#70379 by buried under 419s
Tue Oct 11, 2011 12:37 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 11 Oct 2011 06:02:09 -0700
Received: from mail.imexbank.ck.ua ([78.137.4.188] helo=imexbank.ck.ua)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1RDbyB-0004FF-Ol
for ; Tue, 11 Oct 2011 06:02:09 -0700
Received: from 14.207.239.145 ([14.207.239.145])
by imexbank.ck.ua (Kerio MailServer 6.5.0 patch 1);
Tue, 11 Oct 2011 05:56:32 +0300
From: [email protected]
Reply-To: [email protected]
Organization: CLAIM YOUR FUND
Subject: Re
To: undisclosed-recipients:;
Message-ID: <[email protected]>
Date: Tue, 11 Oct 2011 05:56:31 +0300
X-Mailer: Kerio MailServer 6.5.0 patch 1 WebMail
X-User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="-----------c9c529537443fcb2ccce1c28e2720d5c"
X-Spam-Subject: ***SPAM*** Re
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTN:Beneficiary, I am sorry for using this means to officially
notify you of funds , valuable packages and baggage in trust for reputable
clients that are honest and trustworthy. A benefactor whose identity can
not be disclosed because of the NonCircumvention and Non Disclosure Agreement
that was signed with the said benefactor when the funds were being deposited,
made you the beneficiary of a package containing some amount of money. The
Non Circumvention and Non Disclosure Agreement signed with the benefactor
mandates us to fully divulge and disclose the benefactor's identity 18 months
after you, the beneficiary,has received thefunds. [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jwrona[at]w.cn)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[78.137.4.188 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[78.137.4.188 listed in bb.barracudacentral.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dukamike45[at]yahoo.com.hk
)
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
This is a multi-part message in MIME format.
-------------c9c529537443fcb2ccce1c28e2720d5c
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
ATTN:Beneficiary,
I am sorry for using this means to officially notify you of funds , valuable packages and baggage in trust for reputable clients that are honest and trustworthy.
A benefactor whose identity can not be disclosed because of the NonCircumvention and Non Disclosure Agreement that was signed with the said benefactor when the funds were being deposited, made you the beneficiary of a package containing some amount of money. The Non Circumvention and Non Disclosure Agreement signed with the benefactor mandates us to fully divulge and disclose the benefactor's identity 18 months after you,
the beneficiary,has received thefunds.
The funds totals (Ten Million, United States Dollars) and we confirm that these funds are fully free of any liens,or encumbrances and are clean, clear and non-criminal origin and are available in the form of CASH.You are hereby advised to reconfirm your Full Contact Information for verification with information contained in our database in the format stated below.
After verifying the details with the information we have in our database,you will be contacted to personally claim the funds in the Finance and Security Firm where its being kept with the Consignment Deposit information (CDI317) that will empower you to do so.This Consignment Deposit Information (CDI317) is what is needed to claim the funds and will only be sent to you after all your information has been verified and confirmed to be true.The information should therefore be sent in the manner stated below so as to ensure that no mistake is made.
Your Full Name: ___________________
Your Complete Address (Physical Address with Zip Code)
__________________________
Date of Birth (Day/Month/Year:___________________
Direct Telephone/Mobile Number:_____________________________
Fax Number:_______________________________________
Your Occupations/sex/________________________
Complete the above and send back to me as soon as possible.
Congratulations in advance.
Thank you Yours faithfully.
Rev. Mike Louis Duka
Envelope-to:
Delivery-date: Tue, 11 Oct 2011 06:02:09 -0700
Received: from mail.imexbank.ck.ua ([78.137.4.188] helo=imexbank.ck.ua)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1RDbyB-0004FF-Ol
for ; Tue, 11 Oct 2011 06:02:09 -0700
Received: from 14.207.239.145 ([14.207.239.145])
by imexbank.ck.ua (Kerio MailServer 6.5.0 patch 1);
Tue, 11 Oct 2011 05:56:32 +0300
From: [email protected]
Reply-To: [email protected]
Organization: CLAIM YOUR FUND
Subject: Re
To: undisclosed-recipients:;
Message-ID: <[email protected]>
Date: Tue, 11 Oct 2011 05:56:31 +0300
X-Mailer: Kerio MailServer 6.5.0 patch 1 WebMail
X-User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="-----------c9c529537443fcb2ccce1c28e2720d5c"
X-Spam-Subject: ***SPAM*** Re
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTN:Beneficiary, I am sorry for using this means to officially
notify you of funds , valuable packages and baggage in trust for reputable
clients that are honest and trustworthy. A benefactor whose identity can
not be disclosed because of the NonCircumvention and Non Disclosure Agreement
that was signed with the said benefactor when the funds were being deposited,
made you the beneficiary of a package containing some amount of money. The
Non Circumvention and Non Disclosure Agreement signed with the benefactor
mandates us to fully divulge and disclose the benefactor's identity 18 months
after you, the beneficiary,has received thefunds. [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jwrona[at]w.cn)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[78.137.4.188 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[78.137.4.188 listed in bb.barracudacentral.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dukamike45[at]yahoo.com.hk
)
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
This is a multi-part message in MIME format.
-------------c9c529537443fcb2ccce1c28e2720d5c
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
ATTN:Beneficiary,
I am sorry for using this means to officially notify you of funds , valuable packages and baggage in trust for reputable clients that are honest and trustworthy.
A benefactor whose identity can not be disclosed because of the NonCircumvention and Non Disclosure Agreement that was signed with the said benefactor when the funds were being deposited, made you the beneficiary of a package containing some amount of money. The Non Circumvention and Non Disclosure Agreement signed with the benefactor mandates us to fully divulge and disclose the benefactor's identity 18 months after you,
the beneficiary,has received thefunds.
The funds totals (Ten Million, United States Dollars) and we confirm that these funds are fully free of any liens,or encumbrances and are clean, clear and non-criminal origin and are available in the form of CASH.You are hereby advised to reconfirm your Full Contact Information for verification with information contained in our database in the format stated below.
After verifying the details with the information we have in our database,you will be contacted to personally claim the funds in the Finance and Security Firm where its being kept with the Consignment Deposit information (CDI317) that will empower you to do so.This Consignment Deposit Information (CDI317) is what is needed to claim the funds and will only be sent to you after all your information has been verified and confirmed to be true.The information should therefore be sent in the manner stated below so as to ensure that no mistake is made.
Your Full Name: ___________________
Your Complete Address (Physical Address with Zip Code)
__________________________
Date of Birth (Day/Month/Year:___________________
Direct Telephone/Mobile Number:_____________________________
Fax Number:_______________________________________
Your Occupations/sex/________________________
Complete the above and send back to me as soon as possible.
Congratulations in advance.
Thank you Yours faithfully.
Rev. Mike Louis Duka
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces