#333648 by buried under 419s
Tue Jul 11, 2017 9:46 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id VCpJFCs8ZVllCwAAjbubUg
for <>; Tue, 11 Jul 2017 13:59:23 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 11 Jul 2017 13:59:23 -0700
Received: from static.126.132.47.78.clients.your-server.de ([78.47.132.126]:49364 helo=b-irema.ru)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dV2Fd-0000kp-0o
for ; Tue, 11 Jul 2017 13:59:23 -0700
Received: from User (24-107-197-237.dhcp.stls.mo.charter.com [24.107.197.237])
by b-irema.ru (Postfix) with ESMTPA id 5C14170155;
Tue, 11 Jul 2017 22:56:15 +0200 (CEST)
Reply-To: <[email protected]>
From: "WALTERS"<[email protected]>
Date: Tue, 11 Jul 2017 20:56:48 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=33.3
X-Spam-Score: 333
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: INTERNATIONAL MONETARY FUNDS AUTHORITY (IMF) INTERNATIONAL
DEBTS SETTLEMENT COMMITTEE 700 19th Street, N.W. Washington, DC 20431 [...]
Content analysis details: (33.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[78.47.132.126 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[78.47.132.126 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[78.47.132.126 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?24.107.197.237>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(anniebettyws1[at]gmail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... .ac.th;ip=]
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 FROM_MISSP_SPF_FAIL No description available.
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Reply urgent
INTERNATIONAL MONETARY FUNDS AUTHORITY (IMF)
INTERNATIONAL DEBTS SETTLEMENT COMMITTEE
700 19th Street, N.W. Washington, DC 20431
ATTENTION: BENEFICIARY,
MY NAME IS MADAME ANNIE BETTY WALTERS OF THE INTERNATIONAL MONETARY FUND AUTHORITY
(IMF) I AM CONTACTING YOU HERE IN RESPECT OF YOUR IMPENDING TRANSFER CONTRACT
INHERITANCE FUND THE SUM OF US$10.5MILLION WITH THE CENTRAL BANK OF NIGERIA.
FOLLOWING THE PROTEST OF INTERNATIONAL MONETARY FUND AUTHORITY (IMF) AND FEDERAL
BUREAU OF INVESTIGATION AUTHORITY (FBI) THAT ALL DELAYED BENEFICIARIES FUNDS IN ANY
COUNTRY SHOULD BE RELEASE TO THEM WITH IMMEDIATE EFFECT. I AM HERE TO INFORM YOU
THAT YOUR NAME IS NEXT IN THE LIST OF INTERNATIONAL PAYMENT TRANSFER DEBT TO RECEIVE
YOUR INHERITANCE FUND AND THE WORLD BANK HAS THROUGH THE CENTRAL BANK OF NIGERIA
APPROVE THE SUM OF US$10.5MILLION TO BE PAID TO YOU.
THE FUND IS TO BE TRANSFER TO YOU BY CERTIFY BANK DRAFT WHICH YOU CAN CASH THE FUNDS
IN YOUR BANK ACCOUNT OR DIRECT BANK WIRE TRANSFER INTO ANY OF YOUR DESIGNATED BANK
ACCOUNT OR THROUGH ONLINE BANK TRANSFER OR BY ATM VISA CARD THAT YOU WILL BE USING
TO WITHDRAW FUNDS FROM ANY ATM MACHINE. HOWEVER, TO RECEIVE THIS APPROVED FUND FROM
THE BANK, YOU HAVE TO CONTACT THE BANK URGENTLY ON THE BELOW LISTED CONTACT EMAIL
ADDRESS AND TELEPHONE NUMBERS AFTER READING THIS OFFICIAL MESSAGE.
CONTACT PERSON NAME: REV DR VALENTINE SAMUEL
OFFICE OF THE GOVERNOR DIRECTOR OF REMITTANCE
CENTRAL BANK OF NIGERIA (CBN).
CONTACT EMAIL: [email protected]
IN ADDITION TO THIS, WHEN CONTACTING THE BANK, RECONFIRM YOUR COMPLETE
NAME,TELEPHONE NUMBER, FAX, RESIDENT ADDRESS AND A COPY OF YOUR DRIVER"S LICENSE.
THIS INFORMATION WILL ENHANCE THE BANK TO LOCATE YOUR FILE QUICKLY AND IMMEDIATELY
PROCESS YOUR FUND TRANSFER. YOUR URGENT RESPONSE IS HIGHLY ANTICIPATED. MADAME
CHRISTINE LAGARDE OF THE INTERNATIONAL MONETARY FUND AUTHORITY (IMF)
BEST REGARD
ANNIE BETTY WALTERS
[email protected]
Delivered-To:
Received: from
by (Dovecot) with LMTP id VCpJFCs8ZVllCwAAjbubUg
for <>; Tue, 11 Jul 2017 13:59:23 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 11 Jul 2017 13:59:23 -0700
Received: from static.126.132.47.78.clients.your-server.de ([78.47.132.126]:49364 helo=b-irema.ru)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dV2Fd-0000kp-0o
for ; Tue, 11 Jul 2017 13:59:23 -0700
Received: from User (24-107-197-237.dhcp.stls.mo.charter.com [24.107.197.237])
by b-irema.ru (Postfix) with ESMTPA id 5C14170155;
Tue, 11 Jul 2017 22:56:15 +0200 (CEST)
Reply-To: <[email protected]>
From: "WALTERS"<[email protected]>
Date: Tue, 11 Jul 2017 20:56:48 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=33.3
X-Spam-Score: 333
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: INTERNATIONAL MONETARY FUNDS AUTHORITY (IMF) INTERNATIONAL
DEBTS SETTLEMENT COMMITTEE 700 19th Street, N.W. Washington, DC 20431 [...]
Content analysis details: (33.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[78.47.132.126 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[78.47.132.126 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[78.47.132.126 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?24.107.197.237>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(anniebettyws1[at]gmail.com)
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... .ac.th;ip=]
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 FROM_MISSP_SPF_FAIL No description available.
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Reply urgent
INTERNATIONAL MONETARY FUNDS AUTHORITY (IMF)
INTERNATIONAL DEBTS SETTLEMENT COMMITTEE
700 19th Street, N.W. Washington, DC 20431
ATTENTION: BENEFICIARY,
MY NAME IS MADAME ANNIE BETTY WALTERS OF THE INTERNATIONAL MONETARY FUND AUTHORITY
(IMF) I AM CONTACTING YOU HERE IN RESPECT OF YOUR IMPENDING TRANSFER CONTRACT
INHERITANCE FUND THE SUM OF US$10.5MILLION WITH THE CENTRAL BANK OF NIGERIA.
FOLLOWING THE PROTEST OF INTERNATIONAL MONETARY FUND AUTHORITY (IMF) AND FEDERAL
BUREAU OF INVESTIGATION AUTHORITY (FBI) THAT ALL DELAYED BENEFICIARIES FUNDS IN ANY
COUNTRY SHOULD BE RELEASE TO THEM WITH IMMEDIATE EFFECT. I AM HERE TO INFORM YOU
THAT YOUR NAME IS NEXT IN THE LIST OF INTERNATIONAL PAYMENT TRANSFER DEBT TO RECEIVE
YOUR INHERITANCE FUND AND THE WORLD BANK HAS THROUGH THE CENTRAL BANK OF NIGERIA
APPROVE THE SUM OF US$10.5MILLION TO BE PAID TO YOU.
THE FUND IS TO BE TRANSFER TO YOU BY CERTIFY BANK DRAFT WHICH YOU CAN CASH THE FUNDS
IN YOUR BANK ACCOUNT OR DIRECT BANK WIRE TRANSFER INTO ANY OF YOUR DESIGNATED BANK
ACCOUNT OR THROUGH ONLINE BANK TRANSFER OR BY ATM VISA CARD THAT YOU WILL BE USING
TO WITHDRAW FUNDS FROM ANY ATM MACHINE. HOWEVER, TO RECEIVE THIS APPROVED FUND FROM
THE BANK, YOU HAVE TO CONTACT THE BANK URGENTLY ON THE BELOW LISTED CONTACT EMAIL
ADDRESS AND TELEPHONE NUMBERS AFTER READING THIS OFFICIAL MESSAGE.
CONTACT PERSON NAME: REV DR VALENTINE SAMUEL
OFFICE OF THE GOVERNOR DIRECTOR OF REMITTANCE
CENTRAL BANK OF NIGERIA (CBN).
CONTACT EMAIL: [email protected]
IN ADDITION TO THIS, WHEN CONTACTING THE BANK, RECONFIRM YOUR COMPLETE
NAME,TELEPHONE NUMBER, FAX, RESIDENT ADDRESS AND A COPY OF YOUR DRIVER"S LICENSE.
THIS INFORMATION WILL ENHANCE THE BANK TO LOCATE YOUR FILE QUICKLY AND IMMEDIATELY
PROCESS YOUR FUND TRANSFER. YOUR URGENT RESPONSE IS HIGHLY ANTICIPATED. MADAME
CHRISTINE LAGARDE OF THE INTERNATIONAL MONETARY FUND AUTHORITY (IMF)
BEST REGARD
ANNIE BETTY WALTERS
[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces