by buried under 419s
Return-Path: <3QH2yXw0JCgk5y5yj0tn05y5Apvjru.lxvjkjwwr12n01qx5kxj2rr.lxv@trix.bounces.google.com>
Delivered-To:
Received: from
by with LMTP
id 6qQmCGt9sl9mKgAAibB4EA
(envelope-from <3QH2yXw0JCgk5y5yj0tn05y5Apvjru.lxvjkjwwr12n01qx5kxj2rr.lxv@trix.bounces.google.com>)
for <[>; Mon, 16 Nov 2020 13:23:55 +0000
Return-path: <3QH2yXw0JCgk5y5yj0tn05y5Apvjru.lxvjkjwwr12n01qx5kxj2rr.lxv@trix.bounces.google.com>
Envelope-to:
Delivery-date: Mon, 16 Nov 2020 13:23:55 +0000
Received: from mail-qv1-f72.google.com ([209.85.219.72]:43089)
by =with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <3QH2yXw0JCgk5y5yj0tn05y5Apvjru.lxvjkjwwr12n01qx5kxj2rr.lxv@trix.bounces.google.com>)
id 1keeU6-0002oQ-BC
for ; Mon, 16 Nov 2020 13:23:55 +0000
Received: by mail-qv1-f72.google.com with SMTP id k5so10596140qvu.10
for <>; Mon, 16 Nov 2020 05:23:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id
subject:from:to;
bh=mVsj8TREjMgB6DQAiV/DXnDKcO1lVK/evAaOKxefPlw=;
b=W/J1TJXa0Qy+3VrHUrKpdc54hZEWEl+y14cp4gVCrbD7fAP9chMn8UjxWh7c7tfs9a
e1XU0PIN0/JrGBy8n5T3eJAtE3kuhPELbUaSJHb0cxfTCiYaANDFIU9VavAuH9nFUypp
5TIOi1Gz71qWacw/ad0MMowytytpGs52wERcGOubWmCnkmrQgzmuwxU4qN3ggHY6Qzgd
fmq8BFItfkjY2+khUFx4lUO8Yc3JfQ2HuDxo1l4hyxiPjslGfcHA/jjSRy37s3rG8NPq
sngM+a7VDOGH0FDjTCP49/fBrLaAAYI+9taIfGpclLpWJ9tDCBJ2jgOeOT1gw622rln4
DevA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-idsubject
:from:to;
bh=mVsj8TREjMgB6DQAiV/DXnDKcO1lVK/evAaOKxefPlw=;
b=Tb6s4xGOlpxY+6FUt9DMjdGwbrt/v4rVEDg37U5eNBSLQGzP12ek2gf8ANrqsnFpME
vaIcAWalkRg0zi1cUC7rSL4xtMTTeNMd8RDCVO5yh4WScMoGJQX+Xa8EOdpi32Og07ML
2IsE7tNchCfgA4C2CCZCj8eLAsyKTXsFasqxJwZLCHvRKPYTMZJRvqObJ6LrGaHMOd4u
koJBfiDHB2EwdJ/xOM5IJp6zjF3mVPmQ0y6IFW+dM/JE1hy5l+qEWprazJVbC2J87VAM
5ciHaqPtS11NtYHAeZkIVRwuGKwwstbq1EXQy46hq8DY0b0i5ZrahFEf0M+oHdRET1S6
JrSw==
X-Gm-Message-State: AOAM5336H1oV/QRdO/weApbNaTmRJQC2NPs8O64pNTXuUFBMiBT6EXtR
up4ID5n54PujWSrIABKSMP1slYqMpxft1LiQJpBL
MIME-Version: 1.0
X-Received: by 2002:ac8:4884:: with SMTP id i4mt14383236qtq.300.1605532992729;
Mon, 16 Nov 2020 05:23:12 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Mon, 16 Nov 2020 13:23:13 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="000000000000bdf01205b4394745"
X-Spam-Status: Yes, score=13.1
X-Spam-Score: 131
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill out the following form: Untitled
form To fill it out, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link
Content analysis details: (13.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[wpwparkerwpw1[at]gmail.com]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[wpwparkerwpw1[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 GOOGLE_DOC_SUSP Suspicious use of Google Docs
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Beneficiary
Heritage Bank Plc.
24 Algiers St, Wuse, Abuja
Nigeria
Phone: +234-901-657-5100
Fax: +234-901-657-544
Attention: Beneficiary
Dear Sir
The Management of the bank based on the mandate reposed on us by the Federal Ministry of Justice via the Central Bank of Nigeria, We write to inform you about our readiness to release your fund to you.
Hence, you are requested to confirm your details as well as indicate the method of payment you would prefer in your next reply. Through ATM card, Bank to Bank transfer, diplomatic cash delivery.
This request has a mandate of 72 hours for you to comply with the directives or it will be deemed you declined the claim.
We have written to you before, we will not hesitate to close your transaction if you fail to comply with our directives
The Management will not hesitate to suspend your transaction if you fail to honor this mail.
Reply to the email: [email protected]
Regards
Dr. Mark Wang
Director Debt Servicing and recovery
Heritage Bank Plc
Delivered-To:
Received: from
by with LMTP
id 6qQmCGt9sl9mKgAAibB4EA
(envelope-from <3QH2yXw0JCgk5y5yj0tn05y5Apvjru.lxvjkjwwr12n01qx5kxj2rr.lxv@trix.bounces.google.com>)
for <[>; Mon, 16 Nov 2020 13:23:55 +0000
Return-path: <3QH2yXw0JCgk5y5yj0tn05y5Apvjru.lxvjkjwwr12n01qx5kxj2rr.lxv@trix.bounces.google.com>
Envelope-to:
Delivery-date: Mon, 16 Nov 2020 13:23:55 +0000
Received: from mail-qv1-f72.google.com ([209.85.219.72]:43089)
by =with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <3QH2yXw0JCgk5y5yj0tn05y5Apvjru.lxvjkjwwr12n01qx5kxj2rr.lxv@trix.bounces.google.com>)
id 1keeU6-0002oQ-BC
for ; Mon, 16 Nov 2020 13:23:55 +0000
Received: by mail-qv1-f72.google.com with SMTP id k5so10596140qvu.10
for <>; Mon, 16 Nov 2020 05:23:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id
subject:from:to;bh=mVsj8TREjMgB6DQAiV/DXnDKcO1lVK/evAaOKxefPlw=;
b=W/J1TJXa0Qy+3VrHUrKpdc54hZEWEl+y14cp4gVCrbD7fAP9chMn8UjxWh7c7tfs9a
e1XU0PIN0/JrGBy8n5T3eJAtE3kuhPELbUaSJHb0cxfTCiYaANDFIU9VavAuH9nFUypp
5TIOi1Gz71qWacw/ad0MMowytytpGs52wERcGOubWmCnkmrQgzmuwxU4qN3ggHY6Qzgd
fmq8BFItfkjY2+khUFx4lUO8Yc3JfQ2HuDxo1l4hyxiPjslGfcHA/jjSRy37s3rG8NPq
sngM+a7VDOGH0FDjTCP49/fBrLaAAYI+9taIfGpclLpWJ9tDCBJ2jgOeOT1gw622rln4
DevA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-id
subject:from:to;
bh=mVsj8TREjMgB6DQAiV/DXnDKcO1lVK/evAaOKxefPlw=;
b=Tb6s4xGOlpxY+6FUt9DMjdGwbrt/v4rVEDg37U5eNBSLQGzP12ek2gf8ANrqsnFpME
vaIcAWalkRg0zi1cUC7rSL4xtMTTeNMd8RDCVO5yh4WScMoGJQX+Xa8EOdpi32Og07ML
2IsE7tNchCfgA4C2CCZCj8eLAsyKTXsFasqxJwZLCHvRKPYTMZJRvqObJ6LrGaHMOd4u
koJBfiDHB2EwdJ/xOM5IJp6zjF3mVPmQ0y6IFW+dM/JE1hy5l+qEWprazJVbC2J87VAM
5ciHaqPtS11NtYHAeZkIVRwuGKwwstbq1EXQy46hq8DY0b0i5ZrahFEf0M+oHdRET1S6
JrSw==
X-Gm-Message-State: AOAM5336H1oV/QRdO/weApbNaTmRJQC2NPs8O64pNTXuUFBMiBT6EXtR
up4ID5n54PujWSrIABKSMP1slYqMpxft1LiQJpBL
MIME-Version: 1.0
X-Received: by 2002:ac8:4884:: with SMTP id i4mt14383236qtq.300.1605532992729;
Mon, 16 Nov 2020 05:23:12 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Mon, 16 Nov 2020 13:23:13 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="000000000000bdf01205b4394745"
X-Spam-Status: Yes, score=13.1
X-Spam-Score: 131
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill out the following form: Untitled
form To fill it out, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link
Content analysis details: (13.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[wpwparkerwpw1[at]gmail.com]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[wpwparkerwpw1[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 GOOGLE_DOC_SUSP Suspicious use of Google Docs
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Beneficiary
Heritage Bank Plc.
24 Algiers St, Wuse, Abuja
Nigeria
Phone: +234-901-657-5100
Fax: +234-901-657-544
Attention: Beneficiary
Dear Sir
The Management of the bank based on the mandate reposed on us by the Federal Ministry of Justice via the Central Bank of Nigeria, We write to inform you about our readiness to release your fund to you.
Hence, you are requested to confirm your details as well as indicate the method of payment you would prefer in your next reply. Through ATM card, Bank to Bank transfer, diplomatic cash delivery.
This request has a mandate of 72 hours for you to comply with the directives or it will be deemed you declined the claim.
We have written to you before, we will not hesitate to close your transaction if you fail to comply with our directives
The Management will not hesitate to suspend your transaction if you fail to honor this mail.
Reply to the email: [email protected]
Regards
Dr. Mark Wang
Director Debt Servicing and recovery
Heritage Bank Plc
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
