#375614 by buried under 419s
Tue Oct 30, 2018 8:42 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id mG29KBai2FvadAAAjbubUg
for <>; Tue, 30 Oct 2018 11:25:26 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 30 Oct 2018 11:25:26 -0700
Received: from esa8.hc49497.c3s2.iphmx.com ([68.232.159.228]:7292)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gHYhf-0007ln-S1
for ; Tue, 30 Oct 2018 11:25:26 -0700
X-IronPort-AV: E=Sophos;i="5.54,445,1534838400";
d="scan'208,217";a="199561816"
Received: from ec2-52-214-94-229.eu-west-1.compute.amazonaws.com (HELO 4efb8f505111.walla.co.il) ([52.214.94.229])
by ob1.hc49497.c3s2.iphmx.com with ESMTP; 30 Oct 2018 10:24:42 -0800
Received: by 4efb8f505111.walla.co.il (Postfix, from userid 33)
id 49E2A8344A; Tue, 30 Oct 2018 18:24:41 +0000 (UTC)
To:
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Provider: walla.mail/v
From: =?UTF-8?B?RGF2aWQgUGFja2Vy?= <[email protected]>
Date: Tue, 30 Oct 2018 20:24:41 +0200
Reply-To: <[email protected]>
Message-Id: <^[email protected]>
X-Spam-Status: Yes, score=20.0
X-Spam-Score: 200
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FBI Investigation Headquarters Washington , D.C.J. Edgar Hoover
Building , 935 Pennsylvania Avenue NW, Washington , D.C. 20535-0001 USA Welcome
to FBI Welcome to FBI.gov FBI Homepage with links to news, services, stories
and information of interest to the public. [...]
Content analysis details: (20.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.1 TVD_APPROVED BODY: Body states that the recipient has been approved
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(maryjohnson32[at]walla.co.il)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(maryjohnson32[at]walla.co.il)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[68.232.159.228 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (maryjohnson32[at]walla.co.il)
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 HK_LOTTO No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?RkJJIElOVkVTVElHQVRJT04gUEFZTUVOVCBBUFBST1ZBTA==?=
FBI Investigation Headquarters Washington , D.C.J. Edgar Hoover Building ,935
Pennsylvania Avenue NW, Washington , D.C. 20535-0001 USAWelcome to FBI Welcome to
FBI.govFBI Homepage with links to news, services, stories and information of
interest to the public.ATTENTION: BENEFICIARYThis e-mail has been issued to you in
order to officially inform youthat we have completed an investigation on an
International Payment inwhich was issued to you by an International Lottery Company,
APPROVED ByWorld Bank. With the help of our newly developed technology
(InternationalMonitoring Network System) we discovered that your e-mail address
wasautomatically selected by an Online Balloting System, this has legallywon you the
sum of $10.5million USD from a Lottery Company inside theUnited States of America.
During our investigation we discovered thatyour e-mail won the money from an Online
Balloting System and we haveauthorized this winning to be paid to you via
INTERNATIONAL CERTIFIEDBANK CHECK, OR BY CASH DELIVERY, Online Banking.Normally, it
will take up to 3 business days for an INTERNATIONALCERTIFIED BANK CHECK by your
local bank. We have successfully notifiedthis company on your behalf that funds are
to be drawn from aregistered bank within the world wiled, so as to enable you cash
thecheck instantly without any delay, henceforth the stated amount of$10.5 million
USD has been deposited with IMF. We have completed thisinvestigation and you are
here by approved to receive the winningprize as we have verified the entire
transaction to be Safe and 100%risk free, due to the fact that the funds have been
deposited with IMFyou will be required to settle the following bills directly to
theLottery Agent in-charge of this transaction whom is located
inWashington,According to our discoveries, you were required to pay forthe
following,(1) Online Banking Fee's $1,500( IMF INTERNATIONAL CLEARANCE CERTIFICATE
)(2) Shipping Fee's $185( This is the charge for shipping the Cashier's Check toyour
home address)The total amount for Shipping is $189.00 We have tried our possiblebest
to indicate that this $189.00 should be deducted from yourwinning prize but we found
out that the funds have already beendeposited IMF and cannot be accessed by anyone
apart from you thewinner, therefore you will be required to pay the required fee's
tothe Agent in-charge of this your transaction In order to proceed withthis
transaction, you will be required to contact the agent in-charge( Mr. Frank Tony )
via e-mail. Kindly look below to find appropriatecontact information:Contact Agent :
Mr. Frank TonyE-Mail: [email protected]
You will be required to e-mail him with the following information:
FULL NAME:ADDRESS:CITY:STATE:ZIP CODE:DIRECT CONTACT NUMBER:OCCUPATION:You will also
be required to request Western Union or Money Gramdetails on how to send the
required $189.00 in order to immediatelyship your prize of $10.5million USD via
INTERNATIONAL CERTIFIED BANKDRAFT from IMF, also include the following transaction
code in orderfor him to immediately identify this transaction: EA2948-910.This
letter will serve as proof that the Federal Bureau ofInvestigation is authorizing
you to pay the required $189.00 ONLY toMr. Frank Tony information in which he shall
send to you,Faithfully Yours,For And On Behalf OfFederal Bureau of InvestigationMr.
James Cole.
Executive Director, Tel: +1 (802)387-0734
E-mail
( [email protected] )
Delivered-To:
Received: from
by with LMTP id mG29KBai2FvadAAAjbubUg
for <>; Tue, 30 Oct 2018 11:25:26 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 30 Oct 2018 11:25:26 -0700
Received: from esa8.hc49497.c3s2.iphmx.com ([68.232.159.228]:7292)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gHYhf-0007ln-S1
for ; Tue, 30 Oct 2018 11:25:26 -0700
X-IronPort-AV: E=Sophos;i="5.54,445,1534838400";
d="scan'208,217";a="199561816"
Received: from ec2-52-214-94-229.eu-west-1.compute.amazonaws.com (HELO 4efb8f505111.walla.co.il) ([52.214.94.229])
by ob1.hc49497.c3s2.iphmx.com with ESMTP; 30 Oct 2018 10:24:42 -0800
Received: by 4efb8f505111.walla.co.il (Postfix, from userid 33)
id 49E2A8344A; Tue, 30 Oct 2018 18:24:41 +0000 (UTC)
To:
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Provider: walla.mail/v
From: =?UTF-8?B?RGF2aWQgUGFja2Vy?= <[email protected]>
Date: Tue, 30 Oct 2018 20:24:41 +0200
Reply-To: <[email protected]>
Message-Id: <^[email protected]>
X-Spam-Status: Yes, score=20.0
X-Spam-Score: 200
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FBI Investigation Headquarters Washington , D.C.J. Edgar Hoover
Building , 935 Pennsylvania Avenue NW, Washington , D.C. 20535-0001 USA Welcome
to FBI Welcome to FBI.gov FBI Homepage with links to news, services, stories
and information of interest to the public. [...]
Content analysis details: (20.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.1 TVD_APPROVED BODY: Body states that the recipient has been approved
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(maryjohnson32[at]walla.co.il)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(maryjohnson32[at]walla.co.il)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[68.232.159.228 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (maryjohnson32[at]walla.co.il)
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 HK_LOTTO No description available.
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?RkJJIElOVkVTVElHQVRJT04gUEFZTUVOVCBBUFBST1ZBTA==?=
FBI Investigation Headquarters Washington , D.C.J. Edgar Hoover Building ,935
Pennsylvania Avenue NW, Washington , D.C. 20535-0001 USAWelcome to FBI Welcome to
FBI.govFBI Homepage with links to news, services, stories and information of
interest to the public.ATTENTION: BENEFICIARYThis e-mail has been issued to you in
order to officially inform youthat we have completed an investigation on an
International Payment inwhich was issued to you by an International Lottery Company,
APPROVED ByWorld Bank. With the help of our newly developed technology
(InternationalMonitoring Network System) we discovered that your e-mail address
wasautomatically selected by an Online Balloting System, this has legallywon you the
sum of $10.5million USD from a Lottery Company inside theUnited States of America.
During our investigation we discovered thatyour e-mail won the money from an Online
Balloting System and we haveauthorized this winning to be paid to you via
INTERNATIONAL CERTIFIEDBANK CHECK, OR BY CASH DELIVERY, Online Banking.Normally, it
will take up to 3 business days for an INTERNATIONALCERTIFIED BANK CHECK by your
local bank. We have successfully notifiedthis company on your behalf that funds are
to be drawn from aregistered bank within the world wiled, so as to enable you cash
thecheck instantly without any delay, henceforth the stated amount of$10.5 million
USD has been deposited with IMF. We have completed thisinvestigation and you are
here by approved to receive the winningprize as we have verified the entire
transaction to be Safe and 100%risk free, due to the fact that the funds have been
deposited with IMFyou will be required to settle the following bills directly to
theLottery Agent in-charge of this transaction whom is located
inWashington,According to our discoveries, you were required to pay forthe
following,(1) Online Banking Fee's $1,500( IMF INTERNATIONAL CLEARANCE CERTIFICATE
)(2) Shipping Fee's $185( This is the charge for shipping the Cashier's Check toyour
home address)The total amount for Shipping is $189.00 We have tried our possiblebest
to indicate that this $189.00 should be deducted from yourwinning prize but we found
out that the funds have already beendeposited IMF and cannot be accessed by anyone
apart from you thewinner, therefore you will be required to pay the required fee's
tothe Agent in-charge of this your transaction In order to proceed withthis
transaction, you will be required to contact the agent in-charge( Mr. Frank Tony )
via e-mail. Kindly look below to find appropriatecontact information:Contact Agent :
Mr. Frank TonyE-Mail: [email protected]
You will be required to e-mail him with the following information:
FULL NAME:ADDRESS:CITY:STATE:ZIP CODE:DIRECT CONTACT NUMBER:OCCUPATION:You will also
be required to request Western Union or Money Gramdetails on how to send the
required $189.00 in order to immediatelyship your prize of $10.5million USD via
INTERNATIONAL CERTIFIED BANKDRAFT from IMF, also include the following transaction
code in orderfor him to immediately identify this transaction: EA2948-910.This
letter will serve as proof that the Federal Bureau ofInvestigation is authorizing
you to pay the required $189.00 ONLY toMr. Frank Tony information in which he shall
send to you,Faithfully Yours,For And On Behalf OfFederal Bureau of InvestigationMr.
James Cole.
Executive Director, Tel: +1 (802)387-0734
( [email protected] )
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces