Has someone offered you a huge sum of money or a valuable consignment? It's a 419 or advance fee fraud - find out how they work, and what to do to be safe.
#181907 by buried under 419s Fri Nov 22, 2013 1:41 am
Return-path: <noreply@nacha.org>
Envelope-to:
Delivery-date: Thu, 21 Nov 2013 19:42:04 -0800
Received: from 86-41-228-156-dynamic.b-ras1.mgr.mullingar.eircom.net ([86.41.228.156]:49149)
by with esmtp (Exim 4.80)
(envelope-from <noreply@nacha.org>)
id 1Vjhd0-0005XQ-OQ; Thu, 21 Nov 2013 19:42:04 -0800
Received-SPF: pass (domain of welcome.aexp.com designates 12.10.219.63 as permitted sender)
Received: from welcome.aexp.com (EHLO welcome.aexp.com) (12.10.219.63) by welcome.aexp.com with SMTP; Fri, 22 Nov 2013 03:42:00 +0000
Date: Fri, 22 Nov 2013 03:42:00 +0000
From: Webster Bank <WebsterWeb-LinkNotifications@WebsterBank.com>
X-MS-Has-Attach: yes
X-MS-Exchange-Organization-SCL: -1
X-MS-TNEF-Correlator: <WGDAVBYRCE89WCJ9PQ00S2V0DK3YGFFC75ILT4@>
X-MS-Exchange-Organization-AuthSource: 3CP2DHMO52OZZEE@
X-MS-Exchange-Organization-AuthAs: Internal
X-MS-Exchange-Organization-AuthMechanism: 00
X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;6;0;0 0 0
X-Priority: 3 (Normal)
Message-ID: <B5649J58NF8LUTDNZS1KRHVW0RE61J2544H59F@americanexpress.com>
To: <>,
<>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_001_RJCH7BYIWTZ9Y7T95P76KDWB97Y468DKK47667IP802Z4CGO882410Z_"
X-Spam-Status: Yes, score=17.0
X-Spam-Score: 170
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Good Day, This is to officially inform you that (ATM Card
Number 298382748) has been accredited with your favor as regards Your payment
from the 2013 UN / Ecowas online funds Donation Program, have been deposited
into an iKobo Master Card and is available for delivery to your destination.
Your Personal Identification Number is 1822.The ikobo MASTER CARD is $715,810.00
USD (Seven Hundred And Fifteen Thousand Eight Hundred And Ten USD) and please
note that no deduction of any fee is allowed because your $715,810.00 USD
(Seven Hundred And Fifteen Thousand Eight Hundred And Ten USD) was receive
from the United Nation in BOND and it has been duly insured, based on our
policies and as a result of the space of time available, you are hereby advised
to act fast so we can proceed with the delivery immediately to your door
step . [...]

Content analysis details: (17.0 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[86.41.228.156 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?86.41.228.156>]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[86.41.228.156 listed in dnsbl.sorbs.net]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[86.41.228.156 listed in bl.score.senderscore.com]
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=n ... roject.com]
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9136]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
3.8 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** This is to officially inform you that (ATM Card Number 018398210).

--_001_RJCH7BYIWTZ9Y7T95P76KDWB97Y468DKK47667IP802Z4CGO882410Z_
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 8bit

Good Day,

This is to officially inform you that (ATM Card Number 298382748) has been accredited with your favor as regards Your payment from the 2013 UN / Ecowas online funds Donation Program, have been deposited into an iKobo Master Card and is available for delivery to your destination. Your Personal Identification Number is 1822.The ikobo MASTER CARD is $715,810.00 USD (Seven Hundred And Fifteen Thousand Eight Hundred And Ten USD) and please note that no deduction of any fee is allowed because your $715,810.00 USD (Seven Hundred And Fifteen Thousand Eight Hundred And Ten USD) was receive from the United Nation in BOND and it has been duly insured, based on our policies and as a result of the space of time available, you are hereby advised to act fast so we can proceed with the delivery immediately to your door step .


Below is the confirmation of our clients who have received their ATM CARD via FEDEX COURIER SERVICES. you can track them on the FedEx website to confirm some beneficiaries like you who have received their ATM card successfully.

Name : Sai Dham in: FedEx Tracking Number: 873446792239 http://www.fedex.com/ng/
Name : Donny Peterson: FedEx Tracking Number: 870456747216 http://www.fedex.com/ng/
You are advised to contact us with your missing information which aim your delivery.

You should send contact information about yourself, how to fill the form in the attached file.

CONGRATULATIONS
Funds Remittance Department
Mrs Jessy Lisa
Mr.Michael Harry
Call:+2347012309997
Email: ikobo.ng@blumail.org
www.ikobo.com
Approval: An iKobo MasterCard for you C89-27

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

Who is online

Users browsing this forum: No registered users and 13 guests