details to enable us commence on the process
immediately.
Your Full Names:
Your Current Home Address:
Your Direct Cell:
Your Current Occupation:
Bank Names:
Bank Address:
Bank Account No:
Bank Account Names:
Swift No:
Routing No:
Christine P. Katziff
Corporate General Auditor
Delivered-To:
Received: from
by with LMTP id YCYSOqRwrlxxVQAAjbubUg
for <>; Wed, 10 Apr 2019 15:39:32 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 10 Apr 2019 15:39:32 -0700
Received: from mail-ua1-f67.google.com ([209.85.222.67]:41513)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1hELsR-0005gE-Dc
for ; Wed, 10 Apr 2019 15:39:32 -0700
Received: by mail-ua1-f67.google.com with SMTP id l22so1353739uao.8
for <>; Wed, 10 Apr 2019 15:39:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;bh=7W39cgFrF4owDyIQY/6m9RibdGqLWjvnb1e7IkRs6YQ=;
b=aWNcukZ6TtKQ+3V4PydETuHSA16F7ruLdJn3Uj7SzgnK7nbENpwNhl/cNprpz+Idah
h8CIMHPGr75omgB5U2cbqh4ONCrAsWcn7sRuKXidge4PecLLG8Dqw0hMgwrhCija1PX+
H3TKBBXxd6I5B/OGiIl/L7cDZTPdXgVNXg/cmYEnLF4ocJyT6XtSA98KGJo/ywBpZba2
9cGSl/Ip2W9SGLOAy3cTEDWhFNujkAZrrJvtkuFtOtaLhGnmRoAfAiocoyWIJV71/RUM
RoeB47BQp0mnCepps3iQvWLcQ1s/l+b4RvRV3rMPK/8Jj17I8rFulIstV5j4rMiSCMZy
PEnA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id:subject:to;
bh=7W39cgFrF4owDyIQY/6m9RibdGqLWjvnb1e7IkRs6YQ=;
b=A3mH4SbJTTWu4v/Unr2oktEXeYBPbyEDwPJ5YICFoTllg0cCtZ/Yz9t/m/PU4mJ0sS
35prN1clW1m4Z14Y3InLhGS/zfytErMlHpGCZpu3UDg0P5RIM10Szf0BeObkIasUUyzz
7+4kdinG9P5QQfQa9oHQGZDQB1mvkQU14VGs9garWOzZi84/tdrv3H71HpZLEfnOc17a
kIidBgvr6WnxlrGLX+u+OjnMmfS3jnY7LBrUp6MTNewj0GgAnJOsfptzdTfd5x5/TKh+
hG/gmSIXDKTqDnt7vZSJdU7qAcp0mE52VRiksmwGZJC48kshxYkKk11C2NwdwMoViOBq
eZRQ==
X-Gm-Message-State: APjAAAW1ncvezYNn5qLK+tw5wWHos2n5PnruUrUvJw69x7bshp5Ebc8T
DT7FZEHxZWTIVVuQKsAvQoh400dZLvT52gcP0q4=
X-Google-Smtp-Source: APXvYqxtctGGHJWRHx5bzkmYO39BRtoR4sLMEdScm7DsbEvFus+gCj4A4TSR3GN/JTfaN4rTwPJC4fptWucGVJzUbwA=
X-Received: by 2002:ab0:738e:: with SMTP id l14mr15136836uap.38.1554935930127;
Wed, 10 Apr 2019 15:38:50 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: "Susan S. Liberman: [email protected]" <[email protected]>
Date: Thu, 11 Apr 2019 00:38:40 +0200
Message-ID: <CAMJu6D4gA=-5Cuyq26ttBeuOK8rUJ1=[email protected]>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000c38de4058634bba0"
Bcc:
X-Spam-Status: Yes, score=14.4
X-Spam-Score: 144
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Bank of America Financial Center Metro Center Station 700
13th St NW, Washington, DC 20005, United States Office of Ms. Christine P.
Katziff Corporate General Auditor (BOA) Wire Transfer & Audit Department
Direct Tell: +12024555966 [...]
Content analysis details: (14.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 KAM_NUMSUBJECT Subject ends in numbers
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.222.67 listed in list.dnswl.org]
-0.3 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.67 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(viktobon55[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sussanmesay34[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (sussanmesay34[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 YOU_INHERIT Discussing your inheritance
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.2 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Your Payment, Confirm or Call Me: +12024555966
Bank of America Financial Center
Metro Center Station 700 13th St NW,
Washington, DC 20005, United States
Office of Ms. Christine P. Katziff
Corporate General Auditor (BOA)
Wire Transfer & Audit Department
Direct Tell: +12024555966
Attention:,
I am Ms. Christine P. Katziff, Corporate General Auditor, Bank of America.
Be informed of the arrival and availability of your long awaiting
inheritance fund Part Payment value, ($7, 000,000.00) only as received.
This occurred on the march 21st 2018, through great effort by the USA
Office of the Comptroller of the Currency (OCC). But our Bank Board of
Directors, refused to get you informed for reasons best known to them,
which I believe, must be selfish interest.
I made my research in our Bank database and confirmed I can wire the fund
to your choice of Bank account and have the wire tracer wiped out from the
system, where the fund wire transfer cannot be traced to your Bank account
by any Financial Authority.
Therefore, I urge you to trust my skill and assure me the absolute
confidentiality of this information, and I will have your fund wired via
the fastest method of wire transfer, (MT202 Cov), If you agree or can trust
my skill on this matter, reconfirm your details as listed bellow, and I
will transfer your fund as you will confirm it in your Bank account same
day.
If you have any doubt or negative thought about this, please, don't bother
to reply this message, I cannot persuade you, I am only here to exercise my
hatred on cheating and cheaters, using my perfect professional skill.
Be assured of a successful completion of this deal upon adhering to my
directives by acting at the right time where necessary.
No INTERFERENCE from the Government or any Financial Authorities, no one
will have the right to intervene on the transaction following my perfect
plans to make it happen.
Reconfirm the following details to enable us commence on the process
immediately.
Your Full Names:
Your Current Home Address:
Your Direct Cell:
Your Current Occupation:
Bank Names:
Bank Address:
Bank Account No:
Bank Account Names:
Swift No:
Routing No:
Christine P. Katziff
Corporate General Auditor
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
