
­­­­­­­­­­­­­­­­­­
<!DOCTYPE html>
<html>
Return-Path: <test@SignatureManagement.com>
Delivered-To: crm+spam@autozone.com.sa
Received: from depro4.fcomet.com
	by depro4.fcomet.com with LMTP
	id APp1K/Ric2Th8ggAfHesKA
	(envelope-from <test@SignatureManagement.com>)
	for <crm+spam@autozone.com.sa>; Sun, 28 May 2023 16:19:32 +0200
Return-path: <test@SignatureManagement.com>
Envelope-to: crm@autozone.com.sa
Delivery-date: Sun, 28 May 2023 16:19:32 +0200
Received: from webmail.signaturemanagement.com ([67.220.124.184]:39485)
	by depro4.fcomet.com with esmtps  (TLS1.2) tls TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <test@SignatureManagement.com>)
	id 1q3HF5-002RX2-2z
	for crm@autozone.com.sa;
	Sun, 28 May 2023 16:19:32 +0200
Received: from SM-EXCH.corp.signaturemanagement.com (192.168.6.68) by
 SM-EXCH.corp.signaturemanagement.com (192.168.6.68) with Microsoft SMTP
 Server (TLS) id 15.0.1497.48; Sun, 28 May 2023 10:17:45 -0400
Received: from User (147.78.103.97) by SM-EXCH.corp.signaturemanagement.com
 (192.168.6.68) with Microsoft SMTP Server id 15.0.1497.48 via Frontend
 Transport; Sun, 28 May 2023 10:17:40 -0400
Reply-To: <lorenzobengat@aliyun.com>
From: Lorenzo Bengat <test@signaturemanagement.com>
Date: Sun, 28 May 2023 14:17:49 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <e955c7e5f20a43b28618d3ac911c5d82@SM-EXCH.corp.signaturemanagement.com>
To: Undisclosed recipients:;
X-Spam-Status: Yes, score=17.7
X-Spam-Score: 177
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "depro4.fcomet.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, I'm Dr. Bengat. I wish to urgently confirm from you
    if actually you know one Mrs. Jeanne White who claims to be your business
    associate/partner. Kindly reconfirm this application put in by Mrs. Jeanne
    White - she submitted the under-listed bank account information supposedly
    sent by you to receive the funds on your behalf. 
 Content analysis details:   (17.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 MILLION_USD            BODY: Talks about millions of dollars
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 DATE_IN_FUTURE_06_12   Date: is 6 to 12 hours after Received: date
 -0.0 SPF_PASS               SPF: sender matches SPF record
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [67.220.124.184 listed in psbl.surriel.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 HK_SCAM                No description available.
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  1.8 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.0 XFER_LOTSA_MONEY       Transfer a lot of money
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
                             information
  0.0 MONEY_FORM_SHORT       Lots of money if you fill out a short form
  2.7 UNDISC_MONEY           Undisclosed recipients + money/fraud signs
  0.0 MONEY_FRAUD_3          Lots of money and several fraud phrases
  2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Please Confirm.  

Hello,

I'm Dr. Bengat. I wish to urgently confirm from you if actually you know one Mrs. Jeanne White who claims to be your business associate/partner.

Kindly reconfirm this application put in by Mrs. Jeanne White - she submitted the under-listed bank account information supposedly sent by you to receive the funds on your behalf.

The bank information she applied with are stated thus:

Account Name: Mrs. Jeanne White
Bank name: Citi Bank NA
Bank address: #1230 Arch Street, Philadelphia, PA 19107, USA
Account Number: 013439887655
Routing Number: 2771722
Swift Code: CITIUS30

The said Mrs. Jeanne White is claiming to this office that you are dead and have Instructed that all relevant documentation/Information regarding your Payment/Transfer, be changed to her as the beneficiary of the payment short-listed among the foreign beneficiaries entitled to receive their payment.

For your Information, this Government has approved the total amount of EIGHT MILLION, FIVE HUNDRED THOUSAND UNITED STATES DOLLARS ONLY, in your favor, prior to the Federal Government instructions/mandate to offset all outstanding payments to the various legal foreign beneficiaries. We need to confirm from you if it's really true that you are dead as mentioned by your Associate.

You should note that, if we do not hear from you, we automatically assume that you are actually dead and the information passed to us by Mrs. Jeanne White is correct. Hence, you are hereby requested to reply to this Email immediately for confirmation, before we proceed with this payment and for us to know the true position of things with you so that we won't make any mistakes/errors in remitting your out-standing payment to a wrong person/account.

Lastly, you are advised to reply back to this email and reconfirm the details of this message if truly you're alive.

Full name................................
Direct telephone number.........
Address....................................
Age...........................................

Your quick response will help us a lot ( lorenzobengat@aliyun.com )
 
Yours, Sincerely,
Dr. L. Bengat
