#334357 by buried under 419s
Wed Jul 19, 2017 9:28 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 18 Jul 2017 23:01:11 -0700
Received: from [31.14.128.102] (port=47668 helo=www.infinitypeople.it)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dXi2n-0003W1-Lk
for ; Tue, 18 Jul 2017 23:01:11 -0700
Received: from User (unknown [118.103.236.167])
by www.infinitypeople.it (Postfix) with ESMTPA id 41CAE52560D;
Wed, 19 Jul 2017 04:12:15 +0200 (CEST)
Reply-To: <[email protected]>
From: "Mrs. Rose Hills"<[email protected]>
To: [email protected]
Date: Wed, 19 Jul 2017 07:12:15 +0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=27.5
X-Spam-Score: 275
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UNITED NATIONS DEBT SETTLEMENT PANEL. UK REGIONAL OFFICE,
LONDON. [...]
Content analysis details: (27.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[31.14.128.102 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[31.14.128.102 listed in psbl.surriel.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[31.14.128.102 listed in bl.score.senderscore.com]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[31.14.128.102 listed in dnsbl.sorbs.net]
1.6 MISSING_MID Missing Message-Id: header
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT
UNITED NATIONS
DEBT SETTLEMENT PANEL.
UK REGIONAL OFFICE, LONDON.
TELEGRAM: UNLNUK
REF NO: AUTH PMT-UN/IOD/2016/Q1
ATTN:Beneficiary,
RE: VERIFICATION AND APPROVAL OF YOUR PAYMENT FILE.
to all Foreign Contractors and fund beneficiary's, to resolve and immediately
release all outstanding debt through Commonwealth Bank UK Branch.
After the meeting today, we concluded to redeem the good image of UK and African
Countries. Therefore, an outstanding payment of $1,500,000.00USD (one Million five
hundred thousand United States Dollars) has been ordered for each of the affected
victims. This is in accordance to our recommendations.
From the records of outstanding funds due for immediate payment, your
name/particulars were discovered as next on the approved list.Fund has been approved
on your behalf for this first quota of 2017 fiscal year. For your information, we
have assigned Commonwealth Bank UK Branch to handle all related transactions to
avoid further complain from beneficiaries
about incessant taxes, fees etc
My office has received the following information from United Nations Secretary
General Cabinet today as regards to your fund. File No: 790042, United Kingdom
Inspection Cooperation (UKIC) Ref: No#: GNP/3480/02/00, Indemnity clearance No#:
UNB/UKI/V1233/PPC-X29/98, Special Duties Office Approved No#:LM/05/371NGF/010,
United Kingdom National Procurement Corporation (UNNPC) Approve No#:
UNNPC/FMFNG002/CBL/DF101, Payment Ref No#: 111162AP.
Kindly re-confirm the following information immediately to facilitate the issuance
of Final fund release order document on your behalf which will be submitted to
Commonwealth Bank UK for an immediate release of your funds.
1) Your full name:
2) Contact address:
3) Nationality:
4) Phone number :
5) Gender:
6) Age:
As soon as this information is received, your payment will be made to your nominated
bank account directly from Commonwealth Bank UK.
Yours Faithfully
Mrs. Rose Hills
Chairman Committee
Foreign Debt Settlement
United Nations
Regards,
Roger Michael
CO- ORDINATOR
Direct Tel:1(209)2481791
Envelope-to:
Delivery-date: Tue, 18 Jul 2017 23:01:11 -0700
Received: from [31.14.128.102] (port=47668 helo=www.infinitypeople.it)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dXi2n-0003W1-Lk
for ; Tue, 18 Jul 2017 23:01:11 -0700
Received: from User (unknown [118.103.236.167])
by www.infinitypeople.it (Postfix) with ESMTPA id 41CAE52560D;
Wed, 19 Jul 2017 04:12:15 +0200 (CEST)
Reply-To: <[email protected]>
From: "Mrs. Rose Hills"<[email protected]>
To: [email protected]
Date: Wed, 19 Jul 2017 07:12:15 +0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=27.5
X-Spam-Score: 275
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: UNITED NATIONS DEBT SETTLEMENT PANEL. UK REGIONAL OFFICE,
LONDON. [...]
Content analysis details: (27.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[31.14.128.102 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[31.14.128.102 listed in psbl.surriel.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[31.14.128.102 listed in bl.score.senderscore.com]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[31.14.128.102 listed in dnsbl.sorbs.net]
1.6 MISSING_MID Missing Message-Id: header
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT
UNITED NATIONS
DEBT SETTLEMENT PANEL.
UK REGIONAL OFFICE, LONDON.
TELEGRAM: UNLNUK
REF NO: AUTH PMT-UN/IOD/2016/Q1
ATTN:Beneficiary,
RE: VERIFICATION AND APPROVAL OF YOUR PAYMENT FILE.
to all Foreign Contractors and fund beneficiary's, to resolve and immediately
release all outstanding debt through Commonwealth Bank UK Branch.
After the meeting today, we concluded to redeem the good image of UK and African
Countries. Therefore, an outstanding payment of $1,500,000.00USD (one Million five
hundred thousand United States Dollars) has been ordered for each of the affected
victims. This is in accordance to our recommendations.
From the records of outstanding funds due for immediate payment, your
name/particulars were discovered as next on the approved list.Fund has been approved
on your behalf for this first quota of 2017 fiscal year. For your information, we
have assigned Commonwealth Bank UK Branch to handle all related transactions to
avoid further complain from beneficiaries
about incessant taxes, fees etc
My office has received the following information from United Nations Secretary
General Cabinet today as regards to your fund. File No: 790042, United Kingdom
Inspection Cooperation (UKIC) Ref: No#: GNP/3480/02/00, Indemnity clearance No#:
UNB/UKI/V1233/PPC-X29/98, Special Duties Office Approved No#:LM/05/371NGF/010,
United Kingdom National Procurement Corporation (UNNPC) Approve No#:
UNNPC/FMFNG002/CBL/DF101, Payment Ref No#: 111162AP.
Kindly re-confirm the following information immediately to facilitate the issuance
of Final fund release order document on your behalf which will be submitted to
Commonwealth Bank UK for an immediate release of your funds.
1) Your full name:
2) Contact address:
3) Nationality:
4) Phone number :
5) Gender:
6) Age:
As soon as this information is received, your payment will be made to your nominated
bank account directly from Commonwealth Bank UK.
Yours Faithfully
Mrs. Rose Hills
Chairman Committee
Foreign Debt Settlement
United Nations
Regards,
Roger Michael
CO- ORDINATOR
Direct Tel:1(209)2481791
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces