by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id 8HxOHe8zZl7ItwEAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 09 Mar 2020 08:17:51 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Mar 2020 08:17:51 -0400
Received: from mail-lf1-f67.google.com ([209.85.167.67]:41232)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jBHLy-000THI-HC
for ; Mon, 09 Mar 2020 08:17:51 -0400
Received: by mail-lf1-f67.google.com with SMTP id q10so6739762lfo.8
for <>; Mon, 09 Mar 2020 05:17:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
message-id:subject:to
:content-transfer-encoding;
bh=car37wAULw0W/gZ0W21MaFPg7OD22qbcyNUFaOQGJFg=;
b=WpluVl52mLRQLBd7IKSNSGeDxumbgWvS43NFfVqfHTHeQ+Dw0KKy9hM7fD5wI7R9jr
+FwIXFJnuoGfetLC7EeSumhr0QVt5j+xknyUAflnxlkFw1yYcVGIlGRFXGtK7Oz66cAj
RRE4yyIxxBs2oIZ6fh+3+Eim4dpdqNjkHh7OuKNqjtCAwYd4xHkQMaK0lHG68md4S9uL
TsP7kbx4GoHAFKfWoyM1AOisWCbI2AolPO0XcRfusjEaTliUtx5LWSmLBMqchR7TI7U3
RGBFPZQKv6qEYw2h+t1zXwWglbAilR3LERqLWvlOvkgdIv7hALoQWU8Oq2c+FosqKDYr
e6wA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
message-id
:subject:to:content-transfer-encoding;
bh=car37wAULw0W/gZ0W21MaFPg7OD22qbcyNUFaOQGJFg=;
b=Mb0qxPatl9/IJdyZ3bdxuTu07xlQjUNNWBw/knufQMx0tYME6jjJ49YCBrCuM15BoO
iYgV3EPiZY5gQTlgLPcg51i/HHda9FC7fD44XdNKKyD5wsoCaQgZLlPSzgfb3DCReLBm
yvvM0NoGk72nlujCfPgLIz940SGwELZVTkCTCo914eLv+E6bMQlNkcoeKITI5bazQXDn
jMUrAHXtCdD1X4nempDhxNnkcAmtedXndwH2d4eFkAQFzH7Ia586qqUSphx6Y5GIyAbY
s8FqFJfIJ/N2fzwX9MOUKl+/SaGsSPkzs6IcKTFX8jJAfp/z+eqcDHWboMNR2BV/SJL+
n3Zw==
X-Gm-Message-State: ANhLgQ0WNrAd2531KslmPrqFvJOWkWh9CAvEmx3YkklzSSXwQuJzP0rd
cfVudxSV5SXONDY6hnUWPpTvMSaZa70vqtRz2ek=
X-Google-Smtp-Source: ADFU+vusBzjNrFHvuENhC4+7rtccSa4+lZmcCe8FA1Pnx1glBgFKZT7yUOYJUfbUUQ0neT8RKv3B4aJY/Rqd+P6c5Sw=
X-Received: by 2002:a05:6512:50f:: with SMTP id o15mr9314377lfb.216.1583756226038;
Mon, 09 Mar 2020 05:17:06 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a2e:584d:0:0:0:0:0 with HTTP; Mon, 9 Mar 2020 05:17:05 -0700 (PDT)
Reply-To: [email protected]
From: "Mr. Jerome H. Powell" <[email protected]>
Date: Mon, 9 Mar 2020 13:17:05 +0100
Message-ID: <CAP-NRtnnS_3WO=D=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc:
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FEDERAL RESERVE BANK OF NEW YORK ADDRESS: 33 LIBERTY STREET,
NEW YORK, N.Y 10038. ATTN: FUND BENEFICIARY, Re: ATM Card payment notification.
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.167.67 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[harrisoneke01[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.67 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[powelljerome2020[at]gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[harrisoneke01[at]gmail.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.1 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.2 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** ATTN: FUND BENEFICIARY,
FEDERAL RESERVE BANK OF NEW YORK
ADDRESS: 33 LIBERTY STREET,
NEW YORK, N.Y 10038.
ATTN: FUND BENEFICIARY,
Re: ATM Card payment notification.
This is to officially inform you that the bank Federal Reserve Board
New York Branch has concluded in the meeting today over your long
overdue contract payment and agreed that your payment worth
US$10.500,000.00 will be released to you through ATM Master Card which
will be delivered to you directly to your home address.
However, you are further advised to know that all arrangement has been
completed long ago for the immediate dispatch to your residency, you
have to reply back to us as soon as possible with the below DATA’ to
enable the Ups shipping department proceed with the immediate dispatch
tomorrow been today dated 9th of March 2020 on your behalf.
Finally, this is very urgent and important the bank are waiting to
hear from you right away today, Bear in mind that the tracking number
of your parcel will be given to you immediately the Processing charge
and Stamp fee which will not cost you much is received to avoid any
immediate STOP ORDER from the United Nation office.
Note That Because Of Impostors, We Hereby Issued You Our Code Of
Conduct, Which Is (ATM-2020) So You Have To Indicate This Code When
replying back to us By Using It As Your Subject. Get back to us with
this information needed,
Full Names:
Your Address:
Country:
Direct Number:
Your Age And Occupation:
A scan copy of your ID card or passport:
Reply back to us accordingly; The bank Wait For Your Expedite Response.
Yours in Service,
Mr. Jerome H. Powell
Chairman Federal Reserve Board New York
Phone number: +1-240-317-2440 (ONLY TEXT)
Delivered-To:
Received: from
by with LMTP
id 8HxOHe8zZl7ItwEAibB4EA
(envelope-from <[email protected]>)
for <>; Mon, 09 Mar 2020 08:17:51 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Mar 2020 08:17:51 -0400
Received: from mail-lf1-f67.google.com ([209.85.167.67]:41232)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jBHLy-000THI-HC
for ; Mon, 09 Mar 2020 08:17:51 -0400
Received: by mail-lf1-f67.google.com with SMTP id q10so6739762lfo.8
for <>; Mon, 09 Mar 2020 05:17:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from
:content-transfer-encoding;
bh=car37wAULw0W/gZ0W21MaFPg7OD22qbcyNUFaOQGJFg=;
b=WpluVl52mLRQLBd7IKSNSGeDxumbgWvS43NFfVqfHTHeQ+Dw0KKy9hM7fD5wI7R9jr
+FwIXFJnuoGfetLC7EeSumhr0QVt5j+xknyUAflnxlkFw1yYcVGIlGRFXGtK7Oz66cAj
RRE4yyIxxBs2oIZ6fh+3+Eim4dpdqNjkHh7OuKNqjtCAwYd4xHkQMaK0lHG68md4S9uL
TsP7kbx4GoHAFKfWoyM1AOisWCbI2AolPO0XcRfusjEaTliUtx5LWSmLBMqchR7TI7U3
RGBFPZQKv6qEYw2h+t1zXwWglbAilR3LERqLWvlOvkgdIv7hALoQWU8Oq2c+FosqKDYr
e6wA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from
:subject:to:content-transfer-encoding;
bh=car37wAULw0W/gZ0W21MaFPg7OD22qbcyNUFaOQGJFg=;
b=Mb0qxPatl9/IJdyZ3bdxuTu07xlQjUNNWBw/knufQMx0tYME6jjJ49YCBrCuM15BoO
iYgV3EPiZY5gQTlgLPcg51i/HHda9FC7fD44XdNKKyD5wsoCaQgZLlPSzgfb3DCReLBm
yvvM0NoGk72nlujCfPgLIz940SGwELZVTkCTCo914eLv+E6bMQlNkcoeKITI5bazQXDn
jMUrAHXtCdD1X4nempDhxNnkcAmtedXndwH2d4eFkAQFzH7Ia586qqUSphx6Y5GIyAbY
s8FqFJfIJ/N2fzwX9MOUKl+/SaGsSPkzs6IcKTFX8jJAfp/z+eqcDHWboMNR2BV/SJL+
n3Zw==
X-Gm-Message-State: ANhLgQ0WNrAd2531KslmPrqFvJOWkWh9CAvEmx3YkklzSSXwQuJzP0rd
cfVudxSV5SXONDY6hnUWPpTvMSaZa70vqtRz2ek=
X-Google-Smtp-Source: ADFU+vusBzjNrFHvuENhC4+7rtccSa4+lZmcCe8FA1Pnx1glBgFKZT7yUOYJUfbUUQ0neT8RKv3B4aJY/Rqd+P6c5Sw=
X-Received: by 2002:a05:6512:50f:: with SMTP id o15mr9314377lfb.216.1583756226038;
Mon, 09 Mar 2020 05:17:06 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a2e:584d:0:0:0:0:0 with HTTP; Mon, 9 Mar 2020 05:17:05 -0700 (PDT)
Reply-To: [email protected]
From: "Mr. Jerome H. Powell" <[email protected]>
Date: Mon, 9 Mar 2020 13:17:05 +0100
Message-ID: <CAP-NRtnnS_3WO=D=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc:
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: FEDERAL RESERVE BANK OF NEW YORK ADDRESS: 33 LIBERTY STREET,
NEW YORK, N.Y 10038. ATTN: FUND BENEFICIARY, Re: ATM Card payment notification.
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[209.85.167.67 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[harrisoneke01[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.67 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[powelljerome2020[at]gmail.com]
0.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[harrisoneke01[at]gmail.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.1 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.2 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** ATTN: FUND BENEFICIARY,
FEDERAL RESERVE BANK OF NEW YORK
ADDRESS: 33 LIBERTY STREET,
NEW YORK, N.Y 10038.
ATTN: FUND BENEFICIARY,
Re: ATM Card payment notification.
This is to officially inform you that the bank Federal Reserve Board
New York Branch has concluded in the meeting today over your long
overdue contract payment and agreed that your payment worth
US$10.500,000.00 will be released to you through ATM Master Card which
will be delivered to you directly to your home address.
However, you are further advised to know that all arrangement has been
completed long ago for the immediate dispatch to your residency, you
have to reply back to us as soon as possible with the below DATA’ to
enable the Ups shipping department proceed with the immediate dispatch
tomorrow been today dated 9th of March 2020 on your behalf.
Finally, this is very urgent and important the bank are waiting to
hear from you right away today, Bear in mind that the tracking number
of your parcel will be given to you immediately the Processing charge
and Stamp fee which will not cost you much is received to avoid any
immediate STOP ORDER from the United Nation office.
Note That Because Of Impostors, We Hereby Issued You Our Code Of
Conduct, Which Is (ATM-2020) So You Have To Indicate This Code When
replying back to us By Using It As Your Subject. Get back to us with
this information needed,
Full Names:
Your Address:
Country:
Direct Number:
Your Age And Occupation:
A scan copy of your ID card or passport:
Reply back to us accordingly; The bank Wait For Your Expedite Response.
Yours in Service,
Mr. Jerome H. Powell
Chairman Federal Reserve Board New York
Phone number: +1-240-317-2440 (ONLY TEXT)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
