by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id KEDyBDSU51qpcQAAjbubUg
for <>; Mon, 30 Apr 2018 15:09:56 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 30 Apr 2018 15:09:56 -0700
Received: from mout.gmx.com ([74.208.4.200]:54391)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fDGzW-0007Yy-Lg
for ; Mon, 30 Apr 2018 15:09:55 -0700
Received: from [95.211.211.184] ([95.211.211.184]) by
3c-app-mailcom-lxa06.server.lan (via HTTP); Tue, 1 May 2018 00:08:57 +0200
MIME-Version: 1.0
Message-ID: <trinity-e900cf70-88d6-4768-8b21-fb8747106ec2-1525126137367@3c-app-mailcom-lxa06>
From: "american fbi" <[email protected]>
Content-Type: text/html; charset=UTF-8
Date: Tue, 1 May 2018 00:08:57 +0200
Importance: normal
Sensitivity: Normal
X-Priority: 3
X-Provags-ID: V03:K1:UZCXARdXD+MdgZwmT6uXuFidiHAtdwGmS820eoOa2E5
WGkjrmShYW95gz/F0RBlPfi2rVQF6ngpdbq325nRTwlfc2//pZ
bBZKlcct0VWMSyR8XqhqpNtoWKJkciO/V68UNwB3gkJZKAr6bE
cxgkdiXvs7O1WFmjHNAMBYhUEoAsxTs/yORHa2rncFhuG6TzV3
qBeVPwLaFUnuDN8EZ3DWlZGq/kf0V7/Ye0sAwv4/9ZU29QK9Hn
bqUWp2QUD6f8dSWJ9oqh5teFyXP4Kn3YCaWuLfFDhsrwWlZuFT APMX04=
X-UI-Out-Filterresults: notjunk:1;V01:K0:M3sRVGOar0k=:9WtMxJucQWOpTVZsX1Gw6a
V4dze+DfJuzrYtv+tO611srx9KXrq84dsr0R1Tf8AbIHw3slOVWruVqn9HS03NLWE4K0rtVn+
1xl2BPXCWdatDpW9cx+PmLOi9ac279EmvyvWtg/ql7KvsQkU2A2WZTCPJhdyExjGBBjgBMlxM
pR0ud9QK0v/3eoIMJlabPMImmt+8l3TaIfa/VzaLSR/5q/PLh5antoCrj6O1V3lBL/V3O6kKN
4qRFb4OG9XOWTmuxeo9ilygZnEgbvmrgGQpEj7OHgJ+74CNmek2w9oyYAi8l9GRggjmeqYSr+
beBPO43v0mIUEpN+PYe755PZIX0SnVSwp2aC/XQGznttC1ohhhyOpofpJRo8onHDB3kh4+v3T
ByLEnLjigaLU7qVqufEg0V5ZXCM4nvgh7cCRTNlno7A+F1111dIJHB9ixbnRIukKi48TBx9OT
O2OqqOzCdADIxYTEut3RXAtcLJv/g0o4q53SVPiL99z94SefUUFR
X-Spam-Status: Yes, score=18.3
X-Spam-Score: 183
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC. WASHINGTON
D.C ROOM,7367 J. EDGAR HOOVER FBI BUILDING 935 PENNSYLVANIA AVENUE NW WASHINGTON,
DC 20535, Your Fund Information From FBI Office, Attn;The Beneficiary, [...]
Content analysis details: (18.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.7 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[74.208.4.200 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(american_fbi[at]usa.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
2.2 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.9 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Your Fund Information From FBI Office,
FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC.
WASHINGTON D.C ROOM,7367
J. EDGAR HOOVER FBI BUILDING
935 PENNSYLVANIA AVENUE
NW WASHINGTON, DC 20535,
Your Fund Information From FBI Office,
Attn;The Beneficiary,
This Is Officially Inform You That Central Bank Of Nigeria And American FBI Office
Has Been Meeting To See That We Resolve And Compensate All The Scam Victims Like You
This Time With ATM Card Value Of $10.5M You are advice to get back with your
following information:
Name,
Address,
Phone,a
Age,
Sex,
Occupation.
Instructions, THE FBI OFFICE AND UNITED NATIONS HAVE DECIDED TO TAKE THIS ISSUE
UPON-OURSELVES TO SAFEGUARD YOU FROM THESE CRIMINAL MINDED INDIVIDUALS WHOSE ONLY
INTEREST WAS TO EXTORT MONEY AND FEES FROM YOU THAT IS WHY YOU ARE TO CONTACT
AMERICAN AMBASSADOR TO NIGERIA FOR YOUR ATM CARD COMPENSATION FUND AND WITH HIM YOU
MOST RECEIVE YOUR ATM CARD COMPENSATION FUND WITHOUT ANY DELAY WHICH WE ARE TO GIVE
YOU HIS CONTACT IN YOUR NEXT MAIL,
IF YOU KNOW YOU HAVE RECEIVE YOUR FUND IGNORE THIS MAIL,
Thanks,
Yours Faithfully.
For the FBI Office
Mr.Christopher A. Wray,
The New Director,
Delivered-To:
Received: from
by with LMTP id KEDyBDSU51qpcQAAjbubUg
for <>; Mon, 30 Apr 2018 15:09:56 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 30 Apr 2018 15:09:56 -0700
Received: from mout.gmx.com ([74.208.4.200]:54391)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fDGzW-0007Yy-Lg
for ; Mon, 30 Apr 2018 15:09:55 -0700
Received: from [95.211.211.184] ([95.211.211.184]) by
3c-app-mailcom-lxa06.server.lan (via HTTP); Tue, 1 May 2018 00:08:57 +0200
MIME-Version: 1.0
Message-ID: <trinity-e900cf70-88d6-4768-8b21-fb8747106ec2-1525126137367@3c-app-mailcom-lxa06>
From: "american fbi" <[email protected]>
Content-Type: text/html; charset=UTF-8
Date: Tue, 1 May 2018 00:08:57 +0200
Importance: normal
Sensitivity: Normal
X-Priority: 3
X-Provags-ID: V03:K1:UZCXARdXD+MdgZwmT6uXuFidiHAtdwGmS820eoOa2E5
WGkjrmShYW95gz/F0RBlPfi2rVQF6ngpdbq325nRTwlfc2//pZ
bBZKlcct0VWMSyR8XqhqpNtoWKJkciO/V68UNwB3gkJZKAr6bE
cxgkdiXvs7O1WFmjHNAMBYhUEoAsxTs/yORHa2rncFhuG6TzV3
qBeVPwLaFUnuDN8EZ3DWlZGq/kf0V7/Ye0sAwv4/9ZU29QK9Hn
bqUWp2QUD6f8dSWJ9oqh5teFyXP4Kn3YCaWuLfFDhsrwWlZuFT APMX04=
X-UI-Out-Filterresults: notjunk:1;V01:K0:M3sRVGOar0k=:9WtMxJucQWOpTVZsX1Gw6a
V4dze+DfJuzrYtv+tO611srx9KXrq84dsr0R1Tf8AbIHw3slOVWruVqn9HS03NLWE4K0rtVn+
1xl2BPXCWdatDpW9cx+PmLOi9ac279EmvyvWtg/ql7KvsQkU2A2WZTCPJhdyExjGBBjgBMlxM
pR0ud9QK0v/3eoIMJlabPMImmt+8l3TaIfa/VzaLSR/5q/PLh5antoCrj6O1V3lBL/V3O6kKN
4qRFb4OG9XOWTmuxeo9ilygZnEgbvmrgGQpEj7OHgJ+74CNmek2w9oyYAi8l9GRggjmeqYSr+
beBPO43v0mIUEpN+PYe755PZIX0SnVSwp2aC/XQGznttC1ohhhyOpofpJRo8onHDB3kh4+v3T
ByLEnLjigaLU7qVqufEg0V5ZXCM4nvgh7cCRTNlno7A+F1111dIJHB9ixbnRIukKi48TBx9OT
O2OqqOzCdADIxYTEut3RXAtcLJv/g0o4q53SVPiL99z94SefUUFR
X-Spam-Status: Yes, score=18.3
X-Spam-Score: 183
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC. WASHINGTON
D.C ROOM,7367 J. EDGAR HOOVER FBI BUILDING 935 PENNSYLVANIA AVENUE NW WASHINGTON,
DC 20535, Your Fund Information From FBI Office, Attn;The Beneficiary, [...]
Content analysis details: (18.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
3.7 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[74.208.4.200 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(american_fbi[at]usa.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
2.2 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.9 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Your Fund Information From FBI Office,
FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC.
WASHINGTON D.C ROOM,7367
J. EDGAR HOOVER FBI BUILDING
935 PENNSYLVANIA AVENUE
NW WASHINGTON, DC 20535,
Your Fund Information From FBI Office,
Attn;The Beneficiary,
This Is Officially Inform You That Central Bank Of Nigeria And American FBI Office
Has Been Meeting To See That We Resolve And Compensate All The Scam Victims Like You
This Time With ATM Card Value Of $10.5M You are advice to get back with your
following information:
Name,
Address,
Phone,a
Age,
Sex,
Occupation.
Instructions, THE FBI OFFICE AND UNITED NATIONS HAVE DECIDED TO TAKE THIS ISSUE
UPON-OURSELVES TO SAFEGUARD YOU FROM THESE CRIMINAL MINDED INDIVIDUALS WHOSE ONLY
INTEREST WAS TO EXTORT MONEY AND FEES FROM YOU THAT IS WHY YOU ARE TO CONTACT
AMERICAN AMBASSADOR TO NIGERIA FOR YOUR ATM CARD COMPENSATION FUND AND WITH HIM YOU
MOST RECEIVE YOUR ATM CARD COMPENSATION FUND WITHOUT ANY DELAY WHICH WE ARE TO GIVE
YOU HIS CONTACT IN YOUR NEXT MAIL,
IF YOU KNOW YOU HAVE RECEIVE YOUR FUND IGNORE THIS MAIL,
Thanks,
Yours Faithfully.
For the FBI Office
Mr.Christopher A. Wray,
The New Director,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

