by scam-buster
Sun Feb 09, 2014 12:59 am
This one is really "sophisticated" showing concerns about scams and frauds....
x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; spf=pass (sender IP is 109.73.124.50) [email protected]; dkim=none header.d=husseyknights.co.uk; x-hmca=pass [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: PASS
X-SID-Result: PASS
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: 4kU6N5vIigdQZ1PXxV4SllueQcWoM+TODxJvtxyjSLY3AERGBDZLYVZApyel0v1Jirpujqa6VJIJY6QJJTOJ1QT38p+0LBleGKD1x1CiILkFAzXVO94CtHoxJ1HSsqmUIImWDkJaf3ZVzDU4TapotLjJYRDVBCFBFzyBK6O+CGTXxF0YJGzwVNiulVKq7woHJZEkuGbJ9ogeH/3xegiqKI1Vv+xQqni/
Received: from husseyknights.co.uk ([109.73.124.50]) by COL0-MC2-F7.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sat, 8 Feb 2014 10:04:38 -0800
X-Spam-Processed: hkmail.hussey-knights.co.uk, Sat, 08 Feb 2014 15:54:22 +0000
X-Spam-Level:
X-Spam-Status: No, score=-65.5 required=5.0 tests=ADVANCE_FEE_2_NEW_FORM,
ADVANCE_FEE_2_NEW_FRM_MNY,ADVANCE_FEE_2_NEW_MONEY,ADVANCE_FEE_3_NEW,
ADVANCE_FEE_3_NEW_FORM,ADVANCE_FEE_3_NEW_FRM_MNY,ADVANCE_FEE_3_NEW_MONEY,
ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_FORM,ADVANCE_FEE_4_NEW_FRM_MNY,
ADVANCE_FEE_4_NEW_MONEY,BAYES_00,FILL_THIS_FORM,FILL_THIS_FORM_LONG,
FORGED_MUA_OUTLOOK,FORM_FRAUD_3,FORM_FRAUD_5,FROM_MISSPACED,FROM_MISSP_MSFT,
FROM_MISSP_NO_TO,FSL_CTYPE_WIN1251,FSL_NEW_HELO_USER,FSL_UA,FSL_XM_419,
LOTS_OF_MONEY,MILLION_USD,MISSING_HEADERS,MISSING_MID,MONEY_FORM,
MONEY_FRAUD_3,MONEY_FRAUD_5,MONEY_FROM_MISSP,NO_RELAYS,REPLYTO_WITHOUT_TO_CC,
TO_NO_BRKTS_FROM_MSSP,USER_IN_WHITELIST,US_DOLLARS_3 shortcircuit=no
autolearn=no version=3.3.2
X-Spam-Report:
* -100 USER_IN_WHITELIST From: address is in the whitelist
* 0.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
* 0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
* -0.0 NO_RELAYS Informational: message was not relayed via SMTP
* 1.0 MISSING_HEADERS Missing To: header
* 3.2 MILLION_USD BODY: Talks about millions of dollars
* 1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
* -4.7 BAYES_00 BODY: Bayes spam probability is 0 to 1%
* [score: 0.0099]
* 0.3 FSL_UA FSL_UA
* 0.5 MISSING_MID Missing Message-Id: header
* 0.0 LOTS_OF_MONEY Huge... sums of money
* 1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
* 1.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
* 2.6 FROM_MISSP_NO_TO From misspaced, To missing
* 2.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
* 1.4 FROM_MISSPACED From: missing whitespace
* 1.5 MONEY_FROM_MISSP Lots of money and misspaced From
* 2.1 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
* 0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
* 1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
* 0.0 MONEY_FORM Lots of money if you fill out a form
* 0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
* 0.0 FILL_THIS_FORM Fill in a form with personal information
* 3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
* 2.1 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 1.3 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
* 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
* 2.5 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
* 1.3 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 0.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
* 0.5 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 1.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
* 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
* 2.7 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
* 0.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
* 0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
* 0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06)
Received: from User by hussey-knights.co.uk (MDaemon PRO v13.6.2)
with ESMTP id md50000927316.msg;
Sat, 08 Feb 2014 02:44:28 +0000
X-MDPtrLookup-Result: hardfail ip=78.188.87.81 (no ptr match) (hkmail.hussey-knights.co.uk)
X-MDHeloLookup-Result: hardfail smtp.helo=User (does not match 78.188.87.81) (hkmail.hussey-knights.co.uk)
X-Authenticated-Sender: [email protected]
X-MDRemoteIP: 78.188.87.81
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
Reply-To: <[email protected]>
From: "Ken Murphy"<[email protected]>
Subject: Good News
Date: Sat, 8 Feb 2014 04:31:08 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 08 Feb 2014 18:04:38.0968 (UTC) FILETIME=[3BBBB380:01CF24F8]
THE WORLD BANK FINANCE GROUP LONDON, UNITED KINGDOM.55 STREET JAMES SQUARE,
LONDON SW1Y 4JS,UNITED KINGDOM.OFFICE OF:
Bill and Exchange Manager/ Secretary General.
FROM DESK OF : MR. KEN MURPHY
Tel:+447010044081
Good News
I am Mr. Ken Murphy, Bill and Exchange Manager/ Secretary General, Head of the World Bank Finance Group Branch, set up to fight against scam and Fraudulent activities worldwide.
This Group is responsible for investigating the legitimacy of unpaid contract, inheritance and lotto winning claims by Companies and individuals and directs the paying authorities (banks) worldwide to make immediate payment of verified claims to the beneficiaries without further Delay.
You are being legally contacted regarding the release of your long awaited fund. After a detailed review of your file, the World Bank Group has mandated that your fund should be release immediately.
The sum of US$10,000,000.00 (Ten Million United States Dollars) has been approved in your favor via my desk. I therefore wish to inform you that your payment is being processed and will be released to you as soon as you respond to this letter.
Please re-confirm to us the following:
(1) Your Full Name:
(2) Phone, Fax and Mobile Number:
(3) Company Name, Home Address:
(4) Profession, Age and Marital status
: Note that the above fund has been cleared from terrorist or fraud related activities.
Thanks for Your Cooperation
Mr. Ken Murphy
Secretary-General)
World Bank Group
Please Call For confirmation
x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J
Authentication-Results: hotmail.com; spf=pass (sender IP is 109.73.124.50) [email protected]; dkim=none header.d=husseyknights.co.uk; x-hmca=pass [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: PASS
X-SID-Result: PASS
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Message-Info: 4kU6N5vIigdQZ1PXxV4SllueQcWoM+TODxJvtxyjSLY3AERGBDZLYVZApyel0v1Jirpujqa6VJIJY6QJJTOJ1QT38p+0LBleGKD1x1CiILkFAzXVO94CtHoxJ1HSsqmUIImWDkJaf3ZVzDU4TapotLjJYRDVBCFBFzyBK6O+CGTXxF0YJGzwVNiulVKq7woHJZEkuGbJ9ogeH/3xegiqKI1Vv+xQqni/
Received: from husseyknights.co.uk ([109.73.124.50]) by COL0-MC2-F7.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Sat, 8 Feb 2014 10:04:38 -0800
X-Spam-Processed: hkmail.hussey-knights.co.uk, Sat, 08 Feb 2014 15:54:22 +0000
X-Spam-Level:
X-Spam-Status: No, score=-65.5 required=5.0 tests=ADVANCE_FEE_2_NEW_FORM,
ADVANCE_FEE_2_NEW_FRM_MNY,ADVANCE_FEE_2_NEW_MONEY,ADVANCE_FEE_3_NEW,
ADVANCE_FEE_3_NEW_FORM,ADVANCE_FEE_3_NEW_FRM_MNY,ADVANCE_FEE_3_NEW_MONEY,
ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_FORM,ADVANCE_FEE_4_NEW_FRM_MNY,
ADVANCE_FEE_4_NEW_MONEY,BAYES_00,FILL_THIS_FORM,FILL_THIS_FORM_LONG,
FORGED_MUA_OUTLOOK,FORM_FRAUD_3,FORM_FRAUD_5,FROM_MISSPACED,FROM_MISSP_MSFT,
FROM_MISSP_NO_TO,FSL_CTYPE_WIN1251,FSL_NEW_HELO_USER,FSL_UA,FSL_XM_419,
LOTS_OF_MONEY,MILLION_USD,MISSING_HEADERS,MISSING_MID,MONEY_FORM,
MONEY_FRAUD_3,MONEY_FRAUD_5,MONEY_FROM_MISSP,NO_RELAYS,REPLYTO_WITHOUT_TO_CC,
TO_NO_BRKTS_FROM_MSSP,USER_IN_WHITELIST,US_DOLLARS_3 shortcircuit=no
autolearn=no version=3.3.2
X-Spam-Report:
* -100 USER_IN_WHITELIST From: address is in the whitelist
* 0.8 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
* 0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
* -0.0 NO_RELAYS Informational: message was not relayed via SMTP
* 1.0 MISSING_HEADERS Missing To: header
* 3.2 MILLION_USD BODY: Talks about millions of dollars
* 1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
* -4.7 BAYES_00 BODY: Bayes spam probability is 0 to 1%
* [score: 0.0099]
* 0.3 FSL_UA FSL_UA
* 0.5 MISSING_MID Missing Message-Id: header
* 0.0 LOTS_OF_MONEY Huge... sums of money
* 1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
* 1.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
* 2.6 FROM_MISSP_NO_TO From misspaced, To missing
* 2.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
* 1.4 FROM_MISSPACED From: missing whitespace
* 1.5 MONEY_FROM_MISSP Lots of money and misspaced From
* 2.1 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
* 0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
* 1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
* 0.0 MONEY_FORM Lots of money if you fill out a form
* 0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
* 0.0 FILL_THIS_FORM Fill in a form with personal information
* 3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
* 2.1 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 1.3 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
* 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
* 2.5 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
* 1.3 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 0.4 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
* 0.5 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
* 1.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
* 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
* 2.7 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
* 0.9 MONEY_FRAUD_3 Lots of money and several fraud phrases
* 0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
* 0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06)
Received: from User by hussey-knights.co.uk (MDaemon PRO v13.6.2)
with ESMTP id md50000927316.msg;
Sat, 08 Feb 2014 02:44:28 +0000
X-MDPtrLookup-Result: hardfail ip=78.188.87.81 (no ptr match) (hkmail.hussey-knights.co.uk)
X-MDHeloLookup-Result: hardfail smtp.helo=User (does not match 78.188.87.81) (hkmail.hussey-knights.co.uk)
X-Authenticated-Sender: [email protected]
X-MDRemoteIP: 78.188.87.81
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
Reply-To: <[email protected]>
From: "Ken Murphy"<[email protected]>
Subject: Good News
Date: Sat, 8 Feb 2014 04:31:08 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 08 Feb 2014 18:04:38.0968 (UTC) FILETIME=[3BBBB380:01CF24F8]
THE WORLD BANK FINANCE GROUP LONDON, UNITED KINGDOM.55 STREET JAMES SQUARE,
LONDON SW1Y 4JS,UNITED KINGDOM.OFFICE OF:
Bill and Exchange Manager/ Secretary General.
FROM DESK OF : MR. KEN MURPHY
Tel:+447010044081
Good News
I am Mr. Ken Murphy, Bill and Exchange Manager/ Secretary General, Head of the World Bank Finance Group Branch, set up to fight against scam and Fraudulent activities worldwide.
This Group is responsible for investigating the legitimacy of unpaid contract, inheritance and lotto winning claims by Companies and individuals and directs the paying authorities (banks) worldwide to make immediate payment of verified claims to the beneficiaries without further Delay.
You are being legally contacted regarding the release of your long awaited fund. After a detailed review of your file, the World Bank Group has mandated that your fund should be release immediately.
The sum of US$10,000,000.00 (Ten Million United States Dollars) has been approved in your favor via my desk. I therefore wish to inform you that your payment is being processed and will be released to you as soon as you respond to this letter.
Please re-confirm to us the following:
(1) Your Full Name:
(2) Phone, Fax and Mobile Number:
(3) Company Name, Home Address:
(4) Profession, Age and Marital status
: Note that the above fund has been cleared from terrorist or fraud related activities.
Thanks for Your Cooperation
Mr. Ken Murphy
Secretary-General)
World Bank Group
Please Call For confirmation