by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id QC7uDEH3m1qGXgAAjbubUg
for <>; Sun, 04 Mar 2018 05:40:17 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 04 Mar 2018 05:40:17 -0800
Received: from mx5.mail.bg ([193.201.172.121]:34757)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1esTs4-0006Hg-1E
for ; Sun, 04 Mar 2018 05:40:17 -0800
Received: from User (unknown [85.93.216.90])
by mx5.mail.bg (Postfix) with ESMTPA id 101258093B9C;
Sun, 4 Mar 2018 15:39:15 +0200 (EET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=mail.bg; s=default;
t=1520170768; bh=+WQgc9QJkPjXODiTsbeTgjL+hA1gZj0GGtaq0P8RIIw=;
h=Reply-To:From:Subject:Date:MIME-Version:Content-Type:
Content-Transfer-Encoding;
b=iIxCixUDTte05v6yS5txV1cuEPBsBtdMiQNC+ZobA1Il2YgR24Xg7/Nq2GbybeUT2
yoSPo16UacZnAPi5av3DX8P90VXfRFU5YUHOO0HuIOpOgPmDxYNsuShrGzsMQPInrq
9F5MtOUIij7MI7bvH7Bi05JPezZ6GTjRlC+1B1lU=
Reply-To: <[email protected]>
From: "(I.M.F) UNITED KINGDOM"<[email protected]>
Date: Sun, 4 Mar 2018 14:39:27 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=32.9
X-Spam-Score: 329
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) 164 DE-80939 Berkshire,London,
United Kingdom. [...]
Content analysis details: (32.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 MILLION_USD BODY: Talks about millions of dollars
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
1.0 HK_SCAM_N3 BODY: No description available.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (raabedwardsimf14[at]mail.bg)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[193.201.172.121 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[85.93.216.90 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(raabedwardsimf14[at]mail.bg)
1.0 MISSING_HEADERS Missing To: header
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.5 FAKE_REPLY_C No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.1 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.3 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Confirmation !
INTERNATIONAL MONETARY FUND (IMF)
164 DE-80939 Berkshire,London,
United Kingdom.
Urgent attention,
After a board meeting with the International Monetary Fund (IMF) director, Christine
Lagarde,the committee on fund management and payments newly inaugurated by the World
financial services authority of The United Nations.(UN)The sum $10,000,000.00 (Ten
Million United States Dollars) has been approved for payment this first quarters of
2018.
The main objectives of the board meeting with the IMF director and the committee on
fund management, was to investigate and approve the release of all outstanding
unpaid and unclaimed funds owed by banks,governments or individuals all over the
globe through contract /inheritance and lottery payments due to be paid to the
rightful beneficiaries within the last ten years.
Your e-mail was found among the first ten contacts to be paid this first quarters
and considering the amount approved $10,000,000.00 (Ten Million United States
Dollars) for payment this first quarters of 2018, the first five (5) beneficiaries
to re- confirm their names, occupation and direct telephone numbers to enable us
update their payment file will be paid two million United States dollars each.
Finally, waiver has been granted in your favor by the committees involved and the
only fee that you are advised to pay for the processing and release of your over due
fund is $95 only. Kindly get back to me immediately with the requested details above
and also request for the instructions that you will need in sending the processing
fee to the payment department.
Yours sincerely
George G. O. Osborne
DIRECTOR (I.M.F)
UNITED KINGDOM
Tel:+448709457217
Tel:+448709457218
Fax:+448442739648
Delivered-To:
Received: from
by with LMTP id QC7uDEH3m1qGXgAAjbubUg
for <>; Sun, 04 Mar 2018 05:40:17 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 04 Mar 2018 05:40:17 -0800
Received: from mx5.mail.bg ([193.201.172.121]:34757)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1esTs4-0006Hg-1E
for ; Sun, 04 Mar 2018 05:40:17 -0800
Received: from User (unknown [85.93.216.90])
by mx5.mail.bg (Postfix) with ESMTPA id 101258093B9C;
Sun, 4 Mar 2018 15:39:15 +0200 (EET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=mail.bg; s=default;
t=1520170768; bh=+WQgc9QJkPjXODiTsbeTgjL+hA1gZj0GGtaq0P8RIIw=;
h=Reply-To:From:Subject:Date:MIME-Version:Content-Type:
Content-Transfer-Encoding;
b=iIxCixUDTte05v6yS5txV1cuEPBsBtdMiQNC+ZobA1Il2YgR24Xg7/Nq2GbybeUT2
yoSPo16UacZnAPi5av3DX8P90VXfRFU5YUHOO0HuIOpOgPmDxYNsuShrGzsMQPInrq
9F5MtOUIij7MI7bvH7Bi05JPezZ6GTjRlC+1B1lU=
Reply-To: <[email protected]>
From: "(I.M.F) UNITED KINGDOM"<[email protected]>
Date: Sun, 4 Mar 2018 14:39:27 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=32.9
X-Spam-Score: 329
X-Spam-Bar: ++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) 164 DE-80939 Berkshire,London,
United Kingdom. [...]
Content analysis details: (32.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 MILLION_USD BODY: Talks about millions of dollars
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
1.0 HK_SCAM_N3 BODY: No description available.
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (raabedwardsimf14[at]mail.bg)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[193.201.172.121 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[85.93.216.90 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(raabedwardsimf14[at]mail.bg)
1.0 MISSING_HEADERS Missing To: header
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.5 FAKE_REPLY_C No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.1 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.3 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Confirmation !
INTERNATIONAL MONETARY FUND (IMF)
164 DE-80939 Berkshire,London,
United Kingdom.
Urgent attention,
After a board meeting with the International Monetary Fund (IMF) director, Christine
Lagarde,the committee on fund management and payments newly inaugurated by the World
financial services authority of The United Nations.(UN)The sum $10,000,000.00 (Ten
Million United States Dollars) has been approved for payment this first quarters of
2018.
The main objectives of the board meeting with the IMF director and the committee on
fund management, was to investigate and approve the release of all outstanding
unpaid and unclaimed funds owed by banks,governments or individuals all over the
globe through contract /inheritance and lottery payments due to be paid to the
rightful beneficiaries within the last ten years.
Your e-mail was found among the first ten contacts to be paid this first quarters
and considering the amount approved $10,000,000.00 (Ten Million United States
Dollars) for payment this first quarters of 2018, the first five (5) beneficiaries
to re- confirm their names, occupation and direct telephone numbers to enable us
update their payment file will be paid two million United States dollars each.
Finally, waiver has been granted in your favor by the committees involved and the
only fee that you are advised to pay for the processing and release of your over due
fund is $95 only. Kindly get back to me immediately with the requested details above
and also request for the instructions that you will need in sending the processing
fee to the payment department.
Yours sincerely
George G. O. Osborne
DIRECTOR (I.M.F)
UNITED KINGDOM
Tel:+448709457217
Tel:+448709457218
Fax:+448442739648
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
