by buried under 419s
Fri Jun 08, 2012 8:22 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Jun 2012 05:06:38 -0700
Received: from mailgrega.congrega.net ([209.20.67.145]:39504)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1Scxxd-0007OK-BM
for ; Fri, 08 Jun 2012 05:06:38 -0700
Received: by mailgrega.congrega.net (Postfix, from userid 33)
id 036C4434FAD; Fri, 8 Jun 2012 12:02:54 +0000 (UTC)
To:
From: Mr. Tharman <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Message-Id: <[email protected]>
Date: Fri, 8 Jun 2012 12:02:54 +0000 (UTC)
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=14.7
X-Spam-Score: 147
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION: SIR/MADAM. This is in regard to outstanding payment,
I am Mr. Tharman Shanmugaratnam, the Newly appointed Chairman International
Monetary and Financial Committee (IMFC) Legal Affairs, Security and Investigation,
the British Prime Minister (David Cameron) and UK Foreign Secretary (William
Hague), the Cabinets, has directed me to Investigate your Fund and to make
sure that we approve all outstanding debts owed to indigenous /Foreign beneficiaries
by the government of United State of America in this begining of this Fiscal
year 2012. [...]
Content analysis details: (14.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?209.20.67.145>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.20.67.145 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[209.20.67.145 listed in bb.barracudacentral.org]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mr.tharmansha[at]yahoo.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
1.2 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.6 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.2 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
-0.4 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** ARE YOU AWARE OF THIS?
ATTENTION: SIR/MADAM.
This is in regard to outstanding payment, I am Mr. Tharman Shanmugaratnam, the Newly appointed Chairman International Monetary and Financial Committee (IMFC) Legal Affairs, Security and Investigation, the British Prime Minister (David Cameron) and UK Foreign Secretary (William Hague), the Cabinets, has directed me to Investigate your Fund and to make sure that we approve all outstanding debts owed to indigenous /Foreign beneficiaries by the government of United State of America in this begining of this Fiscal year 2012.
This decision was taken based on the abnormalities and inability of the BANKS in US to Release your fund into your bank account where it was discovered that some Directors in different organization were diverting pended beneficiaries payment to another account of their choice. In view of this, during our investigation I found out that an account was submitted to divert your fund to a CYPRUS account. Below is the account submitted and I want you to confirm if you are aware of the new development because we are about effecting payment to the account stated bellow today.
NAME OF BENEFICIARY: GEORGE NIKOLAOU
BANK NAME: NATIONAL BANK OF GREECE ( CYPRUS)
ADDRESS: 86 MAKARIOS AVENUE BRANCH 541.,3506 LIMASSOL,CYPRUS
SWIFT CODE: ETHNCY2N541
IBAN NUMBER: CY81006005410000005413367487
Furthermore, be informed that a payment instruction has been issued and Forwarded to the Treasury Department of the British Government In favor of you and your company for immediate release of your fund to the account above without any further prejudice. But there is no way We can approve the fund to your account without you confirming if you Have changed your account for your fund to be transfer to the Beneficiary: GEORGE NIKOLAOU BANK ACCOUNT IN CYPRUS.
Finally, Contact me immediately on for further clarification to know if you have giving instruction to transfer your fund to the above account today. On behalf Of the entire management of IMF, we are congratulating you in advance and failure to contact this office before 24hrs from now then we will wired the fund to the CYPRUS account.
Thanks for your co-operation.
Waiting for your urgent response
Yours faithfully
Mr. Tharman Shanmugaratnam
IMF Office of Legal Affairs Security and Investigation.
Direccion General de Administracion y Finanzas
Ministerio de Salud Publica y Bienestar Social
Envelope-to:
Delivery-date: Fri, 08 Jun 2012 05:06:38 -0700
Received: from mailgrega.congrega.net ([209.20.67.145]:39504)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1Scxxd-0007OK-BM
for ; Fri, 08 Jun 2012 05:06:38 -0700
Received: by mailgrega.congrega.net (Postfix, from userid 33)
id 036C4434FAD; Fri, 8 Jun 2012 12:02:54 +0000 (UTC)
To:
From: Mr. Tharman <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/plain
Message-Id: <[email protected]>
Date: Fri, 8 Jun 2012 12:02:54 +0000 (UTC)
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=14.7
X-Spam-Score: 147
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION: SIR/MADAM. This is in regard to outstanding payment,
I am Mr. Tharman Shanmugaratnam, the Newly appointed Chairman International
Monetary and Financial Committee (IMFC) Legal Affairs, Security and Investigation,
the British Prime Minister (David Cameron) and UK Foreign Secretary (William
Hague), the Cabinets, has directed me to Investigate your Fund and to make
sure that we approve all outstanding debts owed to indigenous /Foreign beneficiaries
by the government of United State of America in this begining of this Fiscal
year 2012. [...]
Content analysis details: (14.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?209.20.67.145>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.20.67.145 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[209.20.67.145 listed in bb.barracudacentral.org]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mr.tharmansha[at]yahoo.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
1.2 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.6 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.2 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
-0.4 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** ARE YOU AWARE OF THIS?
ATTENTION: SIR/MADAM.
This is in regard to outstanding payment, I am Mr. Tharman Shanmugaratnam, the Newly appointed Chairman International Monetary and Financial Committee (IMFC) Legal Affairs, Security and Investigation, the British Prime Minister (David Cameron) and UK Foreign Secretary (William Hague), the Cabinets, has directed me to Investigate your Fund and to make sure that we approve all outstanding debts owed to indigenous /Foreign beneficiaries by the government of United State of America in this begining of this Fiscal year 2012.
This decision was taken based on the abnormalities and inability of the BANKS in US to Release your fund into your bank account where it was discovered that some Directors in different organization were diverting pended beneficiaries payment to another account of their choice. In view of this, during our investigation I found out that an account was submitted to divert your fund to a CYPRUS account. Below is the account submitted and I want you to confirm if you are aware of the new development because we are about effecting payment to the account stated bellow today.
NAME OF BENEFICIARY: GEORGE NIKOLAOU
BANK NAME: NATIONAL BANK OF GREECE ( CYPRUS)
ADDRESS: 86 MAKARIOS AVENUE BRANCH 541.,3506 LIMASSOL,CYPRUS
SWIFT CODE: ETHNCY2N541
IBAN NUMBER: CY81006005410000005413367487
Furthermore, be informed that a payment instruction has been issued and Forwarded to the Treasury Department of the British Government In favor of you and your company for immediate release of your fund to the account above without any further prejudice. But there is no way We can approve the fund to your account without you confirming if you Have changed your account for your fund to be transfer to the Beneficiary: GEORGE NIKOLAOU BANK ACCOUNT IN CYPRUS.
Finally, Contact me immediately on for further clarification to know if you have giving instruction to transfer your fund to the above account today. On behalf Of the entire management of IMF, we are congratulating you in advance and failure to contact this office before 24hrs from now then we will wired the fund to the CYPRUS account.
Thanks for your co-operation.
Waiting for your urgent response
Yours faithfully
Mr. Tharman Shanmugaratnam
IMF Office of Legal Affairs Security and Investigation.
Direccion General de Administracion y Finanzas
Ministerio de Salud Publica y Bienestar Social
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces