#382103 by buried under 419s
Mon Feb 25, 2019 10:07 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id GCTBOe7Bc1wUeAAAjbubUg
for <>; Mon, 25 Feb 2019 02:22:38 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Feb 2019 02:22:38 -0800
Received: from smtp-4.metronet.cz ([95.85.195.62]:46250 helo=smtp.metronet.cz)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gyDPB-0007zJ-Cz
for ; Mon, 25 Feb 2019 02:22:38 -0800
Received: from User (unknown [95.85.215.253])
by smtp.metronet.cz (Postfix) with SMTP id 1CBDB404FA;
Mon, 25 Feb 2019 11:21:37 +0100 (CET)
Reply-To: <[email protected]>
From: "PACIFIC WESTERN BANK"<[email protected]>
Date: Mon, 25 Feb 2019 11:21:52 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=28.6
X-Spam-Score: 286
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, The sum of $11.5 Million Dollars has been
deposited in our bank under your name. According to the Depositor he said
his name is John Johnson and also a diplomat agent assigned by the United
Nation to deliver the said fund to you. He said he has tried reaching you
several times but you have refused to comply with his directives. I am please
to inform you that your fund is safe and will be release to you through our
online payment system which you will be required to open an online account
with us and account details would be provided to you after to access your
account and conduct transfers. [...]
Content analysis details: (28.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[95.85.215.253 listed in zen.spamhaus.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?95.85.215.253>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.0 FROM_MISSP_PHISH Malformed, claims to be from financial organization
- possible phish
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** FUND DEPOSITED
Dear Beneficiary,
The sum of $11.5 Million Dollars has been deposited in our bank under your name.
According to the Depositor he said his name is John Johnson and also a diplomat
agent assigned by the United Nation to deliver the said fund to you. He said he has
tried reaching you several times but you have refused to comply with his directives.
I am please to inform you that your fund is safe and will be release to you through
our online payment system which you will be required to open an online account with
us and account details would be provided to you after to access your account and
conduct transfers.
You are advised as a matter of urgency to get back to us immediately.
Sincerely,
Kori L. Ogrosky
CORPORATE SECRETARY/INTERNET BANKING
---------------------------------------------------------------------------------------------------------------------------
2019 Pacific Western Bank All Rights Reserved.
****DISCLAIMER: If you are NOT the intended recipient and you receive this message
by mistake either electronically or mechanically, kindly delete it from your list or
notify the Pacific Western Bank by Email:[email protected]
Delivered-To:
Received: from
by with LMTP id GCTBOe7Bc1wUeAAAjbubUg
for <>; Mon, 25 Feb 2019 02:22:38 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Feb 2019 02:22:38 -0800
Received: from smtp-4.metronet.cz ([95.85.195.62]:46250 helo=smtp.metronet.cz)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gyDPB-0007zJ-Cz
for ; Mon, 25 Feb 2019 02:22:38 -0800
Received: from User (unknown [95.85.215.253])
by smtp.metronet.cz (Postfix) with SMTP id 1CBDB404FA;
Mon, 25 Feb 2019 11:21:37 +0100 (CET)
Reply-To: <[email protected]>
From: "PACIFIC WESTERN BANK"<[email protected]>
Date: Mon, 25 Feb 2019 11:21:52 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=28.6
X-Spam-Score: 286
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, The sum of $11.5 Million Dollars has been
deposited in our bank under your name. According to the Depositor he said
his name is John Johnson and also a diplomat agent assigned by the United
Nation to deliver the said fund to you. He said he has tried reaching you
several times but you have refused to comply with his directives. I am please
to inform you that your fund is safe and will be release to you through our
online payment system which you will be required to open an online account
with us and account details would be provided to you after to access your
account and conduct transfers. [...]
Content analysis details: (28.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[95.85.215.253 listed in zen.spamhaus.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?95.85.215.253>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.0 FROM_MISSP_PHISH Malformed, claims to be from financial organization
- possible phish
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** FUND DEPOSITED
Dear Beneficiary,
The sum of $11.5 Million Dollars has been deposited in our bank under your name.
According to the Depositor he said his name is John Johnson and also a diplomat
agent assigned by the United Nation to deliver the said fund to you. He said he has
tried reaching you several times but you have refused to comply with his directives.
I am please to inform you that your fund is safe and will be release to you through
our online payment system which you will be required to open an online account with
us and account details would be provided to you after to access your account and
conduct transfers.
You are advised as a matter of urgency to get back to us immediately.
Sincerely,
Kori L. Ogrosky
CORPORATE SECRETARY/INTERNET BANKING
---------------------------------------------------------------------------------------------------------------------------
2019 Pacific Western Bank All Rights Reserved.
****DISCLAIMER: If you are NOT the intended recipient and you receive this message
by mistake either electronically or mechanically, kindly delete it from your list or
notify the Pacific Western Bank by Email:[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces