by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 8LA/LuSxTFt4ewAAjbubUg
for <>; Mon, 16 Jul 2018 07:55:32 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 16 Jul 2018 07:55:32 -0700
Received: from smtp133-5.cat.net.th ([122.155.133.5]:59594 helo=relay.cat.net.th)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ff4uQ-0008EX-Tb
for ; Mon, 16 Jul 2018 07:55:32 -0700
Received: from User ([61.19.212.187])
by relay.cat.net.th with SMTP id w6GEo870021754-w6GEo872021754;
Mon, 16 Jul 2018 21:50:13 +0700
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "MRS. CHRISTINE"<[email protected]>
Date: Mon, 16 Jul 2018 15:50:51 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=27.8
X-Spam-Score: 278
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) 1900 PENNSYLVANIA AVE NW,
WASHINGTON DC, 20431 UNITED STATE FROM THE DESK OF: Mrs.Christine Lagarde.
Attention: Beneficiary, [...]
Content analysis details: (27.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[122.155.133.5 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=r ... mf.org;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 FROM_MISSP_SPF_FAIL No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.9 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** Congratulations your fund is clean
INTERNATIONAL MONETARY FUND (IMF)
1900 PENNSYLVANIA AVE NW,
WASHINGTON DC, 20431
UNITED STATE
FROM THE DESK OF: Mrs.Christine Lagarde.
Attention: Beneficiary,
I am please to inform you that the International Monetary Fund is set to release
your fund which has been placed on hold on the bases of Money Laundering Charges.
After due and serious investigation has just been concluded, we have every reason to
believe that you are clean and not involved into any illegal activity. Be advised
that this office do not ask for money for clearances, all we do is to carry out
investigation once any fund has been placed on hold. It can only take us time to
release the fund or confiscate it pending when the investigation was concluded and
the result.
We are truly sorry for any inconveniences this might have cause you but you need to
understand that we are doing our job to keep the country and the world safe. It took
us one year and seven months to complete this investigation even on several
occasions, we have stationed our agents to monitor your cash transactions and
movement. Your fund is total clean and ready to be released to you immediately. You
only need IMF Fund Release Order and we also need you to reconfirm your banking
details where you want your fund transferred.
I shall be waiting for your speedy response and co-operation.
Kindly reply immediately.
Mrs. Christine Lagarde.
IMF MANAGING DIRECTOR AND CHAIRMAN OF THE EXECUTIVE BOARD.
Delivered-To:
Received: from
by with LMTP id 8LA/LuSxTFt4ewAAjbubUg
for <>; Mon, 16 Jul 2018 07:55:32 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 16 Jul 2018 07:55:32 -0700
Received: from smtp133-5.cat.net.th ([122.155.133.5]:59594 helo=relay.cat.net.th)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ff4uQ-0008EX-Tb
for ; Mon, 16 Jul 2018 07:55:32 -0700
Received: from User ([61.19.212.187])
by relay.cat.net.th with SMTP id w6GEo870021754-w6GEo872021754;
Mon, 16 Jul 2018 21:50:13 +0700
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "MRS. CHRISTINE"<[email protected]>
Date: Mon, 16 Jul 2018 15:50:51 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=27.8
X-Spam-Score: 278
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) 1900 PENNSYLVANIA AVE NW,
WASHINGTON DC, 20431 UNITED STATE FROM THE DESK OF: Mrs.Christine Lagarde.
Attention: Beneficiary, [...]
Content analysis details: (27.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[122.155.133.5 listed in list.dnswl.org]
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=r ... mf.org;ip=]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 FROM_MISSP_SPF_FAIL No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_USER From misspaced, from "User"
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 T_HK_NAME_MR_MRS No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.9 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** Congratulations your fund is clean
INTERNATIONAL MONETARY FUND (IMF)
1900 PENNSYLVANIA AVE NW,
WASHINGTON DC, 20431
UNITED STATE
FROM THE DESK OF: Mrs.Christine Lagarde.
Attention: Beneficiary,
I am please to inform you that the International Monetary Fund is set to release
your fund which has been placed on hold on the bases of Money Laundering Charges.
After due and serious investigation has just been concluded, we have every reason to
believe that you are clean and not involved into any illegal activity. Be advised
that this office do not ask for money for clearances, all we do is to carry out
investigation once any fund has been placed on hold. It can only take us time to
release the fund or confiscate it pending when the investigation was concluded and
the result.
We are truly sorry for any inconveniences this might have cause you but you need to
understand that we are doing our job to keep the country and the world safe. It took
us one year and seven months to complete this investigation even on several
occasions, we have stationed our agents to monitor your cash transactions and
movement. Your fund is total clean and ready to be released to you immediately. You
only need IMF Fund Release Order and we also need you to reconfirm your banking
details where you want your fund transferred.
I shall be waiting for your speedy response and co-operation.
Kindly reply immediately.
Mrs. Christine Lagarde.
IMF MANAGING DIRECTOR AND CHAIRMAN OF THE EXECUTIVE BOARD.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
