by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id EDTXAgFL21uOfgAAjbubUg
for <>; Thu, 01 Nov 2018 11:50:41 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 01 Nov 2018 11:50:41 -0700
Received: from esa10.hc49497.c3s2.iphmx.com ([68.232.156.175]:45498)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gII3D-0008Pq-Cp
for ; Thu, 01 Nov 2018 11:50:40 -0700
X-IronPort-AV: E=Sophos;i="5.54,453,1534838400";
d="scan'208,217";a="196746679"
Received: from ec2-34-240-168-86.eu-west-1.compute.amazonaws.com (HELO 5dedbae171a2.walla.co.il) ([34.240.168.86])
by ob1.hc49497.c3s2.iphmx.com with ESMTP; 01 Nov 2018 10:49:51 -0800
Received: by 5dedbae171a2.walla.co.il (Postfix, from userid 33)
id 22E164144E; Thu, 1 Nov 2018 18:49:51 +0000 (UTC)
To:
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Provider: walla.mail/v
From: =?UTF-8?B?RnJhbmsgV29vZGpy?= <[email protected]>
Date: Thu, 01 Nov 2018 20:49:50 +0200
Reply-To: <[email protected]>
Message-Id: <^[email protected]>
X-Spam-Status: Yes, score=14.5
X-Spam-Score: 145
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary. It may interest you to know that not
long after the International Monetary Fund (IMF) completed the merger and
acquisition process of all long over-due payments due to the petition raised
by the international community about their unpaid funds . I am Mr. Paul Moley,
Head, Debt Reconciliation Committee, International Monetary Fund (IMF) on
special assignment. Consequent on the series of complaints against unscrupulous
officials of financial institutions and miscreants because of inconclusive
payments, financial misconducts and extortions, a team of International Monetary
Fund (IMF) Debt Reconciliation Committee was constituted and mandated to
investigate cases of extortion of money and unpaid entitlements. Cases we
are handling include pending contract payments, inheritance funds and investment
funds etc. We have received an approval forwarded to our committee from our
head office in Switzerland to effect an immediate part payment of $10 Million
USD (Ten Million United States Dollars) to you being part payment of your
overdue payment. Your name appeared among the approved beneficiaries who
will receive their part payment of $10 Million United States Dollars. You
are to re- confirm the following details below; 1.Your Full Name: 2.Your Full
Address: 3 Your Direct telephone Number: 4.Your ID, International Passport
or Drivers Liciense for your identification. I await your urgent response
through my private email :[email protected] Yours Sincerely, Mr. Paul Moley.
Head, Debt Reconciliation Committee, International Monetary Fund (IMF). [...]
Content analysis details: (14.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(frankwoodjr1[at]walla.co.il)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (frankwoodjr1[at]walla.co.il)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(frankwoodjr1[at]walla.co.il)
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[68.232.156.175 listed in list.dnswl.org]
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?SSBhd2FpdCB5b3VyIHVyZ2VudCByZXNwb25zZSB0aHJvdWdoIG15IHByaXZhdGUgZW1haWwgOnBhdWxtb2xleUBtYWlsLmNvbQ==?=
Attention: Beneficiary.
It may interest you to know that not long after the International
Monetary Fund (IMF) completed the merger and acquisition process of
all long over-due payments due to the petition raised by the
international community about their unpaid funds .
I am Mr. Paul Moley, Head, Debt Reconciliation Committee,
International Monetary Fund (IMF) on special assignment. Consequent on
the series of complaints against unscrupulous officials of financial
institutions and miscreants because of inconclusive payments,
financial misconducts and extortions, a team of International Monetary
Fund (IMF) Debt Reconciliation Committee was constituted and mandated
to investigate cases of extortion of money and unpaid entitlements.
Cases we are handling include pending contract payments, inheritance
funds and investment funds etc.
We have received an approval forwarded to our committee from our head
office in Switzerland to effect an immediate part payment of $10
Million USD (Ten Million United States Dollars) to you being part
payment of your overdue payment. Your name appeared among the approved
beneficiaries who will receive their part payment of $10 Million
United States Dollars.
You are to re- confirm the following details below;
1.Your Full Name:
2.Your Full Address:
3 Your Direct telephone Number:
4.Your ID, International Passport or Drivers Liciense for your identification.
I await your urgent response through my private email : [email protected]
Yours Sincerely,
Mr. Paul Moley.
Head, Debt Reconciliation Committee,
International Monetary Fund (IMF).
Delivered-To:
Received: from
by with LMTP id EDTXAgFL21uOfgAAjbubUg
for <>; Thu, 01 Nov 2018 11:50:41 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 01 Nov 2018 11:50:41 -0700
Received: from esa10.hc49497.c3s2.iphmx.com ([68.232.156.175]:45498)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gII3D-0008Pq-Cp
for ; Thu, 01 Nov 2018 11:50:40 -0700
X-IronPort-AV: E=Sophos;i="5.54,453,1534838400";
d="scan'208,217";a="196746679"
Received: from ec2-34-240-168-86.eu-west-1.compute.amazonaws.com (HELO 5dedbae171a2.walla.co.il) ([34.240.168.86])
by ob1.hc49497.c3s2.iphmx.com with ESMTP; 01 Nov 2018 10:49:51 -0800
Received: by 5dedbae171a2.walla.co.il (Postfix, from userid 33)
id 22E164144E; Thu, 1 Nov 2018 18:49:51 +0000 (UTC)
To:
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Provider: walla.mail/v
From: =?UTF-8?B?RnJhbmsgV29vZGpy?= <[email protected]>
Date: Thu, 01 Nov 2018 20:49:50 +0200
Reply-To: <[email protected]>
Message-Id: <^[email protected]>
X-Spam-Status: Yes, score=14.5
X-Spam-Score: 145
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Beneficiary. It may interest you to know that not
long after the International Monetary Fund (IMF) completed the merger and
acquisition process of all long over-due payments due to the petition raised
by the international community about their unpaid funds . I am Mr. Paul Moley,
Head, Debt Reconciliation Committee, International Monetary Fund (IMF) on
special assignment. Consequent on the series of complaints against unscrupulous
officials of financial institutions and miscreants because of inconclusive
payments, financial misconducts and extortions, a team of International Monetary
Fund (IMF) Debt Reconciliation Committee was constituted and mandated to
investigate cases of extortion of money and unpaid entitlements. Cases we
are handling include pending contract payments, inheritance funds and investment
funds etc. We have received an approval forwarded to our committee from our
head office in Switzerland to effect an immediate part payment of $10 Million
USD (Ten Million United States Dollars) to you being part payment of your
overdue payment. Your name appeared among the approved beneficiaries who
will receive their part payment of $10 Million United States Dollars. You
are to re- confirm the following details below; 1.Your Full Name: 2.Your Full
Address: 3 Your Direct telephone Number: 4.Your ID, International Passport
or Drivers Liciense for your identification. I await your urgent response
through my private email :[email protected] Yours Sincerely, Mr. Paul Moley.
Head, Debt Reconciliation Committee, International Monetary Fund (IMF). [...]
Content analysis details: (14.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(frankwoodjr1[at]walla.co.il)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (frankwoodjr1[at]walla.co.il)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(frankwoodjr1[at]walla.co.il)
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[68.232.156.175 listed in list.dnswl.org]
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?SSBhd2FpdCB5b3VyIHVyZ2VudCByZXNwb25zZSB0aHJvdWdoIG15IHByaXZhdGUgZW1haWwgOnBhdWxtb2xleUBtYWlsLmNvbQ==?=
Attention: Beneficiary.
It may interest you to know that not long after the International
Monetary Fund (IMF) completed the merger and acquisition process of
all long over-due payments due to the petition raised by the
international community about their unpaid funds .
I am Mr. Paul Moley, Head, Debt Reconciliation Committee,
International Monetary Fund (IMF) on special assignment. Consequent on
the series of complaints against unscrupulous officials of financial
institutions and miscreants because of inconclusive payments,
financial misconducts and extortions, a team of International Monetary
Fund (IMF) Debt Reconciliation Committee was constituted and mandated
to investigate cases of extortion of money and unpaid entitlements.
Cases we are handling include pending contract payments, inheritance
funds and investment funds etc.
We have received an approval forwarded to our committee from our head
office in Switzerland to effect an immediate part payment of $10
Million USD (Ten Million United States Dollars) to you being part
payment of your overdue payment. Your name appeared among the approved
beneficiaries who will receive their part payment of $10 Million
United States Dollars.
You are to re- confirm the following details below;
1.Your Full Name:
2.Your Full Address:
3 Your Direct telephone Number:
4.Your ID, International Passport or Drivers Liciense for your identification.
I await your urgent response through my private email : [email protected]
Yours Sincerely,
Mr. Paul Moley.
Head, Debt Reconciliation Committee,
International Monetary Fund (IMF).
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
