#330281 by buried under 419s
Thu Jun 08, 2017 11:49 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 08 Jun 2017 18:13:40 -0700
Received: from mail.lojaspompeia.com.br ([200.228.186.130]:53679 helo=lpsmg.lojaspompeia.com.br)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dJ8UY-0001lR-GX
for ; Thu, 08 Jun 2017 18:13:40 -0700
X-AuditID: c8e4ba82-c31ff70000002f60-f5-5939f045a181
Received: from User (static-ip-adsl-190.186.50.46.cotas.com.bo [190.186.50.46])
by lpsmg.lojaspompeia.com.br (Symantec Messaging Gateway) with SMTP id 0D.F3.12128.640F9395; Thu, 8 Jun 2017 21:48:19 -0300 (BRT)
To: undisclosed-recipients:;
Reply-To: <[email protected]>
Message-ID: <[email protected]>
From: "MS MARY WILLIAMS & MR EDWARD CLEFF"<[email protected]>
Date: Thu, 8 Jun 2017 20:48:15 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Brightmail-Tracker: H4sIAAAAAAAAA02SbUxTZxiG977nnJ5Ds8ZjZdmLH3M2/vADGWsWfYwGjcbkSJZp1EQxRj3T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X-Spam-Status: Yes, score=40.1
X-Spam-Score: 401
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary. Sir/Madam, This is to inform you that
after a board meeting with IMF Director Ms. Christine Lagarde, Managing Director
of the International Monetary Fund (IMF) and FBI including the United States
Government we have concluding the processed of transferring your (US$9.7M)
once the details requested below have been forwarded to us',Did you sign
any Deed of Assignment in favor of (TOM BROWN) Thereby making him the current
beneficiary with his following account details? [...]
Content analysis details: (40.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.4 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.7 MILLION_USD BODY: Talks about millions of dollars
1.0 NSL_RCVD_FROM_USER Received from User
1.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[200.228.186.130 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?190.186.50.46>]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[200.228.186.130 listed in bb.barracudacentral.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
2.9 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FROM_MISSP_PHISH Malformed, claims to be from financial organization
- possible phish
1.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.8 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** TRANSFER OF $9.7M DOLLARS....Reply
Attention: Beneficiary. Sir/Madam,
This is to inform you that after a board meeting with IMF Director Ms. Christine
Lagarde, Managing Director of the International Monetary Fund (IMF) and FBI
including the United States Government we have concluding the processed of
transferring your (US$9.7M) once the details requested below have been forwarded to
us',Did you sign any Deed of Assignment in favor of (TOM BROWN) Thereby making him
the current beneficiary with his following account details?
MR TOM BROWN,
AC/NUMBER: 6503809428.
ROUTING/122006743,
B/NAME: CITI BANK,
ADDRESS: NEW YORK, USA,
We shall proceed to issue all payments details to the said Mr. TOM BROWN, if we do
not hear from you within the next two working days from today.Your file appears in
arrived on my desk two days ago Through the IMF office stating that you are among
the list of people approved to be paid half of their part payment of Nine million,
seven Hundred thousand Dollars ($9.7Million USD). Signed by World Bank Nigeria and
the new president of federal republic of Nigeria On behalf of IMF to release this
$9.7m to you with immediate effect.
1) Your full name.
2) Contact Address
3) Phone, fax and mobile #.
4) Age.
5) Occupation.
6) Your bank details
Listen if you are interested to claim your funds $9.7m provide above information to
enable us start processing all the necessary legal transferring documents for
immediate transferring your funds to you without any more delay.
Thanks
YOURS TRULY
MS MARY WILLIAMS & MR EDWARD CLEFF
DIRECTOR OF PAYMENT/ SPECIAL DUTIES
WORLD BANK AUDITORS
Office Hot Line Tel : +234-12952920 OR Mobile Number Tel :+234-8022983818
Envelope-to:
Delivery-date: Thu, 08 Jun 2017 18:13:40 -0700
Received: from mail.lojaspompeia.com.br ([200.228.186.130]:53679 helo=lpsmg.lojaspompeia.com.br)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dJ8UY-0001lR-GX
for ; Thu, 08 Jun 2017 18:13:40 -0700
X-AuditID: c8e4ba82-c31ff70000002f60-f5-5939f045a181
Received: from User (static-ip-adsl-190.186.50.46.cotas.com.bo [190.186.50.46])
by lpsmg.lojaspompeia.com.br (Symantec Messaging Gateway) with SMTP id 0D.F3.12128.640F9395; Thu, 8 Jun 2017 21:48:19 -0300 (BRT)
To: undisclosed-recipients:;
Reply-To: <[email protected]>
Message-ID: <[email protected]>
From: "MS MARY WILLIAMS & MR EDWARD CLEFF"<[email protected]>
Date: Thu, 8 Jun 2017 20:48:15 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Brightmail-Tracker: H4sIAAAAAAAAA02SbUxTZxiG977nnJ5Ds8ZjZdmLH3M2/vADGWsWfYwGjcbkSJZp1EQxRj3T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X-Spam-Status: Yes, score=40.1
X-Spam-Score: 401
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary. Sir/Madam, This is to inform you that
after a board meeting with IMF Director Ms. Christine Lagarde, Managing Director
of the International Monetary Fund (IMF) and FBI including the United States
Government we have concluding the processed of transferring your (US$9.7M)
once the details requested below have been forwarded to us',Did you sign
any Deed of Assignment in favor of (TOM BROWN) Thereby making him the current
beneficiary with his following account details? [...]
Content analysis details: (40.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.4 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.7 MILLION_USD BODY: Talks about millions of dollars
1.0 NSL_RCVD_FROM_USER Received from User
1.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[200.228.186.130 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?190.186.50.46>]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[200.228.186.130 listed in bb.barracudacentral.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
2.9 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FROM_MISSP_PHISH Malformed, claims to be from financial organization
- possible phish
1.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.8 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** TRANSFER OF $9.7M DOLLARS....Reply
Attention: Beneficiary. Sir/Madam,
This is to inform you that after a board meeting with IMF Director Ms. Christine
Lagarde, Managing Director of the International Monetary Fund (IMF) and FBI
including the United States Government we have concluding the processed of
transferring your (US$9.7M) once the details requested below have been forwarded to
us',Did you sign any Deed of Assignment in favor of (TOM BROWN) Thereby making him
the current beneficiary with his following account details?
MR TOM BROWN,
AC/NUMBER: 6503809428.
ROUTING/122006743,
B/NAME: CITI BANK,
ADDRESS: NEW YORK, USA,
We shall proceed to issue all payments details to the said Mr. TOM BROWN, if we do
not hear from you within the next two working days from today.Your file appears in
arrived on my desk two days ago Through the IMF office stating that you are among
the list of people approved to be paid half of their part payment of Nine million,
seven Hundred thousand Dollars ($9.7Million USD). Signed by World Bank Nigeria and
the new president of federal republic of Nigeria On behalf of IMF to release this
$9.7m to you with immediate effect.
1) Your full name.
2) Contact Address
3) Phone, fax and mobile #.
4) Age.
5) Occupation.
6) Your bank details
Listen if you are interested to claim your funds $9.7m provide above information to
enable us start processing all the necessary legal transferring documents for
immediate transferring your funds to you without any more delay.
Thanks
YOURS TRULY
MS MARY WILLIAMS & MR EDWARD CLEFF
DIRECTOR OF PAYMENT/ SPECIAL DUTIES
WORLD BANK AUDITORS
Office Hot Line Tel : +234-12952920 OR Mobile Number Tel :+234-8022983818
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces