[email protected] Mrs. Christine Lagarde.

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id eF1rLZS9/1t6IgAAjbubUg
for <>; Thu, 29 Nov 2018 02:21:08 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 29 Nov 2018 02:21:08 -0800
Received: from smtp.xnet.co.za ([196.46.176.249]:41005)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gSJRS-0002Hr-Av
for ; Thu, 29 Nov 2018 02:21:08 -0800
Received: from User (unknown [196.40.191.130])
by smtp.xnet.co.za (Postfix) with SMTP id 2428247CC8F6;
Fri, 30 Nov 2018 07:40:52 +0200 (SAST)
Reply-To: <[email protected]>
From: "Mrs. Christine"<[email protected]>
Date: Thu, 29 Nov 2018 02:20:18 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=23.8
X-Spam-Score: 238
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: INTERNATIONAL MONETARY FUND (IMF) 1900 PENNSYLVANIA AVE NW,
WASHINGTON DC, 20431 UNITED STATE FROM THE DESK OF: Mrs.Christine Lagarde.
Attention: Beneficiary, [...]

Content analysis details: (23.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[196.40.191.130 listed in zen.spamhaus.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[196.46.176.249 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?196.40.191.130>]
1.0 MISSING_HEADERS Missing To: header
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 T_HK_NAME_MR_MRS No description available.
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Congratulations...Your delivery is ready

INTERNATIONAL MONETARY FUND (IMF)
1900 PENNSYLVANIA AVE NW,
WASHINGTON DC, 20431
UNITED STATE


FROM THE DESK OF: Mrs.Christine Lagarde.

Attention: Beneficiary,



Be advised that the pending clearance fee which has been preventing Agent John
Johnson to complete the delivery of your fund has been paid by the Financier
($12,750) I am also pleased to inform you that your fund has been scheduled to be
released to John Johnson for immediate delivery to your doorstep since everything
has been completed. You are advised to contact John Johnson immediately as he is set
to leave the airport with your fund.

We say congratulations and sorry for the delays.

Mrs. Christine Lagarde.
IMF MANAGING DIRECTOR AND CHAIRMAN OF THE EXECUTIVE BOARD.