Cindy Hill [email protected]

From [email protected] Tue Apr 9 05: 03:02 2013
Return-Path: <[email protected]>
X-Original-To: me
Delivered-To: me
Received: from pulsar.univ-valenciennes.fr (pulsar.univ-valenciennes.fr [193.50.192.1]) by my box (Postfix) with ESMTP id D45D515602 for <me>; Tue, 9 Apr 2013 05:02:53 -0400 (EDT)
Received: from zestore2.univ-valenciennes.fr (zestore2.univ-valenciennes.fr [193.50.192.57]) by pulsar.univ-valenciennes.fr (Postfix) with ESMTP id 912DA440032; Mon, 8 Apr 2013 08:42:35 +0200 (CEST)
Date: Mon, 08 Apr 2013 08:36:54 +0200
From: Mrs Cindy Hill <[email protected]>
Reply-To: Mrs Cindy Hill <[email protected]>
Message-ID: <345089125.681163.1365403014069.JavaMail.root@etu.univ-valenciennes.fr>
Subject: {Spam?} Hello Friend,
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_681162_1204410421.1365403014066"
X-Originating-Ip: [41.138.173.82]
X-Mailer: Zimbra 7.2.2_GA_2857 (zclient/7.2.2_GA_2857)
X-Uvhc-Pulsar-Mailscanner-ID: 912DA440032.A697B
X-Uvhc-Pulsar-Mailscanner: Found to be clean
X-Uvhc-Pulsar-Mailscanner-Spamcheck: polluriel, SpamAssassin (not cached, score=7.683, requis 6, ADVANCE_FEE_2 1.05, BAYES_50 0.80, FREEMAIL_FORGED_REPLYTO 2.10, FREEMAIL_REPLYTO_END_DIGIT 1.15, HTML_MESSAGE 0.00, MISSING_HEADERS 1.02, REPLYTO_WITHOUT_TO_CC 1.55, T_LOTS_OF_MONEY 0.01)
X-Uvhc-Pulsar-Mailscanner-Spamscore: sssssss
X-Uvhc-Pulsar-Mailscanner-From: [email protected]
X-Spam-Status: Yes
To:

--

Hello Friend,

I saw your email address during the course of my research today. This is a personal email directed to you and i Hope you get this one. I am Mrs Cindy Hill from Missouri, my husband and i won in a Power ball jackpot Lottery in November 2012 and i voluntarily decided to donate the sum of $950,000.00 dollars as a part of my own donation project to improve the lot of five lucky individuals all over the world. You was a lucky recipient and all you have to do if you get this email is to get back to me so that i can send your details on how to receive the money. Note that you have to contact my private email for more informations ([email protected]).

You can verify this by visiting the web pages below.

http://abcnews.go.com/US/powerball-mark ... d=17844005


Goodluck,
Mrs Cindy Hill

This scam is also using SMS messages sent from a Canadian number, requesting replies to [email protected]

George has passed the phone number used to send the SMS to me.

4165435932
416-543-5932
+1 41654 35932
Number billable as mobile number in Canada.

ETA: Edited per George.

George has passed the phone number used to send the SMS to me.

4165435932
41x-543-5932
+1 41654 35932
Number billable as mobile number in Canada.

Just to clarify, there is a typo in numbering given above. The prefix is 416, so depending on where you are located, the number will probably show in one of the following three formats:

4165435932
416-543-5932
+1 41654 35932

My name is Mark Hill and my wife’s name is Cindy. On November 28, 2012 my wife and I won the largest Missouri Powerball Jackpot of $293.7 Million US Dollars. We were in shock after discovering we held one of the two tickets that matched all six numbers drawn to win the jackpot considering the fact that my wife was laid off her job in June 2010 due to the loss of a grant.

After winning this Jackpot, we’ve discussed as a family and decided to set up the HILL FOUNDATION to voluntarily support the less privileged wherever they may be.

You are among the 5 Genuine Beneficiaries that was selected by our online Charity Outreach by email to receive the sum of $1,350,000.00 USD as part of our annual donation.

On receipt of this email kindly get back to us immediately with the correct details required below so that we can forward it to the pay-out bank for your funds transfer.

1. Full Name: ------ 2. Age/Sex: ------ 3. Telephone: ------

4. Occupation/ Country: ------



Please visit the official Powerball website to confirm our winning: (website provided on request via pm)



Best regards,

Mark & Cindy Hill.

Return-Path: <[email protected]>
Delivered-To: (removed)
Received: from mxen1.enta.net (mxen1.enta.net [78.33.48.4])
by nbg-mail.viper.enta.net (Postfix) with ESMTP id 9628F2162248
for <(removed)>; Tue, 10 Dec 2013 04:20:51 +0000 (GMT)
Received: from localhost (localhost [127.0.0.1])
by mxen1.enta.net (Postfix) with ESMTP id 6C0D4DDBC14
for <(removed)>; Tue, 10 Dec 2013 04:20:51 +0000 (GMT)
Received: from mxen1.enta.net ([127.0.0.1])
by localhost (mxen1.enta.net [127.0.0.1]) (amavisd-maia, port 10024)
with ESMTP id 33610-01 for <(removed)>;
Tue, 10 Dec 2013 04:20:49 +0000 (GMT)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.6
Received: from vse.vse.cz (vse.vse.cz [IPv6:2001:718:1e02::2])
by mxen1.enta.net (Postfix) with ESMTP id 2DE56DDBC0C
for <(removed)>; Tue, 10 Dec 2013 04:20:49 +0000 (GMT)
Received: from localhost (localhost [127.0.0.1])
by vse.vse.cz (Postfix) with ESMTP id B1B28B91;
Tue, 10 Dec 2013 05:20:48 +0100 (CET)
X-Virus-Scanned: amavisd-new at vse.cz
Received: from vse.vse.cz ([127.0.0.1])
by localhost (vse.vse.cz [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 0AI54-AX4xDe; Tue, 10 Dec 2013 05:20:33 +0100 (CET)
Received: from [192.111.149.132] (unknown [192.111.149.132])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
(Authenticated sender: [email protected])
by vse.vse.cz (Postfix) with ESMTPSA id 7C9511FEE;
Tue, 10 Dec 2013 04:38:11 +0100 (CET)
Content-Type: multipart/alternative; boundary="===============0224914668=="
MIME-Version: 1.0
Subject: ***SPAM*** Best Wishes
To: Recipients <[email protected]> (Not me)
From: Mark & Cindy Hill <[email protected]>
Date: Mon, 09 Dec 2013 19:38:11 -0800
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Virus-Scanned: Maia Mailguard 1.0.2a
X-Spam-Status: Yes, hits=10.028 tagged_above=-999 required=3
tests=FREEMAIL_FORGED_REPLYTO=2.503, HTML_MESSAGE=0.001, LOTS_OF_MONEY=0.001,
MONEY_FORM_SHORT=1.401, NA_DOLLARS=3.599, RP_MATCHES_RCVD=-0.01,
T_FILL_THIS_FORM_SHORT=0.01, US_DOLLARS_3=2.523
X-Spam-Level: **********
X-Spam-Flag: YES
X-Brightmail-Tracker: AAAAAxxWjgQe3PHaHt0Xig==
X-Brightmail-Tracker: AAAAAA==