by buried under 419s
Mon Oct 01, 2012 6:48 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 01 Oct 2012 15:25:34 -0700
Received: from mail.socometal.com.ec ([190.52.72.88]:34798 helo=socometal.com)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TIoQd-0002p7-Ad
for ; Mon, 01 Oct 2012 15:25:34 -0700
Received: from mail.socometal.com.ec (localhost [127.0.0.1])
by socometal.com (Postfix) with ESMTP id 4FB177647FB;
Mon, 1 Oct 2012 16:49:30 -0500 (ECT)
Received: from 41.211.194.122
(SquirrelMail authenticated user info)
by mail.socometal.com.ec with HTTP;
Mon, 1 Oct 2012 16:49:30 -0500
Message-ID: <[email protected]>
Date: Mon, 1 Oct 2012 16:49:30 -0500
From: "International Monetary Fund(imf)" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: INTERNATIONAL MONETARY FUND Payment Release Department Southeast
Asia and Pacific Office No. 10-3, Jalan PJS 8/4 Dataran Mentari, Bandar Sunway
46150 PETALING JAYA Selangor Darul Ehsan Malaysia Attention: Beneficiary,
[...]
Content analysis details: (16.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(imf_org2012[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(imf_org2012[at]yahoo.co.jp
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (imf_org2012[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.0 MISSING_HEADERS Missing To: header
0.0 LOTTO_DEPT BODY: Claims Department
0.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9523]
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.1 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
-1.1 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** IMF RECOVERED YOUR FUND!
INTERNATIONAL MONETARY FUND
Payment Release Department
Southeast Asia and Pacific Office
No. 10-3, Jalan PJS 8/4
Dataran Mentari, Bandar Sunway
46150 PETALING JAYA
Selangor Darul Ehsan
Malaysia
Attention: Beneficiary,
This letter is from the INTERNATIONAL MONETARY FUND, Kuala Lumpur, Malays=
ia.
We have discovered an outstanding unpaid/unclaimed sum of money in your
favour and mandate has been given to this department to ensure that
this fund gets to you without any delay.The aboved mentioned fund was
retrieved from Africa.
The IMF Asian Regional office here in Malaysia has been designated to
release the fund to you without any delay in as much as you comply with
the statutory obligation. You are advised to reconfirm to this office,
your contact informations to be sure that we are dealing with the bonafid=
e
receiver of the fund.
We also wish to open up communication with you regarding the release of
your fund immediately.
Information required from you are:
Your full Name.............
Your Address:..............
Home/Cell Phone:..............
Scan Copy of your ID Card.................
Sex..............
Amount expected:.........................
Your choice of transfer...................
We are looking forward to hearing from you soon.
Regards,
Mr.Nasir Idris
Envelope-to:
Delivery-date: Mon, 01 Oct 2012 15:25:34 -0700
Received: from mail.socometal.com.ec ([190.52.72.88]:34798 helo=socometal.com)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TIoQd-0002p7-Ad
for ; Mon, 01 Oct 2012 15:25:34 -0700
Received: from mail.socometal.com.ec (localhost [127.0.0.1])
by socometal.com (Postfix) with ESMTP id 4FB177647FB;
Mon, 1 Oct 2012 16:49:30 -0500 (ECT)
Received: from 41.211.194.122
(SquirrelMail authenticated user info)
by mail.socometal.com.ec with HTTP;
Mon, 1 Oct 2012 16:49:30 -0500
Message-ID: <[email protected]>
Date: Mon, 1 Oct 2012 16:49:30 -0500
From: "International Monetary Fund(imf)" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.22
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
X-Priority: 3 (Normal)
Importance: Normal
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: INTERNATIONAL MONETARY FUND Payment Release Department Southeast
Asia and Pacific Office No. 10-3, Jalan PJS 8/4 Dataran Mentari, Bandar Sunway
46150 PETALING JAYA Selangor Darul Ehsan Malaysia Attention: Beneficiary,
[...]
Content analysis details: (16.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(imf_org2012[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(imf_org2012[at]yahoo.co.jp
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (imf_org2012[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.0 MISSING_HEADERS Missing To: header
0.0 LOTTO_DEPT BODY: Claims Department
0.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9523]
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.1 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
-1.1 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** IMF RECOVERED YOUR FUND!
INTERNATIONAL MONETARY FUND
Payment Release Department
Southeast Asia and Pacific Office
No. 10-3, Jalan PJS 8/4
Dataran Mentari, Bandar Sunway
46150 PETALING JAYA
Selangor Darul Ehsan
Malaysia
Attention: Beneficiary,
This letter is from the INTERNATIONAL MONETARY FUND, Kuala Lumpur, Malays=
ia.
We have discovered an outstanding unpaid/unclaimed sum of money in your
favour and mandate has been given to this department to ensure that
this fund gets to you without any delay.The aboved mentioned fund was
retrieved from Africa.
The IMF Asian Regional office here in Malaysia has been designated to
release the fund to you without any delay in as much as you comply with
the statutory obligation. You are advised to reconfirm to this office,
your contact informations to be sure that we are dealing with the bonafid=
e
receiver of the fund.
We also wish to open up communication with you regarding the release of
your fund immediately.
Information required from you are:
Your full Name.............
Your Address:..............
Home/Cell Phone:..............
Scan Copy of your ID Card.................
Sex..............
Amount expected:.........................
Your choice of transfer...................
We are looking forward to hearing from you soon.
Regards,
Mr.Nasir Idris
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces