federalbureauof@yandex.com

[Big Al]

FBI lottery scam:

ANTI-TERRORIST AND MONETARY CRIMES DIVISION
FBI HEADQUARTERS IN NEW YORK
FEDERAL BUREAU OF INVESTIGATION

Attn:

This is to officially inform you that it has come to our notice and thoroughly completed an investigation with the help of our Intelligence Monitoring Network System that your E-mail address was among the email that Won UK National lottery Award which you did not claim, we want to let you know that one of the bank worker where your fund was deposited arrange with his friend to come as the owner of the E-mail that won the prize which they claim your fund, but now your fund has been recovered from them and they have been arrested.

If you receive any E-mail that you did not understand that is from unknown person to you please do forward it to us to verify and bring the person to justice.

It has come to the attention of our Money trafficking investigation department, that you have some funds valued £950,000.00 Pounds on your name, the said payment is awaiting adjudication and we have authorized this winning to be paid to you, this funds are from UK NATIONAL LOTTERY.

Re-confirm, Names, Address, Phone Number, Age / sex, Occupation and Country, to avoid double claim of your fund.


YOUR IMMEDIATE RESPONSE IS NEEDED

Andrew G. McCabe
FBI DIRECTOR

Header:

Return-Path: <federalbureauof@yandex.com>
Received: from web48o.yandex.ru (web48o.yandex.ru [95.108.205.228]) by mxback18j.mail.yandex.net
Mon, 28 Aug 2017
From: FEDERAL BUREAU OF INVESTIGATIONS <federalbureauof@yandex.com>
Subject: Attn:

[Big Al]

ANTI-TERRORIST AND MONETARY CRIMES DIVISION
FBI HEADQUARTERS IN NEW YORK
FEDERAL BUREAU OF INVESTIGATION

Attin:

We have received all your necessary details and information validating you as the true beneficiary of the fund, we hereby want you to open up communication with STANDARD CHARTERED BANK they are in charge of transferring your funds (£950,000.00) to your private account which you will be providing. On this note you are advice to work with their instructions to be able to make it a success and we are still monitoring to ensure that you receive your funds as soon as possible. Please contact them with the details below

STANDARD CHARTERED BANK
Email: info@standardchb-com.ml
Email: standardcharteredbnk123@gmail.com
Tele: +44 12237 50625
Fax No: +44 87211 17390

Have a nice day and please always keep us posted for it’s our obligation to make sure your funds are transferred to your account as soon as possible.

Regards
Andrew G. McCabe

Phones:
+441223750625
Number billable as geographic number
Country or destination United Kingdom
City or exchange location Cambridge

+448721117390
Number billable as premium rate number
Country or destination United Kingdom
City or exchange location

[Big Al]

From: info@standardchb-com.ml
To:
Cc:
Bcc:
Date: Thu, 31 Aug 2017 Subject: Re: Fwd: Attn:

Dear

We received your mail and you are advised to fill the information bellow to enable us open an account with your details, from this account you can transfer to any account of your choice


First Name:
Last Name:
Email ID:
Phone Number:
Date of Birth:
Gender:
Address:
Country Name:
State:
Zip Code:
Account Type:


Note: you are advise to send us a copy of your international passport or drivers License for identification and documentation. have a wonderful weekend and hope to hear from you soon.


Customer Care
Chattered Bank

Header;

Delivered-To:
Received: by 10.176.20.227 with SMTP id f32csp8439uae;
Thu, 31 Aug 2017 14:31:14 -0700 (PDT)
X-Google-Smtp-Source: ADKCNb7wbrLAooQJHT9R7MzxT7eg4Kx6AuBuuUdxFQUq6836WOm61Kk2x9vBhXOAUi5f2nl2eCHa
X-Received: by 10.223.128.163 with SMTP id 32mr3874451wrl.179.1504215074764;
Thu, 31 Aug 2017 14:31:14 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1504215074; cv=none;
d=google.com; s=arc-20160816;
b=YpK8tH8AwBNI+rtT2wyGTuSFISw+cXhyIPPmrTFtO268ao4SNv5jHyb2F76chmzG/w
3q96XBKWlfIPJY2F0suCtu2sDrH2yNcy682kmr1PCzdh5njV4ZRDETi3kFAW2rggFp4Y
NJVnZVhWXx3bCz4iWTEro+Wzb3DtbPqoOYkqOS//bnqyUsQjZfTy4ByPjoNtfVFij6ue
vI9y1F8TPTYhB90Y5jjtZsSbCE/ARevhuVZaRvoJGjn9yOeKzXtP9ZOKyTj+eqzlLFPO
xV3Q1OgQOx9hRxjd4GrdwkqLEZNjDDlthbjSajGVYg6HlNcIsGwpkSPwdqwCbsAsoN31
+mWw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:message-id:date:subject:to:from
:arc-authentication-results;
bh=vWGFHFhiXaKBeBkk5MWZDc4wC/lJ7G6+6gPUteJir4k=;
b=yUVzSF5XWZbvq36eKsSAqPlVzBLQz/4r5vgvJVMmvidnP4/HaTK6DJnTxPFNaqMIsa
YyV8xxfUu6B4/vJW37BN5+Fhg/X0U5PsW7hKJVe6XGbOSCkU+ow6mEQm6EkS6qUDfckL
6C/lDdI7L51dkR0oxNUT+tc9V0fNOvzGxXELypZdNeoqmkrpm1LjthbYJrrGkP2TX+xA
KlpYdD44yPOebaYhgPmKJ2Xog4vAHplnD45hwzqBLOsJ6qrU8FFjPXBLSIzlEDW13r36
ijFmppFmQcfd6GoCEgsDpU2TP506X+5S7eES7Qo70tEyGG+LfwET3aqa74K4tSfHi1Gp
B34g==
ARC-Authentication-Results: i=1; mx.google.com;
spf=neutral (google.com: 185.176.43.22 is neither permitted nor denied by best guess record for domain of info@standardchb-com.ml) smtp.mailfrom=info@standardchb-com.ml
Return-Path: <info@standardchb-com.ml>
Received: from mail1.runhosting.com (mail1.runhosting.com. [185.176.43.22])
by mx.google.com with ESMTPS id 126si770932wmp.249.2017.08.31.14.31.13
for < >
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 31 Aug 2017 14:31:14 -0700 (PDT)
Received-SPF: neutral (google.com: 185.176.43.22 is neither permitted nor denied by best guess record for domain of info@standardchb-com.ml) client-ip=185.176.43.22;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 185.176.43.22 is neither permitted nor denied by best guess record for domain of info@standardchb-com.ml) smtp.mailfrom=info@standardchb-com.ml
Received: from mail1.runhosting.com (unknown [185.176.43.21]) by mail1.runhosting.com (Postfix) with ESMTP id 8671B93AC2 for < >; Thu, 31 Aug 2017 21:31:13 +0000 (UTC)
Received: by mail1.runhosting.com (Postfix, from userid 65534) id 6250793AEA; Thu, 31 Aug 2017 21:31:13 +0000 (UTC)
Received: from localhost by out1.defender.mail with SpamAssassin (version 3.3.2); Thu, 31 Aug 2017 21:31:13 +0000
From: info@standardchb-com.ml
To:
Subject: *****SPAM***** Re: Fwd: Attn:
Date: Thu, 31 Aug 2017 22:31:11 +0100
Message-Id: <7ffb982ab1727a2d9f7db1a46756bd61@standardchb-com.ml>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on out1.defender.mail
X-Spam-Flag: YES
X-Spam-Level: *********************
X-Spam-Status: Yes, score=21.2 required=5.0 tests=ADVANCE_FEE_2_NEW_FRM_MNY, ADVANCE_FEE_2_NEW_MONEY,ADVANCE_FEE_3_NEW_FORM,ADVANCE_FEE_3_NEW_FRM_MNY, ADVANCE_FEE_3_NEW_MONEY,ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_FORM, ADVANCE_FEE_4_NEW_FRM_MNY,ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW, ADVANCE_FEE_5_NEW_FORM,ADVANCE_FEE_5_NEW_FRM_MNY,ADVANCE_FEE_5_NEW_MONEY, ALL_TRUSTED,HK_LOTTO,LOTS_OF_MONEY,MONEY_FRAUD_3,MONEY_FRAUD_5, TVD_PH_BODY_META,T_FRT_BELOW2,UPPERCASE_50_75 autolearn=disabled version=3.3.2
X-Spam-Score: 21.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_59A88021.F45E4F22"
X-Virus-Scanned: ClamAV using ClamSMTP (out1.defender.mail(185.176.43.21), client: 185.176.43.22)

------------=_59A88021.F45E4F22
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit