by buried under 419s
Wed Dec 21, 2011 3:03 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 21 Dec 2011 10:41:50 -0800
Received: from mail.e.gov.kz ([82.200.162.243])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RdR6q-0006kl-R7
for ; Wed, 21 Dec 2011 10:41:50 -0800
Received: from User ([82.128.44.151])
by mail.e.gov.kz (Sun Java System Messaging Server 6.2-3.04 (built Jul 15
2005)) with ESMTPA id <[email protected]> for
; Wed, 21 Dec 2011 21:31:10 +0600 (ALMT)
Date: Wed, 21 Dec 2011 16:31:05 +0100
From: "MR. BEN BERNANKE" <[email protected]>
Subject: PAYMENT NOTIFICATION
To: Undisclosed recipients: ;
Reply-to: [email protected]
Message-id: <[email protected]>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Content-type: text/html; charset=Windows-1251
Content-transfer-encoding: 7BIT
X-Priority: 3
X-MSMail-priority: Normal
X-Spam-Subject: ***SPAM*** PAYMENT NOTIFICATION
X-Spam-Status: Yes, score=13.7
X-Spam-Score: 137
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: PAYMENT NOTIFICATION CONTRACT FUND CREDIT FROM FEDERAL RESERVE
BOARD THIS IS TO CONFIRM RECEIPT OF YOUR MAIL AND ALSO PROVIDE YOU WITH DETAILS
NEEDED TO RELEASE YOUR PAYMENT OF $10.5M INTO YOUR ACCOUNT, TO EFFECT THIS
PAYMENT YOU ARE TO RECONFIRM YOUR DETAILS AS FOLLOW SO THAT WE CAN RELEASE
TO OUR CORRESPONDING PAYING BANK WHO WILL IN TURN TRANSFER FUNDS INTO YOUR
ACCOUNT. [...]
Content analysis details: (13.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[82.200.162.243 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[82.200.162.243 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5723]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.2 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
PAYMENT NOTIFICATION
CONTRACT FUND CREDIT FROM FEDERAL RESERVE BOARD
THIS IS TO CONFIRM RECEIPT OF YOUR MAIL AND ALSO PROVIDE YOU WITH DETAILS NEEDED TO RELEASE YOUR PAYMENT OF $10.5M INTO YOUR ACCOUNT, TO EFFECT THIS PAYMENT YOU ARE TO RECONFIRM YOUR DETAILS AS FOLLOW SO THAT WE CAN RELEASE TO OUR CORRESPONDING PAYING BANK WHO WILL IN TURN TRANSFER FUNDS INTO YOUR ACCOUNT.
YOUR FULL NAMES
YOUR HOME ADDRESS
YOUR DIRECT TELEPHONE AND FAX NUMBER.
OCCUPATION
MARITAL STATUS
BANK INFORMATION FOR TRANSFER PAYMENT
BANK NAME
BANK ADDRESS
BANK TEL/FAX
ACCOUNT NAME
ACCOUNT NUMBER
ROUTING/SORTING NUMBER
YOU ARE ADVICE TO GET BACK TO US AS SOON AS POSSIBLE SO THAT WE CAN COMMUNICATE OUR CORRESPONDING BANK TO EFFECT TRANSFER OF THE FUNDS TO YOUR ACCOUNT. ALSO FOLLOW THE RULES AND REGULATIONS OF THIS BANK TO ENABLE THEM REMIT THE SAID FUND TO YOU. IF YOU ARE NOT COMFORTABLE WITH SENDING YOUR DETAILS THROUGH MAIL YOU CAN SEND THEM THROUGH FAX WITH OUR NUMBER BELOW, AFTER DIALING WAIT FOR THE FAX TONE BEFORE YOU SEND;
FAX: 206-666-5832
REMAIN BLESSED AS I AWAIT YOUR RESPONSE WITH UPDATE.CONTACT MR. BEN BERNANKE CHAIRMAN FEDERAL RESERVE BOARD.
REGARDS
MR. BEN BERNANKE
[email protected]
[email protected]
Envelope-to:
Delivery-date: Wed, 21 Dec 2011 10:41:50 -0800
Received: from mail.e.gov.kz ([82.200.162.243])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RdR6q-0006kl-R7
for ; Wed, 21 Dec 2011 10:41:50 -0800
Received: from User ([82.128.44.151])
by mail.e.gov.kz (Sun Java System Messaging Server 6.2-3.04 (built Jul 15
2005)) with ESMTPA id <[email protected]> for
; Wed, 21 Dec 2011 21:31:10 +0600 (ALMT)
Date: Wed, 21 Dec 2011 16:31:05 +0100
From: "MR. BEN BERNANKE" <[email protected]>
Subject: PAYMENT NOTIFICATION
To: Undisclosed recipients: ;
Reply-to: [email protected]
Message-id: <[email protected]>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Content-type: text/html; charset=Windows-1251
Content-transfer-encoding: 7BIT
X-Priority: 3
X-MSMail-priority: Normal
X-Spam-Subject: ***SPAM*** PAYMENT NOTIFICATION
X-Spam-Status: Yes, score=13.7
X-Spam-Score: 137
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: PAYMENT NOTIFICATION CONTRACT FUND CREDIT FROM FEDERAL RESERVE
BOARD THIS IS TO CONFIRM RECEIPT OF YOUR MAIL AND ALSO PROVIDE YOU WITH DETAILS
NEEDED TO RELEASE YOUR PAYMENT OF $10.5M INTO YOUR ACCOUNT, TO EFFECT THIS
PAYMENT YOU ARE TO RECONFIRM YOUR DETAILS AS FOLLOW SO THAT WE CAN RELEASE
TO OUR CORRESPONDING PAYING BANK WHO WILL IN TURN TRANSFER FUNDS INTO YOUR
ACCOUNT. [...]
Content analysis details: (13.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[82.200.162.243 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[82.200.162.243 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5723]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.2 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
PAYMENT NOTIFICATION
CONTRACT FUND CREDIT FROM FEDERAL RESERVE BOARD
THIS IS TO CONFIRM RECEIPT OF YOUR MAIL AND ALSO PROVIDE YOU WITH DETAILS NEEDED TO RELEASE YOUR PAYMENT OF $10.5M INTO YOUR ACCOUNT, TO EFFECT THIS PAYMENT YOU ARE TO RECONFIRM YOUR DETAILS AS FOLLOW SO THAT WE CAN RELEASE TO OUR CORRESPONDING PAYING BANK WHO WILL IN TURN TRANSFER FUNDS INTO YOUR ACCOUNT.
YOUR FULL NAMES
YOUR HOME ADDRESS
YOUR DIRECT TELEPHONE AND FAX NUMBER.
OCCUPATION
MARITAL STATUS
BANK INFORMATION FOR TRANSFER PAYMENT
BANK NAME
BANK ADDRESS
BANK TEL/FAX
ACCOUNT NAME
ACCOUNT NUMBER
ROUTING/SORTING NUMBER
YOU ARE ADVICE TO GET BACK TO US AS SOON AS POSSIBLE SO THAT WE CAN COMMUNICATE OUR CORRESPONDING BANK TO EFFECT TRANSFER OF THE FUNDS TO YOUR ACCOUNT. ALSO FOLLOW THE RULES AND REGULATIONS OF THIS BANK TO ENABLE THEM REMIT THE SAID FUND TO YOU. IF YOU ARE NOT COMFORTABLE WITH SENDING YOUR DETAILS THROUGH MAIL YOU CAN SEND THEM THROUGH FAX WITH OUR NUMBER BELOW, AFTER DIALING WAIT FOR THE FAX TONE BEFORE YOU SEND;
FAX: 206-666-5832
REMAIN BLESSED AS I AWAIT YOUR RESPONSE WITH UPDATE.CONTACT MR. BEN BERNANKE CHAIRMAN FEDERAL RESERVE BOARD.
REGARDS
MR. BEN BERNANKE
[email protected]
[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces