by buried under 419s
Wed Aug 22, 2012 7:10 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 22 Aug 2012 15:31:15 -0700
Received: from mail.spb.runnet.ru ([194.85.41.40]:4122)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T4JSA-0000nG-An
for ; Wed, 22 Aug 2012 15:31:15 -0700
Received: from [209.203.32.154] (account [email protected] HELO User)
by mail.spb.runnet.ru (CommuniGate Pro SMTP 4.1.4)
with ESMTP id 322262; Thu, 23 Aug 2012 02:31:02 +0400
Reply-To: <[email protected]>
From: "Mr. Chan Wong"<[email protected]>
Date: Thu, 23 Aug 2012 00:31:04 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: The President / CEO Urgent Telegraphic / Swift Transfer
of USD35M I am Mr. Chan Wong, Group Managing Director (GMD) / Chairman Debt
Reconciliation Committee Hong Kong Highways Department (HKHD); I got your
contact from worldwide database and yellow pages encyclopedia after due consideration
believing you are highly respected personality. Although, I do not know to
what extent you are familiar with events, hence I contact you. [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.4 TVD_PH_BODY_ACCOUNTS_PRE BODY: TVD_PH_BODY_ACCOUNTS_PRE
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 NSL_RCVD_HELO_USER Received from HELO User
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[194.85.41.40 listed in list.dnswl.org]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[194.85.41.40 listed in bb.barracudacentral.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FSL_UA FSL_UA
3.6 HK_NAME_MR_MRS HK_NAME_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.3 TO_NO_BRKTS_PCNT To: misformatted + percentage
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Urgent Telegraphic / Swift Transfer of USD35M
Attn: The President / CEO
Urgent Telegraphic / Swift Transfer of USD35M
I am Mr. Chan Wong, Group Managing Director (GMD) / Chairman Debt Reconciliation Committee Hong Kong Highways Department (HKHD); I got your contact from worldwide database and yellow pages encyclopedia after due consideration believing you are highly respected personality. Although, I do not know to what extent you are familiar with events, hence I contact you.
Firstly, I must solicit your strictest confidence in this transaction; this is by virtue of its nature as being utterly confidential and
Respectively, In May 2001, a contract worth USD285M was awarded to a foreign company by Hong Kong Highways Department (HKHD) for Maintenance of Highway Structures in Hong Kong Island, Kowloon and New Territories 2002-2005. I deliberately over-invoiced the contract with USD35M. Actually the company that executed the contracts has been fully paid and the projects were completed and officially commissioned.
Therefore, due to epigrammatic decision to redefine the outstanding payment I am presenting you as the beneficiary who will present original invoice to re-apply and to substitute the foreign company which upon its presentation to Central Bank of Hong Kong (CBHK) your designated bank account will be credited unconditionally. On receipt of your immediate response, we shall discuss the compulsory modalities. I have all necessary documents / approvals to secure the transfer in your favour.
Note as a mandatory, I wish to make the clarifications as follows: That you will be entitled to share 40% of the total funds and 60% will be my share. I consequently request your maximum assistance and approvals to facilitate the transfer of the above funds from Central Bank of Hong Kong (CBHK), where these funds are deposited.
Upon confirmation of your readiness to execute this magnificent transaction with me, you will be urgently required to furnish your companies letter headed paper signed & stamped and the following:
1) Bank Name & Address 2) Bank phone/fax numbers 3) Bank Swift Code or Routing Number 4) Account number and Account name 5) Your full name and address 6) Please send to me also your direct Telephone and fax 7) Copy of your international Passport
Your company name and registration number
In conclusion, I guarantee that this operation will be executed under a legitimate arrangement that will protect us from any breach of law.
Best regards,
Mr. Chan Wong
Hong Kong Highways Department HKHD
Envelope-to:
Delivery-date: Wed, 22 Aug 2012 15:31:15 -0700
Received: from mail.spb.runnet.ru ([194.85.41.40]:4122)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T4JSA-0000nG-An
for ; Wed, 22 Aug 2012 15:31:15 -0700
Received: from [209.203.32.154] (account [email protected] HELO User)
by mail.spb.runnet.ru (CommuniGate Pro SMTP 4.1.4)
with ESMTP id 322262; Thu, 23 Aug 2012 02:31:02 +0400
Reply-To: <[email protected]>
From: "Mr. Chan Wong"<[email protected]>
Date: Thu, 23 Aug 2012 00:31:04 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: The President / CEO Urgent Telegraphic / Swift Transfer
of USD35M I am Mr. Chan Wong, Group Managing Director (GMD) / Chairman Debt
Reconciliation Committee Hong Kong Highways Department (HKHD); I got your
contact from worldwide database and yellow pages encyclopedia after due consideration
believing you are highly respected personality. Although, I do not know to
what extent you are familiar with events, hence I contact you. [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.4 TVD_PH_BODY_ACCOUNTS_PRE BODY: TVD_PH_BODY_ACCOUNTS_PRE
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 NSL_RCVD_HELO_USER Received from HELO User
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[194.85.41.40 listed in list.dnswl.org]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[194.85.41.40 listed in bb.barracudacentral.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FSL_UA FSL_UA
3.6 HK_NAME_MR_MRS HK_NAME_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.3 TO_NO_BRKTS_PCNT To: misformatted + percentage
0.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Urgent Telegraphic / Swift Transfer of USD35M
Attn: The President / CEO
Urgent Telegraphic / Swift Transfer of USD35M
I am Mr. Chan Wong, Group Managing Director (GMD) / Chairman Debt Reconciliation Committee Hong Kong Highways Department (HKHD); I got your contact from worldwide database and yellow pages encyclopedia after due consideration believing you are highly respected personality. Although, I do not know to what extent you are familiar with events, hence I contact you.
Firstly, I must solicit your strictest confidence in this transaction; this is by virtue of its nature as being utterly confidential and
Respectively, In May 2001, a contract worth USD285M was awarded to a foreign company by Hong Kong Highways Department (HKHD) for Maintenance of Highway Structures in Hong Kong Island, Kowloon and New Territories 2002-2005. I deliberately over-invoiced the contract with USD35M. Actually the company that executed the contracts has been fully paid and the projects were completed and officially commissioned.
Therefore, due to epigrammatic decision to redefine the outstanding payment I am presenting you as the beneficiary who will present original invoice to re-apply and to substitute the foreign company which upon its presentation to Central Bank of Hong Kong (CBHK) your designated bank account will be credited unconditionally. On receipt of your immediate response, we shall discuss the compulsory modalities. I have all necessary documents / approvals to secure the transfer in your favour.
Note as a mandatory, I wish to make the clarifications as follows: That you will be entitled to share 40% of the total funds and 60% will be my share. I consequently request your maximum assistance and approvals to facilitate the transfer of the above funds from Central Bank of Hong Kong (CBHK), where these funds are deposited.
Upon confirmation of your readiness to execute this magnificent transaction with me, you will be urgently required to furnish your companies letter headed paper signed & stamped and the following:
1) Bank Name & Address 2) Bank phone/fax numbers 3) Bank Swift Code or Routing Number 4) Account number and Account name 5) Your full name and address 6) Please send to me also your direct Telephone and fax 7) Copy of your international Passport
Your company name and registration numberIn conclusion, I guarantee that this operation will be executed under a legitimate arrangement that will protect us from any breach of law.
Best regards,
Mr. Chan Wong
Hong Kong Highways Department HKHD
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces