by buried under 419s
Mon Feb 28, 2011 2:43 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 28 Feb 2011 02:26:10 -0800
Received: from nm22.bullet.mail.sp2.yahoo.com ([98.139.91.92])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Pu0Ir-0001F3-22
for ; Mon, 28 Feb 2011 02:26:10 -0800
Received: from [98.139.91.69] by nm22.bullet.mail.sp2.yahoo.com with NNFMP; 28 Feb 2011 10:26:06 -0000
Received: from [98.139.91.27] by tm9.bullet.mail.sp2.yahoo.com with NNFMP; 28 Feb 2011 10:26:06 -0000
Received: from [127.0.0.1] by omp1027.mail.sp2.yahoo.com with NNFMP; 28 Feb 2011 10:26:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 46238 invoked by uid 60001); 28 Feb 2011 10:26:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1298888766; bh=scN8WUbOzwvrXterzfN3UauDeOit7PM/fTBiUjhZRao=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Me63PUeQw5VY5YeBqmwPleZ5CndVIQtCkn1OtUkEfEGbTxjVhXt5jUIBDKqR3Li6ykzNkTKShfj0+JMj4W3IGAKBjy4Y6Yx+nOhaA2ySpcWK707ZD0pBPfEGVkBa1/PSpAiQt0/SjJYTfXO0As1uWoMn7+BKHKMJ94BNYfmuka4=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=NIZ33RqD3SpEjuU/W1x06aolf2zJVMbdBjB/EglqV7ThMFWi7CsuyNiY7oeX8UDTo+M0pgef4Uy5efpYmOyDj2r6Z3NwGcTfOLM+uz5U18d5NnU7J2ZOi61dJmzgFyuDGEj6YqfDwh0KMTtqECS8jqNzuOPwK1HQX6T1uCfEhN0=;
Message-ID: <[email protected]>
X-YMail-OSG: tnDqieEVM1mx2usu8Y.jPXTgrXmIKi1xuyPtQQxa8nKMpCH
Received: from [82.128.82.10] by web80001.mail.sp1.yahoo.com via HTTP; Mon, 28 Feb 2011 02:26:05 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Mon, 28 Feb 2011 02:26:05 -0800 (PST)
From: FEDERAL RESERVE BANK BOARD <[email protected]>
Reply-To: [email protected]
Subject: CONTRACT FUND CREDIT FROM BANK FEDERAL RESERVE BOARD USA.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1324096348-1298888765=:43440"
X-Spam-Subject: ***SPAM*** CONTRACT FUND CREDIT FROM BANK FEDERAL RESERVE BOARD USA.
X-Spam-Status: Yes, score=11.4
X-Spam-Score: 114
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: NEW YORK. ATTENTION: BENEFICIARY, CONTRACT FUND CREDIT FROM
BANK FEDERAL RESERVE BOARD WE RECEIVED THE INSTRUCTIONAL LETTER TO CREDIT
$10.5MILLION TO YOUR ACCOUNT. WE WISH TO LET KNOW THAT ALL CHARGES ARE WAIVED
FOR THE SUCESS OF THIS CONTRACT FUND TO BE CREDITED INTO YOUR ACCOUNT. YOUR
RESPOND IS REQUIRED TO ENABLE US CREDIT YOUR ACCOUNT WITHOUT ANY FURTHER
OF DELAY AND YOU ARE ALSO REQUIRED TO GET BACK TO US WITH THE RECONFIRMATION
OF YOUR BANKING PARTICULARS FOR WE TO KNOW IF WHAT WE HAVE IN FILE IS CORRECT
AND TO AVOID CREDITING YOUR FUND TO WRONG ACCOUNT . CONGRATULATION TO YOUR
CONTRACT FUND. PLEASE BE FAST ON THIS MATTER. THANKS AND GOD BLESS YOU [...]
Content analysis details: (11.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.91.92 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail
(officxc-----507390[at]att.net)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officxc-----507390[at]att.net)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9127]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 HTML_FONT_FACE_BAD BODY: HTML font face is not a word
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[82.128.82.10 listed in zen.spamhaus.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_REMOTE_IMAGE Message contains an external image
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
--0-1324096348-1298888765=:43440
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
NEW
YORK.
ATTENTION: BENEFICIARY,
CONTRACT FUND CREDIT FROM BANK FEDERAL RESERVE
BOARD
WE RECEIVED THE INSTRUCTIONAL LETTER TO CREDIT
$10.5MILLION TO YOUR ACCOUNT.
WE WISH TO LET KNOW THAT ALL
CHARGES ARE WAIVED FOR THE SUCESS OF THIS CONTRACT FUND TO BE CREDITED INTO YOUR
ACCOUNT.
YOUR RESPOND IS REQUIRED TO ENABLE US CREDIT YOUR ACCOUNT
WITHOUT ANY FURTHER OF DELAY AND YOU ARE ALSO REQUIRED TO GET BACK TO US WITH
THE RECONFIRMATION OF YOUR BANKING PARTICULARS FOR WE TO KNOW IF WHAT WE HAVE
IN FILE IS CORRECT AND TO AVOID CREDITING YOUR FUND TO WRONG
ACCOUNT
.
CONGRATULATION
TO YOUR CONTRACT FUND.
PLEASE BE FAST ON THIS MATTER.
THANKS AND GOD
BLESS YOU
Regards,
Ben S.
Bernanke
anA
Chairman Federal Reserve Bank New
York,
Envelope-to:
Delivery-date: Mon, 28 Feb 2011 02:26:10 -0800
Received: from nm22.bullet.mail.sp2.yahoo.com ([98.139.91.92])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Pu0Ir-0001F3-22
for ; Mon, 28 Feb 2011 02:26:10 -0800
Received: from [98.139.91.69] by nm22.bullet.mail.sp2.yahoo.com with NNFMP; 28 Feb 2011 10:26:06 -0000
Received: from [98.139.91.27] by tm9.bullet.mail.sp2.yahoo.com with NNFMP; 28 Feb 2011 10:26:06 -0000
Received: from [127.0.0.1] by omp1027.mail.sp2.yahoo.com with NNFMP; 28 Feb 2011 10:26:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 46238 invoked by uid 60001); 28 Feb 2011 10:26:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1298888766; bh=scN8WUbOzwvrXterzfN3UauDeOit7PM/fTBiUjhZRao=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Me63PUeQw5VY5YeBqmwPleZ5CndVIQtCkn1OtUkEfEGbTxjVhXt5jUIBDKqR3Li6ykzNkTKShfj0+JMj4W3IGAKBjy4Y6Yx+nOhaA2ySpcWK707ZD0pBPfEGVkBa1/PSpAiQt0/SjJYTfXO0As1uWoMn7+BKHKMJ94BNYfmuka4=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=NIZ33RqD3SpEjuU/W1x06aolf2zJVMbdBjB/EglqV7ThMFWi7CsuyNiY7oeX8UDTo+M0pgef4Uy5efpYmOyDj2r6Z3NwGcTfOLM+uz5U18d5NnU7J2ZOi61dJmzgFyuDGEj6YqfDwh0KMTtqECS8jqNzuOPwK1HQX6T1uCfEhN0=;
Message-ID: <[email protected]>
X-YMail-OSG: tnDqieEVM1mx2usu8Y.jPXTgrXmIKi1xuyPtQQxa8nKMpCH
Received: from [82.128.82.10] by web80001.mail.sp1.yahoo.com via HTTP; Mon, 28 Feb 2011 02:26:05 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Mon, 28 Feb 2011 02:26:05 -0800 (PST)
From: FEDERAL RESERVE BANK BOARD <[email protected]>
Reply-To: [email protected]
Subject: CONTRACT FUND CREDIT FROM BANK FEDERAL RESERVE BOARD USA.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1324096348-1298888765=:43440"
X-Spam-Subject: ***SPAM*** CONTRACT FUND CREDIT FROM BANK FEDERAL RESERVE BOARD USA.
X-Spam-Status: Yes, score=11.4
X-Spam-Score: 114
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: NEW YORK. ATTENTION: BENEFICIARY, CONTRACT FUND CREDIT FROM
BANK FEDERAL RESERVE BOARD WE RECEIVED THE INSTRUCTIONAL LETTER TO CREDIT
$10.5MILLION TO YOUR ACCOUNT. WE WISH TO LET KNOW THAT ALL CHARGES ARE WAIVED
FOR THE SUCESS OF THIS CONTRACT FUND TO BE CREDITED INTO YOUR ACCOUNT. YOUR
RESPOND IS REQUIRED TO ENABLE US CREDIT YOUR ACCOUNT WITHOUT ANY FURTHER
OF DELAY AND YOU ARE ALSO REQUIRED TO GET BACK TO US WITH THE RECONFIRMATION
OF YOUR BANKING PARTICULARS FOR WE TO KNOW IF WHAT WE HAVE IN FILE IS CORRECT
AND TO AVOID CREDITING YOUR FUND TO WRONG ACCOUNT . CONGRATULATION TO YOUR
CONTRACT FUND. PLEASE BE FAST ON THIS MATTER. THANKS AND GOD BLESS YOU [...]
Content analysis details: (11.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.91.92 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail
(officxc-----507390[at]att.net)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officxc-----507390[at]att.net)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9127]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 HTML_FONT_FACE_BAD BODY: HTML font face is not a word
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[82.128.82.10 listed in zen.spamhaus.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_REMOTE_IMAGE Message contains an external image
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
--0-1324096348-1298888765=:43440
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
NEW
YORK.
ATTENTION: BENEFICIARY,
CONTRACT FUND CREDIT FROM BANK FEDERAL RESERVE
BOARD
WE RECEIVED THE INSTRUCTIONAL LETTER TO CREDIT
$10.5MILLION TO YOUR ACCOUNT.
WE WISH TO LET KNOW THAT ALL
CHARGES ARE WAIVED FOR THE SUCESS OF THIS CONTRACT FUND TO BE CREDITED INTO YOUR
ACCOUNT.
YOUR RESPOND IS REQUIRED TO ENABLE US CREDIT YOUR ACCOUNT
WITHOUT ANY FURTHER OF DELAY AND YOU ARE ALSO REQUIRED TO GET BACK TO US WITH
THE RECONFIRMATION OF YOUR BANKING PARTICULARS FOR WE TO KNOW IF WHAT WE HAVE
IN FILE IS CORRECT AND TO AVOID CREDITING YOUR FUND TO WRONG
ACCOUNT
.
CONGRATULATION
TO YOUR CONTRACT FUND.
PLEASE BE FAST ON THIS MATTER.
THANKS AND GOD
BLESS YOU
Regards,
Ben S.
Bernanke
anA
Chairman Federal Reserve Bank New
York,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces