Return-path: <
[email protected]>
Envelope-to:
Delivery-date: Mon, 08 Jan 2018 07:06:09 -0800
Received: from [192.146.140.43] (port=60576 helo=mail.gpnbonus.ru)
by with esmtp (Exim 4.89)
(envelope-from <
[email protected]>)
id 1eYZ02-00041p-Db
for ; Mon, 08 Jan 2018 07:06:09 -0800
Received: from localhost (localhost [127.0.0.1])
by mail.gpnbonus.ru (iRedMail) with ESMTP id B24133368E3;
Mon, 8 Jan 2018 18:03:29 +0300 (MSK)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=host.ru; h=to
:message-id:x-mailer:content-transfer-encoding:content-type
:mime-version
subject:from:reply-to:x-virus-scanned; s=
dkim; t=1515423809; x=1516287809; bh=wBKj/2CbtRiNH3Fip+drf/8hZIa
FNpI0NXihITFc5nQ=; b=n0g+GFEEO+dp7AObAmR4Xlr/39w3MLS0bH7I5RZ6Cqo
20JOcifbALEbOcHCAEqCwLka3y9I3TOdI2oP8xLTi/ctq9lpAntgbKvkr3XZmt6X
yDkKsqg6O/jou42T0DKwLoeltA1fwJd3XmkRhgLgxs3cmXSKl+15YHza0ZgTCyLw
=
X-Virus-Scanned: Debian amavisd-new at host.ru.ru
Received: from mail.gpnbonus.ru ([127.0.0.1])
by localhost (host.ru.ru [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id UX4G7j74Kygc; Mon, 8 Jan 2018 18:03:29 +0300 (MSK)
Received: from User (unknown [41.138.91.170])
by mail.gpnbonus.ru (iRedMail) with ESMTPA id E5BA93368CA;
Mon, 8 Jan 2018 18:02:31 +0300 (MSK)
Reply-To: <
[email protected]>
From: "payment alert"<
[email protected]>
Date: Mon, 8 Jan 2018 16:03:28 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <
[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=45.6
X-Spam-Score: 456
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: APPROVAL OF YOUR OVERDUE LONG AWAITED FUND PAYMENT. Attn:
Beneficiary, Congratulations and this is to finally inform you today that
approval of your fund has been successfully issued in the name of One (Mrs.Tina
Sanchez) for the final transfer of your long awaited overdue inheritance
fund after the just concluded meeting which lasted for 5hour with her as part
of our compensation for all Scam victims with the sum of $5,000,000.00 (FIVE
Million United State Dollars Only) approved as part of the World Bank, mass
assisted project funds. [...]
Content analysis details: (45.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.0 MILLION_USD BODY: Talks about millions of dollars
0.6 HK_SCAM_N2 BODY: No description available.
0.6 URG_BIZ BODY: Contains urgent matter
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[192.146.140.43 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[192.146.140.43 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <
http://www.spamcop.net/bl.shtml?192.146.140.43>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.4 YOU_INHERIT Discussing your inheritance
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
1.3 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.5 KAM_NIGERIAN Nigerian Scam and Variants
1.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
2.9 MONEY_ATM_CARD Lots of money on an ATM card
2.0 MONEY_FROM_41 Lots of money from Africa
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.2 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.2 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** APPROVAL OF YOUR OVERDUE LONG AWAITED FUND PAYMENT
APPROVAL OF YOUR OVERDUE LONG AWAITED FUND PAYMENT.
Attn: Beneficiary,
Congratulations and this is to finally inform you today that approval of your fund
has been successfully issued in the name of One (Mrs.Tina Sanchez) for the final
transfer of your long awaited overdue inheritance fund after the just concluded
meeting which lasted for 5hour with her as part of our compensation for all Scam
victims with the sum of $5,000,000.00 (FIVE Million United State Dollars Only)
approved as part of the World Bank, mass assisted project funds.
This compensation involves business investment failure, Inheritance, Contracts,
Lottery and E.T.C. The mass assisted fund was approved by the World Bank to settle
all beneficiaries who have been involved as Scam Victims in the long hope to receive
their inherited fund as part of the resolution exercise signed today during the just
concluded meeting with this woman Mrs Tina Sanchez who has been here for almost a
week to persuade the transfer immediately into her account with the below stated
account details, she said that you are dead and she is the one you signed to receive
your rightful fund on your behalf.
I presume you must have been wondering why after paying all the fees requested by
those crooks nothing was paid to you rather they enjoyed your hard earned money
without remorse of their evil deeds. Note, your fund was approved so that you can
invest into your own private business, as part of our financial growth to settle all
Debt, as reconciliation from the World Bank, and we have agreed to waived all
outstanding charges as a way of compensating you for the lost as Scam-victim, in the
past. Having waived all the charges for you, bear you in mind that you will only be
required to pay for the processing VALIDATION/UPDATING of your payment file to your
current details which cost you the amount $189 USD , which remains the only charges
expected of you to pay for the final receiver of your approved long awaited
inheritance overdue payment designated to be release to you as a compensation fund
without any delay.
My reason for contacting you once again is to confirm truly if you are dead as this
woman Mrs.Tina Sanchez is ready to pay the fee for the VALIDATION/UPDATING of your
payment so that we can transfer the money into her account as quickly as possible
with the below account details.
Bank NAME: BANK OF AMERICA
ACCOUNT NAME: TINA SANCHEZ
ACCOUNT NUMBER: 002857216549
SWIFT CODE: BOFAUS3N
ROUTING NUMBER: 026009593
Following the preparation to release your fund to her, Note, we want to confirm from
you first if we should proceed in transferring the money into the above stated
account since she stated that you are dead, and if after 48hrs we didn't hear from
you, that means she is right and we will have no choice than to go ahead and wire
the money into the provided account, but if you are still alive and did not
authorize her, please confirm to us immediately so we can arrest her quickly and in
return please re-confirm the following information for immediate release of your
fund through ATM CARD or any means of your choice immediately for proper
verification exercise.Forward your information as below:
1.Your Full Name:
2.Your Home Address:
3.Your Mobile Numbers:
5.Identification Such As Your Valid Drivers License:
Furthermore, You are therefore advice to send your processing VALIDATION/UPDATING
fee amount $589 USD through Western Union money Transfer or MONEYGRAM to our office
secretary name which his name will provided to you once your accept the terms.Your
urgent response is highly needed to complete and facilitate the release of your fund
to you urgently within the next 48hrs or else we have no choice than proceed with
this Mrs Mrs Tina Sanchez as your next of kin.Thanks for your Co-Operation and
understanding.Contact this payment agent here on his private Email :
[email protected]
The World Bank Group,Africa Branch.
subject:from:reply-to:x-virus-scanned; s=