If you have too received this same message with subject “From United Nations Police – Regarding Recovery Of Your Lost Money – Scam” from email address [email protected], and with a reply to [email protected], am sure you might have been frightened too just like many do.
But guess what, this is not real. Its another scam which is ongoing. This same message you will see below has been sent to many of my colleagues, family members, friends and others and is thought to be from those scammers who are known for the different ways they adapt each day which passes by.
The message claims to be from the United Nations Police, and which seems to be wrong. And the subject is “Regarding Recovery Of Your Lost Money” but from who? The same message has an attachment “noname.eml” and which I wouldn’t recommend you to open just to be safer.
Below is the full message which you should know and be aware of just in case it lands in your main inbox or spam folder. Its worth being deleted since its a pure scam message…
“Our MailScanner believes that the attachment to this message sent to you
From:
Subject: REGARDING RECOVERY OF YOUR LOST MONEY.
is Unsolicited Commercial Email (spam). Unless you are sure that this message
is incorrectly thought to be spam, please delete this message without opening
it. Opening spam messages might allow the spammer to verify your email
address.
If you believe that this message has been incorrectly marked as spam, please
forward this email to postmaster.
Date: 20150317
pts rule name description
—- ———————- ————————————————–
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.1 NSL_RCVD_FROM_USER Received from User
1.0 TVD_FROM_1 No description available.
1.2 MISSING_HEADERS Missing To: header
1.6 SUBJ_ALL_CAPS Subject is all capitals
2.5 MILLION_USD BODY: Talks about millions of dollars
0.9 URG_BIZ BODY: Contains urgent matter
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.4 DNS_FROM_AHBL_RHSBL RBL: Envelope sender listed in dnsbl.ahbl.org
[listed in mybaby247.com.rhsbl.ahbl.org. IN]
[A]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: drivehq.com]
2.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.8 FSL_NEW_HELO_USER No description available.
0.7 FROM_MISSP_USER From misspaced, from “User”
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 LOTS_OF_MONEY Huge… sums of money
0.1 MISSING_MID Missing Message-Id: header
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.7 MONEY_FROM_MISSP Lots of money and misspaced From
2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
1.2 FROM_MISSPACED From: missing whitespace
1.8 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_FORM Advance Fee fraud and a form
0.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
4.3 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.5 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
4.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.4 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.4 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.3 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
4.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases”
Why do I think so?
First, the sender is the same email which is mentioned. And the domain name of the sender is not of the United Nations Police but rather, one which is looks totally different. Take your time and go through it. Am sure you will get to know whether its legitimate or scam.
Liked this article or found it helpful? Share it with your friends using the social share buttons below and or post a comment to let us know your feedback or any addition using the comment form below…
