by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 24 Nov 2017 19:50:18 -0800
Received: from mail.mkdc.co.kr ([222.236.44.117]:43931 helo=mkdc.co.kr)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eIRTs-0005zs-EK
for ; Fri, 24 Nov 2017 19:50:17 -0800
Received: from User ([52.176.146.144])
(authenticated bits=0)
by mkdc.co.kr (8.14.4/8.14.4) with ESMTP id vAP3i2bn008259;
Sat, 25 Nov 2017 12:44:06 +0900
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "CHRISTOPHER WRAY[F.B.I]"<[email protected]>
Date: Sat, 25 Nov 2017 03:44:30 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=30.4
X-Spam-Score: 304
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: CHRISTOPHER WRAY DIRECTOR FBI FEDERAL BUREAU OF INVESTIGATION
FBI.WASHINGTON D.C FEDERAL BUREAU OF INVESTIGATION SEEKING TO WIRETAP The
Federal bureau of investigation (FBI) Washington,D.C in conjunction with
some other relevant Investigations Agencies have recently been informed through
our Global intelligence monitoring network that your over-due contract payment
which was fully endorsed in your favor accordingly by the Central bank of
Malaysia(Bank Negara Malaysia) has not been claimed. [...]
Content analysis details: (30.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[222.236.44.117 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?52.176.146.144>]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(muhibrbo0[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[222.236.44.117 listed in zen.spamhaus.org]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
1.0 FBI_SPOOF Claims to be FBI, but not from FBI domain
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.0 FBI_MONEY The FBI wants to give you lots of money?
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.1 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.1 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.6 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** FBI NOTICE[CODE:210]k
CHRISTOPHER WRAY
DIRECTOR FBI
FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON D.C FEDERAL BUREAU OF
INVESTIGATION SEEKING TO WIRETAP
The Federal bureau of investigation (FBI) Washington,D.C in conjunction with
some other relevant Investigations Agencies have recently been informed
through our Global intelligence monitoring network that your over-due
contract payment which was fully endorsed in your favor accordingly by the
Central bank of Malaysia(Bank Negara Malaysia) has not been claimed.
It might interest you to know that we have taken out time in screening
through this project as stipulated on our protocol of operation and have
finally confirmed that your contract payment is 100% genuine and hitch free
from all facet and of which you have the lawful right to claim your fund
without any further delay.
We further advise that you go ahead in dealing with the Central Bank office
accordingly as we will be monitoring all their services with you as well as
your correspondence at all level.
We were also made to understand that a lady with name Mrs.
Joan C.Bailey from OHIO has already contacted them and also presented to
them all the necessary documentation evidencing your claim purported to have
been signed personally by you prior to the release of your contract fund
valued at about $25million us dollars only but the Central Bank office did
the wise thing by insisting on hearing from you personally before they go
ahead on wiring your fund to the Bank information which was forwarded to
them by the above named Lady so that the main reason why they contacted us
so as to assist them in making the investigation.
Contact immediately the office of the Central Bank of Malaysia (Bank Negara
Malaysia) via email with the below information accordingly:
NAME: Muhammad Ibrahim
OFFICE ADDRESS: Bank Negara Malaysia,
Jalan Kuching, Kuala Lumpur,
Wilayah Persekutuan,Kuala Lumpur,
Selangor,Malaysia
Email: [email protected]
Meanwhile, we will advise that you contact the office of the Governor of the
Central Bank immediately with the above email address and request that they
attend to your payment file as directed, so as to enable you receive your
contract fund accordingly.
To this effect, you are required to reconfirm and authenticate your given
particulars below for certainty and onward processing and release of you
funds as we may not be held liable for any wrong payment.
FULL NAMES:_________________________________
CITY: ________________________________
ZIP: ______________
COUNTRY_______________________________
SEX:_____________
AGE:_________________
TELEPHONE NUMBER:_____________________
FAX: __________________________
Ensure you follow all their procedure as may be required by them as that
will further help hasten up the whole procedure as regard to the transfer of
your fund to you as designated.
Also have in mind that the Central Bank of Malaysia equally have their own
protocol of operation as stipulated on their banking terms, so delay could
be very dangerous.
Thank you very much for your anticipated co-operation in advance as we
earnestly await your urgent response to this matter.
Best Regards,
Christopher Wray[FBI Director]
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C.
Envelope-to:
Delivery-date: Fri, 24 Nov 2017 19:50:18 -0800
Received: from mail.mkdc.co.kr ([222.236.44.117]:43931 helo=mkdc.co.kr)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eIRTs-0005zs-EK
for ; Fri, 24 Nov 2017 19:50:17 -0800
Received: from User ([52.176.146.144])
(authenticated bits=0)
by mkdc.co.kr (8.14.4/8.14.4) with ESMTP id vAP3i2bn008259;
Sat, 25 Nov 2017 12:44:06 +0900
Message-Id: <[email protected]>
Reply-To: <[email protected]>
From: "CHRISTOPHER WRAY[F.B.I]"<[email protected]>
Date: Sat, 25 Nov 2017 03:44:30 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=30.4
X-Spam-Score: 304
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: CHRISTOPHER WRAY DIRECTOR FBI FEDERAL BUREAU OF INVESTIGATION
FBI.WASHINGTON D.C FEDERAL BUREAU OF INVESTIGATION SEEKING TO WIRETAP The
Federal bureau of investigation (FBI) Washington,D.C in conjunction with
some other relevant Investigations Agencies have recently been informed through
our Global intelligence monitoring network that your over-due contract payment
which was fully endorsed in your favor accordingly by the Central bank of
Malaysia(Bank Negara Malaysia) has not been claimed. [...]
Content analysis details: (30.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[222.236.44.117 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?52.176.146.144>]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(muhibrbo0[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[222.236.44.117 listed in zen.spamhaus.org]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
1.0 FBI_SPOOF Claims to be FBI, but not from FBI domain
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.0 FBI_MONEY The FBI wants to give you lots of money?
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.1 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.1 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.6 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** FBI NOTICE[CODE:210]k
CHRISTOPHER WRAY
DIRECTOR FBI
FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON D.C FEDERAL BUREAU OF
INVESTIGATION SEEKING TO WIRETAP
The Federal bureau of investigation (FBI) Washington,D.C in conjunction with
some other relevant Investigations Agencies have recently been informed
through our Global intelligence monitoring network that your over-due
contract payment which was fully endorsed in your favor accordingly by the
Central bank of Malaysia(Bank Negara Malaysia) has not been claimed.
It might interest you to know that we have taken out time in screening
through this project as stipulated on our protocol of operation and have
finally confirmed that your contract payment is 100% genuine and hitch free
from all facet and of which you have the lawful right to claim your fund
without any further delay.
We further advise that you go ahead in dealing with the Central Bank office
accordingly as we will be monitoring all their services with you as well as
your correspondence at all level.
We were also made to understand that a lady with name Mrs.
Joan C.Bailey from OHIO has already contacted them and also presented to
them all the necessary documentation evidencing your claim purported to have
been signed personally by you prior to the release of your contract fund
valued at about $25million us dollars only but the Central Bank office did
the wise thing by insisting on hearing from you personally before they go
ahead on wiring your fund to the Bank information which was forwarded to
them by the above named Lady so that the main reason why they contacted us
so as to assist them in making the investigation.
Contact immediately the office of the Central Bank of Malaysia (Bank Negara
Malaysia) via email with the below information accordingly:
NAME: Muhammad Ibrahim
OFFICE ADDRESS: Bank Negara Malaysia,
Jalan Kuching, Kuala Lumpur,
Wilayah Persekutuan,Kuala Lumpur,
Selangor,Malaysia
Email: [email protected]
Meanwhile, we will advise that you contact the office of the Governor of the
Central Bank immediately with the above email address and request that they
attend to your payment file as directed, so as to enable you receive your
contract fund accordingly.
To this effect, you are required to reconfirm and authenticate your given
particulars below for certainty and onward processing and release of you
funds as we may not be held liable for any wrong payment.
FULL NAMES:_________________________________
CITY: ________________________________
ZIP: ______________
COUNTRY_______________________________
SEX:_____________
AGE:_________________
TELEPHONE NUMBER:_____________________
FAX: __________________________
Ensure you follow all their procedure as may be required by them as that
will further help hasten up the whole procedure as regard to the transfer of
your fund to you as designated.
Also have in mind that the Central Bank of Malaysia equally have their own
protocol of operation as stipulated on their banking terms, so delay could
be very dangerous.
Thank you very much for your anticipated co-operation in advance as we
earnestly await your urgent response to this matter.
Best Regards,
Christopher Wray[FBI Director]
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
