by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by v with LMTP
id ES7GEDl0c17WGgEAibB4EA
(envelope-from <[email protected]>)
for <>; Thu, 19 Mar 2020 09:31:37 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 19 Mar 2020 09:31:37 -0400
Received: from mail-wm1-f65.google.com ([209.85.128.65]:35709)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jEvGp-000IoW-HP
for ; Thu, 19 Mar 2020 09:31:37 -0400
Received: by mail-wm1-f65.google.com with SMTP id m3so2293976wmi.0
for <>; Thu, 19 Mar 2020 06:31:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to;
bh=xJTFF5zC40Dci7EGp4slBvI9/hAu2z8nzKYl4/9JUxk=;
b=RWAWDZZu7w2jaRlk5+aN8gEW3+Te+EzTYNc+Lr2WL9NHypYduBQmj68zQcAIffawuP
BsqQ4amImPEst5fQf/PReLCiGq6396fAXKvGjcmDW9FHrs7cHa+GMt/bPZOMcTOvFxhP
6uV2H+t3jx5iAL3QCaddnYU1eQA15XceoaG+l+ozq1eoC6rjGudGlqHwqisraQox4+Od
yEdNs22kmGhHn+JUaLDq1WqW7U3y1RtNejMTbO0na+Sw/x9GNvuF/5QIa4Q7cDZC1Cwf
m//e5rDu9MPiggd95VXLl6k9V762lY+Kjc5Xh2VlUUoQFp6dDm2PJgK6QmuuVlSX3gW8
0ycg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id
:subject:to;
bh=xJTFF5zC40Dci7EGp4slBvI9/hAu2z8nzKYl4/9JUxk=;
b=fPTOyPHyQj7xtpK87Jzpn2XSQTdojOOuFxEFdB3MyGNwx/L8aXkvX0HiMijYJgJwVw
xjGLEyoahf1lAcYwYJF03q+Qi6f7Pw4P8ZzPS4F5y0DCqf7R2LMmyKDQfsxo+1Mz7vYd
ybsar5iZVphui0cuDhfraacRY8IX9Tf3U0Bau8dU8ctA5mj1wOMLTOmgFD/g1I+l7gJ0
IMXif90CVh9hJJa8cZoGcptsQ/bvydOV0H6zGG/Na1n31GmqUtbd8H2raONe3U1QcLd5
Ys7YRYeJ3N5iFjikmMpl4Sa+rMziUpLGzS0Bynu7BSp0+4/hrPIho3K9xrEj0m6t2gGk
u/dQ==
X-Gm-Message-State: ANhLgQ2UBCBMSOP0B9dmOsipaPScgWuGFQKj7x4xiuyeD3uRrVUmg+wr
haNpnFyY52NpgsZkbk/g/q30sRqG9kayB1ldQdM=
X-Google-Smtp-Source: ADFU+vs3wkStHBpGlkwnNRKB7aOjivRW1VXVacA8jTsfgHBeOrmDD+sITaaZpasfLwGC6EYW6mhHLhDXn1IT9G6X3zE=
X-Received: by 2002:a7b:c4c3:: with SMTP id g3mr3748278wmk.131.1584624652224;
Thu, 19 Mar 2020 06:30:52 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: FBI Headquarters Investigation <[email protected]>
Date: Thu, 19 Mar 2020 14:30:35 +0100
Message-ID: <CADbsHRVV6JxSq7ZBQWnrReu-ng4FUv4YfPdE340gemjcV8UkGQ@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007f907d05a1352d12"
Bcc:
X-Spam-Status: Yes, score=14.1
X-Spam-Score: 141
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *Anti-Terrorist And Monetary Crimes DivisionFBI Headquarters,
Washington, D.C.Federal Bureau Of InvestigationJ.Edgar <http://j.edgar/>
Hoover Building935 Pennsylvania Avenue, NwWashington, D.C. 20535- [...]
Content analysis details: (14.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 TVD_APPROVED BODY: Body states that the recipient has been
approved
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.128.65 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.65 listed in wl.mailspike.net]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[fbiinvestigationakz[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[chikemordi12[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_LOTTO No description available.
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.7 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION: BENEFICIARY
Anti-Terrorist And Monetary Crimes Division
FBI Headquarters, Washington, D.C.
Federal Bureau Of Investigation
J.Edgar Hoover Building
935 Pennsylvania Avenue, Nw
Washington, D.C. 20535-0001
ATTENTION: BENEFICIARY
This e-mail has been issued to you in order to Officially inform you that we have completed an investigation on an International Payment in which was issued to you by International Lottery Company. With the help of our newly developed technology (International Monitoring Network System) we discovered that your e-mail address was automatically selected by an Online Balloting System,this has legally won you the sum of $2.5million USD from a Lottery Company outside the United States of America. During our investigation we discovered that your e-mail won the money from an Online Balloting System and we have authorized this winning to be paid to you via INTERNATIONAL CERTIFIED BANK DRAFT.
Normally, it will take up to 5 business days for an INTERNATIONAL CERTIFIED BANK DRAFT by your local bank. We have successfully notified this company on your behalf that funds are to be drawn from a registered bank within the world winded, so as to enable you cash the check instantly without any delay, henceforth the stated amount of $2.5million USD has been deposited with IMF.
We have completed this investigation and you are hereby approved to receive the winning prize as we have verified the entire transaction to be Safe and 100% risk free, due to the fact that the funds have been deposited with IMF you will be required to settle the following bills directly to the Lottery Agent in-charge of this transaction whom is located in South Africa According to our discoveries, you were required to pay for the following,
(1) Deposit Fee's ( IMF INTERNATIONAL CLEARANCE CERTIFICATE )
(2) Shipping Fee's ( This is the charge for shipping the Cashier's Check to your home address)
The total amount for everything is $173.00 USD We have tried our possible best to indicate that this $173.00 USD should be deducted from your winning prize but we found out that the funds have already been deposited to IMF and cannot be accessed by anyone apart from you the winner, therefore you will be required to pay the required fee's to the Agent in-charge of this transaction In order to proceed with this transaction, you will be required to contact the agent in-charge ( Mr. Charles Cole ) via e-mail. Kindly look below to find appropriate contact information:
CONTACT AGENT NAME: Mr. Charles Cole
PHONE NUMBER: +1-518-333-7317
Email: [email protected]
You will be required to e-mail her with the following information:
FULL NAME:
ADDRESS:
CITY:
STATE:
ZIP CODE:
DIRECT CONTACT NUMBER:
OCCUPATION:
ID:
You will also be required to request Western Union or Money Gram details on how to send the required $173.00 USD in order to immediately ship your prize of $2.5million USD via INTERNATIONAL CERTIFIED BANK DRAFT from IMF, also include the following transaction code in order for her to identify this transaction :EAX2948-191.
This letter will serve as proof that the Federal Bureau Of Investigation is authorizing you to pay the required $173.00 USD ONLY to Mr. Charles Cole via information in which he shall send to you,
Best Regards,
Christopher A. Wray,
Federal Bureau of Investigation
Director Office of Public
Affairs, F B I.
Delivered-To:
Received: from
by v with LMTP
id ES7GEDl0c17WGgEAibB4EA
(envelope-from <[email protected]>)
for <>; Thu, 19 Mar 2020 09:31:37 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 19 Mar 2020 09:31:37 -0400
Received: from mail-wm1-f65.google.com ([209.85.128.65]:35709)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jEvGp-000IoW-HP
for ; Thu, 19 Mar 2020 09:31:37 -0400
Received: by mail-wm1-f65.google.com with SMTP id m3so2293976wmi.0
for <>; Thu, 19 Mar 2020 06:31:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
bh=xJTFF5zC40Dci7EGp4slBvI9/hAu2z8nzKYl4/9JUxk=;
b=RWAWDZZu7w2jaRlk5+aN8gEW3+Te+EzTYNc+Lr2WL9NHypYduBQmj68zQcAIffawuP
BsqQ4amImPEst5fQf/PReLCiGq6396fAXKvGjcmDW9FHrs7cHa+GMt/bPZOMcTOvFxhP
6uV2H+t3jx5iAL3QCaddnYU1eQA15XceoaG+l+ozq1eoC6rjGudGlqHwqisraQox4+Od
yEdNs22kmGhHn+JUaLDq1WqW7U3y1RtNejMTbO0na+Sw/x9GNvuF/5QIa4Q7cDZC1Cwf
m//e5rDu9MPiggd95VXLl6k9V762lY+Kjc5Xh2VlUUoQFp6dDm2PJgK6QmuuVlSX3gW8
0ycg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
:subject:to;
bh=xJTFF5zC40Dci7EGp4slBvI9/hAu2z8nzKYl4/9JUxk=;
b=fPTOyPHyQj7xtpK87Jzpn2XSQTdojOOuFxEFdB3MyGNwx/L8aXkvX0HiMijYJgJwVw
xjGLEyoahf1lAcYwYJF03q+Qi6f7Pw4P8ZzPS4F5y0DCqf7R2LMmyKDQfsxo+1Mz7vYd
ybsar5iZVphui0cuDhfraacRY8IX9Tf3U0Bau8dU8ctA5mj1wOMLTOmgFD/g1I+l7gJ0
IMXif90CVh9hJJa8cZoGcptsQ/bvydOV0H6zGG/Na1n31GmqUtbd8H2raONe3U1QcLd5
Ys7YRYeJ3N5iFjikmMpl4Sa+rMziUpLGzS0Bynu7BSp0+4/hrPIho3K9xrEj0m6t2gGk
u/dQ==
X-Gm-Message-State: ANhLgQ2UBCBMSOP0B9dmOsipaPScgWuGFQKj7x4xiuyeD3uRrVUmg+wr
haNpnFyY52NpgsZkbk/g/q30sRqG9kayB1ldQdM=
X-Google-Smtp-Source: ADFU+vs3wkStHBpGlkwnNRKB7aOjivRW1VXVacA8jTsfgHBeOrmDD+sITaaZpasfLwGC6EYW6mhHLhDXn1IT9G6X3zE=
X-Received: by 2002:a7b:c4c3:: with SMTP id g3mr3748278wmk.131.1584624652224;
Thu, 19 Mar 2020 06:30:52 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: FBI Headquarters Investigation <[email protected]>
Date: Thu, 19 Mar 2020 14:30:35 +0100
Message-ID: <CADbsHRVV6JxSq7ZBQWnrReu-ng4FUv4YfPdE340gemjcV8UkGQ@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007f907d05a1352d12"
Bcc:
X-Spam-Status: Yes, score=14.1
X-Spam-Score: 141
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: *Anti-Terrorist And Monetary Crimes DivisionFBI Headquarters,
Washington, D.C.Federal Bureau Of InvestigationJ.Edgar <http://j.edgar/>
Hoover Building935 Pennsylvania Avenue, NwWashington, D.C. 20535- [...]
Content analysis details: (14.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 TVD_APPROVED BODY: Body states that the recipient has been
approved
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.128.65 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.65 listed in wl.mailspike.net]
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[fbiinvestigationakz[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[chikemordi12[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_LOTTO No description available.
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.5 KAM_LOTTO1 Likely to be an e-Lotto Scam Email
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.7 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION: BENEFICIARY
Anti-Terrorist And Monetary Crimes Division
FBI Headquarters, Washington, D.C.
Federal Bureau Of Investigation
J.Edgar Hoover Building
935 Pennsylvania Avenue, Nw
Washington, D.C. 20535-0001
ATTENTION: BENEFICIARY
This e-mail has been issued to you in order to Officially inform you that we have completed an investigation on an International Payment in which was issued to you by International Lottery Company. With the help of our newly developed technology (International Monitoring Network System) we discovered that your e-mail address was automatically selected by an Online Balloting System,this has legally won you the sum of $2.5million USD from a Lottery Company outside the United States of America. During our investigation we discovered that your e-mail won the money from an Online Balloting System and we have authorized this winning to be paid to you via INTERNATIONAL CERTIFIED BANK DRAFT.
Normally, it will take up to 5 business days for an INTERNATIONAL CERTIFIED BANK DRAFT by your local bank. We have successfully notified this company on your behalf that funds are to be drawn from a registered bank within the world winded, so as to enable you cash the check instantly without any delay, henceforth the stated amount of $2.5million USD has been deposited with IMF.
We have completed this investigation and you are hereby approved to receive the winning prize as we have verified the entire transaction to be Safe and 100% risk free, due to the fact that the funds have been deposited with IMF you will be required to settle the following bills directly to the Lottery Agent in-charge of this transaction whom is located in South Africa According to our discoveries, you were required to pay for the following,
(1) Deposit Fee's ( IMF INTERNATIONAL CLEARANCE CERTIFICATE )
(2) Shipping Fee's ( This is the charge for shipping the Cashier's Check to your home address)
The total amount for everything is $173.00 USD We have tried our possible best to indicate that this $173.00 USD should be deducted from your winning prize but we found out that the funds have already been deposited to IMF and cannot be accessed by anyone apart from you the winner, therefore you will be required to pay the required fee's to the Agent in-charge of this transaction In order to proceed with this transaction, you will be required to contact the agent in-charge ( Mr. Charles Cole ) via e-mail. Kindly look below to find appropriate contact information:
CONTACT AGENT NAME: Mr. Charles Cole
PHONE NUMBER: +1-518-333-7317
Email: [email protected]
You will be required to e-mail her with the following information:
FULL NAME:
ADDRESS:
CITY:
STATE:
ZIP CODE:
DIRECT CONTACT NUMBER:
OCCUPATION:
ID:
You will also be required to request Western Union or Money Gram details on how to send the required $173.00 USD in order to immediately ship your prize of $2.5million USD via INTERNATIONAL CERTIFIED BANK DRAFT from IMF, also include the following transaction code in order for her to identify this transaction :EAX2948-191.
This letter will serve as proof that the Federal Bureau Of Investigation is authorizing you to pay the required $173.00 USD ONLY to Mr. Charles Cole via information in which he shall send to you,
Best Regards,
Christopher A. Wray,
Federal Bureau of Investigation
Director Office of Public
Affairs, F B I.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
