by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 2BzPNni1nVrKOwAAjbubUg
for <>; Mon, 05 Mar 2018 13:24:08 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 05 Mar 2018 13:24:08 -0800
Received: from dsl-202-45-101-188-static.vic.netspace.net.au ([202.45.101.188]:26809 helo=server01.h4u.local)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1esxaW-0003xX-EW
for ; Mon, 05 Mar 2018 13:24:08 -0800
Received: from User ([202.173.183.116]) by server01.h4u.local with Microsoft SMTPSVC(6.0.3790.1830);
Tue, 6 Mar 2018 06:20:20 +1100
Reply-To: <[email protected]>
From: "STEVE WILLIAMS"<[email protected]>
Date: Mon, 5 Mar 2018 22:23:24 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 05 Mar 2018 19:20:22.0406 (UTC) FILETIME=[01ADD260:01D3B4B7]
X-Spam-Status: Yes, score=29.7
X-Spam-Score: 297
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF). REGIONAL OFFICE, Whitehall
Court London, SW1A 2EL United Kingdom. Attention: Please, A power of attorney
was forwarded to our office this morning by one gentle man and he is a citizen
from united state of America and his name is Micheal Williams. [...]
Content analysis details: (29.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mr.stevewilliams7575[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(william.imf[at]outlook.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
1.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.8 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.5 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RELEASE OF YOUR FUND
INTERNATIONAL MONETARY FUND (IMF).
REGIONAL OFFICE,
Whitehall Court London, SW1A 2EL
United Kingdom.
Attention: Please,
A power of attorney was forwarded to our office this morning by one gentle man and
he is a citizen from united state of America and his name is Micheal Williams.
This man claimed to be your representative and this power of attorney stated that
you are dead after brief illness and he brought account to replace your information
in other to claim your fund of $11.5 million us dollars which is now laying dormant
and unclaimed, below is the new account he have submitted:
City Bank
Account# / 6503809428.
Routing/122006743,
Address 1076 Peter Johnson Road
New York, USA,
Account Name: Michael Williams.
You are to get back to this office immediately for clarifications on this matter and
also be advised that your payment file needs to be renewed and updated with the
renewal fee of $150 if you are still alive.
We need you to reconfirm the following information to us.
(1) Full Name:
(2) Country/State:
(3) Delivery Address:
(4) Occupation;
(5) Sex.
(6) Age:
(7) Telephone Number:
We shall send you the information on how to send the renewal fee once we hear from
you and failure to hear from you after 24 hours we will take it that what Mr.
Michael said is truth.
Best Regards.
Steve. Williams
Regional Director.
INTERNATIONAL MONETARY FUND.
Delivered-To:
Received: from
by with LMTP id 2BzPNni1nVrKOwAAjbubUg
for <>; Mon, 05 Mar 2018 13:24:08 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 05 Mar 2018 13:24:08 -0800
Received: from dsl-202-45-101-188-static.vic.netspace.net.au ([202.45.101.188]:26809 helo=server01.h4u.local)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1esxaW-0003xX-EW
for ; Mon, 05 Mar 2018 13:24:08 -0800
Received: from User ([202.173.183.116]) by server01.h4u.local with Microsoft SMTPSVC(6.0.3790.1830);
Tue, 6 Mar 2018 06:20:20 +1100
Reply-To: <[email protected]>
From: "STEVE WILLIAMS"<[email protected]>
Date: Mon, 5 Mar 2018 22:23:24 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 05 Mar 2018 19:20:22.0406 (UTC) FILETIME=[01ADD260:01D3B4B7]
X-Spam-Status: Yes, score=29.7
X-Spam-Score: 297
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF). REGIONAL OFFICE, Whitehall
Court London, SW1A 2EL United Kingdom. Attention: Please, A power of attorney
was forwarded to our office this morning by one gentle man and he is a citizen
from united state of America and his name is Micheal Williams. [...]
Content analysis details: (29.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mr.stevewilliams7575[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(william.imf[at]outlook.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
1.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.8 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.5 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RELEASE OF YOUR FUND
INTERNATIONAL MONETARY FUND (IMF).
REGIONAL OFFICE,
Whitehall Court London, SW1A 2EL
United Kingdom.
Attention: Please,
A power of attorney was forwarded to our office this morning by one gentle man and
he is a citizen from united state of America and his name is Micheal Williams.
This man claimed to be your representative and this power of attorney stated that
you are dead after brief illness and he brought account to replace your information
in other to claim your fund of $11.5 million us dollars which is now laying dormant
and unclaimed, below is the new account he have submitted:
City Bank
Account# / 6503809428.
Routing/122006743,
Address 1076 Peter Johnson Road
New York, USA,
Account Name: Michael Williams.
You are to get back to this office immediately for clarifications on this matter and
also be advised that your payment file needs to be renewed and updated with the
renewal fee of $150 if you are still alive.
We need you to reconfirm the following information to us.
(1) Full Name:
(2) Country/State:
(3) Delivery Address:
(4) Occupation;
(5) Sex.
(6) Age:
(7) Telephone Number:
We shall send you the information on how to send the renewal fee once we hear from
you and failure to hear from you after 24 hours we will take it that what Mr.
Michael said is truth.
Best Regards.
Steve. Williams
Regional Director.
INTERNATIONAL MONETARY FUND.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
