by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id AOlJCUUfMl45UgAAibB4EA
(envelope-from <[email protected]>)
for <>; Wed, 29 Jan 2020 19:11:49 -0500
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 29 Jan 2020 19:11:49 -0500
Received: from mx5.mail.bg ([193.201.172.121]:60225)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1iwxQx-0005T2-D2
for ; Wed, 29 Jan 2020 19:11:49 -0500
Received: from [192.168.43.248] (unknown [197.210.52.36])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx5.mail.bg (Postfix) with ESMTPSA id DF81580935DD;
Thu, 30 Jan 2020 02:03:52 +0200 (EET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=mail.bg; s=default;
t=1580342640; bh=ElA1i8aHqloK9MrXrmrtjKQrHAmACzP6C+SVl12N7VI=;
h=Content-Type:MIME-Version:Content-Transfer-Encoding:
Content-Description:Subject:To:From:Date:Reply-To;
b=tgIXZvGhHmBQ14aL8mrzfBl2Bp6vlnRqhXgd1c825+ug++moQiqPLmtaQBx2lSzPh
07MLHNbZDQvGGNruJcnahA3MDPViFUkfoPibUxawO3JReWH7aig+PU8rn7L/bYNOVR
R8LA4QIR/sh47p+fZMiUrA+zG0D6B7637ekT10aI=
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Steven Terner Mnuchin" < [email protected]
Date: Thu, 30 Jan 2020 00:59:29 -0800
Reply-To: [email protected]
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: U.S. Department of the Treasury 1500 Pennsylvania Avenue,
NW Washington, D.C. Website: http://www.treasury.gov Email: [email protected]
Dear Beneficiary, I am Steven Mnuchin. The New Secretary of the Treasury
under the U.S Department of the Treasury. The executive agency responsible
for promoting economic prosperity and ensuring the financial security [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[193.201.172.121 listed in list.dnswl.org]
1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ < jaodjd30[at]mail.bg]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jaodjd30[at]mail.bg]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[usdepartoftreasury623[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
2.0 KAM_INVFROM Invalid From Header containing mismatched <>'s
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.6 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Message From - U.S. Department of the Treasury
1500 Pennsylvania Avenue, NW
Washington, D.C.
Website: http://www.treasury.gov
Email: [email protected]
Dear Beneficiary,
I am Steven Mnuchin. The New Secretary of the Treasury under the U.S Department of the Treasury. The executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. However, by virtue of my position as the new Secretary of the Treasury, I have irrevocably instructed the Federal Reserve Board to approve your fund release via issuance of a CERTIFIED CHECK drawn on FEDERAL RESERVE BANK, which is the authorized bank for your fund release.
However, as a former White House Chief of Staff. Prior to that role, Lew was the Director of the Office of Management and Budget (OMB), I wish to state categorically that a CERTIFIED CHECK of $6,500,000.00 USD drawn on Federal Reserve Bank will be issued and sent to you via the US Postal Service at no cost to you. Every and all cost associated with the delivery of the CHECK has been pre-paid by the U.S Government. The only cost associated with your fund release is the cost of processing a "Fund Clearance Certificate", which is estimated to the value of $150.00 USD. The "Fund Clearance Certificate" is required in accordance with the U.S Monetary Policy; and it is the ONLY expenses you will incur before the CHECK will be sent to your mailing address. Hence, you are advised to send the $150.00 USD via Walmart to Walmart , Western Union or Money Gram to "MR RICHARD HALBISON" who is the nominated receiver for the $150.00 USD. The wiring details is stated below:
Receiver: Richard Halbison
Receiver's Location: Shreveport ,Louisiana .USA
Amount: $150.00 USD
You can get more facts about the U.S. Department of the Treasury on this link http://www.treasury.gov/about/Pages/Secretary.aspx. Please get back to me with a quick confirmation of your mailing addresss and the payment slip for the $150.00 USD to my private email address for more confidentiality: [email protected] .
Yours Sincerely,
Steven Terner Mnuchin
Secretary of the Treasury
Delivered-To:
Received: from
by with LMTP
id AOlJCUUfMl45UgAAibB4EA
(envelope-from <[email protected]>)
for <>; Wed, 29 Jan 2020 19:11:49 -0500
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 29 Jan 2020 19:11:49 -0500
Received: from mx5.mail.bg ([193.201.172.121]:60225)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1iwxQx-0005T2-D2
for ; Wed, 29 Jan 2020 19:11:49 -0500
Received: from [192.168.43.248] (unknown [197.210.52.36])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx5.mail.bg (Postfix) with ESMTPSA id DF81580935DD;
Thu, 30 Jan 2020 02:03:52 +0200 (EET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=mail.bg; s=default;
t=1580342640; bh=ElA1i8aHqloK9MrXrmrtjKQrHAmACzP6C+SVl12N7VI=;
h=Content-Type:MIME-Version:Content-Transfer-Encoding:
Content-Description:Subject:To:From:Date:Reply-To;
b=tgIXZvGhHmBQ14aL8mrzfBl2Bp6vlnRqhXgd1c825+ug++moQiqPLmtaQBx2lSzPh
07MLHNbZDQvGGNruJcnahA3MDPViFUkfoPibUxawO3JReWH7aig+PU8rn7L/bYNOVR
R8LA4QIR/sh47p+fZMiUrA+zG0D6B7637ekT10aI=
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Steven Terner Mnuchin" < [email protected]
Date: Thu, 30 Jan 2020 00:59:29 -0800
Reply-To: [email protected]
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: U.S. Department of the Treasury 1500 Pennsylvania Avenue,
NW Washington, D.C. Website: http://www.treasury.gov Email: [email protected]
Dear Beneficiary, I am Steven Mnuchin. The New Secretary of the Treasury
under the U.S Department of the Treasury. The executive agency responsible
for promoting economic prosperity and ensuring the financial security [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[193.201.172.121 listed in list.dnswl.org]
1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ < jaodjd30[at]mail.bg]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jaodjd30[at]mail.bg]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[usdepartoftreasury623[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
2.0 KAM_INVFROM Invalid From Header containing mismatched <>'s
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.6 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Message From - U.S. Department of the Treasury
1500 Pennsylvania Avenue, NW
Washington, D.C.
Website: http://www.treasury.gov
Email: [email protected]
Dear Beneficiary,
I am Steven Mnuchin. The New Secretary of the Treasury under the U.S Department of the Treasury. The executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. However, by virtue of my position as the new Secretary of the Treasury, I have irrevocably instructed the Federal Reserve Board to approve your fund release via issuance of a CERTIFIED CHECK drawn on FEDERAL RESERVE BANK, which is the authorized bank for your fund release.
However, as a former White House Chief of Staff. Prior to that role, Lew was the Director of the Office of Management and Budget (OMB), I wish to state categorically that a CERTIFIED CHECK of $6,500,000.00 USD drawn on Federal Reserve Bank will be issued and sent to you via the US Postal Service at no cost to you. Every and all cost associated with the delivery of the CHECK has been pre-paid by the U.S Government. The only cost associated with your fund release is the cost of processing a "Fund Clearance Certificate", which is estimated to the value of $150.00 USD. The "Fund Clearance Certificate" is required in accordance with the U.S Monetary Policy; and it is the ONLY expenses you will incur before the CHECK will be sent to your mailing address. Hence, you are advised to send the $150.00 USD via Walmart to Walmart , Western Union or Money Gram to "MR RICHARD HALBISON" who is the nominated receiver for the $150.00 USD. The wiring details is stated below:
Receiver: Richard Halbison
Receiver's Location: Shreveport ,Louisiana .USA
Amount: $150.00 USD
You can get more facts about the U.S. Department of the Treasury on this link http://www.treasury.gov/about/Pages/Secretary.aspx. Please get back to me with a quick confirmation of your mailing addresss and the payment slip for the $150.00 USD to my private email address for more confidentiality: [email protected] .
Yours Sincerely,
Steven Terner Mnuchin
Secretary of the Treasury
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
