[email protected] Mrs. Ranchoux Mandy

X-Spam-Flag: YES
X-Envelope-From: [email protected]
Return-Path: <[email protected]>
Received: from pop-borzoi.atl.sa.earthlink.net (pop-borzoi.atl.sa.earthlink.net [207.69.195.70])
by mail241c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id t7EIiOLg018679
for <>; Fri, 14 Aug 2015 14:44:27 -0400
Received: from user-0c6tkls.cable.mindspring.com ([24.110.210.188] helo=User)
by pop-borzoi.atl.sa.earthlink.net with smtp (Exim 3.36 #1)
id 1ZQJQ2-0002UX-00; Fri, 14 Aug 2015 14:09:30 -0400
Reply-To: <[email protected]>
From: "Mrs. Ranchoux Mandy"<[email protected]>
Subject: *****SPAM***** Re: Investment/Project Funding.
Date: Fri, 14 Aug 2015 19:09:23 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-CTCH-RefID: str=0001.0A020205.55CCF465.02A0,ss=4,sh,re=8.592,recu=0.000,reip=0.000,cl=4,cld=1,fgs=12
X-CTCH-VOD: Unknown
X-CTCH-Spam: Confirmed
X-CTCH-Score: 8.592
X-CTCH-Rules: FROM_MISSP_MSFT,FSL_CTYPE_WIN1251,MILLION_USD,
X-CTCH-Flags: 12
X-CTCH-ScoreCust: 0.000
X-CSC: 100
X-CHA: v=2.1 cv=ZOPuxxLb c=1 sm=1 tr=0 p=MTG9UX+ngaaohm2iTGBBxQ==:17
p=0DHOPwroAAAA:8 p=wzLx5uW8P54A:10 p=3d0IzxAac1D2gr3hKjUA:9
p=47wYA01Cz8eznd4d:21 p=_QkibITYa9-1JyHr:21 p=FUHmQBpyHlShkU6n:21
a=Kd+HwaUa/7K54rK9ODVSPQ==:117 a=5Up8faWwAAAA:8 a=g0qM3YM6AAAA:8
a=gyq6jB-EWHYA:10 a=9cW_t1CCXrUA:10 a=84BadPHTAAAA:8 a=Dyoqhi_TatcA:10
a=Cfj4BQAnxiAA:10 a=uRRa74qj2VoA:10 a=Ft8UYL4EG9YA:10
Received-SPF: softfail (mail241c28: transitioning domain of euroinvestor.dk does not designate 207.69.195.70 as permitted sender) client-ip=207.69.195.70; [email protected];
X-WHL: LR



From : Mrs. Ranchoux Mandy Office

We provide an offer BG, MTN , LC, DLC , SBLC from top 25 rating bank project funding amount: USD/euro 5 Million to USD/euro 50 Billion all our instruments are specifically for lease. POF Delivering via Swift MT760 within 4 to 5 banking days after the contract signed and issuing banks with our Leasing price of (2.0% only ) of face value of the instrument.

GENUINE BANK GUARANTEES (BG) AND STANDBY LETTER OF CREDIT (SBLC) FOR LEASE AT THE LOWEST RATES AVAILABLE. OTHER FINANCIAL INSTRUMENTS SUCH AS MTN, CD, DLC, AND PB ARE ALSO AVAILABLE.

We offer certifiable and verifiable bank instruments via Swift Transmission from a genuine provider capable of taking up time bound transactions.

More more information's - Reply back ,

Kindly reach the following for procedure and terms. :

Mrs. Ranchoux Mandy

===============================================================================================
This e-mail message to the people is special, it may contain confidential information. If this e-mail message you accidentally ulasmiss to, do not use the contents in any way and not open the attached files. In this case, please notify the sender immediately by return e-mail message to the user and delete all copies from your mailbox. This e-mail message, in any way, in any order on the reproduced, published or sold currency equivalent. This e-mail message has been scanned for viruses against by anti-virus systems. But posters, this e-mail message to - even if the virus protection system is controlled - does not guarantee that viruses are avoided and hiзbir does not accept responsibility for any damage that may occur will be born.

This message is intended solely for the use of the individual or entity to whom it is addressed, and may seal confidential information. If you are not the intended recipient of this message or you receive this mail in error, you should refrain from making any use of the contents and from opening any attachment. In that case, please notify the sender immediately and return the message to the sender, than, delete and destroy all copies. This e-mail message, can not be copied, published or sold for any reason. This e-mail message has been swept by anti-virus systems for the presence of computer viruses. In doing so, however, you are can not warrant that virus or other forms of data corruption may not be present and do not take any Responsibility in any occurrence.

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 01 Mar 2017 14:03:13 -0800
Received: from [186.232.16.24] (port=55175 helo=srv01.vitalnettelecom.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1cjCKy-0007Y8-Cv
for ; Wed, 01 Mar 2017 14:03:13 -0800
Received: from ibh95.internetdsl.tpnet.pl ([79.189.33.95] helo=User)
by srv01.vitalnettelecom.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1cjCJV-00062H-Cv; Wed, 01 Mar 2017 19:01:38 -0300
Reply-To: <[email protected]>
From: "Admin"<[email protected]>
Date: Wed, 1 Mar 2017 14:01:36 -0800
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=24.7
X-Spam-Score: 247
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Greetings, Kindly Accept & Acknowledge my Proposal! I understand
that through Internet is not the best way to link up with you to inform you
about this notification but because of the confidentiality which my proposal
demands.However, I have already sent you this same letter one month ago,
but I am not sure if it did get to you since I have not heard from you, hence
i am constrain to reach you through the Internet which has been abused over
the years.I wish to notify you again that your name was mentioned as heir
to the sum of 1,600, 000.00 sterling pounds. In the last testament of our
deceased client name now withed.I and my team of the Heir Hunters Company
in the United Kingdom are detectives assisting distant relatives of people
who have died with or without making any official will. [...]

Content analysis details: (24.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[186.232.16.24 listed in bb.barracudacentral.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
2.6 MSOE_MID_WRONG_CASE No description available.
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.7 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** /Second Notice//


Greetings,

Kindly Accept &amp; Acknowledge my Proposal!

I

understand that through Internet is not the best way to link up with you
to inform you about this

notification but because of the confidentiality
which my proposal demands.However, I have already sent you

this same letter
one month ago, but I am not sure if it did get to you since I have not heard
from you,

hence i am constrain to reach you through the Internet which has
been abused over the years.I wish to notify

you again that your name was
mentioned as heir to the sum of 1,600, 000.00 sterling pounds. In the lasttestament
of our deceased client name now withed.I and my team of the Heir
Hunters Company in the United

Kingdom are detectives assisting distant
relatives of people who have died with or without making any

official will.

As the heir hunter's team of detective, the race is now on for us to track
down the

often distant relatives in line for a windfall. We came across
your profile and email while searching

through genealogy database.Note as
the heir hunters our aim is to assist people claim there lost relativefortune
instead of the government or Bank MDS to use the money to in reach
their treasury.Please send an

acknowledgment email to enable us process your
inheritance with all due verification process.

I

look forward to hearing from you.

Gregory
representative
Telephone: +44 702-4020282

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 04 Apr 2017 21:40:33 -0700
Received: from ns1.wlc.co.jp ([59.106.145.72]:4615)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1cvck2-0004Jg-LL
for ; Tue, 04 Apr 2017 21:40:33 -0700
Received: from User (ibh95.internetdsl.tpnet.pl [79.189.33.95])
(authenticated bits=0)
by ns1.wlc.co.jp (8.13.1/8.13.1) with ESMTP id v354Ylao011343;
Wed, 5 Apr 2017 13:34:50 +0900
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "Ms.Elizabeth"<[email protected]>
Date: Tue, 4 Apr 2017 21:35:16 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=22.6
X-Spam-Score: 226
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Attention Beneficiary, This is to inform you that after a
board meeting with IMF Director Ms. Christine Lagarde, Managing Director of
the International Monetary Fund (IMF) and the United States Government we
have concluding the processed of transferring your (US$5.5M) A power of attorney
was forwarded to our office this morning by two gentlemen, one of them is
an American national and he is Mr Simpson Stuart by name while the other
person is Mr.Allison Anthony by name a CANADIAN national, these gentlemen
claimed to be your representative, and this power of attorney stated that
you are dead; they brought an account to replace your information in other
to claim your fund of $5.5 Million Usd which is now lying DORMANT and UNCLAIMED,
below is the new account they have submitted: [...]

Content analysis details: (22.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[59.106.145.72 listed in bb.barracudacentral.org]
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[59.106.145.72 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[59.106.145.72 listed in psbl.surriel.com]
2.6 MSOE_MID_WRONG_CASE No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** NOTIFICATION/


Attention Beneficiary,

This is to inform you that after a board meeting with IMF Director Ms. Christine
Lagarde, Managing Director of the International Monetary Fund (IMF) and the United
States Government we have concluding the processed of transferring your (US$5.5M) A
power of attorney was forwarded to our office this morning by two gentlemen, one of
them is an American national and he is Mr Simpson Stuart by name while the other
person is Mr.Allison Anthony by name a CANADIAN national, these gentlemen claimed to
be your representative, and this power of attorney stated that you are dead; they
brought an account to replace your information in other to claim your fund of $5.5
Million Usd which is now lying DORMANT and UNCLAIMED, below is the new account they
have submitted:

BANK.-HSBC CANADA
Vancouver, CANADA
ACCOUNT NO. 2984-0008-66

Be further informed that this power of attorney also stated that you suffered and
died of throat cancer. You are therefore given 24hrs to confirm the truth in this
information, If you are still alive, You are to contact us back immediately with the
below information, Because we work 24 hrs just to ensure that we monitor all the
activities going on in regards to the transfer of beneficiaries payment.


Your Names:
Your Home/Office Address:
Your Nationality
Your Phone:


You are to reply immediately for clarifications on this matter as we shall be
available 24 hrs to give you the necessary guidelines on how to ensure that your
payment is wired or delivered to you immediately, just also be informed that any
further delay from your side could be dangerous, as we would not be held responsible
of wrong payment.

Yours Sincerely,
Ms.Elizabeth Brooks.
(Director of Operation) IMF