[email protected] DR RAYMOND SNOW.

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Sep 2017 18:00:32 -0700
Received: from [59.37.39.18] (port=35986 helo=MAIL02.ki-casting.com)
by with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dqU8L-0002LX-IX
for ; Fri, 08 Sep 2017 18:00:32 -0700
Received: from MAIL01.ki-casting.com (192.168.1.233) by MAIL02.ki-casting.com
(192.168.1.234) with Microsoft SMTP Server (TLS) id 14.3.235.1; Sat, 9 Sep
2017 09:00:11 +0800
Received: from User (40.127.142.41) by MAIL01.ki-casting.com (192.168.1.230)
with Microsoft SMTP Server id 14.3.235.1; Sat, 9 Sep 2017 08:59:50 +0800
Reply-To: <[email protected]>
From: DR RAYMOND SNOW <[email protected]>
Date: Sat, 9 Sep 2017 01:59:36 +0100
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
X-Originating-IP: [40.127.142.41]
X-Spam-Status: Yes, score=31.1
X-Spam-Score: 311
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: International Monetary Fund (IMF) Independent Corrupt Practices
and Other Related Offenses Commission Wuse Zone 10, Garki [...]

Content analysis details: (31.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[59.37.39.18 listed in bb.barracudacentral.org]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[59.37.39.18 listed in zen.spamhaus.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[40.127.142.41 listed in zen.spamhaus.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(raymondsnow40[at]gmail.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?59.37.39.18>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[59.37.39.18 listed in psbl.surriel.com]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_HK_NAME_DR No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RE-OUTSTANDING PAYMENT


International Monetary Fund (IMF)

Independent Corrupt Practices and Other Related Offenses Commission

Wuse Zone 10, Garki

Abuja - Nigeria





RE-OUTSTANDING PAYMENT











Your name appeared among the beneficiaries who will receive a part-payment of
US$10.500, 000 million (Ten million five hundred thousand United State dollars) and
it has been approved already for payment months ago.











Bank name: Bank of America

Address: 3251 HARTS BRIDGE RD,PINSON,TENNESSEE 38366 USA

ABA: 103000017 (all other)

ABA: 026009593 (International)

ACCT. #:003042656833

ACCT Name: FMS Investments Inc.











1, Full Names______________________

2, Telephone_________________________

3, Contact Address___________________

4, Age_______________________________

5, Occupation________________________

6, Sex_______________________________

7, Fax Number________________________





Once again, I apologize to you on behalf of International Monetary fund Agency
towards this contact and proper confirmation required urgently from you if alive.





Thanks





Yours Sincerely



DR RAYMOND SNOW.

International Monetary Fund Agency