by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id SMGXMR3Z7Vu2ZwAAjbubUg
for <>; Thu, 15 Nov 2018 12:37:49 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 15 Nov 2018 12:37:49 -0800
Received: from esa10.hc49497.c3s2.iphmx.com ([68.232.156.175]:28673)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gNOOa-0006ty-FO
for ; Thu, 15 Nov 2018 12:37:49 -0800
X-IronPort-AV: E=Sophos;i="5.56,237,1539676800";
d="scan'208,217";a="201573152"
Received: from ec2-52-214-94-229.eu-west-1.compute.amazonaws.com (HELO 0b2dc012d444.walla.co.il) ([52.214.94.229])
by ob1.hc49497.c3s2.iphmx.com with ESMTP; 15 Nov 2018 12:37:03 -0800
Received: by 0b2dc012d444.walla.co.il (Postfix, from userid 33)
id 2AF1E616B2; Thu, 15 Nov 2018 20:37:03 +0000 (UTC)
To:
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Provider: walla.mail/v
From: =?UTF-8?B?T0YgTUU=?= <[email protected]>
Date: Thu, 15 Nov 2018 22:37:03 +0200
Reply-To: <[email protected]>
Message-Id: <^[email protected]>
X-Spam-Status: Yes, score=14.0
X-Spam-Score: 140
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: DO NOT REPLY HERE TAKE NOTE REPLY TO THE TWO EMAILS BELOW
DO NOT REPLY HERE WRITE TO THE TWO EMAILS BELOW TAKE NOTE NB YOU ARE TO TOM
MILLS ON HIS EMAIL ID. copy to Mr. Thomas Mills Email: [email protected]
Union Bancaire Privée; (UBP SA) Jersey Channel Islands PRIVATE AND URGENT.
I am Mr. Thomas Mills, and I am contacting you on business transfer of a
huge sum of money from a deceased account. Though I know that a transaction
of this magnitude will make anyone apprehensive and worried, but I am assuring
you that all will be well at the end of the day. I decided to contact you
due to the urgency of this transaction. PROPOSITION: I am an account manager
with UBP Bank here in Jersey Channel Islands, in charge of all nonresident
accounts. I have been in this capacity working with the bank for the last
15 years and I joined this institution in 1983 as a junior clerk and worked
my way up through the ranks. On assumption of duty in November 2002 I discovered
a dormant account in my branch that was opened in 1985 in the name of Karl
Henning and I have kept close tab on this very account for the last 15 years
and it has remained dormant even from the day the first deposit of (US$37,
000,000,00)Thirty Seven Million United States dollars was made to this moment,
we have been investigating this account for the past 15 years and discovered
that Karl Henning was used as Pseudonym Name to open the account while the
original owner of the funds in question was the late president of Philippines
Ferdinand Marcos. The next of kin part was left blank hence it was impossible
for them to have claimed the funds these past years or they have forgotten
the existence of the funds entirely., in agreement with my senior executive
officer we have agreed to expunge the blank portion of the next of kin and
fill it up with the name of a would be partner who we can insert his or her
name and start the process of transferring the funds out of the account to
the new would be beneficiary. I also have secured from [...]
Content analysis details: (14.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officemessages5[at]walla.co.il)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[68.232.156.175 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officemessages5[at]walla.co.il)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officemessages5[at]walla.co.il)
0.0 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?TkIgWU9VIEFSRSBUTyBDT1BZIE9OIEhJUyBESVJFQ1QgRU1BSUwgSUQuIGNvcHkgdG8gdG9tbWlsbHMxMDAwQHlhaG9vLmNvbSBjb3B5IHRvIGFuZCB0b21taWxsczEwMDBAeWFob28uY29t?=
DO NOT REPLY HERE TAKE NOTE REPLY TO THE TWO EMAILS BELOW
DO NOT REPLY HERE WRITE TO THE TWO EMAILS BELOW TAKE NOTE
NB YOU ARE TO TOM MILLS
ON HIS EMAIL ID. copy to [email protected]
From: Mr. Thomas Mills
Email: [email protected]
Union Bancaire Privée; (UBP SA)
Jersey Channel Islands
PRIVATE AND URGENT.
I am Mr. Thomas Mills, and I am contacting you on business transfer of a huge sum of
money from a deceased account. Though I know that a transaction of this magnitude will
make anyone apprehensive and worried, but I am assuring you that all will be well at
the end of the day. I decided to contact you due to the urgency of this transaction.
PROPOSITION:
I am an account manager with UBP Bank here in Jersey Channel Islands, in charge of all
nonresident accounts. I have been in this capacity working with the bank for the last
15 years and I joined this institution in 1983 as a junior clerk and worked my way up
through the ranks. On assumption of duty in November 2002 I discovered a dormant
account in my branch that was opened in 1985 in the name of Karl Henning and I have
kept close tab on this very account for the last 15 years and it has remained dormant
even from the day the first deposit of (US$37, 000,000,00)Thirty Seven Million United
States dollars was made to this moment,
we have been investigating this account for the past 15 years and discovered that Karl
Henning was used as Pseudonym Name to open the account while the original owner of the
funds in question was the late president of Philippines Ferdinand Marcos. The next of
kin part was left blank hence it was impossible for them to have claimed the funds
these past years or they have forgotten the existence of the funds entirely., in
agreement with my senior executive officer we have agreed to expunge the blank portion
of the next of kin and fill it up with the name of a would be partner who we can
insert his or her name and start the process of transferring the funds out of the
account to the new would be beneficiary. I also have secured from the probate an order
of mandamus to locate any member of deceased Karl Henning family to become beneficiary
of this fund. Please acknowledge receipt of this message in acceptance of our mutual
business Endeavour by furnishing me with the following:
1. Beneficiary name and address
2.Identification documents
3. Direct Telephone and Private Email Address.
These requirements will enable me make some internal re-adjustments and file your name
in all the forms and other vital documents as next of kin to the Pseudonym Name Karl
Henning which before now was left blank when the account was opened many years ago.
Upon your reply, we shall then discuss the sharing ratio and advice you the detailed
procedure to follow and achieve this once in a life time opportunity without any
hitch. I must assure you that if you are serious and follow my lead religiously, these
funds will be processed and released to you within 14-working-day period. If this
proposal is acceptable by you, do not take undue advantage of the trust I have
bestowed in you, if there is any question that you would like to ask i am Available to
speak with you on the phone anytime any day or Email To [email protected] I await
your Immediate Reply.
Regards,
Thomas Mills
NB YOU ARE TO COPY
ON HIS DIRECT EMAIL ID. copy to [email protected]
copy to and [email protected]
Delivered-To:
Received: from
by with LMTP id SMGXMR3Z7Vu2ZwAAjbubUg
for <>; Thu, 15 Nov 2018 12:37:49 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 15 Nov 2018 12:37:49 -0800
Received: from esa10.hc49497.c3s2.iphmx.com ([68.232.156.175]:28673)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gNOOa-0006ty-FO
for ; Thu, 15 Nov 2018 12:37:49 -0800
X-IronPort-AV: E=Sophos;i="5.56,237,1539676800";
d="scan'208,217";a="201573152"
Received: from ec2-52-214-94-229.eu-west-1.compute.amazonaws.com (HELO 0b2dc012d444.walla.co.il) ([52.214.94.229])
by ob1.hc49497.c3s2.iphmx.com with ESMTP; 15 Nov 2018 12:37:03 -0800
Received: by 0b2dc012d444.walla.co.il (Postfix, from userid 33)
id 2AF1E616B2; Thu, 15 Nov 2018 20:37:03 +0000 (UTC)
To:
X-PHP-Originating-Script: 0:mail.php
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Provider: walla.mail/v
From: =?UTF-8?B?T0YgTUU=?= <[email protected]>
Date: Thu, 15 Nov 2018 22:37:03 +0200
Reply-To: <[email protected]>
Message-Id: <^[email protected]>
X-Spam-Status: Yes, score=14.0
X-Spam-Score: 140
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: DO NOT REPLY HERE TAKE NOTE REPLY TO THE TWO EMAILS BELOW
DO NOT REPLY HERE WRITE TO THE TWO EMAILS BELOW TAKE NOTE NB YOU ARE TO TOM
MILLS ON HIS EMAIL ID. copy to Mr. Thomas Mills Email: [email protected]
Union Bancaire Privée; (UBP SA) Jersey Channel Islands PRIVATE AND URGENT.
I am Mr. Thomas Mills, and I am contacting you on business transfer of a
huge sum of money from a deceased account. Though I know that a transaction
of this magnitude will make anyone apprehensive and worried, but I am assuring
you that all will be well at the end of the day. I decided to contact you
due to the urgency of this transaction. PROPOSITION: I am an account manager
with UBP Bank here in Jersey Channel Islands, in charge of all nonresident
accounts. I have been in this capacity working with the bank for the last
15 years and I joined this institution in 1983 as a junior clerk and worked
my way up through the ranks. On assumption of duty in November 2002 I discovered
a dormant account in my branch that was opened in 1985 in the name of Karl
Henning and I have kept close tab on this very account for the last 15 years
and it has remained dormant even from the day the first deposit of (US$37,
000,000,00)Thirty Seven Million United States dollars was made to this moment,
we have been investigating this account for the past 15 years and discovered
that Karl Henning was used as Pseudonym Name to open the account while the
original owner of the funds in question was the late president of Philippines
Ferdinand Marcos. The next of kin part was left blank hence it was impossible
for them to have claimed the funds these past years or they have forgotten
the existence of the funds entirely., in agreement with my senior executive
officer we have agreed to expunge the blank portion of the next of kin and
fill it up with the name of a would be partner who we can insert his or her
name and start the process of transferring the funds out of the account to
the new would be beneficiary. I also have secured from [...]
Content analysis details: (14.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officemessages5[at]walla.co.il)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[68.232.156.175 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officemessages5[at]walla.co.il)
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(officemessages5[at]walla.co.il)
0.0 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 KAM_NIGERIAN Nigerian Scam and Variants
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?TkIgWU9VIEFSRSBUTyBDT1BZIE9OIEhJUyBESVJFQ1QgRU1BSUwgSUQuIGNvcHkgdG8gdG9tbWlsbHMxMDAwQHlhaG9vLmNvbSBjb3B5IHRvIGFuZCB0b21taWxsczEwMDBAeWFob28uY29t?=
DO NOT REPLY HERE TAKE NOTE REPLY TO THE TWO EMAILS BELOW
DO NOT REPLY HERE WRITE TO THE TWO EMAILS BELOW TAKE NOTE
NB YOU ARE TO TOM MILLS
ON HIS EMAIL ID. copy to [email protected]
From: Mr. Thomas Mills
Email: [email protected]
Union Bancaire Privée; (UBP SA)
Jersey Channel Islands
PRIVATE AND URGENT.
I am Mr. Thomas Mills, and I am contacting you on business transfer of a huge sum of
money from a deceased account. Though I know that a transaction of this magnitude will
make anyone apprehensive and worried, but I am assuring you that all will be well at
the end of the day. I decided to contact you due to the urgency of this transaction.
PROPOSITION:
I am an account manager with UBP Bank here in Jersey Channel Islands, in charge of all
nonresident accounts. I have been in this capacity working with the bank for the last
15 years and I joined this institution in 1983 as a junior clerk and worked my way up
through the ranks. On assumption of duty in November 2002 I discovered a dormant
account in my branch that was opened in 1985 in the name of Karl Henning and I have
kept close tab on this very account for the last 15 years and it has remained dormant
even from the day the first deposit of (US$37, 000,000,00)Thirty Seven Million United
States dollars was made to this moment,
we have been investigating this account for the past 15 years and discovered that Karl
Henning was used as Pseudonym Name to open the account while the original owner of the
funds in question was the late president of Philippines Ferdinand Marcos. The next of
kin part was left blank hence it was impossible for them to have claimed the funds
these past years or they have forgotten the existence of the funds entirely., in
agreement with my senior executive officer we have agreed to expunge the blank portion
of the next of kin and fill it up with the name of a would be partner who we can
insert his or her name and start the process of transferring the funds out of the
account to the new would be beneficiary. I also have secured from the probate an order
of mandamus to locate any member of deceased Karl Henning family to become beneficiary
of this fund. Please acknowledge receipt of this message in acceptance of our mutual
business Endeavour by furnishing me with the following:
1. Beneficiary name and address
2.Identification documents
3. Direct Telephone and Private Email Address.
These requirements will enable me make some internal re-adjustments and file your name
in all the forms and other vital documents as next of kin to the Pseudonym Name Karl
Henning which before now was left blank when the account was opened many years ago.
Upon your reply, we shall then discuss the sharing ratio and advice you the detailed
procedure to follow and achieve this once in a life time opportunity without any
hitch. I must assure you that if you are serious and follow my lead religiously, these
funds will be processed and released to you within 14-working-day period. If this
proposal is acceptable by you, do not take undue advantage of the trust I have
bestowed in you, if there is any question that you would like to ask i am Available to
speak with you on the phone anytime any day or Email To [email protected] I await
your Immediate Reply.
Regards,
Thomas Mills
NB YOU ARE TO COPY
ON HIS DIRECT EMAIL ID. copy to [email protected]
copy to and [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
