by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id IF7RN4VDyV3nVQAAjbubUg
for >; Mon, 11 Nov 2019 03:18:29 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 11 Nov 2019 03:18:29 -0800
Received: from [210.151.50.99] (port=52890 helo=server01.fpc1220.jp)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iU7iE-0005hr-UY
for ; Mon, 11 Nov 2019 03:18:29 -0800
Received: from User ([197.242.105.206])
(authenticated bits=0)
by server01.fpc1220.jp (MTA) with ESMTP id xABBFVjW017069;
Mon, 11 Nov 2019 20:15:35 +0900
Message-Id: <[email protected]>
Reply-To: <[email protected]>
Date: Sun, 10 Nov 2019 23:16:00 -1200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: Avast (VPS 191110-0, 11/09/2019), Outbound message
X-Antivirus-Status: Clean
X-Spam-Status: Yes, score=60.4
X-Spam-Score: 604
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: United Nations Organization. 405 East 42nd Street, New York,
NY, 10017, USA [...]
Content analysis details: (60.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[197.242.105.206 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 NSL_RCVD_FROM_USER Received from User
2.1 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
1.6 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[210.151.50.99 listed in bl.score.senderscore.com]
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.6 FROM_MISSP_USER From misspaced, from "User"
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 LOTS_OF_MONEY Huge... sums of money
1.7 HK_SCAM No description available.
2.6 MSOE_MID_WRONG_CASE No description available.
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.7 FSL_NEW_HELO_USER Spam's using Helo and User
1.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.2 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.0 FROM_MISSPACED From: missing whitespace
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.3 MONEY_FORM Lots of money if you fill out a form
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.7 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR LONG OVERDUE COMPENSATION FUND OF $1.5 MILLION IS READY,RESPOND ASAP.
United Nations Organization.
405 East 42nd Street,
New York, NY, 10017, USA
E-mail: [email protected]
Our Ref: IMF/WB/UN/XWFD/0611/X012
Attention: Beneficiary
Having reviewed thousands of extortion/delayed payment release cases on all the
unpaid Inheritance, Lottery winners and Contract beneficiaries, the European Union
(EU) and United States Government in collaboration with the International Monetary
Fund (IMF), United Nation (UN), FBI and the World Bank, has joined forces as Global
Fund Recovery Management and Payment Bureau to compensate you as one of the selected
verified beneficiaries of unpaid Inheritance within Asia, America, Africa, Oceania
and Europe with the sum of (US$1,500,000.00) One Million,Five hundred thousand
United States dollars only.
It may interest you to know that your name has been out-listed among the
beneficiaries to benefit from our newly invented program. This program was invented
to help fight against the abuse of legal human right by those who are privileged to
override the trust of the less privilege. This body was set up to discover all
outstanding unpaid funds being owed to Governments and Individuals all over the
world through Contract Payment, Inheritance and Lottery Winning Prize Awards.
This group is responsible for investigating all reports, the legitimacy of
contracts, inheritance and lotto winning claims by companies and individuals and
directs the paying authorities worldwide to make immediate payment of verified
claims to the beneficiaries without further delay or hitch. You are being legally
and legitimately contacted today, regarding the process and release of your long
awaited fund. Be kindly informed that after a careful detailed review of your file,
we have authorized the paying financial institution (United States Department of the
Treasury) to process and release your fund for immediate transfer to you via a
telephone banking portal, which will be issued in your name, the moment your reply
is received.
This payment method initiated, is to stop the practice of the past and the
unnecessary delay on your payment and to ensure that your payment is not
manipulated. This way you will not have to go through the rigorous process most
people went through in the past.
To further ensure you receive your compensation fund as the beneficiary, we implore
that you get back to us with your re-confirmed personal and bank details as stated
below,which is being requested to be sure of accuracy about your right details to
effect transfer of funds as the case may be :
Personal information:
1: Your First Name...............
2: Your Middle Name................
3: Your Last Name...............
4: Your Complete Home Address..............
5: Your Home Tel No...............
6: Your Cell Phone No.............
7: Your date of birth (D.O.B)...............
8: Your Occupation.............
9: Marital Statures...............
10: Copy of Identification..............
11. Country of Residence.................
Your bank account details needed are as stated below:
1. Your bank Name and address................
2. Your bank Telephone number................
3. Name on your bank account.................
4. Account Number......................
5. Routing Number....................
Details of your telephone banking account information to access your balance via
your telephone will be provided through the United States Department of the
Treasury, with further instructions from us, the moment we read back from you,
confirming this transaction.
Be informed that this matter is very urgent and important, so we are waiting to hear
from you today. Note that because Of impostors, we hereby issued you our Code of
Conduct, Which Is (GLOBAL-0611/X012).So you have to indicate this code when
contacting us by using it as your subject line for identification and security
purpose.
Finally, you have been warned to STOP every communication you have with anyone now
as regards to your payment release.
Your earliest response will be a very big advantage to you!!!
Congratulations!!!
Secretary-General
United Nations Organization.
Contact him by providing him with your secret pin code Number
BMW:2541256004/25. You are also advised to provide him with the
under listed information as soon as possible.
1. Name In Full :
2. Residential Address :
3. Nationality :
4. Age :
5. Occupation :
6. Direct Phone :
7. Present Country :
8. Email address :
9. pin code Number BMW:2541256004/25
Mrs. Rachael Adams.
THE DIRECTOR PROMOTIONS
BMW LOTTERY DEPARTMENT.
UNITED STATES OF AMERICA
Delivered-To:
Received: from
by with LMTP id IF7RN4VDyV3nVQAAjbubUg
for >; Mon, 11 Nov 2019 03:18:29 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 11 Nov 2019 03:18:29 -0800
Received: from [210.151.50.99] (port=52890 helo=server01.fpc1220.jp)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1iU7iE-0005hr-UY
for ; Mon, 11 Nov 2019 03:18:29 -0800
Received: from User ([197.242.105.206])
(authenticated bits=0)
by server01.fpc1220.jp (MTA) with ESMTP id xABBFVjW017069;
Mon, 11 Nov 2019 20:15:35 +0900
Message-Id: <[email protected]>
Reply-To: <[email protected]>
Date: Sun, 10 Nov 2019 23:16:00 -1200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: Avast (VPS 191110-0, 11/09/2019), Outbound message
X-Antivirus-Status: Clean
X-Spam-Status: Yes, score=60.4
X-Spam-Score: 604
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: United Nations Organization. 405 East 42nd Street, New York,
NY, 10017, USA [...]
Content analysis details: (60.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[197.242.105.206 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 NSL_RCVD_FROM_USER Received from User
2.1 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
1.6 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[210.151.50.99 listed in bl.score.senderscore.com]
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.6 FROM_MISSP_USER From misspaced, from "User"
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 LOTS_OF_MONEY Huge... sums of money
1.7 HK_SCAM No description available.
2.6 MSOE_MID_WRONG_CASE No description available.
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.7 FSL_NEW_HELO_USER Spam's using Helo and User
1.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.2 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.0 FROM_MISSPACED From: missing whitespace
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.3 MONEY_FORM Lots of money if you fill out a form
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.7 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR LONG OVERDUE COMPENSATION FUND OF $1.5 MILLION IS READY,RESPOND ASAP.
United Nations Organization.
405 East 42nd Street,
New York, NY, 10017, USA
E-mail: [email protected]
Our Ref: IMF/WB/UN/XWFD/0611/X012
Attention: Beneficiary
Having reviewed thousands of extortion/delayed payment release cases on all the
unpaid Inheritance, Lottery winners and Contract beneficiaries, the European Union
(EU) and United States Government in collaboration with the International Monetary
Fund (IMF), United Nation (UN), FBI and the World Bank, has joined forces as Global
Fund Recovery Management and Payment Bureau to compensate you as one of the selected
verified beneficiaries of unpaid Inheritance within Asia, America, Africa, Oceania
and Europe with the sum of (US$1,500,000.00) One Million,Five hundred thousand
United States dollars only.
It may interest you to know that your name has been out-listed among the
beneficiaries to benefit from our newly invented program. This program was invented
to help fight against the abuse of legal human right by those who are privileged to
override the trust of the less privilege. This body was set up to discover all
outstanding unpaid funds being owed to Governments and Individuals all over the
world through Contract Payment, Inheritance and Lottery Winning Prize Awards.
This group is responsible for investigating all reports, the legitimacy of
contracts, inheritance and lotto winning claims by companies and individuals and
directs the paying authorities worldwide to make immediate payment of verified
claims to the beneficiaries without further delay or hitch. You are being legally
and legitimately contacted today, regarding the process and release of your long
awaited fund. Be kindly informed that after a careful detailed review of your file,
we have authorized the paying financial institution (United States Department of the
Treasury) to process and release your fund for immediate transfer to you via a
telephone banking portal, which will be issued in your name, the moment your reply
is received.
This payment method initiated, is to stop the practice of the past and the
unnecessary delay on your payment and to ensure that your payment is not
manipulated. This way you will not have to go through the rigorous process most
people went through in the past.
To further ensure you receive your compensation fund as the beneficiary, we implore
that you get back to us with your re-confirmed personal and bank details as stated
below,which is being requested to be sure of accuracy about your right details to
effect transfer of funds as the case may be :
Personal information:
1: Your First Name...............
2: Your Middle Name................
3: Your Last Name...............
4: Your Complete Home Address..............
5: Your Home Tel No...............
6: Your Cell Phone No.............
7: Your date of birth (D.O.B)...............
8: Your Occupation.............
9: Marital Statures...............
10: Copy of Identification..............
11. Country of Residence.................
Your bank account details needed are as stated below:
1. Your bank Name and address................
2. Your bank Telephone number................
3. Name on your bank account.................
4. Account Number......................
5. Routing Number....................
Details of your telephone banking account information to access your balance via
your telephone will be provided through the United States Department of the
Treasury, with further instructions from us, the moment we read back from you,
confirming this transaction.
Be informed that this matter is very urgent and important, so we are waiting to hear
from you today. Note that because Of impostors, we hereby issued you our Code of
Conduct, Which Is (GLOBAL-0611/X012).So you have to indicate this code when
contacting us by using it as your subject line for identification and security
purpose.
Finally, you have been warned to STOP every communication you have with anyone now
as regards to your payment release.
Your earliest response will be a very big advantage to you!!!
Congratulations!!!
Secretary-General
United Nations Organization.
Contact him by providing him with your secret pin code Number
BMW:2541256004/25. You are also advised to provide him with the
under listed information as soon as possible.
1. Name In Full :
2. Residential Address :
3. Nationality :
4. Age :
5. Occupation :
6. Direct Phone :
7. Present Country :
8. Email address :
9. pin code Number BMW:2541256004/25
Mrs. Rachael Adams.
THE DIRECTOR PROMOTIONS
BMW LOTTERY DEPARTMENT.
UNITED STATES OF AMERICA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
