by buried under 419s
Sun Aug 05, 2012 12:45 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 04 Aug 2012 19:46:07 -0700
Received: from [213.181.38.176] (port=50641 helo=server.APR.local)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1Sxqqz-0002o4-Jy
for ; Sat, 04 Aug 2012 19:46:07 -0700
Received: from User ([195.13.5.1]) by server.APR.local with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 5 Aug 2012 04:38:30 +0200
Reply-To: <[email protected]>
From: "ANDY LAU"<[email protected]>
Date: Sat, 4 Aug 2012 16:45:47 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 05 Aug 2012 02:38:31.0062 (UTC) FILETIME=[66A82360:01CD72B3]
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION I am very happy to inform you that your fund with
the world bank United Kingdom, has been approved and you are to receive this
fund through the bank of China. How ever, one LEE FUI FUI from Malaysia,
holder of the account bellow, [...]
Content analysis details: (15.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(andylau247[at]hotmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[213.181.38.176 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[213.181.38.176 listed in zen.spamhaus.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (andylau247[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FSL_UA FSL_UA
1.1 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** PLEASE; DID YOU AUTHORISE LEE FUI FUI
ATTENTION
I am very happy to inform you that your fund with the world bank United Kingdom, has been approved and you are to receive this fund through the bank of China.
How ever, one LEE FUI FUI from Malaysia, holder of the account bellow,
NAME OF BANK : CIMB BANK MALAYSIA
HOLDER NAME: LEE FUI FUI
ACCOUNT NUMBER: 14200066873528
BRANCH/ADDRESS : PWTC 2 KUALA LUMPUR 56000 MALAYSIA
SWIFT CODE: CIBBMYKL
contacted the bank here with the above account information and he insists on having the fund transferred to him reasons being that you authorized him to take care of all the legal fees involved and have the fund wired to his account.
In this regard, we would like you to confirm Mr. LEE FUI FUI's claim if you actually authorized him to receive your fund. If on the other hand you did not authorize him to receive your fund, then please you should get back to this office to reconfirm the information bellow;
1. YOUR FULL NAME
2. YOUR DIRECT PHONE NUMBERS
3. YOUR HOME OR OFFICE ADDRESS
4. YOUR BANKING INFORMATION.
5.THE AMOUNT YOU ARE TO RECEIVE.
Please do get back to me immediately so we can proceed with the transfer process.
Regards
Andy Lau
Envelope-to:
Delivery-date: Sat, 04 Aug 2012 19:46:07 -0700
Received: from [213.181.38.176] (port=50641 helo=server.APR.local)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1Sxqqz-0002o4-Jy
for ; Sat, 04 Aug 2012 19:46:07 -0700
Received: from User ([195.13.5.1]) by server.APR.local with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 5 Aug 2012 04:38:30 +0200
Reply-To: <[email protected]>
From: "ANDY LAU"<[email protected]>
Date: Sat, 4 Aug 2012 16:45:47 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 05 Aug 2012 02:38:31.0062 (UTC) FILETIME=[66A82360:01CD72B3]
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION I am very happy to inform you that your fund with
the world bank United Kingdom, has been approved and you are to receive this
fund through the bank of China. How ever, one LEE FUI FUI from Malaysia,
holder of the account bellow, [...]
Content analysis details: (15.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(andylau247[at]hotmail.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[213.181.38.176 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[213.181.38.176 listed in zen.spamhaus.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (andylau247[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FSL_UA FSL_UA
1.1 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** PLEASE; DID YOU AUTHORISE LEE FUI FUI
ATTENTION
I am very happy to inform you that your fund with the world bank United Kingdom, has been approved and you are to receive this fund through the bank of China.
How ever, one LEE FUI FUI from Malaysia, holder of the account bellow,
NAME OF BANK : CIMB BANK MALAYSIA
HOLDER NAME: LEE FUI FUI
ACCOUNT NUMBER: 14200066873528
BRANCH/ADDRESS : PWTC 2 KUALA LUMPUR 56000 MALAYSIA
SWIFT CODE: CIBBMYKL
contacted the bank here with the above account information and he insists on having the fund transferred to him reasons being that you authorized him to take care of all the legal fees involved and have the fund wired to his account.
In this regard, we would like you to confirm Mr. LEE FUI FUI's claim if you actually authorized him to receive your fund. If on the other hand you did not authorize him to receive your fund, then please you should get back to this office to reconfirm the information bellow;
1. YOUR FULL NAME
2. YOUR DIRECT PHONE NUMBERS
3. YOUR HOME OR OFFICE ADDRESS
4. YOUR BANKING INFORMATION.
5.THE AMOUNT YOU ARE TO RECEIVE.
Please do get back to me immediately so we can proceed with the transfer process.
Regards
Andy Lau
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces