by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 30 Aug 2017 03:20:13 -0700
Received: from [113.161.26.10] (port=56270 helo=mail.kontum.gov.vn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dn06V-0002v9-9m
for ; Wed, 30 Aug 2017 03:20:13 -0700
Received: from User by mail.kontum.gov.vn (MDaemon PRO v12.5.4)
with ESMTP id md50000000775.msg
for <>; Wed, 30 Aug 2017 08:10:42 +0700
X-Spam-Processed: mail.kontum.gov.vn, Wed, 30 Aug 2017 08:10:42 +0700
(not processed: message from trusted or authenticated source)
X-Authenticated-Sender: [email protected]
X-MDRemoteIP: 74.94.117.94
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-MDaemon-Deliver-To:
Reply-To: <[email protected]>
From: "Col.Johann Krist"<[email protected]>
Date: Tue, 29 Aug 2017 11:18:46 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=36.2
X-Spam-Score: 362
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Sir/Ma, I am Col.Johann Kristi,United Nations Special Envoy
Department of Complaints Comply.I am the chief inspector of the committee
set up by the United Nations/International Monetary Organization to locate
and recover funds hanging in different financial Institution all over the
world as a result of High scale fraud Complaints. [...]
Content analysis details: (36.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[113.161.26.10 listed in bb.barracudacentral.org]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[113.161.26.10 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
4.5 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[113.161.26.10 listed in bl.mailspike.net]
1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** Information Alert......29/08/17
Sir/Ma,
I am Col.Johann Kristi,United Nations Special Envoy Department of Complaints
Comply.I am the chief inspector of the committee set up by the United
Nations/International Monetary Organization to locate and recover funds hanging in
different financial Institution all over the world as a result of High scale fraud
Complaints.
We discovered a funds which has your particulars in an offshore Domiciled account
and it was traced to a former Central Bank Governor. It was discovered on further
investigations on the frustration melted to you from receiving your contract payment
by this corrupt officials.
I wish to use this medium to authoritatively inform you that it was a calculated
game plan to frustrate you out of receiving your payment only waiting for the ripe
time to convert the payment for their private use which has been discovered to be a
'MODUS OPARANDI'. There are lots of other scary discoveries about the rot in the
system .
This said payment(funds) particulars was to be among discovery to be repatriated to
the United Nations Office in Switzerland for onward prosecutions and confiscation
but i discovered from the paper works and other document how long troubles it has
taken you to get these funds transferred.I have decided to use my powers as the
chief inspector to monitor and complete your payment transfer to you.
Right now your payment(Funds)is at the Deutsche Bank AG coded account .
As soon as i hear from you i shall notify you on the safest way to get these funds
without further delays .
Note:if you are ready to work with me towards release the payment to you, contact me
directly with my private E-mail: [email protected].
Ignore this message,if you have decided to forfeit these payment/remittance.
Waiting to hear from you soon.
Regards,
Col.Johann Krist
Envelope-to:
Delivery-date: Wed, 30 Aug 2017 03:20:13 -0700
Received: from [113.161.26.10] (port=56270 helo=mail.kontum.gov.vn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dn06V-0002v9-9m
for ; Wed, 30 Aug 2017 03:20:13 -0700
Received: from User by mail.kontum.gov.vn (MDaemon PRO v12.5.4)
with ESMTP id md50000000775.msg
for <>; Wed, 30 Aug 2017 08:10:42 +0700
X-Spam-Processed: mail.kontum.gov.vn, Wed, 30 Aug 2017 08:10:42 +0700
(not processed: message from trusted or authenticated source)
X-Authenticated-Sender: [email protected]
X-MDRemoteIP: 74.94.117.94
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-MDaemon-Deliver-To:
Reply-To: <[email protected]>
From: "Col.Johann Krist"<[email protected]>
Date: Tue, 29 Aug 2017 11:18:46 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=36.2
X-Spam-Score: 362
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Sir/Ma, I am Col.Johann Kristi,United Nations Special Envoy
Department of Complaints Comply.I am the chief inspector of the committee
set up by the United Nations/International Monetary Organization to locate
and recover funds hanging in different financial Institution all over the
world as a result of High scale fraud Complaints. [...]
Content analysis details: (36.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[113.161.26.10 listed in bb.barracudacentral.org]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[113.161.26.10 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
4.5 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[113.161.26.10 listed in bl.mailspike.net]
1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** Information Alert......29/08/17
Sir/Ma,
I am Col.Johann Kristi,United Nations Special Envoy Department of Complaints
Comply.I am the chief inspector of the committee set up by the United
Nations/International Monetary Organization to locate and recover funds hanging in
different financial Institution all over the world as a result of High scale fraud
Complaints.
We discovered a funds which has your particulars in an offshore Domiciled account
and it was traced to a former Central Bank Governor. It was discovered on further
investigations on the frustration melted to you from receiving your contract payment
by this corrupt officials.
I wish to use this medium to authoritatively inform you that it was a calculated
game plan to frustrate you out of receiving your payment only waiting for the ripe
time to convert the payment for their private use which has been discovered to be a
'MODUS OPARANDI'. There are lots of other scary discoveries about the rot in the
system .
This said payment(funds) particulars was to be among discovery to be repatriated to
the United Nations Office in Switzerland for onward prosecutions and confiscation
but i discovered from the paper works and other document how long troubles it has
taken you to get these funds transferred.I have decided to use my powers as the
chief inspector to monitor and complete your payment transfer to you.
Right now your payment(Funds)is at the Deutsche Bank AG coded account .
As soon as i hear from you i shall notify you on the safest way to get these funds
without further delays .
Note:if you are ready to work with me towards release the payment to you, contact me
directly with my private E-mail: [email protected].
Ignore this message,if you have decided to forfeit these payment/remittance.
Waiting to hear from you soon.
Regards,
Col.Johann Krist
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
