by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 04 Nov 2017 18:45:38 -0700
Received: from [182.50.104.122] (port=37846 helo=www.unify-jp.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eBA0C-00080A-AY
for ; Sat, 04 Nov 2017 18:45:38 -0700
Received: from User (unknown [13.64.249.116])
by www.unify-jp.com (Postfix) with ESMTPA id 6FE3C2DB90;
Sun, 5 Nov 2017 05:41:56 +0900 (JST)
Reply-To: <[email protected]>
From: "PETER SIMON"<[email protected]>
Date: Sat, 4 Nov 2017 20:42:07 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=20.3
X-Spam-Score: 203
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, I hope that this correspondence is received
with the urgency and expediency required. [...]
Content analysis details: (20.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(philsionass0[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[182.50.104.122 listed in dnsbl.sorbs.net]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** frb inquiry]w]]
Dear Beneficiary,
I hope that this correspondence is
received with the urgency and expediency required.
It has come to the notice of the Board
of Trustees of the Federal Reserve Bank here in Washington,
D.C. that your present inheritance claims application being
handled by the Remitting Bank in Malaysia is experiencing
some man made irregularities. To this effect, it has become
necessary for the Board of Trustees to assign trained Fund
Transfer Specialists from the United States to resolve and
regularize your fund release with immediate effect.
We at Peter Simons & Consults have
been duly consulted by the FRB Board of Trustees. We have
been fully informed about how the staffs of the remitting
bank has been taking advantage of you by telling you to pay
unnecessarily exorbitant charges which will only make your
fund payment a long drawn out process.
Due to this development, we have been
assigned to step into the immediate processing of your fund
transfer to enable your funds to be transferred to you
within the shortest possible time. To implement this, you
are to get back to us immediately without needing to pay all
the huge sums of monies that are being demanded from you by
the previous handlers at the remitting bank.
All processes to have your funds paid
to you immediately through the BNM's Liaison Remittance
Office in New York have been initiated to cut out
unnecessary costs.
You are advised to treat this
communication with the urgency and seriousness required as
the Board of Trustees of the Federal Reserve Bank has
mandated us to resolve this fund payment within the next
three working days independent of the office of the
Remitting Bank in Asia.
Furthermore,you are hereby advised to
pay no further fees or charges to the Remitting Bank in
Malaysia as they shall no longer be handling your payment
process.
We shall await your immediate
correspondence with your direct telephone numbers to my
private email address at ( [email protected] )
for
re-confirmation so that we may conclude
your payment immediately.
Yours Sincerely,
Peter Simons.
Peter Simons & Consults.
Envelope-to:
Delivery-date: Sat, 04 Nov 2017 18:45:38 -0700
Received: from [182.50.104.122] (port=37846 helo=www.unify-jp.com)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eBA0C-00080A-AY
for ; Sat, 04 Nov 2017 18:45:38 -0700
Received: from User (unknown [13.64.249.116])
by www.unify-jp.com (Postfix) with ESMTPA id 6FE3C2DB90;
Sun, 5 Nov 2017 05:41:56 +0900 (JST)
Reply-To: <[email protected]>
From: "PETER SIMON"<[email protected]>
Date: Sat, 4 Nov 2017 20:42:07 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=20.3
X-Spam-Score: 203
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, I hope that this correspondence is received
with the urgency and expediency required. [...]
Content analysis details: (20.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(philsionass0[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[182.50.104.122 listed in dnsbl.sorbs.net]
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 MISSING_MID Missing Message-Id: header
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** frb inquiry]w]]
Dear Beneficiary,
I hope that this correspondence is
received with the urgency and expediency required.
It has come to the notice of the Board
of Trustees of the Federal Reserve Bank here in Washington,
D.C. that your present inheritance claims application being
handled by the Remitting Bank in Malaysia is experiencing
some man made irregularities. To this effect, it has become
necessary for the Board of Trustees to assign trained Fund
Transfer Specialists from the United States to resolve and
regularize your fund release with immediate effect.
We at Peter Simons & Consults have
been duly consulted by the FRB Board of Trustees. We have
been fully informed about how the staffs of the remitting
bank has been taking advantage of you by telling you to pay
unnecessarily exorbitant charges which will only make your
fund payment a long drawn out process.
Due to this development, we have been
assigned to step into the immediate processing of your fund
transfer to enable your funds to be transferred to you
within the shortest possible time. To implement this, you
are to get back to us immediately without needing to pay all
the huge sums of monies that are being demanded from you by
the previous handlers at the remitting bank.
All processes to have your funds paid
to you immediately through the BNM's Liaison Remittance
Office in New York have been initiated to cut out
unnecessary costs.
You are advised to treat this
communication with the urgency and seriousness required as
the Board of Trustees of the Federal Reserve Bank has
mandated us to resolve this fund payment within the next
three working days independent of the office of the
Remitting Bank in Asia.
Furthermore,you are hereby advised to
pay no further fees or charges to the Remitting Bank in
Malaysia as they shall no longer be handling your payment
process.
We shall await your immediate
correspondence with your direct telephone numbers to my
private email address at ( [email protected] )
for
re-confirmation so that we may conclude
your payment immediately.
Yours Sincerely,
Peter Simons.
Peter Simons & Consults.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
