[email protected] Nathan Sheets

[buried under 419s]

X-Spam-Flag: YES
X-Envelope-From: [email protected]
Return-Path: <[email protected]>
Received: from dlx36356.fm.netbenefit.co.uk (pop.egypt.travel [217.198.101.117])
by mail241c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id v0QKJ5of023670
for <>; Thu, 26 Jan 2017 15:19:13 -0500
Received: from [162.251.99.32] (helo=User)
by dlx36356.fm.netbenefit.co.uk with esmtpa (Exim 4.76)
(envelope-from <[email protected]>)
id 1cWqUL-0002j2-Et; Thu, 26 Jan 2017 20:17:45 +0000
Reply-To: <[email protected]>
From: "Nathan Sheets"<[email protected]>
Date: Thu, 26 Jan 2017 14:18:12 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Flag: YES
X-Spam-Flag: YES
X-Spam-Score: 42.6 (++++++++++++++++++++++++++++++++++++++++++)
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Dear Beneficiary, I am Nathan Sheets, Under Secretary for
International Affairs, the U.S. Department of the Treasury. You can get more
details about me here; https://www.treasury.gov/about/organiza ... fairs.aspx
[...]

Content analysis details: (42.6 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/Dns ... nsbl-block
for more information.
[URIs: treasury.gov]
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.7 NSL_RCVD_HELO_USER Received from HELO User
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.2 MISSING_HEADERS Missing To: header
0.7 MILLION_USD BODY: Talks about millions of dollars
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
2.7 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 FSL_NEW_HELO_USER Spam's using Helo and User
4.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
1.5 MONEY_FORM Lots of money if you fill out a form
1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.1 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: *****SPAM***** *** SPAM *** PAYMENT NOTIFICATION!!!
To: undisclosed-recipients:;
X-CTCH-Spam: Bulk
X-CTCH-VOD: Unknown
X-CTCH-RefID: str=0001.0A020205.588A59C1.0183,ss=3,re=9.998,recu=0.000,reip=0.000,cl=3,cld=1,fgs=0
X-CSC: 100
X-CHA: v=2.2 cv=Yq9/f8QX c=1 sm=1 tr=0 p=Lf99xTEwFGQA:10
p=kMrmjfwuZSiJRI1p2JYA:9 a=nga0pI8//dOCDFnsgzCF5g==:117
a=nga0pI8//dOCDFnsgzCF5g==:17 a=9cW_t1CCXrUA:10 a=Dyoqhi_TatcA:10
a=Cfj4BQAnxiAA:10 a=IgFoBzBjUZAA:10 a=Me1z1KfGAAAA:8 a=nCKA93-zsLBcbCln:21
a=9fuUIobrrtRnzcfG:21 a=Ft8UYL4EG9YA:10 a=WZWa8FJV32QA:10
a=pcT6G2aY6HYnC1fInQuV:22
Received-SPF: softfail (mail241c28: transitioning domain of info.com does not designate 217.198.101.117 as permitted sender) client-ip=217.198.101.117; envelope-from=[email protected];
X-WHL: LR



Dear Beneficiary,

I am Nathan Sheets, Under Secretary for International Affairs, the U.S. Department of the Treasury. You can get more details about me here;

https://www.treasury.gov/about/organiza ... fairs.aspx

I have been saddled with the responsibility of liaising with beneficiaries regarding all previously unpaid/unclaimed funds and be sure all such funds are paid before the end of the fiscal year 2017. Disbursement of all funds have recently just commenced.

An agreement was recently reached between the Treasury Department and International Monetary Fund for us to settle all outstanding payments accrued to individuals/corporations with respect to local and overseas contract payment, debt re-scheduling and outstanding compensation payment. Fortunately, you have been selected alongside a few other beneficiaries to receive your own payment of $2,850,000 (Two Million Eight Hundred and Fifty Thousand United States Dollars only).

We have been notified that you are yet to receive your fund valued at $2,850,000. This money will hence be transferred to your nominated bank account.

You are advised to kindly reply this email with the below details enclosed to help us process your payment;

(1) Full Names:
(2) Residential Address:
(3) Age:
(4) Phone/Cell Number:
(5) Occupation:

Yours faithfully,

Nathan Sheets
Under Secretary for International Affairs (U.S. Department of the Treasury) A
Note: The information contained in this e-mail is private & confidential and may also be legally privileged. If you are not the intended recipient, please notify us, preferably by e-mail, and do not read, copy or disclose the contents of this message to anyone.