by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 16 Aug 2018 11:21:30 -0700
Received: from [110.232.76.194] (port=36534 helo=almunir.id)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fqMtg-0004SK-TA
for ; Thu, 16 Aug 2018 11:21:29 -0700
Received: from localhost (localhost [127.0.0.1])
by almunir.id (Postfix) with ESMTP id CE7A52900E9;
Thu, 16 Aug 2018 17:13:24 +0000 (UTC)
Received: from almunir.id ([127.0.0.1])
by localhost (almunir.id [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id eGoJ1Rsyhv99; Thu, 16 Aug 2018 17:13:22 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
by almunir.id (Postfix) with ESMTP id 8C86228FC6B;
Thu, 16 Aug 2018 17:13:09 +0000 (UTC)
X-Virus-Scanned: amavisd-new at almunir.id
Received: from almunir.id ([127.0.0.1])
by localhost (almunir.id [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id l7kMYlzveHau; Thu, 16 Aug 2018 17:13:09 +0000 (UTC)
Received: from [37.49.225.174] (unknown [10.10.10.1])
by almunir.id (Postfix) with ESMTP id 4B72F288774;
Thu, 16 Aug 2018 17:12:45 +0000 (UTC)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr. Robert Steven Kaplan" <[email protected]>
Date: Thu, 16 Aug 2018 10:12:40 -0700
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=17.3
X-Spam-Score: 173
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, This is notification message is from the
Federal Reserve Dallas District, Your name is enlisted among the beneficiary
whose fund is approved for payment, by the Board the Governors Federal Reserve
Bank , and we have been waiting for you to contact us for you to claim your
funds of $5.5 Million dollar, but to our surprise one Mrs. Brenda Miller
came forward for the fund, that, you asked her to claim the fund on your behalf
with documentary evidence which we are not sure of it source. This was why
we decided to contact you to confirm to us if you really sent Mrs. Brenda
Miller. She said, you instruct her that the fund should be transfer to the
below account detail. I will advise that you change your email password,
because your email is be used to write to us, but because of the name on the
account, we have to confirm. [...]
Content analysis details: (17.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[110.232.76.194 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[110.232.76.194 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA
Dear Beneficiary,
This is notification message is from the Federal Reserve Dallas District, Your name
is enlisted among the beneficiary whose fund is approved for payment, by the Board
the Governors Federal Reserve Bank , and we have been waiting for you to contact us
for you to claim your funds of $5.5 Million dollar, but to our surprise one Mrs.
Brenda Miller came forward for the fund, that, you asked her to claim the fund on
your behalf with documentary evidence which we are not sure of it source. This was
why we decided to contact you to confirm to us if you really sent Mrs. Brenda
Miller. She said, you instruct her that the fund should be transfer to the below
account detail. I will advise that you change your email password, because your
email is be used to write to us, but because of the name on the account, we have to
confirm.
Bank name: Heritage Oaks
Bank Address: 545 Twelfth St, Paso Robles, California 93448
Phone Number: 1(805)239-5200
Account number: 001453521
Routing: 122239982
Swift code: HEOAUS61
Beneficiary name: Brenda Miller
Most importantly, confirm to us urgently if you gave permission to Mrs. Brenda
Miller to claim the fund on your behalf and if case you did not authorize anybody,
then, You will have to stop communicating with the impersonators and the
organizations, because they are trying to divert your fund to themselves. She tries,
so hard to change the fund ownership to her name. We await your prompt response.
Contact details:
Email: [email protected]
Hot Line: (325)480-8408
Yours in Service
Robert Steven Kaplan
Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA
Envelope-to:
Delivery-date: Thu, 16 Aug 2018 11:21:30 -0700
Received: from [110.232.76.194] (port=36534 helo=almunir.id)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fqMtg-0004SK-TA
for ; Thu, 16 Aug 2018 11:21:29 -0700
Received: from localhost (localhost [127.0.0.1])
by almunir.id (Postfix) with ESMTP id CE7A52900E9;
Thu, 16 Aug 2018 17:13:24 +0000 (UTC)
Received: from almunir.id ([127.0.0.1])
by localhost (almunir.id [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id eGoJ1Rsyhv99; Thu, 16 Aug 2018 17:13:22 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
by almunir.id (Postfix) with ESMTP id 8C86228FC6B;
Thu, 16 Aug 2018 17:13:09 +0000 (UTC)
X-Virus-Scanned: amavisd-new at almunir.id
Received: from almunir.id ([127.0.0.1])
by localhost (almunir.id [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id l7kMYlzveHau; Thu, 16 Aug 2018 17:13:09 +0000 (UTC)
Received: from [37.49.225.174] (unknown [10.10.10.1])
by almunir.id (Postfix) with ESMTP id 4B72F288774;
Thu, 16 Aug 2018 17:12:45 +0000 (UTC)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr. Robert Steven Kaplan" <[email protected]>
Date: Thu, 16 Aug 2018 10:12:40 -0700
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=17.3
X-Spam-Score: 173
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Beneficiary, This is notification message is from the
Federal Reserve Dallas District, Your name is enlisted among the beneficiary
whose fund is approved for payment, by the Board the Governors Federal Reserve
Bank , and we have been waiting for you to contact us for you to claim your
funds of $5.5 Million dollar, but to our surprise one Mrs. Brenda Miller
came forward for the fund, that, you asked her to claim the fund on your behalf
with documentary evidence which we are not sure of it source. This was why
we decided to contact you to confirm to us if you really sent Mrs. Brenda
Miller. She said, you instruct her that the fund should be transfer to the
below account detail. I will advise that you change your email password,
because your email is be used to write to us, but because of the name on the
account, we have to confirm. [...]
Content analysis details: (17.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[110.232.76.194 listed in zen.spamhaus.org]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[110.232.76.194 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA
Dear Beneficiary,
This is notification message is from the Federal Reserve Dallas District, Your name
is enlisted among the beneficiary whose fund is approved for payment, by the Board
the Governors Federal Reserve Bank , and we have been waiting for you to contact us
for you to claim your funds of $5.5 Million dollar, but to our surprise one Mrs.
Brenda Miller came forward for the fund, that, you asked her to claim the fund on
your behalf with documentary evidence which we are not sure of it source. This was
why we decided to contact you to confirm to us if you really sent Mrs. Brenda
Miller. She said, you instruct her that the fund should be transfer to the below
account detail. I will advise that you change your email password, because your
email is be used to write to us, but because of the name on the account, we have to
confirm.
Bank name: Heritage Oaks
Bank Address: 545 Twelfth St, Paso Robles, California 93448
Phone Number: 1(805)239-5200
Account number: 001453521
Routing: 122239982
Swift code: HEOAUS61
Beneficiary name: Brenda Miller
Most importantly, confirm to us urgently if you gave permission to Mrs. Brenda
Miller to claim the fund on your behalf and if case you did not authorize anybody,
then, You will have to stop communicating with the impersonators and the
organizations, because they are trying to divert your fund to themselves. She tries,
so hard to change the fund ownership to her name. We await your prompt response.
Contact details:
Email: [email protected]
Hot Line: (325)480-8408
Yours in Service
Robert Steven Kaplan
Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
