[email protected] JENNIFER CLINTON

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 27 Apr 2013 11:42:21 -0700
Received: from mr-3c.inet.it ([213.92.5.226]:53959)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1UWA4h-0002t9-9D
for ; Sat, 27 Apr 2013 11:42:21 -0700
Received: from ::ffff:213.92.49.15 ([::ffff:213.92.49.15]) by mr-3c.inet.it via I-SMTP-5.6.2-562
id ::ffff:213.92.49.15+K8VXFaJwW2Oj; Sat, 27 Apr 2013 20:40:47 +0200
MIME-Version: 1.0
Importance: Normal
X-Priority: 3 (Normal)
In-Reply-To:
References:
Subject: I WILL HELP YOU FINANCIALLY !!!!!!!!!!
From: [email protected]
Date: Sat, 27 Apr 2013 20:37:28 +0200
Message-ID: <OFC2A90A61.8833F948-ONC1257B5A.00664ED8-C1257B5A.00664EF1@alutrade.fr>
X-Mailer: Lotus Domino Web Server Release 8.5.3FP3 HF147 January 23, 2013
X-MIMETrack: Serialize by HTTP Server on mnsrv045dom/Alutrade(Release 8.5.3FP3 HF147|January
23, 2013) at 27/04/2013 20:37:28,
Serialize complete at 27/04/2013 20:37:28,
Serialize by Router on mnsrv045dom/Alutrade(Release 8.5.3FP3 HF147|January
23, 2013) at 27/04/2013 20:38:45
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Bcc:
X-Notes-Item: ; name=AltBlindCopyTo
X-Spam-Status: No, score=4.7
X-Spam-Score: 47
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: HELLO MY NAME IS JENNIFER CLINTON I LIVE IN CANADA, I LOST
MY HUSBAND AND THREE KIDS IN FATAL ACCIDENT IN 2005. SINCE THEN I COULD NOT
GAIN MYSELF. HOWEVER, I WILL LOVE TO HELP PEOPLE IN NEED AND THE BUSINESS
MAN AND WOMAN WHO NEED LOAN AND ALSO NEED MONEY FOR BUSINESS.IF YOU NEED
MY HELP PLEASE CONTACT ME I WILL HELP YOU FINANCIALLY.MAY GOD BLESS YOU Please
send me an email to my private email. Email: [email protected]
jennifer [...]

Content analysis details: (4.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[213.92.5.226 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?213.92.49.15>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5002]
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: NO


HELLO MY NAME IS JENNIFER CLINTON I LIVE IN CANADA, I LOST MY HUSBAND AND T=
HREE KIDS IN FATAL ACCIDENT IN 2005. SINCE THEN I COULD NOT GAIN MYSELF. HO=
WEVER, I WILL LOVE TO HELP PEOPLE IN NEED AND THE BUSINESS MAN AND WOMAN WH=
O NEED LOAN AND ALSO NEED MONEY FOR BUSINESS.IF YOU NEED MY HELP PLEASE CON=
TACT ME I WILL HELP YOU FINANCIALLY.MAY GOD BLESS YOU
Please send me an email to my private email.
Email: [email protected]
jennifer

Scammer is replying with the address [email protected] and also using a fake passport.

Scammer is using a mule to collect the money (bank account number altered).

Dear <redacted>,
I am very sorry for the mis-understanding. I have really talked to my Bank and I want to assist you. I want you to forgive me alright.

Here is the Bank details you requested for the $850.00 My associate will take care of it.

Here is the Bank details


Bank Name:Commonwealth Bank of Australia.
Account name: Laurie Graham's Communications Pty Ltd
BSB: 062600
Acct No: 1027XXXX
Swift Code: CTBAAU2S
Branch: South Wagga Wagga NSW Australia

Please get back to me once you have transfer the money with the receipt

Thank you am sorry once again

Regard

header:

Delivered-To: [email protected]
Received: by 10.60.92.197 with SMTP id co5csp114628oeb;
Sat, 11 May 2013 12:41:18 -0700 (PDT)
Return-Path: <[email protected]>
Received-SPF: pass (google.com: domain of [email protected] designates 10.194.78.137 as permitted sender) client-ip=10.194.78.137
Authentication-Results: mr.google.com;
spf=pass (google.com: domain of [email protected] designates 10.194.78.137 as permitted sender) [email protected];
dkim=pass [email protected]
X-Received: from mr.google.com ([10.194.78.137])
by 10.194.78.137 with SMTP id b9mr31446854wjx.10.1368301277918 (num_hops = 1);
Sat, 11 May 2013 12:41:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:x-received:date:message-id:subject:from:to
:content-type;
bh=l265sAdtJHM04I6zFkIF/g+KPhkAiZrj6Zb8tTLk3sg=;
b=TJvvdXBQli7s6Jw4dwTSUWJ9vvVaxMTeG111ep8Zad8bZvxXFh0G27s/FMXyG4mIfE
S724eoPaDpVw97EcKZO1G59ElDo73dkSbNtMVgZYzoOkVqJWXMMP56KixXk89DQR5mrM
RCo1Dt/o47qVh72eML2WEg/b7wYeGt68Tmi7ri+WtKKUuWtufMIkv0NSPE+bDjUwAgFu
ZkQCyK///ibdd0CqIWl4KEB1X86V6f0AQ4CkbAO82Vzu8RSKVJBrNjy0KhEboxWiYLBd
286JirsIJHVLci79perEf2ymnSrqdlVlz+reBMJqkb7u/OLYm8i6iO99wmLw9NzkW9UG
aLFw==
MIME-Version: 1.0
X-Received: by 10.194.78.137 with SMTP id b9mr31446854wjx.10.1368301277914;
Sat, 11 May 2013 12:41:17 -0700 (PDT)
Received: by 10.217.123.201 with HTTP; Sat, 11 May 2013 12:41:17 -0700 (PDT)
Date: Sat, 11 May 2013 12:41:17 -0700
Message-ID: <CAOBGQxjD-GwBGM1dKhDS78Z=5e=B-oe1jY-gCJ_1a6+-JreX+w@mail.gmail.com>
Subject: BANK DETAILS
From: Karen Jennifer <[email protected]>
To: Mike Hunt <[email protected]>
Content-Type: multipart/alternative; boundary=047d7bd91a629dad1f04dc7677e7