by buried under 419s
Sat Jul 14, 2012 7:06 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 14 Jul 2012 02:42:28 -0700
Received: from [117.240.227.3] (port=48132 helo=mail.akshmail.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1Spyrn-0001E6-2m
for ; Sat, 14 Jul 2012 02:42:28 -0700
Received: (qmail 7573 invoked by uid 507); 14 Jul 2012 15:06:15 +0530
Received: from adsl-070-148-065-042.sip.clt.bellsouth.net (HELO User) ([email protected]@70.148.65.42)
by mail.akshmail.com with SMTP; 14 Jul 2012 15:06:15 +0530
Reply-To: <[email protected]>
From: "Ben .S. Bernanke"<[email protected]>
Date: Sat, 14 Jul 2012 05:54:55 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=17.1
X-Spam-Score: 171
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FEDERAL RESERVE BOARD NEW YORK 33L IBERTY STREET, NEW YORK
, NY 10038. ATTENTION BENEFICIARY: CONTRACT FUNDS - CREDITED FROM THE FEDERAL
RESERVE BOARD. [...]
Content analysis details: (17.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[117.240.227.3 listed in bb.barracudacentral.org]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5020]
0.0 FSL_UA FSL_UA
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_URI From misspaced, has URI
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** CONTRACT FUNDS - CREDITED FROM THE FEDERAL RESERVE BOARD.
FEDERAL RESERVE BOARD NEW YORK
33L IBERTY STREET, NEW YORK , NY 10038.
ATTENTION BENEFICIARY:
CONTRACT FUNDS - CREDITED FROM THE FEDERAL RESERVE BOARD.
We received an instructional letter to credit $10.5million to your account. We wish to let you know that all charges are waived for the success of this contract fund to be credited into your account.
Your response is required to enable us credit your account without any further delay and you are also required to get back to us with the confirmation of your banking particulars for us to know if what we have in our file is correct and to avoid crediting your fund to wrong account.
CONGRATULATION ON YOUR CONTRACT FUND.
Please be fast on this matter. Thanks and God bless you.
Best Regards,
Ben .S. Bernanke
Chairman Federal Reserve Board New York.
http://www.federalreserve.gov/
Envelope-to:
Delivery-date: Sat, 14 Jul 2012 02:42:28 -0700
Received: from [117.240.227.3] (port=48132 helo=mail.akshmail.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1Spyrn-0001E6-2m
for ; Sat, 14 Jul 2012 02:42:28 -0700
Received: (qmail 7573 invoked by uid 507); 14 Jul 2012 15:06:15 +0530
Received: from adsl-070-148-065-042.sip.clt.bellsouth.net (HELO User) ([email protected]@70.148.65.42)
by mail.akshmail.com with SMTP; 14 Jul 2012 15:06:15 +0530
Reply-To: <[email protected]>
From: "Ben .S. Bernanke"<[email protected]>
Date: Sat, 14 Jul 2012 05:54:55 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=17.1
X-Spam-Score: 171
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FEDERAL RESERVE BOARD NEW YORK 33L IBERTY STREET, NEW YORK
, NY 10038. ATTENTION BENEFICIARY: CONTRACT FUNDS - CREDITED FROM THE FEDERAL
RESERVE BOARD. [...]
Content analysis details: (17.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[117.240.227.3 listed in bb.barracudacentral.org]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5020]
0.0 FSL_UA FSL_UA
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_URI From misspaced, has URI
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** CONTRACT FUNDS - CREDITED FROM THE FEDERAL RESERVE BOARD.
FEDERAL RESERVE BOARD NEW YORK
33L IBERTY STREET, NEW YORK , NY 10038.
ATTENTION BENEFICIARY:
CONTRACT FUNDS - CREDITED FROM THE FEDERAL RESERVE BOARD.
We received an instructional letter to credit $10.5million to your account. We wish to let you know that all charges are waived for the success of this contract fund to be credited into your account.
Your response is required to enable us credit your account without any further delay and you are also required to get back to us with the confirmation of your banking particulars for us to know if what we have in our file is correct and to avoid crediting your fund to wrong account.
CONGRATULATION ON YOUR CONTRACT FUND.
Please be fast on this matter. Thanks and God bless you.
Best Regards,
Ben .S. Bernanke
Chairman Federal Reserve Board New York.
http://www.federalreserve.gov/
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces