#407175 by buried under 419s
Thu Mar 26, 2020 8:38 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 26 Mar 2020 16:51:01 -0400
Received: from server1.markaz.in ([138.128.191.170]:44133)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jHZSs-000Iix-9L
for ; Thu, 26 Mar 2020 16:51:00 -0400
Received: (qmail 11071 invoked by uid 108); 26 Mar 2020 13:28:48 -0400
Received: by simscan 1.4.0 ppid: 3128, pid: 10767, t: 0.5937s
scanners:none
Received: from unknown (HELO User) ([email protected]@103.207.38.156)
by server1.markaz.in with ESMTPA; 26 Mar 2020 13:28:47 -0400
Reply-To: <[email protected]>
From: "CHRISTOPHER WRAY[FBI]"<[email protected]>
Date: Fri, 27 Mar 2020 02:13:20 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=33.9
X-Spam-Score: 339
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: CHRISTOPHER WRAY DIRECTOR FBI FEDERAL BUREAU OF INVESTIGATION
FBI.WASHINGTON D.C FEDERAL BUREAU OF
Content analysis details: (33.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[103.207.38.156 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.2 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=cw%40fb.com;ip=;]
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received:
date
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 FROM_MISSP_SPF_FAIL No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FBI_SPOOF Claims to be FBI, but not from FBI domain
1.0 FBI_MONEY The FBI wants to give you lots of money?
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** information from FBI[CODE:210]
CHRISTOPHER WRAY
DIRECTOR FBI
FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON D.C FEDERAL BUREAU OF
INVESTIGATION SEEKING TO WIRETAP
The Federal bureau of investigation (FBI) Washington,D.C in conjunction with
some other relevant Investigations Agencies have recently been informed
through our Global intelligence monitoring network that your over-due
contract payment which was fully endorsed in your favor accordingly by the
Central bank of Malaysia(Bank Negara Malaysia) has not been claimed.
It might interest you to know that we have taken out time in screening
through this project as stipulated on our protocol of operation and have
finally confirmed that your contract payment is 100% genuine and hitch free
from all facet and of which you have the lawful right to claim your fund
without any further delay.
We further advise that you go ahead in dealing with the Central Bank office
accordingly as we will be monitoring all their services with you as well as
your correspondence at all level.
We were also made to understand that a lady with name Mrs.
Joan C.Bailey from OHIO has already contacted them and also presented to
them all the necessary documentation evidencing your claim purported to have
been signed personally by you prior to the release of your contract fund
valued at about $25million us dollars only but the Central Bank office did
the wise thing by insisting on hearing from you personally before they go
ahead on wiring your fund to the Bank information which was forwarded to
them by the above named Lady so that the main reason why they contacted us
so as to assist them in making the investigation.
Contact immediately the office of the Central Bank of Malaysia (Bank Negara
Malaysia) via email with the below information accordingly:
NAME: Nor Shamsiah Mohamad Yunus
OFFICE ADDRESS: Bank Negara Malaysia,
Jalan Kuching, Kuala Lumpur,
Wilayah Persekutuan,Kuala Lumpur,
Selangor,Malaysia
Email: [email protected]
Meanwhile, we will advise that you contact the office of the Governor of the
Central Bank immediately with the above email address and request that they
attend to your payment file as directed, so as to enable you receive your
contract fund accordingly.
To this effect, you are required to reconfirm and authenticate your given
particulars below for certainty and onward processing and release of you
funds as we may not be held liable for any wrong payment.
FULL NAMES:________________________________
CITY: _____________________________
ZIP: _____________
COUNTRY____________________________
SEX:___________
AGE:_______________
TELEPHONE NUMBER:_____________________
FAX: __________________________
Ensure you follow all their procedure as may be required by them as that
will further help hasten up the whole procedure as regard to the transfer of
your fund to you as designated.
Also have in mind that the Central Bank of Malaysia equally have their own
protocol of operation as stipulated on their banking terms, so delay could
be very dangerous.
Thank you very much for your anticipated co-operation in advance as we
earnestly await your urgent response to this matter.
Best Regards,
Christopher Wray[FBI Director]
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C.
The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential, proprietary, and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from all computers. Please consider the environment before printing this e-mail.
Envelope-to:
Delivery-date: Thu, 26 Mar 2020 16:51:01 -0400
Received: from server1.markaz.in ([138.128.191.170]:44133)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jHZSs-000Iix-9L
for ; Thu, 26 Mar 2020 16:51:00 -0400
Received: (qmail 11071 invoked by uid 108); 26 Mar 2020 13:28:48 -0400
Received: by simscan 1.4.0 ppid: 3128, pid: 10767, t: 0.5937s
scanners:none
Received: from unknown (HELO User) ([email protected]@103.207.38.156)
by server1.markaz.in with ESMTPA; 26 Mar 2020 13:28:47 -0400
Reply-To: <[email protected]>
From: "CHRISTOPHER WRAY[FBI]"<[email protected]>
Date: Fri, 27 Mar 2020 02:13:20 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=33.9
X-Spam-Score: 339
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: CHRISTOPHER WRAY DIRECTOR FBI FEDERAL BUREAU OF INVESTIGATION
FBI.WASHINGTON D.C FEDERAL BUREAU OF
Content analysis details: (33.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[103.207.38.156 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.2 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 MISSING_HEADERS Missing To: header
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=cw%40fb.com;ip=;]
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received:
date
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.0 FROM_MISSP_SPF_FAIL No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FBI_SPOOF Claims to be FBI, but not from FBI domain
1.0 FBI_MONEY The FBI wants to give you lots of money?
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** information from FBI[CODE:210]
CHRISTOPHER WRAY
DIRECTOR FBI
FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON D.C FEDERAL BUREAU OF
INVESTIGATION SEEKING TO WIRETAP
The Federal bureau of investigation (FBI) Washington,D.C in conjunction with
some other relevant Investigations Agencies have recently been informed
through our Global intelligence monitoring network that your over-due
contract payment which was fully endorsed in your favor accordingly by the
Central bank of Malaysia(Bank Negara Malaysia) has not been claimed.
It might interest you to know that we have taken out time in screening
through this project as stipulated on our protocol of operation and have
finally confirmed that your contract payment is 100% genuine and hitch free
from all facet and of which you have the lawful right to claim your fund
without any further delay.
We further advise that you go ahead in dealing with the Central Bank office
accordingly as we will be monitoring all their services with you as well as
your correspondence at all level.
We were also made to understand that a lady with name Mrs.
Joan C.Bailey from OHIO has already contacted them and also presented to
them all the necessary documentation evidencing your claim purported to have
been signed personally by you prior to the release of your contract fund
valued at about $25million us dollars only but the Central Bank office did
the wise thing by insisting on hearing from you personally before they go
ahead on wiring your fund to the Bank information which was forwarded to
them by the above named Lady so that the main reason why they contacted us
so as to assist them in making the investigation.
Contact immediately the office of the Central Bank of Malaysia (Bank Negara
Malaysia) via email with the below information accordingly:
NAME: Nor Shamsiah Mohamad Yunus
OFFICE ADDRESS: Bank Negara Malaysia,
Jalan Kuching, Kuala Lumpur,
Wilayah Persekutuan,Kuala Lumpur,
Selangor,Malaysia
Email: [email protected]
Meanwhile, we will advise that you contact the office of the Governor of the
Central Bank immediately with the above email address and request that they
attend to your payment file as directed, so as to enable you receive your
contract fund accordingly.
To this effect, you are required to reconfirm and authenticate your given
particulars below for certainty and onward processing and release of you
funds as we may not be held liable for any wrong payment.
FULL NAMES:________________________________
CITY: _____________________________
ZIP: _____________
COUNTRY____________________________
SEX:___________
AGE:_______________
TELEPHONE NUMBER:_____________________
FAX: __________________________
Ensure you follow all their procedure as may be required by them as that
will further help hasten up the whole procedure as regard to the transfer of
your fund to you as designated.
Also have in mind that the Central Bank of Malaysia equally have their own
protocol of operation as stipulated on their banking terms, so delay could
be very dangerous.
Thank you very much for your anticipated co-operation in advance as we
earnestly await your urgent response to this matter.
Best Regards,
Christopher Wray[FBI Director]
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C.
The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential, proprietary, and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from all computers. Please consider the environment before printing this e-mail.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces