#362489 by buried under 419s
Thu Apr 19, 2018 1:03 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 18 Apr 2018 21:04:07 -0700
Received: from [66.172.255.181] (port=61727 helo=mail.kbtransportation.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1f90ni-0007Td-0L
for ; Wed, 18 Apr 2018 21:04:07 -0700
Received: from User ([10.0.6.254])
by mail.kbtransportation.com (KB Mail Server) with SMTP id 201804182301513042;
Wed, 18 Apr 2018 23:01:51 -0500
Reply-To: <[email protected]>
From: "United States Investigations Services (USIS)"<[email protected]>
Date: Thu, 19 Apr 2018 06:02:23 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=39.1
X-Spam-Score: 391
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: United States Investigations Services (USIS) 7799 Leesburg
Pike Suite 1100 North Falls Church, VA 22043 Compliment of The Day, READ
CAREFULLY [...]
Content analysis details: (39.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.9 HK_SCAM_N8 BODY: No description available.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(barristerhenryjlaurens011[at]gmail.com)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[66.172.255.181 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[66.172.255.181 listed in psbl.surriel.com]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[66.172.255.181 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?66.172.255.181>]
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.6 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.9 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** United States Investigations Services (USIS)
United States Investigations Services (USIS)
7799 Leesburg Pike
Suite 1100 North
Falls Church, VA 22043
Compliment of The Day,
READ CAREFULLY
I am Mitch Lawrence the Vice President, Security and Counterintelligence (CI) for
United States Investigations Services (USIS) in alliance with Economic Community of
West African states (ECOWAS) with the head Office in Nigeria. With the help of the
United States government and the United Nation, we have been working towards the
eradication of Internet fraudsters and scam artists around the globe, western part
of Africa to be precise.
However, it has been revealed that there's no fund in your name anywhere in the
world, if you have been receiving e-mails from Banks, Compensation Office, Lottery,
Inheritance funds e.t.c., you're therefore advise to ignore such e-mails they are
impostor/fraudster trying to rip you off your hard earn money and if you're in
communication with any person or office claiming that your funds is with them, we
also advise you to stop/seize further communication and transaction with such person
immediately, they are all liars and thieves. Also you're order to forward such
emails to this office to help aid the arrest of this fraudsters and impostors.
We have been able to track down so many of this scam artist in various part of west
Africa countries which includes (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMERON AND
SENEGAL), they are all in the custody of the Nigeria government, also huge amount of
money was recovered from the scam artists. In reference to this, meeting was held
between the United Nation, United States government and the African Union in Abuja
the federal capital of Nigeria and agreement was reached that scam victims will be
compensated with the money recovered from those scam artist that are in custody of
the Nigeria Economic and Financial Crimes Commission (EFCC) and the United States
Secret Agent (USSA) in Nigeria.
Note this e-mail is been directed to you because during our investigations, your
email address was found in one of the scam Artists file and computer hard disk in
our custody. In reference to this regards, you will be compensated with the sum of
US$6,800,000.00 (Six Million Eight Hundred United State Dollars). Meanwhile, the
Ecowas has requested for an evidence proving that you are a victim of a scam. In
reference to this regards the USIS have appointed a United State base Attorney
(Henry J. Laurens) here in the State to advocate on your behalf and provide the
requested evidence to process the payment approval for your fund to be release to
you.
IMPORTANT NOTICE: The only fee you're to pay to the Attorney is the consultancy fee
$550.00 only for procurment of the legal evidence.
Kindly verify your details to Barrister Henry J. Laurens to enable him process and
secure evidence to aid release of your payment to you, also make sure your details
and residential address are provided correctly to avoid any atom of mistake and
delay during the process.
(1) Your Full Name: ...................
(2) Full Residential Address:..........
(3) Direct Phone Number: ..............
(4) Valid ID Card: ....................
CONTACT PERSON: Barrister Henry J. Laurens
E-MAIL ADDRESS: [email protected]
TEL: +1 (571) 210-3590
As soon as he received your details, the processing to aid the release of your
compensation refund will be facilitated immediately.
Treat as urgent!
Regards.
Mitch Lawrence
Vice President, Security and Counterintelligence
United States Investigations Services (USIS)
=======================================================================================================================================================================
This electronic message transmission is intended only for the use of the party to
which it is addressed, including any attachments and contains Investigations from
United States Investigations Services (USIS), which may be privileged, confidential,
or protected by law. If you are not the intended recipient you are hereby notified
that any dissemination, copying or distribution of this e-mail or its contents is
strictly prohibited. If you have received this message in error, please notify us
immediately by replying to the message and also deleting it from your computer.
Thank you.
========================================================================================================================================================================
Envelope-to:
Delivery-date: Wed, 18 Apr 2018 21:04:07 -0700
Received: from [66.172.255.181] (port=61727 helo=mail.kbtransportation.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1f90ni-0007Td-0L
for ; Wed, 18 Apr 2018 21:04:07 -0700
Received: from User ([10.0.6.254])
by mail.kbtransportation.com (KB Mail Server) with SMTP id 201804182301513042;
Wed, 18 Apr 2018 23:01:51 -0500
Reply-To: <[email protected]>
From: "United States Investigations Services (USIS)"<[email protected]>
Date: Thu, 19 Apr 2018 06:02:23 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=39.1
X-Spam-Score: 391
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: United States Investigations Services (USIS) 7799 Leesburg
Pike Suite 1100 North Falls Church, VA 22043 Compliment of The Day, READ
CAREFULLY [...]
Content analysis details: (39.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.9 HK_SCAM_N8 BODY: No description available.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(barristerhenryjlaurens011[at]gmail.com)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[66.172.255.181 listed in bl.score.senderscore.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[66.172.255.181 listed in psbl.surriel.com]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[66.172.255.181 listed in bl.mailspike.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?66.172.255.181>]
1.0 MISSING_HEADERS Missing To: header
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.6 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.9 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** United States Investigations Services (USIS)
United States Investigations Services (USIS)
7799 Leesburg Pike
Suite 1100 North
Falls Church, VA 22043
Compliment of The Day,
READ CAREFULLY
I am Mitch Lawrence the Vice President, Security and Counterintelligence (CI) for
United States Investigations Services (USIS) in alliance with Economic Community of
West African states (ECOWAS) with the head Office in Nigeria. With the help of the
United States government and the United Nation, we have been working towards the
eradication of Internet fraudsters and scam artists around the globe, western part
of Africa to be precise.
However, it has been revealed that there's no fund in your name anywhere in the
world, if you have been receiving e-mails from Banks, Compensation Office, Lottery,
Inheritance funds e.t.c., you're therefore advise to ignore such e-mails they are
impostor/fraudster trying to rip you off your hard earn money and if you're in
communication with any person or office claiming that your funds is with them, we
also advise you to stop/seize further communication and transaction with such person
immediately, they are all liars and thieves. Also you're order to forward such
emails to this office to help aid the arrest of this fraudsters and impostors.
We have been able to track down so many of this scam artist in various part of west
Africa countries which includes (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMERON AND
SENEGAL), they are all in the custody of the Nigeria government, also huge amount of
money was recovered from the scam artists. In reference to this, meeting was held
between the United Nation, United States government and the African Union in Abuja
the federal capital of Nigeria and agreement was reached that scam victims will be
compensated with the money recovered from those scam artist that are in custody of
the Nigeria Economic and Financial Crimes Commission (EFCC) and the United States
Secret Agent (USSA) in Nigeria.
Note this e-mail is been directed to you because during our investigations, your
email address was found in one of the scam Artists file and computer hard disk in
our custody. In reference to this regards, you will be compensated with the sum of
US$6,800,000.00 (Six Million Eight Hundred United State Dollars). Meanwhile, the
Ecowas has requested for an evidence proving that you are a victim of a scam. In
reference to this regards the USIS have appointed a United State base Attorney
(Henry J. Laurens) here in the State to advocate on your behalf and provide the
requested evidence to process the payment approval for your fund to be release to
you.
IMPORTANT NOTICE: The only fee you're to pay to the Attorney is the consultancy fee
$550.00 only for procurment of the legal evidence.
Kindly verify your details to Barrister Henry J. Laurens to enable him process and
secure evidence to aid release of your payment to you, also make sure your details
and residential address are provided correctly to avoid any atom of mistake and
delay during the process.
(1) Your Full Name: ...................
(2) Full Residential Address:..........
(3) Direct Phone Number: ..............
(4) Valid ID Card: ....................
CONTACT PERSON: Barrister Henry J. Laurens
E-MAIL ADDRESS: [email protected]
TEL: +1 (571) 210-3590
As soon as he received your details, the processing to aid the release of your
compensation refund will be facilitated immediately.
Treat as urgent!
Regards.
Mitch Lawrence
Vice President, Security and Counterintelligence
United States Investigations Services (USIS)
=======================================================================================================================================================================
This electronic message transmission is intended only for the use of the party to
which it is addressed, including any attachments and contains Investigations from
United States Investigations Services (USIS), which may be privileged, confidential,
or protected by law. If you are not the intended recipient you are hereby notified
that any dissemination, copying or distribution of this e-mail or its contents is
strictly prohibited. If you have received this message in error, please notify us
immediately by replying to the message and also deleting it from your computer.
Thank you.
========================================================================================================================================================================
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces