by buried under 419s
Return-Path: <3aj6nXw8JCoclmmp934p0spyCCDrxltw.nzxlmlyyt34p23sz7mzl4tt.nzx@trix.bounces.google.com>
Delivered-To:
Received: from
by with LMTP
id vqxwOJQ+p18mWwAAibB4EA
(envelope-from <3aj6nXw8JCoclmmp934p0spyCCDrxltw.nzxlmlyyt34p23sz7mzl4tt.nzx@trix.bounces.google.com>)
for <>; Sun, 08 Nov 2020 00:40:52 +0000
Return-path: <3aj6nXw8JCoclmmp934p0spyCCDrxltw.nzxlmlyyt34p23sz7mzl4tt.nzx@trix.bounces.google.com>
Envelope-to:
Delivery-date: Sun, 08 Nov 2020 00:40:52 +0000
Received: from mail-qv1-f69.google.com ([209.85.219.69]:36091)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <3aj6nXw8JCoclmmp934p0spyCCDrxltw.nzxlmlyyt34p23sz7mzl4tt.nzx@trix.bounces.google.com>)
id 1kbYlH-000644-VT
for ; Sun, 08 Nov 2020 00:40:52 +0000
Received: by mail-qv1-f69.google.com with SMTP id a1so3194158qvj.3
for <>; Sat, 07 Nov 2020 16:40:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id
subject:from:to;
bh=0CEjS37uK8Xt625bURd+S06ebGOzcz7juY5T2194GwA=;
b=oqrDEXeagSoYI1lqw0KQIU05d3Bf35NFV4rfsqoT8nk9iszosLQbcgkeCu8RTs/Oj7
qdiGvLtw+W+XLU6c04vd2qRT9Qq33GGYNycsBTOwdUaNkTCnplZ2pVDw1SkNRwotBcRn
Q/k9Y+bWt0hH6Im4M3PDCUv14ykxgH3Quvy8EvMOsuh/V2D4nqP/0bMaSbYDqZGUFrRu
0Zo5nzKyy9rE+KY+g+OlXqUgMlbxWbdo464FFpoEzdHwi1QFARvNCSoN/GVW3MJPnGEK
8Er28a0n5nDwAqIfwXyPtvCejWguw9wJsusmejeLJ4RXPdYVQWwdO3kww80Dl8nwcphQ
n2iA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-idsubject
:from:to;
bh=0CEjS37uK8Xt625bURd+S06ebGOzcz7juY5T2194GwA=;
b=MDzo91K27YunR8VcvtFXI6qsq1EoNTv3GFbi04e4MX/QpA9cmD96u9wjcn2irpvOLi
STLHdZdXN7s1GPyufaDcmX5+Q00QeuQluRp+oL5Mh+bpwg1Dxqiim60b6wbpXOAMLp28
Lae+GM570us+4lB/b+MyvyLRdIbH6Vjmbn9G7fM7M1yQ5QI/xERBH7egnDnDj1kWRKgX
bLVKQ+PWh59z2DfJFXPqdZ8wR25SaAgNDuuf4ksDkjJRT5RNrc7uaGoHWfgeh/eYJK7J
WYyBHT9/HafZVI73NI59Xru7t36mKwcnlg2nn1kCSZmxWY8lZVhp1M3TnCVdtK9kbWL1
SgWw==
X-Gm-Message-State: AOAM530KOqxzFD5r6NM7GdSVttwBOJgy67cbQJoIz9rS5sMWs/NK49tp
X4S8KMVpP8JaMFaGFp8stuE7YFTH7SDG8dYZxEpL
MIME-Version: 1.0
X-Received: by 2002:a37:aa06:: with SMTP id t6mt8503724qke.39.1604796010947;
Sat, 07 Nov 2020 16:40:10 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Sun, 08 Nov 2020 00:40:11 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="0000000000002e3f0d05b38db024"
X-Spam-Status: Yes, score=11.4
X-Spam-Score: 114
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill in the following form: Untitled form
To fill it in, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link
Content analysis details: (11.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 MILLION_USD BODY: Talks about millions of dollars
0.6 URG_BIZ BODY: Contains urgent matter
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[abbeystephen112[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[abbeystephen112[at]gmail.com]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
1.2 HK_SCAM No description available.
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Read carefully and Revert
From The Desk of: Mr.Lewis Jerome,
Credit/Telex Department,
First State Bank,
12/B13 Kingston Drive,
New York.
PAYMENT NOTICE OF YOUR OUTSTANDING US$4.5M
Endeavor to respond as soon as you receive this notification for proper documentation of the transfer to be done.
The World Bank Bank in association with the Bill & Melinda Gates Foundation (BMGF) have taken notice of your significant and positive contributions to humanity and have in reward consequently approved payment of Four Million Five Hundred Thousand United States Dollars (US$4,500,000.00) in your favor to assist you cushion the effect of the ravaging Corona Virus Pandemic and mandated the First State Bank, New York to carry out immediate remittance of the fund to you. However, there was a sharp follow up from one Mr. Robert Redding who stated that he is your Legal Representative asking us to transfer the fund to the below account that he provided.
ACCOUNT NUMBER 257668-09-100145
KOOKMIN BANK (kb bank),
5TH FL.KOOKLMIN BANKBLDG.
84 NAMDAEMUN-RO JUNG-GU
SEOUL, SOUTH KOREA
ACCOUNT NAME: MING ZOEN LEE
Did you authorize him to claim the approved fund of US$4.5M on your behalf? We need your urgent response because your file had a problem due to the petition he filed claiming to be your Attorney. He said that you have handed him the ownership of this approved fund of US$4.5M and he is ready to pay all the charges that are required for the immediate transfer of the fund to the above stated bank account. We need to be sure before the Remittance Department of First State Bank, New York kicks off the transfer to the provided account details. Due to the rush in filing the claim, Management is suspicious, that is the reason we need your urgent reply before the transfer can be finally made as requested by Mr. Robert Redding.
Also note that it is our duty to protect our customers so we need to verify before the transfer can be made to the forwarded bank account given to us by Mr. Robert. To this effect, we have contacted you to know if you are aware of this new arrangement to avoid fund diversion to a wrong account and also that we are not held liable for aiding and abetting fund diversion at the end of transfer.
Do confirm to us immediately if you authorized him to do so? But if you are not aware of the arrangement, First State Bank, New York needs POWER OF ATTORNEY CERTIFICATE from the Justice Department in order to carry out the transfer. Because in this circumstance, the POWER OF ATTORNEY CERTIFICATE is the only certified legal document you need to receive the payment of the US4.5M in your account from First State Bank, New York.
Finally, do furnish us with your direct telephone number(s), how you want to receive the fund and a copy of your Personal Identification.
Treat as very important and urgent.
Sincerely,
Mr. Lewis Jerome
Credit Dept.
First State Bank
New York, USA
Delivered-To:
Received: from
by with LMTP
id vqxwOJQ+p18mWwAAibB4EA
(envelope-from <3aj6nXw8JCoclmmp934p0spyCCDrxltw.nzxlmlyyt34p23sz7mzl4tt.nzx@trix.bounces.google.com>)
for <>; Sun, 08 Nov 2020 00:40:52 +0000
Return-path: <3aj6nXw8JCoclmmp934p0spyCCDrxltw.nzxlmlyyt34p23sz7mzl4tt.nzx@trix.bounces.google.com>
Envelope-to:
Delivery-date: Sun, 08 Nov 2020 00:40:52 +0000
Received: from mail-qv1-f69.google.com ([209.85.219.69]:36091)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <3aj6nXw8JCoclmmp934p0spyCCDrxltw.nzxlmlyyt34p23sz7mzl4tt.nzx@trix.bounces.google.com>)
id 1kbYlH-000644-VT
for ; Sun, 08 Nov 2020 00:40:52 +0000
Received: by mail-qv1-f69.google.com with SMTP id a1so3194158qvj.3
for <>; Sat, 07 Nov 2020 16:40:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id
subject:from:to;bh=0CEjS37uK8Xt625bURd+S06ebGOzcz7juY5T2194GwA=;
b=oqrDEXeagSoYI1lqw0KQIU05d3Bf35NFV4rfsqoT8nk9iszosLQbcgkeCu8RTs/Oj7
qdiGvLtw+W+XLU6c04vd2qRT9Qq33GGYNycsBTOwdUaNkTCnplZ2pVDw1SkNRwotBcRn
Q/k9Y+bWt0hH6Im4M3PDCUv14ykxgH3Quvy8EvMOsuh/V2D4nqP/0bMaSbYDqZGUFrRu
0Zo5nzKyy9rE+KY+g+OlXqUgMlbxWbdo464FFpoEzdHwi1QFARvNCSoN/GVW3MJPnGEK
8Er28a0n5nDwAqIfwXyPtvCejWguw9wJsusmejeLJ4RXPdYVQWwdO3kww80Dl8nwcphQ
n2iA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-id
subject:from:to;
bh=0CEjS37uK8Xt625bURd+S06ebGOzcz7juY5T2194GwA=;
b=MDzo91K27YunR8VcvtFXI6qsq1EoNTv3GFbi04e4MX/QpA9cmD96u9wjcn2irpvOLi
STLHdZdXN7s1GPyufaDcmX5+Q00QeuQluRp+oL5Mh+bpwg1Dxqiim60b6wbpXOAMLp28
Lae+GM570us+4lB/b+MyvyLRdIbH6Vjmbn9G7fM7M1yQ5QI/xERBH7egnDnDj1kWRKgX
bLVKQ+PWh59z2DfJFXPqdZ8wR25SaAgNDuuf4ksDkjJRT5RNrc7uaGoHWfgeh/eYJK7J
WYyBHT9/HafZVI73NI59Xru7t36mKwcnlg2nn1kCSZmxWY8lZVhp1M3TnCVdtK9kbWL1
SgWw==
X-Gm-Message-State: AOAM530KOqxzFD5r6NM7GdSVttwBOJgy67cbQJoIz9rS5sMWs/NK49tp
X4S8KMVpP8JaMFaGFp8stuE7YFTH7SDG8dYZxEpL
MIME-Version: 1.0
X-Received: by 2002:a37:aa06:: with SMTP id t6mt8503724qke.39.1604796010947;
Sat, 07 Nov 2020 16:40:10 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Sun, 08 Nov 2020 00:40:11 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="0000000000002e3f0d05b38db024"
X-Spam-Status: Yes, score=11.4
X-Spam-Score: 114
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill in the following form: Untitled form
To fill it in, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link
Content analysis details: (11.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 MILLION_USD BODY: Talks about millions of dollars
0.6 URG_BIZ BODY: Contains urgent matter
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[abbeystephen112[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[abbeystephen112[at]gmail.com]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
1.2 HK_SCAM No description available.
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Read carefully and Revert
From The Desk of: Mr.Lewis Jerome,
Credit/Telex Department,
First State Bank,
12/B13 Kingston Drive,
New York.
PAYMENT NOTICE OF YOUR OUTSTANDING US$4.5M
Endeavor to respond as soon as you receive this notification for proper documentation of the transfer to be done.
The World Bank Bank in association with the Bill & Melinda Gates Foundation (BMGF) have taken notice of your significant and positive contributions to humanity and have in reward consequently approved payment of Four Million Five Hundred Thousand United States Dollars (US$4,500,000.00) in your favor to assist you cushion the effect of the ravaging Corona Virus Pandemic and mandated the First State Bank, New York to carry out immediate remittance of the fund to you. However, there was a sharp follow up from one Mr. Robert Redding who stated that he is your Legal Representative asking us to transfer the fund to the below account that he provided.
ACCOUNT NUMBER 257668-09-100145
KOOKMIN BANK (kb bank),
5TH FL.KOOKLMIN BANKBLDG.
84 NAMDAEMUN-RO JUNG-GU
SEOUL, SOUTH KOREA
ACCOUNT NAME: MING ZOEN LEE
Did you authorize him to claim the approved fund of US$4.5M on your behalf? We need your urgent response because your file had a problem due to the petition he filed claiming to be your Attorney. He said that you have handed him the ownership of this approved fund of US$4.5M and he is ready to pay all the charges that are required for the immediate transfer of the fund to the above stated bank account. We need to be sure before the Remittance Department of First State Bank, New York kicks off the transfer to the provided account details. Due to the rush in filing the claim, Management is suspicious, that is the reason we need your urgent reply before the transfer can be finally made as requested by Mr. Robert Redding.
Also note that it is our duty to protect our customers so we need to verify before the transfer can be made to the forwarded bank account given to us by Mr. Robert. To this effect, we have contacted you to know if you are aware of this new arrangement to avoid fund diversion to a wrong account and also that we are not held liable for aiding and abetting fund diversion at the end of transfer.
Do confirm to us immediately if you authorized him to do so? But if you are not aware of the arrangement, First State Bank, New York needs POWER OF ATTORNEY CERTIFICATE from the Justice Department in order to carry out the transfer. Because in this circumstance, the POWER OF ATTORNEY CERTIFICATE is the only certified legal document you need to receive the payment of the US4.5M in your account from First State Bank, New York.
Finally, do furnish us with your direct telephone number(s), how you want to receive the fund and a copy of your Personal Identification.
Treat as very important and urgent.
Sincerely,
Mr. Lewis Jerome
Credit Dept.
First State Bank
New York, USA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
