[email protected] MR. COLA SMITH

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 13 Oct 2017 02:26:29 -0700
Received: from [81.28.34.146] (port=43340 helo=payammail.ir)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e2wEc-0000v3-NX
for ; Fri, 13 Oct 2017 02:26:29 -0700
Received: (qmail 2181 invoked by uid 509); 13 Oct 2017 12:55:31 +0330
Received: from 37.49.226.177 by payammail.ir (envelope-from <[email protected]>, uid 501) with qmail-scanner-1.25-st-qms
(clamdscan: 0.96.1/11043. spamassassin: 3.3.1. perlscan: 1.25-st-qms.
Clear:RC:0(37.49.226.177):SA:1(17.8/8.0):.
Processed in 4.134517 secs); 13 Oct 2017 09:25:31 -0000
X-Spam-Level: +++++++++++++++++
X-Antivirus-Mail-From: [email protected] via payammail.ir
X-Antivirus: 1.25-st-qms (Clear:RC:0(37.49.226.177):SA:1(17.8/8.0):. Processed in 4.134517 secs Process 2091)
Received: from unknown (HELO User) ([email protected]@37.49.226.177)
by payammail.ir with SMTP; 13 Oct 2017 12:55:26 +0330
Reply-To: <[email protected]>
From: "FBI OFFICE"<[email protected]>
Date: Fri, 13 Oct 2017 02:25:35 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus-Message-ID: <[email protected]>
X-Spam-Status: Yes, score=24.5
X-Spam-Score: 245
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Anti-Terrorist And Monetary Crimes Division FBI Headquarters,
Washington, D.C. Federal Bureau Of Investigation [...]

Content analysis details: (24.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.1 TVD_APPROVED BODY: Body states that the recipient has been approved
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[37.49.226.177 listed in zen.spamhaus.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(ofile1579[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_LOTTO No description available.
1.6 MISSING_MID Missing Message-Id: header
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** :SPAM: FBI Headquarters, Washington, D.


Anti-Terrorist And Monetary Crimes Division

FBI Headquarters, Washington, D.C.

Federal Bureau Of Investigation

J.Edgar Hoover Building

935 Pennsylvania Avenue, Nw

Washington, D.C. 20535-0001

ATTENTION: BENEFICIARY



This e-mail has been issued to you in order to Officially inform you that we

have completed an investigation on an International Payment in which was

issued to you by International Lottery Company. With the help of our newly developed

technology (International Monitoring Network System) we discovered that your e-

mail address was automatically selected by an Online Balloting System, this has

legally won you the sum of $4.8 million USD from a Lottery Company outside the

United States of America. During our investigation we discovered that your e-

mail won the money from an Online Balloting System and we have authorized this

winning to be paid to you via INTERNATIONAL CERTIFIED BANK DRAFT.



Normally, it will take up to 5 business days for an INTERNATIONAL CERTIFIED

BANK DRAFT by your local bank. We have successfully notified this company on

your behalf that funds are to be drawn from a registered bank within the world

winded, so as to enable you cash the check instantly without any delay,

henceforth the stated amount of $4.8 million USD has been deposited with IMF.

We have completed this investigation and you are hereby approved to receive the

winning prize as we have verified the entire transaction to be Safe and 100%

risk free, due to the fact that the funds have been deposited with IMF you will

be required to settle the following bills directly to the Lottery Agent in-

charge of this transaction whom is located in Cotonou, Benin Republic.

According to our discoveries, you were required to pay for the following,

(1) Deposit Fee's ( IMF INTERNATIONAL CLEARANCE CERTIFICATE )

(2) Shipping Fee's ( This is the charge for shipping the Cashier's Check to

your home address)



The total amount for everything is $96.00 We have tried our possible best to

indicate that this $96.00 should be deducted from your winning prize but we

found out that the funds have already been deposited to IMF and cannot be

accessed by anyone apart from you the winner, therefore you will be required to

pay the required fee's to the Agent in-charge of this transaction

In order to proceed with this transaction, you will be required to contact the

agent in-charge ( MR. COLA SMITH ) via e-mail. Kindly look below to find



appropriate contact information:

CONTACT AGENT NAME: MR. COLA SMITH

PHONE NUMBER:+22995576491

Email: ( [email protected] )



You will be required to e-mail him with the following information:

FULL NAME:

ADDRESS:

CITY:

STATE:

ZIP CODE:

DIRECT CONTACT NUMBER:

OCCUPATION:



You will also be required to request Western Union or Money Gram details on how

to send the required $96.00 in order to immediately ship your prize of $4.8

million USD via INTERNATIONAL CERTIFIED BANK DRAFT from IMF, also include the

following transaction code in order for him to identify this transaction :

EA2948-910.



This letter will serve as proof that the Federal Bureau Of Investigation is

authorizing you to pay the required $96.00 ONLY to MR. COLA SMITH via

information in which he shall send to you,



MR.Andrew McCabe

Federal Bureau of Investigation F B I

Yours in Service,Photograph of

Andrew McCabe

Acting Director, Andrew McCabe,

III Director Office of Public Affairs