by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 16 Jul 2017 14:47:38 -0700
Received: from mx0a-00149d01.pphosted.com ([208.84.65.217]:46377 helo=mx0b-00149d01.pphosted.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dWrO4-0006QY-S0
for ; Sun, 16 Jul 2017 14:47:37 -0700
Received: from pps.filterd (m0041253.ppops.net [127.0.0.1])
by mx0a-00149d01.pphosted.com (8.16.0.21/8.16.0.21) with SMTP id v6GLhLEY029090
for <>; Sun, 16 Jul 2017 16:46:55 -0500
Received: from dallas-smtp.essilorusa.com (rrcs-50-84-209-184.sw.biz.rr.com [50.84.209.184])
by mx0a-00149d01.pphosted.com with ESMTP id 2bqet2gsyy-1
for <>; Sun, 16 Jul 2017 16:46:55 -0500
Received: from User ([208.115.97.194]) by dallas-smtp.essilorusa.com with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 16 Jul 2017 17:52:01 -0500
Reply-To: <[email protected]>
From: "Mitch Lawrence"<[email protected]>
Date: Sun, 16 Jul 2017 14:46:52 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 16 Jul 2017 22:52:01.0078 (UTC) FILETIME=[22D76560:01D2FE86]
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2017-07-16_16:,,
signatures=0
X-Proofpoint-Spam-Reason: safe
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: United States Investigations Services (USIS) 7799 Leesburg
Pike Suite 1100 North Falls Church, VA 22043 Compliment of The Day, READ
CAREFULLY I am Mitch Lawrence the Vice President, Security and Counterintelligence
(CI) for United States Investigations Services (USIS) in alliance with Economic
Community of West African states (ECOWAS) with the head Office in Nigeria.
We the United States government and the United Nation, we have been working
towards the eradication of Internet Scam around the globe, western part of
Africa to be precise. [...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[208.84.65.217 listed in list.dnswl.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(barristerlee009[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** United States Investigations Services (USIS)
United States Investigations Services (USIS)
7799 Leesburg Pike
Suite 1100 North
Falls Church, VA 22043
Compliment of The Day,
READ CAREFULLY
I am Mitch Lawrence the Vice President, Security and Counterintelligence (CI) for
United States Investigations Services (USIS) in alliance with Economic Community of
West African states (ECOWAS) with the head Office in Nigeria. We the United States
government and the United Nation, we have been working towards the eradication of
Internet Scam around the globe, western part of Africa to be precise.
However, it has been revealed that there's no fund in your name anywhere in the
world, if you have been receiving e-mails from Banks, Compensation Office, Lottery,
Inheritance funds e.t.c., you're therefore advise to ignore such e-mails they are
impostor/fraudster trying to rip you off your hard earn money and if you're in
communication with any person or office claiming that your funds is with them, we
also advise you to stop/seize further communication and transaction with such
person/office immediately, they are all liars and thieves. Also you're order to
forward such emails to this office to help aid the arrest of this fraudsters and
impostors.
We have been able to track down so many of this scam artist in various part of west
Africa countries which includes (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMERON AND
SENEGAL), they are all in the custody of the United States Secret Agent (USSA)
Nigeria, also huge amount of money was recovered from the scam artists. In reference
to this, several indoor meeting was held between the United Nation, United States
government and the African Union in Abuja the federal capital of Nigeria, agreement
was reached that scam victims will be compensated with the money recovered from scam
artist that are in custody of the Nigeria Economic and Financial Crimes Commission
(EFCC) and the United States Secret Agent (USSA) in Nigeria.
Note this e-mail is been directed to you because during our investigations, your
email address was found in one of the scam Artists file and computer hard disk in
our custody. In reference to this regards, you will be compensated with the sum of
US$17, .500,000.00 (Seventeen Million five Hundred Thousand Dollars). Meanwhile, the
Africa Union has requested for evidence to prove you are a victim of West Africa
scam. In plight to this regards the USIS have appointed a United State base Attorney
(Barrister Coman Lee) here in the State to advocate on your behalf and provide the
requested evidence to process the payment approval for your fund to be release to
you.
IMPORTANT NOTICE: The only fee you're to pay to the Attorney is the processing fee
$350 for procurment of legal evidence to prove to the West Africa Union that you are
a victim of scam. Also kindly request him to direct you on how to submit the
processing fee $350
Kindly verify your details to Barrister Coman Lee to enable him process and secure
evidence to aid the release of your payment to you, also make sure your details and
residential address are provided correctly to avoid any atom of mistake and delay
during processing.
(1) Your Full Name: ...................
(2) Full Residential Address:.......... (P.O.BOX NOT ALLOWED)
(3) Direct Phone Number: ..............
(4) Valid ID Card: ....................
CONTACT PERSON: Barrister Coman Lee
E-MAIL ADDRESS: [email protected]
TEL: +1 (971) 512-3139
As soon as he received your details, the processing to aid the release of your
Compensation Refund will be facilitated immediately and your US$17, .500,000.00
(Seventeen Million five Hundred Thousand Dollars) will be made payable to you in due
time within the next 72 hours.
Treat as urgent!
Regards.
Mitch Lawrence
Vice President, Security and Counterintelligence
United States Investigations Services (USIS)
Envelope-to:
Delivery-date: Sun, 16 Jul 2017 14:47:38 -0700
Received: from mx0a-00149d01.pphosted.com ([208.84.65.217]:46377 helo=mx0b-00149d01.pphosted.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dWrO4-0006QY-S0
for ; Sun, 16 Jul 2017 14:47:37 -0700
Received: from pps.filterd (m0041253.ppops.net [127.0.0.1])
by mx0a-00149d01.pphosted.com (8.16.0.21/8.16.0.21) with SMTP id v6GLhLEY029090
for <>; Sun, 16 Jul 2017 16:46:55 -0500
Received: from dallas-smtp.essilorusa.com (rrcs-50-84-209-184.sw.biz.rr.com [50.84.209.184])
by mx0a-00149d01.pphosted.com with ESMTP id 2bqet2gsyy-1
for <>; Sun, 16 Jul 2017 16:46:55 -0500
Received: from User ([208.115.97.194]) by dallas-smtp.essilorusa.com with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 16 Jul 2017 17:52:01 -0500
Reply-To: <[email protected]>
From: "Mitch Lawrence"<[email protected]>
Date: Sun, 16 Jul 2017 14:46:52 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 16 Jul 2017 22:52:01.0078 (UTC) FILETIME=[22D76560:01D2FE86]
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2017-07-16_16:,,
signatures=0
X-Proofpoint-Spam-Reason: safe
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: United States Investigations Services (USIS) 7799 Leesburg
Pike Suite 1100 North Falls Church, VA 22043 Compliment of The Day, READ
CAREFULLY I am Mitch Lawrence the Vice President, Security and Counterintelligence
(CI) for United States Investigations Services (USIS) in alliance with Economic
Community of West African states (ECOWAS) with the head Office in Nigeria.
We the United States government and the United Nation, we have been working
towards the eradication of Internet Scam around the globe, western part of
Africa to be precise. [...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[208.84.65.217 listed in list.dnswl.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(barristerlee009[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** United States Investigations Services (USIS)
United States Investigations Services (USIS)
7799 Leesburg Pike
Suite 1100 North
Falls Church, VA 22043
Compliment of The Day,
READ CAREFULLY
I am Mitch Lawrence the Vice President, Security and Counterintelligence (CI) for
United States Investigations Services (USIS) in alliance with Economic Community of
West African states (ECOWAS) with the head Office in Nigeria. We the United States
government and the United Nation, we have been working towards the eradication of
Internet Scam around the globe, western part of Africa to be precise.
However, it has been revealed that there's no fund in your name anywhere in the
world, if you have been receiving e-mails from Banks, Compensation Office, Lottery,
Inheritance funds e.t.c., you're therefore advise to ignore such e-mails they are
impostor/fraudster trying to rip you off your hard earn money and if you're in
communication with any person or office claiming that your funds is with them, we
also advise you to stop/seize further communication and transaction with such
person/office immediately, they are all liars and thieves. Also you're order to
forward such emails to this office to help aid the arrest of this fraudsters and
impostors.
We have been able to track down so many of this scam artist in various part of west
Africa countries which includes (NIGERIA, REPUBLIC OF BENIN, TOGO, GHANA CAMERON AND
SENEGAL), they are all in the custody of the United States Secret Agent (USSA)
Nigeria, also huge amount of money was recovered from the scam artists. In reference
to this, several indoor meeting was held between the United Nation, United States
government and the African Union in Abuja the federal capital of Nigeria, agreement
was reached that scam victims will be compensated with the money recovered from scam
artist that are in custody of the Nigeria Economic and Financial Crimes Commission
(EFCC) and the United States Secret Agent (USSA) in Nigeria.
Note this e-mail is been directed to you because during our investigations, your
email address was found in one of the scam Artists file and computer hard disk in
our custody. In reference to this regards, you will be compensated with the sum of
US$17, .500,000.00 (Seventeen Million five Hundred Thousand Dollars). Meanwhile, the
Africa Union has requested for evidence to prove you are a victim of West Africa
scam. In plight to this regards the USIS have appointed a United State base Attorney
(Barrister Coman Lee) here in the State to advocate on your behalf and provide the
requested evidence to process the payment approval for your fund to be release to
you.
IMPORTANT NOTICE: The only fee you're to pay to the Attorney is the processing fee
$350 for procurment of legal evidence to prove to the West Africa Union that you are
a victim of scam. Also kindly request him to direct you on how to submit the
processing fee $350
Kindly verify your details to Barrister Coman Lee to enable him process and secure
evidence to aid the release of your payment to you, also make sure your details and
residential address are provided correctly to avoid any atom of mistake and delay
during processing.
(1) Your Full Name: ...................
(2) Full Residential Address:.......... (P.O.BOX NOT ALLOWED)
(3) Direct Phone Number: ..............
(4) Valid ID Card: ....................
CONTACT PERSON: Barrister Coman Lee
E-MAIL ADDRESS: [email protected]
TEL: +1 (971) 512-3139
As soon as he received your details, the processing to aid the release of your
Compensation Refund will be facilitated immediately and your US$17, .500,000.00
(Seventeen Million five Hundred Thousand Dollars) will be made payable to you in due
time within the next 72 hours.
Treat as urgent!
Regards.
Mitch Lawrence
Vice President, Security and Counterintelligence
United States Investigations Services (USIS)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

