by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 05 Mar 2017 20:02:44 -0800
Received: from [80.93.210.212] (port=48096 helo=ns9.seo-dns.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1ckjr8-0007S9-Au
for ; Sun, 05 Mar 2017 20:02:44 -0800
Received: from [40.121.202.21] (port=32582 helo=User)
by ns9.seo-dns.com with esmtpa (Exim 4.88)
(envelope-from <[email protected]>)
id 1ckjof-002owr-DS; Mon, 06 Mar 2017 06:00:10 +0200
Reply-To: <[email protected]>
From: "JAMES COMEY[F.B.I]"<[email protected]>
Date: Mon, 6 Mar 2017 04:00:08 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
“X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns9.seo-dns.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - fb.com
X-Get-Message-Sender-Via: ns9.seo-dns.com: authenticated_id: [email protected]
X-Authenticated-Sender: ns9.seo-dns.com: [email protected]
X-Spam-Status: Yes, score=40.6
X-Spam-Score: 406
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ” JAMES BRIEN COMEY EXECUTIVE DIRECTOR FBI FEDERAL BUREAU
OF INVESTIGATION FBI.WASHINGTON D.C FEDERAL BUREAU OF INVESTIGATION SEEKING
TO WIRETAP The Federal bureau of investigation (FBI) Washington,D.C in conjunction
with some other relevant Investigations Agencies have recently been informed
through our Global intelligence monitoring network that your over-due contract
payment which was fully endorsed in your favor accordingly by the Central
bank of Malaysia(Bank Negara Malaysia) has not been claimed. [...]
Content analysis details: (40.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 NSL_RCVD_HELO_USER Received from HELO User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[80.93.210.212 listed in bb.barracudacentral.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=fb%40fb.com;ip=]
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[80.93.210.212 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.4 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FROM_MISSP_SPF_FAIL No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 FBI_SPOOF Claims to be FBI, but not from FBI domain
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.6 FBI_MONEY The FBI wants to give you lots of money?
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.7 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** FBI LETTER[CODE:210]e]
”
JAMES BRIEN COMEY
EXECUTIVE DIRECTOR FBI
FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON D.C
FEDERAL BUREAU OF INVESTIGATION SEEKING TO WIRETAP
The Federal bureau of investigation (FBI) Washington,D.C
in conjunction with some other relevant Investigations Agencies
have recently been informed through our Global intelligence
monitoring network that your over-due contract payment
which was fully endorsed in your favor accordingly by the
Central bank of Malaysia(Bank Negara Malaysia) has not been claimed.
It might interest you to know that we have taken out time
in screening through this project as stipulated on our
protocol of operation and have finally
confirmed that your contract payment is 100% genuine and
hitch free from all facet and of which you have the lawful
right to claim your fund without any further delay.
We further advise that you go ahead in dealing with the
Central Bank office accordingly as we will be monitoring all
their services with you as well as your correspondence at
all level.
We were also made to understand that a lady with name Mrs.
Joan C.Bailey from OHIO has already contacted them and also
presented to them all the necessary documentation evidencing your
claim purported to have been signed personally by you prior to
the release of your contract fund valued at about $25million us dollars
only
but the Central Bank office did the wise thing by insisting on
hearing from you personally before they go ahead on wiring
your fund to the Bank information which was forwarded to
them by the above named Lady so that the main reason why they
contacted us so as to assist them in making the investigation.
Contact immediately the office of the Central Bank of Malaysia
(Bank Negara Malaysia) via email with the below information accordingly:
NAME: Muhammad Ibrahim
OFFICE ADDRESS: Bank Negara Malaysia,
Jalan Kuching, Kuala Lumpur,
Wilayah Persekutuan,Kuala Lumpur,
Selangor,Malaysia
Email: [email protected]
Meanwhile, we will advise that you contact the office
of the Governor of the Central Bank immediately with
the above email address and request that they attend
to your payment file as directed,
so as to enable you receive your contract fund accordingly.
To this effect, you are required to reconfirm and
authenticate your given particulars below for certainty
and onward processing and release of you funds
as we may not be held liable for any wrong payment.
FULL NAMES: __________________________________
CITY: _________________________
STATE: __________________________________
ZIP: ______________
COUNTRY________________________________
SEX: _______________
AGE: __________________
TELEPHONE NUMBER: _____________________
FAX: __________________________
Ensure you follow all their procedure as may be required by
them as that will further help hasten up the whole procedure
as regard to the transfer of your fund to you as designated.
Also have in mind that the Central Bank of Malaysia
equally have their own protocol of operation as stipulated
on their banking terms, so delay could be very dangerous.
Thank you very much for your anticipated co-operation in
advance as we earnestly await your urgent response to this matter.
Best Regards,
James Brien Comey
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C.
Envelope-to:
Delivery-date: Sun, 05 Mar 2017 20:02:44 -0800
Received: from [80.93.210.212] (port=48096 helo=ns9.seo-dns.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1ckjr8-0007S9-Au
for ; Sun, 05 Mar 2017 20:02:44 -0800
Received: from [40.121.202.21] (port=32582 helo=User)
by ns9.seo-dns.com with esmtpa (Exim 4.88)
(envelope-from <[email protected]>)
id 1ckjof-002owr-DS; Mon, 06 Mar 2017 06:00:10 +0200
Reply-To: <[email protected]>
From: "JAMES COMEY[F.B.I]"<[email protected]>
Date: Mon, 6 Mar 2017 04:00:08 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
“X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns9.seo-dns.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - fb.com
X-Get-Message-Sender-Via: ns9.seo-dns.com: authenticated_id: [email protected]
X-Authenticated-Sender: ns9.seo-dns.com: [email protected]
X-Spam-Status: Yes, score=40.6
X-Spam-Score: 406
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ” JAMES BRIEN COMEY EXECUTIVE DIRECTOR FBI FEDERAL BUREAU
OF INVESTIGATION FBI.WASHINGTON D.C FEDERAL BUREAU OF INVESTIGATION SEEKING
TO WIRETAP The Federal bureau of investigation (FBI) Washington,D.C in conjunction
with some other relevant Investigations Agencies have recently been informed
through our Global intelligence monitoring network that your over-due contract
payment which was fully endorsed in your favor accordingly by the Central
bank of Malaysia(Bank Negara Malaysia) has not been claimed. [...]
Content analysis details: (40.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 NSL_RCVD_HELO_USER Received from HELO User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[80.93.210.212 listed in bb.barracudacentral.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=fb%40fb.com;ip=]
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[80.93.210.212 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
0.4 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.0 FROM_MISSP_SPF_FAIL No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 FBI_SPOOF Claims to be FBI, but not from FBI domain
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.6 FBI_MONEY The FBI wants to give you lots of money?
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.7 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** FBI LETTER[CODE:210]e]
”
JAMES BRIEN COMEY
EXECUTIVE DIRECTOR FBI
FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON D.C
FEDERAL BUREAU OF INVESTIGATION SEEKING TO WIRETAP
The Federal bureau of investigation (FBI) Washington,D.C
in conjunction with some other relevant Investigations Agencies
have recently been informed through our Global intelligence
monitoring network that your over-due contract payment
which was fully endorsed in your favor accordingly by the
Central bank of Malaysia(Bank Negara Malaysia) has not been claimed.
It might interest you to know that we have taken out time
in screening through this project as stipulated on our
protocol of operation and have finally
confirmed that your contract payment is 100% genuine and
hitch free from all facet and of which you have the lawful
right to claim your fund without any further delay.
We further advise that you go ahead in dealing with the
Central Bank office accordingly as we will be monitoring all
their services with you as well as your correspondence at
all level.
We were also made to understand that a lady with name Mrs.
Joan C.Bailey from OHIO has already contacted them and also
presented to them all the necessary documentation evidencing your
claim purported to have been signed personally by you prior to
the release of your contract fund valued at about $25million us dollars
only
but the Central Bank office did the wise thing by insisting on
hearing from you personally before they go ahead on wiring
your fund to the Bank information which was forwarded to
them by the above named Lady so that the main reason why they
contacted us so as to assist them in making the investigation.
Contact immediately the office of the Central Bank of Malaysia
(Bank Negara Malaysia) via email with the below information accordingly:
NAME: Muhammad Ibrahim
OFFICE ADDRESS: Bank Negara Malaysia,
Jalan Kuching, Kuala Lumpur,
Wilayah Persekutuan,Kuala Lumpur,
Selangor,Malaysia
Email: [email protected]
Meanwhile, we will advise that you contact the office
of the Governor of the Central Bank immediately with
the above email address and request that they attend
to your payment file as directed,
so as to enable you receive your contract fund accordingly.
To this effect, you are required to reconfirm and
authenticate your given particulars below for certainty
and onward processing and release of you funds
as we may not be held liable for any wrong payment.
FULL NAMES: __________________________________
CITY: _________________________
STATE: __________________________________
ZIP: ______________
COUNTRY________________________________
SEX: _______________
AGE: __________________
TELEPHONE NUMBER: _____________________
FAX: __________________________
Ensure you follow all their procedure as may be required by
them as that will further help hasten up the whole procedure
as regard to the transfer of your fund to you as designated.
Also have in mind that the Central Bank of Malaysia
equally have their own protocol of operation as stipulated
on their banking terms, so delay could be very dangerous.
Thank you very much for your anticipated co-operation in
advance as we earnestly await your urgent response to this matter.
Best Regards,
James Brien Comey
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
