by buried under 419s
Sat Dec 19, 2020 11:51 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id gMCECSbS3V/nRgAAibB4EA
(envelope-from <[email protected]>)
for <>; Sat, 19 Dec 2020 10:12:54 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 19 Dec 2020 10:12:54 +0000
Received: from mail-oln040092067085.outbound.protection.outlook.com ([40.92.67.85]:9287 helo=EUR02-AM5-obe.outbound.protection.outlook.com)
by \ with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kqZEK-0004iE-Qv
for ; Sat, 19 Dec 2020 10:12:54 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=K7CjMajDaNLWTb/3NXuyys3qUEzfeUVwLbjktSQtLY9LZDT02p/SiJprJ3pQxFcgSosHOtKKkco4NaIymqLuPbCoooD74YlZltOkLNafEBLENp20N6hxIGATo2lCqga8Xg77Ui1GoViIr4iqaQ+m+8ols5yg+WifA0JfyHfdgnf2qh3dJDTolHVaXHoShtta2XvEYZ9dNHZ7DQ0xLybzVNH9ZwnPVaf81CPMiDfNsNE/5S231lCBrfDUCBv/jVe/C2/dbMx7QCehFmJw5bzxn+V/InzWRDBzzWVdiL0K8z2hrEastw/mBptC04SgXPIEboBeawdRsR2FdUsQy74jVw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=MWd0YVQk4diZBrmWo4fChOkcZtV5Y+OuTpvekEDBPSM=;
b=kN+zq6hKXaLop1B14bgBM7r/s7G49oFw33boQi9/FAFT5DY5sI+gmMC+qRucld2Lqvl01Zg2x8RTytN2fy59PNdVZ8kIFNR2DgVm81B1QQ0W795Oy4z6bO20hrdfdvHx+ye8/IZm/xB6pDTvQAZlK/X0Pr/QsST6WKlg+IViOSVCq6LAJ3bck26TYi3aWbtMJdUYmXJaOfoNKT4f1uiWj+bvM2pBeUppfiCeHNMp+19MDJZ8Ld/BeAdejcny85QjFo1MuzTXKlloUkDvmyy54TpVNu+IptjTKFnhRiIn20qUEgdJeNO/HK4exuvd0o5+Dhh4lTGia4xGdpnbC7h1lw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=MWd0YVQk4diZBrmWo4fChOkcZtV5Y+OuTpvekEDBPSM=;
b=i1XKCNQF9Qu8/w5SK6OWpmelo3MkwbIZAUntOBAr6XVhUvhP2BSTmsEKOTq2DaltwKb/IrFu7TD78udoeEsL6HdzxS9OQDxUjwRK/GNUpGv0OmVQYwqIBMS7JzN+0T4zDdhtqkyL27tW5S59ZS6z+b8cuOgeRPtlW1OJsqexWzGet7noNtJHVN/wk1/C1G97zPEl5cfhEOxLhwc83fLuAUT21L3ayGTFbPwUKog5klSovOXEU8mJ05jMRAbBBtZEHd3elM+Q1FfbmyZPNzKjyPj1ZpldvGY+j2O0Fa1v9ObQkmy6fQmADF7tOtl5ovKdWWD/pHdc/w1bIofg19nZ4A==
Received: from AM5EUR02FT018.eop-EUR02.prod.protection.outlook.com
(2a01:111:e400:7e1c::51) by
AM5EUR02HT228.eop-EUR02.prod.protection.outlook.com (2a01:111:e400:7e1c::311)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.22; Sat, 19 Dec
2020 10:12:07 +0000
Received: from AM0PR03MB5074.eurprd03.prod.outlook.com
(2a01:111:e400:7e1c::50) by AM5EUR02FT018.mail.protection.outlook.com
(2a01:111:e400:7e1c::124) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.22 via Frontend
Transport; Sat, 19 Dec 2020 10:12:07 +0000
Received: from AM0PR03MB5074.eurprd03.prod.outlook.com
([fe80::b136:5c32:5c5e:8404]) by AM0PR03MB5074.eurprd03.prod.outlook.com
([fe80::b136:5c32:5c5e:8404%5]) with mapi id 15.20.3676.025; Sat, 19 Dec 2020
10:12:07 +0000
From: Mr.Gordon DAllen <[email protected]>
Thread-Topic: Dear Friend.
Thread-Index: AQHW1e9WmX4pmj5xGUuNMJh+1RoAhg==
Date: Sat, 19 Dec 2020 10:12:07 +0000
Message-ID:
<AM0PR03MB50746408CC89EE97A65E3AA8EAC20@AM0PR03MB5074.eurprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker:
OriginalChecksum:028F68E9CD93A4EF07F50AFB93327F76237947E7697EBC9F020DF12FF7EAA512;UpperCasedChecksum:57D95768E69D58CD0DE79ABD3E60AC4F1B3B97A7CFCA88A4FDB7F2BDEA853F22;SizeAsReceived:11702;Count:40
x-tmn: [cMg5PSJHy2+D/GzzuEGXf+oEcNS1mAIz]
x-ms-publictraffictype: Email
x-incomingheadercount: 40
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 4d9ca301-753f-463d-0981-08d8a4068a9d
x-ms-exchange-slblob-mailprops:
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
x-ms-traffictypediagnostic: AM5EUR02HT228:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
TZWcB009h3Kujp+YLG0/PtCc28vHCrzXp3nOiB81RnYwTnnkxR3TTI0NQViyRzKwc2MDQQA3WVmA6ZD5NHHHxl9wfqAheKUHH3ktfQSDZbosi4e/LdbfYPbDWZoMGxXuDPovEo1KqVs1FdcX++Z5my51pvQOPS+doUBHlzqP4Z+rgr9R2vs7Qni6CWqH7+mpRiFxRP7Z5zcCrlvHFYlXOr3ktRpDY6pPKbJdfcALnNSusj08g5AaulCGpFTNE+OT
x-ms-exchange-antispam-messagedata:
4j1rOWVzASrhF/3j1XIJBfS9LqwGD6HKdYD8gX7XadXHf5YPemJH8v79oCTO2LgiJecKfPoOLqnSe4KMxmJCtRv8j6wCMWIxsCKL488jcR/Ot1oPzKt9f1FyKNQYvtiClT97f/V0a+UOPtK+oeI/Ug==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative;
boundary="_000_AM0PR03MB50746408CC89EE97A65E3AA8EAC20AM0PR03MB5074eurp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-AuthSource: AM5EUR02FT018.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 4d9ca301-753f-463d-0981-08d8a4068a9d
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2020 10:12:07.2293
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR02HT228
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend. How are you over there? I believe you are doing
great and with the hope that this mail will meet you in good condition today.
I am much delighted to reach you again, after all these while, it takes de
[...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mr.gordondallen27[at]hotmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mr.gordondallen27[at]hotmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLY From and body contain different freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Friend.
--_000_AM0PR03MB50746408CC89EE97A65E3AA8EAC20AM0PR03MB5074eurp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Dear Friend.
How are you over there? I believe you are doing great and with the hope that this mail will meet you in good condition today. I am much delighted to reach you again, after all these while, it takes destiny and courage to remember good friends like youand at the same time, show gratitude to you despite unfavourable circumstances that made us separate and disrupted our transaction, which ultimately did not work out as we had projected then.
However, the good news is that I'm happy to inform you about my success in getting the funds transferred with the cooperation of a new partner from West Africa Senegal to be precise. After our successful transaction, I found it as an obligation and humanityto show an appreciation and compensation to your great effort so far before leaving West Africa ( Senegal ) to Paraguay with my partner where we are investing
I have compensated you and show my gratitude to you with the sum of $350,000.00 ( Three Hundred and Fifty Thousand US Dollars ) Please accept this little gift because it is a gift from my heart, I issued the check and I instructed the bank to the rolethe fund on ATM CARD for security reason, you can use the ATM CARD to withdrawing money from any ATM MACHINE worldwide with a maximum of US$ 10,000 daily
The UBA ATM online service has more convenient access to your funds all around the world for dining, shopping, hotel accommodation, entertainment clubs, airports, and sports, providing you with the convenience of online payment and an easier life. Forexample, you can transfer the money from your ATM CARD online account into any nominated bank account of your choice or credit card; your online details will be provided to you upon request after receiving your ATM Card which ATM Alliance Office will sendto your location once This vow I made to myself about compensating you has been in my mind and I want to fulfil it to you though I did not tell you what was in my mind, the bank said that you can receive the card and use it anywhere in the world. your complianceis met contact the
United Bank of Africa ATM Alliance Office directs with this information.
Name: ........... ....... UNITED BANK OF AFRICA-SENEGAL (UBA)
Office Address; ...... Address: Dakar, Route des Almandines, Zone 12 lot DBP: 11.476
Email Address: .... [email protected]
Telephone: ........... Tel: (+221-707939724)
Officer In-charge: Mr Thompson Willams
Ask them to send you the ATM CARD and the PIN CODE OF THE CARD that I gave to you as compensation, So feel free and get in touch with ATM office and instruct them where to send you the ATM CARD so that you can start to withdraw the money
Please do let me know immediately you receive it so that we can share the joy after all the sufferings at that time, at the moment, I am very busy here because of the investment projects which I and my new partner are having at hand because I want to finalizeeverything before the end of the year
I had given instruction to ATM CARD office on your behalf to release the ATM CARD which I gave to you as compensation. Therefore feel free to get in touch with them and they will send the ATM CARD for you to withdraw the money without delay.
Your .........
Delivered-To:
Received: from
by with LMTP
id gMCECSbS3V/nRgAAibB4EA
(envelope-from <[email protected]>)
for <>; Sat, 19 Dec 2020 10:12:54 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 19 Dec 2020 10:12:54 +0000
Received: from mail-oln040092067085.outbound.protection.outlook.com ([40.92.67.85]:9287 helo=EUR02-AM5-obe.outbound.protection.outlook.com)
by \ with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kqZEK-0004iE-Qv
for ; Sat, 19 Dec 2020 10:12:54 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=K7CjMajDaNLWTb/3NXuyys3qUEzfeUVwLbjktSQtLY9LZDT02p/SiJprJ3pQxFcgSosHOtKKkco4NaIymqLuPbCoooD74YlZltOkLNafEBLENp20N6hxIGATo2lCqga8Xg77Ui1GoViIr4iqaQ+m+8ols5yg+WifA0JfyHfdgnf2qh3dJDTolHVaXHoShtta2XvEYZ9dNHZ7DQ0xLybzVNH9ZwnPVaf81CPMiDfNsNE/5S231lCBrfDUCBv/jVe/C2/dbMx7QCehFmJw5bzxn+V/InzWRDBzzWVdiL0K8z2hrEastw/mBptC04SgXPIEboBeawdRsR2FdUsQy74jVw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=MWd0YVQk4diZBrmWo4fChOkcZtV5Y+OuTpvekEDBPSM=;
b=kN+zq6hKXaLop1B14bgBM7r/s7G49oFw33boQi9/FAFT5DY5sI+gmMC+qRucld2Lqvl01Zg2x8RTytN2fy59PNdVZ8kIFNR2DgVm81B1QQ0W795Oy4z6bO20hrdfdvHx+ye8/IZm/xB6pDTvQAZlK/X0Pr/QsST6WKlg+IViOSVCq6LAJ3bck26TYi3aWbtMJdUYmXJaOfoNKT4f1uiWj+bvM2pBeUppfiCeHNMp+19MDJZ8Ld/BeAdejcny85QjFo1MuzTXKlloUkDvmyy54TpVNu+IptjTKFnhRiIn20qUEgdJeNO/HK4exuvd0o5+Dhh4lTGia4xGdpnbC7h1lw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=MWd0YVQk4diZBrmWo4fChOkcZtV5Y+OuTpvekEDBPSM=;
b=i1XKCNQF9Qu8/w5SK6OWpmelo3MkwbIZAUntOBAr6XVhUvhP2BSTmsEKOTq2DaltwKb/IrFu7TD78udoeEsL6HdzxS9OQDxUjwRK/GNUpGv0OmVQYwqIBMS7JzN+0T4zDdhtqkyL27tW5S59ZS6z+b8cuOgeRPtlW1OJsqexWzGet7noNtJHVN/wk1/C1G97zPEl5cfhEOxLhwc83fLuAUT21L3ayGTFbPwUKog5klSovOXEU8mJ05jMRAbBBtZEHd3elM+Q1FfbmyZPNzKjyPj1ZpldvGY+j2O0Fa1v9ObQkmy6fQmADF7tOtl5ovKdWWD/pHdc/w1bIofg19nZ4A==
Received: from AM5EUR02FT018.eop-EUR02.prod.protection.outlook.com
(2a01:111:e400:7e1c::51) by
AM5EUR02HT228.eop-EUR02.prod.protection.outlook.com (2a01:111:e400:7e1c::311)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.22; Sat, 19 Dec
2020 10:12:07 +0000
Received: from AM0PR03MB5074.eurprd03.prod.outlook.com
(2a01:111:e400:7e1c::50) by AM5EUR02FT018.mail.protection.outlook.com
(2a01:111:e400:7e1c::124) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.22 via Frontend
Transport; Sat, 19 Dec 2020 10:12:07 +0000
Received: from AM0PR03MB5074.eurprd03.prod.outlook.com
([fe80::b136:5c32:5c5e:8404]) by AM0PR03MB5074.eurprd03.prod.outlook.com
([fe80::b136:5c32:5c5e:8404%5]) with mapi id 15.20.3676.025; Sat, 19 Dec 2020
10:12:07 +0000
From: Mr.Gordon DAllen <[email protected]>
Thread-Topic: Dear Friend.
Thread-Index: AQHW1e9WmX4pmj5xGUuNMJh+1RoAhg==
Date: Sat, 19 Dec 2020 10:12:07 +0000
Message-ID:
<AM0PR03MB50746408CC89EE97A65E3AA8EAC20@AM0PR03MB5074.eurprd03.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker:
OriginalChecksum:028F68E9CD93A4EF07F50AFB93327F76237947E7697EBC9F020DF12FF7EAA512;UpperCasedChecksum:57D95768E69D58CD0DE79ABD3E60AC4F1B3B97A7CFCA88A4FDB7F2BDEA853F22;SizeAsReceived:11702;Count:40
x-tmn: [cMg5PSJHy2+D/GzzuEGXf+oEcNS1mAIz]
x-ms-publictraffictype: Email
x-incomingheadercount: 40
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 4d9ca301-753f-463d-0981-08d8a4068a9d
x-ms-exchange-slblob-mailprops:
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
x-ms-traffictypediagnostic: AM5EUR02HT228:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
TZWcB009h3Kujp+YLG0/PtCc28vHCrzXp3nOiB81RnYwTnnkxR3TTI0NQViyRzKwc2MDQQA3WVmA6ZD5NHHHxl9wfqAheKUHH3ktfQSDZbosi4e/LdbfYPbDWZoMGxXuDPovEo1KqVs1FdcX++Z5my51pvQOPS+doUBHlzqP4Z+rgr9R2vs7Qni6CWqH7+mpRiFxRP7Z5zcCrlvHFYlXOr3ktRpDY6pPKbJdfcALnNSusj08g5AaulCGpFTNE+OT
x-ms-exchange-antispam-messagedata:
4j1rOWVzASrhF/3j1XIJBfS9LqwGD6HKdYD8gX7XadXHf5YPemJH8v79oCTO2LgiJecKfPoOLqnSe4KMxmJCtRv8j6wCMWIxsCKL488jcR/Ot1oPzKt9f1FyKNQYvtiClT97f/V0a+UOPtK+oeI/Ug==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative;
boundary="_000_AM0PR03MB50746408CC89EE97A65E3AA8EAC20AM0PR03MB5074eurp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-AuthSource: AM5EUR02FT018.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 4d9ca301-753f-463d-0981-08d8a4068a9d
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Dec 2020 10:12:07.2293
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR02HT228
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend. How are you over there? I believe you are doing
great and with the hope that this mail will meet you in good condition today.
I am much delighted to reach you again, after all these while, it takes de
[...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mr.gordondallen27[at]hotmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mr.gordondallen27[at]hotmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLY From and body contain different freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Friend.
--_000_AM0PR03MB50746408CC89EE97A65E3AA8EAC20AM0PR03MB5074eurp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Dear Friend.
How are you over there? I believe you are doing great and with the hope that this mail will meet you in good condition today. I am much delighted to reach you again, after all these while, it takes destiny and courage to remember good friends like youand at the same time, show gratitude to you despite unfavourable circumstances that made us separate and disrupted our transaction, which ultimately did not work out as we had projected then.
However, the good news is that I'm happy to inform you about my success in getting the funds transferred with the cooperation of a new partner from West Africa Senegal to be precise. After our successful transaction, I found it as an obligation and humanityto show an appreciation and compensation to your great effort so far before leaving West Africa ( Senegal ) to Paraguay with my partner where we are investing
I have compensated you and show my gratitude to you with the sum of $350,000.00 ( Three Hundred and Fifty Thousand US Dollars ) Please accept this little gift because it is a gift from my heart, I issued the check and I instructed the bank to the rolethe fund on ATM CARD for security reason, you can use the ATM CARD to withdrawing money from any ATM MACHINE worldwide with a maximum of US$ 10,000 daily
The UBA ATM online service has more convenient access to your funds all around the world for dining, shopping, hotel accommodation, entertainment clubs, airports, and sports, providing you with the convenience of online payment and an easier life. Forexample, you can transfer the money from your ATM CARD online account into any nominated bank account of your choice or credit card; your online details will be provided to you upon request after receiving your ATM Card which ATM Alliance Office will sendto your location once This vow I made to myself about compensating you has been in my mind and I want to fulfil it to you though I did not tell you what was in my mind, the bank said that you can receive the card and use it anywhere in the world. your complianceis met contact the
United Bank of Africa ATM Alliance Office directs with this information.
Name: ........... ....... UNITED BANK OF AFRICA-SENEGAL (UBA)
Office Address; ...... Address: Dakar, Route des Almandines, Zone 12 lot DBP: 11.476
Email Address: .... [email protected]
Telephone: ........... Tel: (+221-707939724)
Officer In-charge: Mr Thompson Willams
Ask them to send you the ATM CARD and the PIN CODE OF THE CARD that I gave to you as compensation, So feel free and get in touch with ATM office and instruct them where to send you the ATM CARD so that you can start to withdraw the money
Please do let me know immediately you receive it so that we can share the joy after all the sufferings at that time, at the moment, I am very busy here because of the investment projects which I and my new partner are having at hand because I want to finalizeeverything before the end of the year
I had given instruction to ATM CARD office on your behalf to release the ATM CARD which I gave to you as compensation. Therefore feel free to get in touch with them and they will send the ATM CARD for you to withdraw the money without delay.
Your .........
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces