[email protected] Mr. Dale R. Folwell

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id IRacLcMrllk3EwAAjbubUg
for <>; Thu, 17 Aug 2017 16:50:27 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 17 Aug 2017 16:50:27 -0700
Received: from mail-ua0-f196.google.com ([209.85.217.196]:35139)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1diUYT-0001GS-Lp
for ; Thu, 17 Aug 2017 16:50:27 -0700
Received: by mail-ua0-f196.google.com with SMTP id r9so1646545uad.2
for <>; Thu, 17 Aug 2017 16:50:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:frommessage-id:subject:to;
bh=B35J7gPa7+JXAGhXJxjivdqONhx/CziOHr9m0ws/27c=;
b=HK7TZ96nEsOL15Doxey6Mi5e0QfgScYOi5A+3VFbVLcMjXklpPQhjS1FT/CQznyUCg
urjwk3lm5QwXDM9kv9z1WKHFJqH5YTPifg6dF4TPfLXDfxaOj/DYIUfhBzqgongiC+bM
nTkREhQ3XJKUYcii7AHX950rh1S3+mToNk1p/9kx7jqy+QvlCSbHn80HvwI7Bt9tFQox
0wwkoSNcyqps/1h3ifbJgtyHyxNCyCze4G4BuukJKDJ55kS4kiGanbhEg7EXFjNxtEVG
9u6ySnxtZXRbXEFRbQFdZf4H8vxr9tk6ns6QX1mBUsVNYuy67gSVt2DyyC/JHjg95nWP
53mg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=B35J7gPa7+JXAGhXJxjivdqONhx/CziOHr9m0ws/27c=;
b=JObSiasl5hYCmkgrUH1KjyhtHCbmiehsBTOPeSbxze2TVGbxICpMw7tiZgR4yQHHlu
TwFkqq7Z1SGoWehi4CmpA9Lzr3y2measyQlBsVbsdZEHYjPl8g0eMi5LDSPIj1yfXBVV
hjMBpYW2r6znT4lL33lHdgnQCkRfjmfJtvsuCgQQYzS4LnV+mjkvvu1HlWsg95C97Fln
kS/DEX3hqQVjBSidsKDZTQzPvF2XCikpi6kkT+Ni2y2ercV3g46SOclN2qhYyId/hath
owuAHCpH6eYYtqukwZrnUBWPFGmJDNSfx8A9wEZRca0YrV766SrB5/j+DwCUT47m9MSH
JuFw==
X-Gm-Message-State: AHYfb5hFFBnGeMGSt/xbVCXeykMcJw1Zlw1Vxx4qtvUdHkCaA3eKPORl
3c78xkOM0pM8/465pBQETdFMQetYYQ==
X-Received: by 10.176.80.144 with SMTP id c16mr4817859uaa.100.1503013784480;
Thu, 17 Aug 2017 16:49:44 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.103.17.68 with HTTP; Thu, 17 Aug 2017 16:49:43 -0700 (PDT)
Reply-To: [email protected]
From: "Mr. Dale R. Folwell, CPA" <[email protected]>
Date: Fri, 18 Aug 2017 00:49:43 +0100
Message-ID: <CAMdq2w73Ffd_2XkF23beUb4qamSEiWU0DvQXwy1JUXGyuUwKNQ@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=7.9
X-Spam-Score: 79
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: From The State Treasurer South Carolina 3250 Atlantic Avenue
Dillon,South Carolina 29536 U.S.A RE/NO: 006-DTNC/00567/2017 E-mail address
: [email protected] Good Day. I am Mr. Dale R.Folwell, CPA State Treasurer
of South Carolina. During our recent inspection a package containing an ATM
card was found. I discovered the abandoned shipment left by a Courier Service
agent who was supposed to deliver these package to you but failed to provide
necessary clearances papers needed by the US Security Office and when scanned
we discover that the ATM card contains huge amount of the sum of US$5.5M
with other vital document. The consignment was abandoned because the Contents
of the consignment was not properly declared by the consignee as "MONEY"
rather it was declared as personal effect to avoid diversion by the Shipping
Agent and also the inability to summit a clearance certificate requested
by the US Security Office. [...]

Content analysis details: (7.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.217.196 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.217.196 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officemail767676[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (ecobank.nigeria22[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ecobank.nigeria22[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.217.196 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** From The State Treasurer South Carolina


From The State Treasurer South Carolina
3250 Atlantic Avenue Dillon,South Carolina 29536 U.S.A
RE/NO: 006-DTNC/00567/2017
E-mail address : [email protected]


Good Day.

I am Mr. Dale R.Folwell, CPA State Treasurer of South Carolina. During
our recent inspection a package containing an ATM card was found. I
discovered the abandoned shipment left by a Courier Service agent who
was supposed to deliver these package to you but failed to provide
necessary clearances papers needed by the US Security Office and when
scanned we discover that the ATM card contains huge amount of the sum
of US$5.5M with other vital document. The consignment was abandoned
because the Contents of the consignment was not properly declared by
the consignee as "MONEY" rather it was declared as personal effect to
avoid diversion by the Shipping Agent and also the inability to summit
a clearance certificate requested by the US Security Office.


Further finding reveal that the Department of State Treasurer South
Carolina, has contacted you and the consignment is still left at our
Storage House here at Department of State Treasurer South Carolina
till date which was delivered through a registered shipping Company
known as Speedway Courier Services a division of Tran guard LTD.
Approximately, the details of the consignment includes your name, your
email address and the official yellow tag document are all tagged on
the parcel.

However, to enable me confirm if you are the actual recipient of this
consignment, I will advise you to provide your current Phone Number
and Full Address, to enable me cross check if it corresponds with the
address on the official documents including the name of nearest
Airport around your city and other details. Please note that we have
made arrangement to release your ATM card worth US$5.5M to you
immediately you provide all the necessary requirements for the
delivery of your ATM card and also remit the sum of US$490.00 charged
for security clearance fee.So by this letter, you are advised to
re-confirm to me the followings:

(1) Your Full Name and Your House Address
(2) Your working Telephone and Fax numbers for easy communication.


Take note that this consignment is supposed to have been returned to
the U.S Treasury Department as unclaimed delivery due to the delays in
concluding on the clearance processes. Once I confirm you as the
actual recipient of the parcel, and you send in the sum of US$490.00
charged for the security clearance fee, within 24-48 hours upon the
receiver of the fee your parcel will be delivered to you.

Once you are ready to send the security clearance fee us$490.00,we are
going to provide you our receiver agent name and address here in South
Carolina u.s.a which you will use to send the fee via Western Union or
Money Gram or Ria Money Transfer or Walmart to Walmart money transfer
and forward the payment information to us,such as the senders name and
address,mtcn for the confirmation of the payment.

Thanks and God Bless you.

Mr. Dale R. Folwell, CPA
State Treasurer of South Carolina U.S.A
E-mail address : [email protected]

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by (Dovecot) with LMTP id aUrgFyYnv1mlcAAAjbubUg
for <>; Sun, 17 Sep 2017 18:53:42 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 17 Sep 2017 18:53:42 -0700
Received: from mail-io0-f181.google.com ([209.85.223.181]:56906)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dtlFi-0007U7-IN
for ; Sun, 17 Sep 2017 18:53:42 -0700
Received: by mail-io0-f181.google.com with SMTP id m103so15210398iod.13
for <>; Sun, 17 Sep 2017 18:53:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:frommessage-id:subject:to;
bh=NLumLeFJ/VQj8CXj6wwOu8JlGlZI4yKYZpMsLG6Ra+M=;
b=g4OpqpGcUgjtGWye5UEL6s6vasvhrDNNzuz50198UlKVRk/dgMgQ5lBsWRL4fBlqFr
srdlCnFY45nrJvUMqlxwI/saCH0662BR85IU70Ds+rSx8fg2+zMKv88lt7oiSdddnxei
KMlT7/4M6WSbMUHG0p0QnIt9pSdcjmdIv5UOK+FQFZ3NRJbjhfu8qMXOLLzUjRkCB9Zz
Frkm5AItnb+mlsqbegkKZy3nnOx7qBm211wrF+8S2UQyNkKwUWCtMyveaFUtSzEhRCEo
bNLF3lhECmIRVZnV5qFIoNF6KaZb5dHqSvvVDp07scMxMeXjwxnxjbbH3dH4RGtefwt+
SMMA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=NLumLeFJ/VQj8CXj6wwOu8JlGlZI4yKYZpMsLG6Ra+M=;
b=j7YO6qy1IDkN5FSjr9L6mpfWwHQANqH8hEN78iV/6EcWSnQlYhUMWEfFM3f1P7mBai
/ViDGritvyyW5etQ3aTsHPhPJSnVDFfgb1Hc1aTCmefskmPtiAfS+JZp9Cs4h9zwPNV6
d74iZWuVHexwqjbgTWg34dHenOGmVSJEms1xRqgNQCxUTwuKccUNI45s916SeFYNqqsf
p00C+88GhBJAqY2Cj+64k6SxAWvLhuS2KHv6lPw9apOrGax3Z/LjjyX+U19Qt99VYSye
gXGFeqC/dPMpDhOpyTr6NRiTfgmwob4N+gfaL6v0vLdGhEusIcf4cOrah5s+zcdS5Wf8
btOw==
X-Gm-Message-State: AHPjjUghgT48j1to+0fvhsLE0wync600+A2n628s7ITCtzwIBbmmDipU
kUJj9fKBmRE8MqchpHEEzTZFoTrpmIt32qQQ0PQ=
X-Google-Smtp-Source: AOwi7QA8yTQOy5G2dSaIdkWIAeB/W4m1MTifuyxtMXMY/a+pqh8trIO5iwsJ3WNORVQBJa8mtWjHnHVfdTRpY6u2wGc=
X-Received: by 10.107.69.4 with SMTP id s4mr16813910ioa.185.1505699577544;
Sun, 17 Sep 2017 18:52:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.107.4.3 with HTTP; Sun, 17 Sep 2017 18:52:57 -0700 (PDT)
Reply-To: [email protected]
From: "FEDERAL BUREAU OF INVESTIGATION (FBI)" <[email protected]>
Date: Mon, 18 Sep 2017 02:52:57 +0100
Message-ID: <CAB4oCvKUJUgFrOTxv99ss2a+ffEG0s5_zbng+xRuz=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=10.6
X-Spam-Score: 106
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Federal Bureau of Investigation (FBI) Anti-Terrorist And Monitory
Crime Division. Federal Bureau Of Investigation. INTERNATIONAL MONETARY FUNDS
J.Edgar.Hoover Building Washington Dc Customers Service Hours / Monday To
Saturday Office Hours Monday to Saturday: [...]

Content analysis details: (10.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.2 MONEY_BACK BODY: Money back guarantee
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.223.181 listed in wl.mailspike.net]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.223.181 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.223.181 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mailoffice437[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrbank.mrbankimoon[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.0 FBI_SPOOF Claims to be FBI, but not from FBI domain
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FBI_MONEY The FBI wants to give you lots of money?
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Federal Bureau of Investigation (FBI)


Federal Bureau of Investigation (FBI)
Anti-Terrorist And Monitory Crime Division.
Federal Bureau Of Investigation.
INTERNATIONAL MONETARY FUNDS
J.Edgar.Hoover Building Washington Dc
Customers Service Hours / Monday To Saturday
Office Hours Monday to Saturday:

Dear Beneficiary,


Series of meetings have been held over the past 7 months with the
secretary general of the United Nations Organization. This ended 3
days ago. It is obvious that you have not received your fund which is
to the tune of $2.3million Usd due to past corrupt Governmental
Officials who almost held the fund to themselves for their selfish
reason and some individuals who have taken advantage of your fund all
in an attempt to swindle your fund which has led to so many losses
from your end and unnecessary delay in the receipt of your fund.

The National Central Bureau of Interpol enhanced by the United Nations
and Federal Bureau of Investigation and the International monetary
funds have successfully passed a mandate to the current president of
Nigeria his Excellency President Muhammadu Buhari to boost the
exercise of clearing all foreign debts owed to you and other
individuals and organizations who have been found not to have receive
their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now
how would you like to receive your payment? Because we have two method
of payment which is by Check or by ATM card?

ATM Card: We will be issuing you a custom pin based ATM card which you
will use to withdraw up to $3,000 per day from any ATM machine that
has the Master Card Logo on it and the card have to be renewed in 4
years time which is 2020. Also with the ATM card you will be able to
transfer your funds to your local bank account. The ATM card comes
with a handbook or manual to enlighten you about how to use it. Even
if you do not have a bank account.


Check: To be deposited in your bank for it to be cleared within three
working days. Your payment would be sent to you via any of your
preferred option and would be mailed to you via UPS. Because we have
signed a contract with UPS which should expire in the next three weeks
you will only need to pay $180 instead of $520 saving you $240 So if
you pay before the three weeks you save $240 Take note that anyone
asking you for some kind of money above the usual fee is definitely a
fraudsters and you will have to stop any communication with every
other person if you have been in contact with any. Also remember that
all you will ever have to spend is $180.00 nothing more! Nothing less!
And we guarantee the receipt of your fund to be successfully delivered
to you within the next 24hrs after the receipt of payment has been
confirmed.


Note: Everything has been taken care of by the Federal Government of
Nigeria the International Monetary Funds, The United Nation and also
the FBI and including taxes, custom paper and clearance duty so all
you will ever need to pay is $180.

DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for
shipping your ATM card is $420 but because UPS have temporarily
discontinued the C.O.D which gives you the chance to pay when package
is delivered for international shipping We had to sign contract with
them for bulk shipping which makes the fees reduce from the actual fee
of $520 to $180 nothing more and no hidden fees of any sort!



with the information below,


Your full Name..
Your Address:..............
Home/Cell Phone:..............
Occupation:....................
Preferred Payment Method (ATM / Cashier Check)

Upon receipt of payment the delivery officer will ensure that your
package is sent within 24 working hours. Because we are so sure of
everything we are giving you a 100% money back guarantee if you do not
receive payment/package within the next 24hrs after you have made the
payment for shipping.

Yours sincerely,
Miss Donna Story
FEDERAL BUREAU OF INVESTIGATION (FBI)
UNITED STATES DEPARTMENT OF JUSTICE
WASHINGTON, D.C. 205