#399926 by buried under 419s
Fri Nov 08, 2019 9:58 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id YDIqDJErxV2UPAAAjbubUg
for >; Fri, 08 Nov 2019 00:47:13 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Nov 2019 00:47:13 -0800
Received: from bizmail.microhost.com ([103.209.144.112]:60114)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1iSzvA-00041R-67
for Fri, 08 Nov 2019 00:47:13 -0800
Received: from User (UnknownHost [204.101.4.42]) by bizmail.microhost.com with SMTP;
Fri, 8 Nov 2019 08:45:11 +0530
Reply-To: <[email protected]>
From: "JP CHASE BANK"<[email protected]>
Date: Fri, 8 Nov 2019 09:45:11 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=48.3
X-Spam-Score: 483
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: International Deposit Management Center 4900 Memorial Hwy,
Tampa, FL 33634, United States. Dear Beneficiary, This is to notify you about
the credit alert valued $11,500,000 intending to be credited to your bank
account from World Bank. The said amount is under review before final crediting
into your personal bank account. [...]
Content analysis details: (48.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
3.3 NSL_RCVD_FROM_USER Received from User
3.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[204.101.4.42 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?204.101.4.42>]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 MISSING_MID Missing Message-Id: header
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.7 FROM_MISSP_USER From misspaced, from "User"
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.7 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 FROM_MISSPACED From: missing whitespace
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.2 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Credit alert notification
International Deposit Management Center
4900 Memorial Hwy,
Tampa, FL 33634,
United States.
Dear Beneficiary,
This is to notify you about the credit alert valued $11,500,000 intending to be
credited to your bank account from World Bank. The said amount is under review
before final crediting into your personal bank account.
As you are aware, The Bank Secrecy Act of 1970 (or BSA, or otherwise known as the
Currency and Foreign Transactions Reporting Act) requires financial institutions to
assist the government agencies to detect and prevent money laundering. Specifically,
the act requires financial institutions to keep records of cash purchases of
negotiable instruments, and file reports of cash purchases of these negotiable
instruments of more than $10,000 (daily aggregate amount), and to report suspicious
activity that might signify money laundering, tax evasion, or other criminal
activities.
Having said this, we have every reason to believe that you are involve into money
laundering or criminal activities due to the amount transferred to your account. I
am entitled to report this transaction to the U.S Government. However, i will not do
that because from your record there is no traces of money laundering or criminal
activities. I can only ask you to provide the fund origin certificate before the
final crediting into your account.
I want to help you if you are willing to help yourself and nobody must know about my
involvement by trying to assist you. Secondly, you must not ask anybody from your
branch or notify anyone about this until the fund gets to your account. If you try
to play smart by asking questions or notifying anyone, i will have no option than to
report the transaction to the Government and i believe you know the consequences.
All is required is to get letter approval of credit from the Federal Reserve and
your fund will be credited to your account without questioning by any authority and
i will not report the transaction to the Government.
I need you to get back to me immediately for further details on how to get the
approval and ensure the fund is released to you.
Your immediate co-operation is highly recommended.
Sincerely,
Rohan Amin, Ph.D.
Chief Information Officer.
Delivered-To:
Received: from
by with LMTP id YDIqDJErxV2UPAAAjbubUg
for >; Fri, 08 Nov 2019 00:47:13 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Nov 2019 00:47:13 -0800
Received: from bizmail.microhost.com ([103.209.144.112]:60114)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1iSzvA-00041R-67
for Fri, 08 Nov 2019 00:47:13 -0800
Received: from User (UnknownHost [204.101.4.42]) by bizmail.microhost.com with SMTP;
Fri, 8 Nov 2019 08:45:11 +0530
Reply-To: <[email protected]>
From: "JP CHASE BANK"<[email protected]>
Date: Fri, 8 Nov 2019 09:45:11 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=48.3
X-Spam-Score: 483
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: International Deposit Management Center 4900 Memorial Hwy,
Tampa, FL 33634, United States. Dear Beneficiary, This is to notify you about
the credit alert valued $11,500,000 intending to be credited to your bank
account from World Bank. The said amount is under review before final crediting
into your personal bank account. [...]
Content analysis details: (48.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.2 DEAR_BENEFICIARY BODY: Dear Beneficiary:
3.3 NSL_RCVD_FROM_USER Received from User
3.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[204.101.4.42 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?204.101.4.42>]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.1 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 MISSING_MID Missing Message-Id: header
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.7 FROM_MISSP_USER From misspaced, from "User"
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.7 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 FROM_MISSPACED From: missing whitespace
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.2 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Credit alert notification
International Deposit Management Center
4900 Memorial Hwy,
Tampa, FL 33634,
United States.
Dear Beneficiary,
This is to notify you about the credit alert valued $11,500,000 intending to be
credited to your bank account from World Bank. The said amount is under review
before final crediting into your personal bank account.
As you are aware, The Bank Secrecy Act of 1970 (or BSA, or otherwise known as the
Currency and Foreign Transactions Reporting Act) requires financial institutions to
assist the government agencies to detect and prevent money laundering. Specifically,
the act requires financial institutions to keep records of cash purchases of
negotiable instruments, and file reports of cash purchases of these negotiable
instruments of more than $10,000 (daily aggregate amount), and to report suspicious
activity that might signify money laundering, tax evasion, or other criminal
activities.
Having said this, we have every reason to believe that you are involve into money
laundering or criminal activities due to the amount transferred to your account. I
am entitled to report this transaction to the U.S Government. However, i will not do
that because from your record there is no traces of money laundering or criminal
activities. I can only ask you to provide the fund origin certificate before the
final crediting into your account.
I want to help you if you are willing to help yourself and nobody must know about my
involvement by trying to assist you. Secondly, you must not ask anybody from your
branch or notify anyone about this until the fund gets to your account. If you try
to play smart by asking questions or notifying anyone, i will have no option than to
report the transaction to the Government and i believe you know the consequences.
All is required is to get letter approval of credit from the Federal Reserve and
your fund will be credited to your account without questioning by any authority and
i will not report the transaction to the Government.
I need you to get back to me immediately for further details on how to get the
approval and ensure the fund is released to you.
Your immediate co-operation is highly recommended.
Sincerely,
Rohan Amin, Ph.D.
Chief Information Officer.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces