by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 07 Sep 2020 04:49:52 +0000
Received: from mail-io1-f68.google.com ([209.85.166.68]:46320)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kF96F-00057q-Ct
for ; Mon, 07 Sep 2020 04:49:52 +0000
Received: by mail-io1-f68.google.com with SMTP id d18so12678102iop.13
for <>; Sun, 06 Sep 2020 21:49:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=c+pSApF+jHJUipsreK+0GiEAqnpItQcDLMgPIwC39r4=;
b=UTt0hXSy9bomTPvD13CMmZDeKD8/g7bfaIYOs2uX3AUqDRAQoOMX/2qLtH8EvN7hAw
iL0zPzTRHE7eNQC1Mpj1agUCaNg3bDVlyVrRHJ5oEtK/e0qz5EH32T6VJ/sfXHmSItB2
1PhRtU8WCB3949I4NwqUdX/PV1Hyfy9ngb2yF2JK/FiarGGm+UgJflizxCb710umAuw+
+ssSpgPTKFn/kpc2yEjTH+dcAT1cOJqIuJ2LTYdiwDjl0/3k5oQWQMF8LKQNpEkN8mrZ
Ol9v6E1stNQ4ZUx+jhlPbGFu4k47NV2iwzfufuFtB9Xf6cqURnSFoP0NikP8kJN5j9Cc
IY4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=c+pSApF+jHJUipsreK+0GiEAqnpItQcDLMgPIwC39r4=;
b=Zykv1RfTXqgMv+ORlTz8PDFidXApGiwlfkHIDJqYs5qTeqmjjqVQI0VYlhWXy284G6
3kjzYf7INYX7eO3lcY6tkGq1oy7bzUtNP7LM6H9TaZkq9YnakV+9e3Mh7dpqAzuA6Nnc
Eni/Se0IGT4iI69onyY+hRLOkF0JwKBOv2QS53cMXuv5e1AlAoU7RQUp4jk/vwxZkKWd
KnxjUKkaxjdhEwSFo8BgQJQs8lRaaN/FL+qjhEqTJL2sbR6gGdHgapA+65JDCZ8kr1Sg
i6TNjzNreYr6wAa6uoVVXUoy0Hv9kpFbiN/pqgY09iOdFFxiOhwyWIlMOCu8iJooE4Oy
ff2Q==
X-Gm-Message-State: AOAM531FcdZyWMv/Tv13eNMvqNIk+AhpVXQYghj2DcnXXbTY/69hw655
W2fIcri5KxhA1/Aai0GTQjGg1fSHcpp9F0mWO9w=
X-Google-Smtp-Source: ABdhPJxfZ4JvkrjPGWHWjnlbxdbP3peVmNXRixmIn+8dUM3iwDL8DMnrPII7BXBgMd0bE0GcN7BgJ+LTeR7tB05v/fE=
X-Received: by 2002:a6b:7f0b:: with SMTP id l11mr16040443ioq.182.1599454150351;
Sun, 06 Sep 2020 21:49:10 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: MARYAM MOHAMMED <[email protected]>
Date: Mon, 7 Sep 2020 05:48:56 +0100
Message-ID: <CADNA2pFa7dC=[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary="00000000000077670a05aeb1f08e"
Bcc:
X-Spam-Status: Yes, score=12.6
X-Spam-Score: 126
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *NOTIFICATION OF PAYMENT VIA ATM CARD* Due to your long overdue
fund which you have been finding it difficult to receive via a Certified
Bank Draft, we have arranged your payment through our International ATM CARD
PAYMENT CENTER in Europe, [...]
Content analysis details: (12.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.68 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mh5154ma[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.6 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.7 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Hello
--00000000000077670a05aeb1f08e
Content-Type: text/plain; charset="UTF-8"
NOTIFICATION OF PAYMENT VIA ATM CARD
Dueto your long overdue fund which you have been finding it difficult to receive via a Certified Bank Draft, we have arranged your payment through our International ATM CARD PAYMENT CENTER in Europe, America, Africa and Asia Pacific; this is part of an instruction/mandate passed by the Senate in respect to overseas contract Payment and debt rescheduling.
We will send you an International Swift ATM CARD (Master Card) which you are to use in accessing your fund via in any ATMMACHINE location anywhere in the world, and the maximum daily limit is Ten Thousand United States Dollars ($10,000.00USD) valued sum at Five hundred thousand United States Dollars {US$500,000.00}. If you desire toreceive your fund this way, kindly re-confirm your details so as to facilitate the immediate Release of your ATM CARD immediately.
Your Full Name.................
Full Residential Address.......
Direct and Current Phone.......
Present Country................
PleaseNote: As soon as your details have been received here by the SWIFT ATM PAYMENT CENTER, you are therefore advised to stop any further communications with all other bodies such as the Compensation and Finance House, Lottery Organizations, Bank Transfer Department etc. So as to facilitate the immediate release of your ATM Card and more so to avoid Mis-appropriation of your ATM Card. is aware that you are the onlyperson left to receive your ATM Card out of the three beneficiaries.
OurATM CODE of conduct is (code1960) as this is to be your subject when responding to our email sent to you to prove that truly you received ouremail and to differentiate our office from any fraudulent office who will be claiming to be us. We shall be expecting to receive your information as you have to stop any further communication with anybody or office you can also call, SMS, WhatsApp me on: +2347083778027
Thank you,
MARYAM MOHAMMED
ATM Logistics Unit
Envelope-to:
Delivery-date: Mon, 07 Sep 2020 04:49:52 +0000
Received: from mail-io1-f68.google.com ([209.85.166.68]:46320)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kF96F-00057q-Ct
for ; Mon, 07 Sep 2020 04:49:52 +0000
Received: by mail-io1-f68.google.com with SMTP id d18so12678102iop.13
for <>; Sun, 06 Sep 2020 21:49:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;bh=c+pSApF+jHJUipsreK+0GiEAqnpItQcDLMgPIwC39r4=;
b=UTt0hXSy9bomTPvD13CMmZDeKD8/g7bfaIYOs2uX3AUqDRAQoOMX/2qLtH8EvN7hAw
iL0zPzTRHE7eNQC1Mpj1agUCaNg3bDVlyVrRHJ5oEtK/e0qz5EH32T6VJ/sfXHmSItB2
1PhRtU8WCB3949I4NwqUdX/PV1Hyfy9ngb2yF2JK/FiarGGm+UgJflizxCb710umAuw+
+ssSpgPTKFn/kpc2yEjTH+dcAT1cOJqIuJ2LTYdiwDjl0/3k5oQWQMF8LKQNpEkN8mrZ
Ol9v6E1stNQ4ZUx+jhlPbGFu4k47NV2iwzfufuFtB9Xf6cqURnSFoP0NikP8kJN5j9Cc
IY4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id:subject:to;
bh=c+pSApF+jHJUipsreK+0GiEAqnpItQcDLMgPIwC39r4=;
b=Zykv1RfTXqgMv+ORlTz8PDFidXApGiwlfkHIDJqYs5qTeqmjjqVQI0VYlhWXy284G6
3kjzYf7INYX7eO3lcY6tkGq1oy7bzUtNP7LM6H9TaZkq9YnakV+9e3Mh7dpqAzuA6Nnc
Eni/Se0IGT4iI69onyY+hRLOkF0JwKBOv2QS53cMXuv5e1AlAoU7RQUp4jk/vwxZkKWd
KnxjUKkaxjdhEwSFo8BgQJQs8lRaaN/FL+qjhEqTJL2sbR6gGdHgapA+65JDCZ8kr1Sg
i6TNjzNreYr6wAa6uoVVXUoy0Hv9kpFbiN/pqgY09iOdFFxiOhwyWIlMOCu8iJooE4Oy
ff2Q==
X-Gm-Message-State: AOAM531FcdZyWMv/Tv13eNMvqNIk+AhpVXQYghj2DcnXXbTY/69hw655
W2fIcri5KxhA1/Aai0GTQjGg1fSHcpp9F0mWO9w=
X-Google-Smtp-Source: ABdhPJxfZ4JvkrjPGWHWjnlbxdbP3peVmNXRixmIn+8dUM3iwDL8DMnrPII7BXBgMd0bE0GcN7BgJ+LTeR7tB05v/fE=
X-Received: by 2002:a6b:7f0b:: with SMTP id l11mr16040443ioq.182.1599454150351;
Sun, 06 Sep 2020 21:49:10 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: MARYAM MOHAMMED <[email protected]>
Date: Mon, 7 Sep 2020 05:48:56 +0100
Message-ID: <CADNA2pFa7dC=[email protected]>
To: [email protected]
Content-Type: multipart/alternative; boundary="00000000000077670a05aeb1f08e"
Bcc:
X-Spam-Status: Yes, score=12.6
X-Spam-Score: 126
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *NOTIFICATION OF PAYMENT VIA ATM CARD* Due to your long overdue
fund which you have been finding it difficult to receive via a Certified
Bank Draft, we have arranged your payment through our International ATM CARD
PAYMENT CENTER in Europe, [...]
Content analysis details: (12.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.68 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mh5154ma[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.6 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.7 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Hello
--00000000000077670a05aeb1f08e
Content-Type: text/plain; charset="UTF-8"
NOTIFICATION OF PAYMENT VIA ATM CARD
Dueto your long overdue fund which you have been finding it difficult to receive via a Certified Bank Draft, we have arranged your payment through our International ATM CARD PAYMENT CENTER in Europe, America, Africa and Asia Pacific; this is part of an instruction/mandate passed by the Senate in respect to overseas contract Payment and debt rescheduling.
We will send you an International Swift ATM CARD (Master Card) which you are to use in accessing your fund via in any ATMMACHINE location anywhere in the world, and the maximum daily limit is Ten Thousand United States Dollars ($10,000.00USD) valued sum at Five hundred thousand United States Dollars {US$500,000.00}. If you desire toreceive your fund this way, kindly re-confirm your details so as to facilitate the immediate Release of your ATM CARD immediately.
Your Full Name.................
Full Residential Address.......
Direct and Current Phone.......
Present Country................
PleaseNote: As soon as your details have been received here by the SWIFT ATM PAYMENT CENTER, you are therefore advised to stop any further communications with all other bodies such as the Compensation and Finance House, Lottery Organizations, Bank Transfer Department etc. So as to facilitate the immediate release of your ATM Card and more so to avoid Mis-appropriation of your ATM Card. is aware that you are the onlyperson left to receive your ATM Card out of the three beneficiaries.
OurATM CODE of conduct is (code1960) as this is to be your subject when responding to our email sent to you to prove that truly you received ouremail and to differentiate our office from any fraudulent office who will be claiming to be us. We shall be expecting to receive your information as you have to stop any further communication with anybody or office you can also call, SMS, WhatsApp me on: +2347083778027
Thank you,
MARYAM MOHAMMED
ATM Logistics Unit
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
