by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id CDj4CKrEals3KAAAjbubUg
for <>; Wed, 08 Aug 2018 03:23:38 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 08 Aug 2018 03:23:38 -0700
Received: from relay.bilink.ua ([213.111.126.138]:57824)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fnLcu-0002fX-Gg
for ; Wed, 08 Aug 2018 03:23:37 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by relay.bilink.ua (Postfix) with ESMTP id 79476263F39;
Wed, 8 Aug 2018 13:22:53 +0300 (EEST)
X-Virus-Scanned: amavisd-new at bilink.ua
Received: from relay.bilink.ua ([127.0.0.1])
by localhost (relay.bilink.ua [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id B8U0WdiuNIP9; Wed, 8 Aug 2018 13:22:53 +0300 (EEST)
Received: from User (unknown [213.111.89.11])
by relay.bilink.ua (Postfix) with SMTP id B94B1263F2E;
Wed, 8 Aug 2018 13:22:38 +0300 (EEST)
Reply-To: <Smtp.zebra.lt>
From: "Financial Crimes Enforcement Network"<[email protected]>
Date: Wed, 8 Aug 2018 11:23:11 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Financial Crime Enforcement Agency/ U.S custom and Border
Protection. 101 Atlantic City International Airport, Egg Harbor Township,
NJ 08234, USA United States. Attention to: Beneficiary, We write to bring
to your notice about the interception of two trunk boxes on the 1st August,
2018 containing $11.5 Million Dollars from a diplomat agent which belongs
to you on the process of having it delivered to your address. After investigation
was carried out through the documents provided by the agent it was discovered
that your fund is clean money and has nothing to do with money laundering
and drug related activities. For this reason, your agent is free to carry
out the delivery to your address without any interception or embarrassment
from any authority once it has been cleared. [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(frcfincen.gov.state[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Your fund ready for delivery
Financial Crime Enforcement Agency/
U.S custom and Border Protection.
101 Atlantic City International Airport,
Egg Harbor Township, NJ
08234, USA
United States.
Attention to:
Beneficiary,
We write to bring to your notice about the interception of two trunk boxes on the
1st August, 2018 containing $11.5 Million Dollars from a diplomat agent which
belongs to you on the process of having it delivered to your address. After
investigation was carried out through the documents provided by the agent it was
discovered that your fund is clean money and has nothing to do with money laundering
and drug related activities. For this reason, your agent is free to carry out the
delivery to your address without any interception or embarrassment from any
authority once it has been cleared.
I wish to inform you that your trunk boxes are still pending for clearance. You are
advise to get back to us immediately and ensure that this clearance is done today to
avoid having your fund confiscated. Your agent can be reached at +1(786) 763-3265.
Your immediate and urgent co-operation is needed or your fund will be confiscated.
Sincerely,
Angela Libio
FinCEN Acting Director.
U.S DEPARTMENT OF FINANCIAL CRIME ENFORCEMENT (FINCEN)
ATLANTIC CITY INTERNATIONAL AIRORT (ACY)
Cbp.gov |USA.gov | Regulations.gov | IRS.gov | Freedom of Information Act (FOIA) |
NO FEAR Act | Accessibility | EEO & Diversity Policy | Reasonable Accommodation
Policy | Privacy Policy | Google Privacy.
Delivered-To:
Received: from
by with LMTP id CDj4CKrEals3KAAAjbubUg
for <>; Wed, 08 Aug 2018 03:23:38 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 08 Aug 2018 03:23:38 -0700
Received: from relay.bilink.ua ([213.111.126.138]:57824)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fnLcu-0002fX-Gg
for ; Wed, 08 Aug 2018 03:23:37 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by relay.bilink.ua (Postfix) with ESMTP id 79476263F39;
Wed, 8 Aug 2018 13:22:53 +0300 (EEST)
X-Virus-Scanned: amavisd-new at bilink.ua
Received: from relay.bilink.ua ([127.0.0.1])
by localhost (relay.bilink.ua [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id B8U0WdiuNIP9; Wed, 8 Aug 2018 13:22:53 +0300 (EEST)
Received: from User (unknown [213.111.89.11])
by relay.bilink.ua (Postfix) with SMTP id B94B1263F2E;
Wed, 8 Aug 2018 13:22:38 +0300 (EEST)
Reply-To: <Smtp.zebra.lt>
From: "Financial Crimes Enforcement Network"<[email protected]>
Date: Wed, 8 Aug 2018 11:23:11 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Financial Crime Enforcement Agency/ U.S custom and Border
Protection. 101 Atlantic City International Airport, Egg Harbor Township,
NJ 08234, USA United States. Attention to: Beneficiary, We write to bring
to your notice about the interception of two trunk boxes on the 1st August,
2018 containing $11.5 Million Dollars from a diplomat agent which belongs
to you on the process of having it delivered to your address. After investigation
was carried out through the documents provided by the agent it was discovered
that your fund is clean money and has nothing to do with money laundering
and drug related activities. For this reason, your agent is free to carry
out the delivery to your address without any interception or embarrassment
from any authority once it has been cleared. [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(frcfincen.gov.state[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 MISSING_HEADERS Missing To: header
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MISSING_MID Missing Message-Id: header
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Your fund ready for delivery
Financial Crime Enforcement Agency/
U.S custom and Border Protection.
101 Atlantic City International Airport,
Egg Harbor Township, NJ
08234, USA
United States.
Attention to:
Beneficiary,
We write to bring to your notice about the interception of two trunk boxes on the
1st August, 2018 containing $11.5 Million Dollars from a diplomat agent which
belongs to you on the process of having it delivered to your address. After
investigation was carried out through the documents provided by the agent it was
discovered that your fund is clean money and has nothing to do with money laundering
and drug related activities. For this reason, your agent is free to carry out the
delivery to your address without any interception or embarrassment from any
authority once it has been cleared.
I wish to inform you that your trunk boxes are still pending for clearance. You are
advise to get back to us immediately and ensure that this clearance is done today to
avoid having your fund confiscated. Your agent can be reached at +1(786) 763-3265.
Your immediate and urgent co-operation is needed or your fund will be confiscated.
Sincerely,
Angela Libio
FinCEN Acting Director.
U.S DEPARTMENT OF FINANCIAL CRIME ENFORCEMENT (FINCEN)
ATLANTIC CITY INTERNATIONAL AIRORT (ACY)
Cbp.gov |USA.gov | Regulations.gov | IRS.gov | Freedom of Information Act (FOIA) |
NO FEAR Act | Accessibility | EEO & Diversity Policy | Reasonable Accommodation
Policy | Privacy Policy | Google Privacy.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
