by buried under 419s
Sun Oct 17, 2010 4:21 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 17 Oct 2010 12:44:12 -0700
Received: from [219.238.241.5] (helo=mail.hope.com.cn)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1P7Z9L-0004pY-BE
for ; Sun, 17 Oct 2010 12:44:12 -0700
Received: from localhost (mail.hope.com.cn [127.0.0.1])
by mail.hope.com.cn (Postfix - by hope.com.cn) with ESMTP id 8AA37100A25;
Mon, 18 Oct 2010 02:45:16 +0800 (CST)
X-Quarantine-ID: <D3t++9C06DWq>
X-Virus-Scanned: amavisd-new at mail.hope.com.cn
X-Spam-Flag: YES
X-Spam-Score: 15.517
X-Spam-Level: ***************
X-Spam-Status: Yes, score=15.517 tagged_above=5 required=5
tests=[ADVANCE_FEE_2=2.049, ADVANCE_FEE_3=1.435, ADVANCE_FEE_4=1.502,
ALL_TRUSTED=-1.44, FH_DATE_PAST_20XX=3.384, FORGED_MUA_OUTLOOK=4.199,
MISSING_HEADERS=1.581, MISSING_MID=0.001, SUBJ_ALL_CAPS=1.806,
TVD_PH_SUBJ_META=1] autolearn=unavailable
Received: from mail.hope.com.cn ([127.0.0.1])
by localhost (mail.hope.com.cn [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id D3t++9C06DWq; Mon, 18 Oct 2010 02:45:16 +0800 (CST)
Received: from User (unknown [116.206.140.179])
by mail.hope.com.cn (Postfix - by hope.com.cn) with ESMTPA id 064DE1009BC;
Mon, 18 Oct 2010 02:44:56 +0800 (CST)
Reply-To: <[email protected]>
From: "BANK"<[email protected]>
Date: Mon, 18 Oct 2010 02:57:59 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=13.6
X-Spam-Score: 136
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: RHB BANK MALAYSIA 50400 Kuala Lumpur Peti Surat 10145, 50907
Kuala Lumpur Attn: Beneficiary This letter is to inform you that arrangement
has been concluded with our RHB Bank of Malaysia to remit your total approved
fund of US$15Million into your nominated bank account. Please note very careful,
Mr. ZODIK ALI from Malaysia and his London partner Mr. Howard Miller came
to my office with a sworn affidavit to re-route your payment into a new bank
account number as stated Prudential Bank and Trust Co (Zamora Branch) Account
#: 5068-1117-8. However, before this is done, you are hereby requested to
confirm to us without delay the followings: If Mr. ZODIK ALI is one of your
Director's as he claimed. If you have instructed him to appoint an attorney
/agent on your behalf. If you have authorized us through your agent to issue
Cash Call Payment remittance to them on your behalf. Please also confirm
if you have authorized Mr. Zodik to change your banking particulars to the
following particulars stated below: [...]
Content analysis details: (13.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 0.9946]
0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
2.1 SUBJ_ALL_CAPS Subject is all capitals
0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
0.0 TVD_PH_SUBJ_META TVD_PH_SUBJ_META
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
0.6 ADVANCE_FEE_4 Appears to be advance fee fraud (Nigerian 419)
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** MESSAGE FROM RHB BANK MALAYSIA
RHB BANK MALAYSIA
50400 Kuala Lumpur Peti Surat 10145, 50907 Kuala Lumpur
Attn: Beneficiary
This letter is to inform you that arrangement has been concluded with our RHB Bank of Malaysia to remit your total approved fund of US$15Million into your nominated bank account. Please note very careful, Mr. ZODIK ALI from Malaysia and his London partner Mr. Howard Miller came to my office with a sworn affidavit to re-route your payment into a new bank account number as stated Prudential Bank and Trust Co (Zamora Branch) Account #: 5068-1117-8. However, before this is done, you are hereby requested to confirm to us without delay the followings: If Mr. ZODIK ALI is one of your Director's as he claimed. If you have instructed him to appoint an attorney /agent on your behalf. If you have authorized us through your agent to issue Cash Call Payment remittance to them on your behalf. Please also confirm if you have authorized Mr. Zodik to change your banking particulars to the following particulars stated below:
Prudential Bank & Trust Co (Zamora Branch) Zamora Street,
Pandacan, Manila, Philippines, Bank FSD Account # 5068-1117-8
Of Nabil Bahij Jahas with Bank
You are required as a matter of urgency to confirm the legitimacy of the above claim and kindly give us reason why you decided to affect the above Change of Account. If you are not aware of this claim, contact the director transfer unit of rhb bank Malaysia.
Contact person:
Dato' Mohamed Khadar
Position:Director Telex Dept
E-MAIL: [email protected]
Please confirm to him your present receiving Bank Coordinate, Private Telephone and Fax number, your e-mail address so that we can cross-check it with our file.We have decided to contact you because the conduct of the two (2) men became suspicious due to the unsatisfactory information they provided concerning this transfer, and as a result, I decided to give them two (2) days appointment a head to enable me make necessary verification from you and the appropriate authorities in the release of your fund, kindly advise us appropriately whether the two men are acting on your permission and instruction or not. This measure is being taken to avoid
making payment into wrong account. We hope you will avail yourself the opportunity by complying with the above directive, so as to enable us release your fund as scheduled.
We look forward hearing from you.
Yours faithfully,
Mrs. Susan Dang
Envelope-to:
Delivery-date: Sun, 17 Oct 2010 12:44:12 -0700
Received: from [219.238.241.5] (helo=mail.hope.com.cn)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1P7Z9L-0004pY-BE
for ; Sun, 17 Oct 2010 12:44:12 -0700
Received: from localhost (mail.hope.com.cn [127.0.0.1])
by mail.hope.com.cn (Postfix - by hope.com.cn) with ESMTP id 8AA37100A25;
Mon, 18 Oct 2010 02:45:16 +0800 (CST)
X-Quarantine-ID: <D3t++9C06DWq>
X-Virus-Scanned: amavisd-new at mail.hope.com.cn
X-Spam-Flag: YES
X-Spam-Score: 15.517
X-Spam-Level: ***************
X-Spam-Status: Yes, score=15.517 tagged_above=5 required=5
tests=[ADVANCE_FEE_2=2.049, ADVANCE_FEE_3=1.435, ADVANCE_FEE_4=1.502,
ALL_TRUSTED=-1.44, FH_DATE_PAST_20XX=3.384, FORGED_MUA_OUTLOOK=4.199,
MISSING_HEADERS=1.581, MISSING_MID=0.001, SUBJ_ALL_CAPS=1.806,
TVD_PH_SUBJ_META=1] autolearn=unavailable
Received: from mail.hope.com.cn ([127.0.0.1])
by localhost (mail.hope.com.cn [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id D3t++9C06DWq; Mon, 18 Oct 2010 02:45:16 +0800 (CST)
Received: from User (unknown [116.206.140.179])
by mail.hope.com.cn (Postfix - by hope.com.cn) with ESMTPA id 064DE1009BC;
Mon, 18 Oct 2010 02:44:56 +0800 (CST)
Reply-To: <[email protected]>
From: "BANK"<[email protected]>
Date: Mon, 18 Oct 2010 02:57:59 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=13.6
X-Spam-Score: 136
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: RHB BANK MALAYSIA 50400 Kuala Lumpur Peti Surat 10145, 50907
Kuala Lumpur Attn: Beneficiary This letter is to inform you that arrangement
has been concluded with our RHB Bank of Malaysia to remit your total approved
fund of US$15Million into your nominated bank account. Please note very careful,
Mr. ZODIK ALI from Malaysia and his London partner Mr. Howard Miller came
to my office with a sworn affidavit to re-route your payment into a new bank
account number as stated Prudential Bank and Trust Co (Zamora Branch) Account
#: 5068-1117-8. However, before this is done, you are hereby requested to
confirm to us without delay the followings: If Mr. ZODIK ALI is one of your
Director's as he claimed. If you have instructed him to appoint an attorney
/agent on your behalf. If you have authorized us through your agent to issue
Cash Call Payment remittance to them on your behalf. Please also confirm
if you have authorized Mr. Zodik to change your banking particulars to the
following particulars stated below: [...]
Content analysis details: (13.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 0.9946]
0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
2.1 SUBJ_ALL_CAPS Subject is all capitals
0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
0.0 TVD_PH_SUBJ_META TVD_PH_SUBJ_META
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
0.6 ADVANCE_FEE_4 Appears to be advance fee fraud (Nigerian 419)
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** MESSAGE FROM RHB BANK MALAYSIA
RHB BANK MALAYSIA
50400 Kuala Lumpur Peti Surat 10145, 50907 Kuala Lumpur
Attn: Beneficiary
This letter is to inform you that arrangement has been concluded with our RHB Bank of Malaysia to remit your total approved fund of US$15Million into your nominated bank account. Please note very careful, Mr. ZODIK ALI from Malaysia and his London partner Mr. Howard Miller came to my office with a sworn affidavit to re-route your payment into a new bank account number as stated Prudential Bank and Trust Co (Zamora Branch) Account #: 5068-1117-8. However, before this is done, you are hereby requested to confirm to us without delay the followings: If Mr. ZODIK ALI is one of your Director's as he claimed. If you have instructed him to appoint an attorney /agent on your behalf. If you have authorized us through your agent to issue Cash Call Payment remittance to them on your behalf. Please also confirm if you have authorized Mr. Zodik to change your banking particulars to the following particulars stated below:
Prudential Bank & Trust Co (Zamora Branch) Zamora Street,
Pandacan, Manila, Philippines, Bank FSD Account # 5068-1117-8
Of Nabil Bahij Jahas with Bank
You are required as a matter of urgency to confirm the legitimacy of the above claim and kindly give us reason why you decided to affect the above Change of Account. If you are not aware of this claim, contact the director transfer unit of rhb bank Malaysia.
Contact person:
Dato' Mohamed Khadar
Position:Director Telex Dept
E-MAIL: [email protected]
Please confirm to him your present receiving Bank Coordinate, Private Telephone and Fax number, your e-mail address so that we can cross-check it with our file.We have decided to contact you because the conduct of the two (2) men became suspicious due to the unsatisfactory information they provided concerning this transfer, and as a result, I decided to give them two (2) days appointment a head to enable me make necessary verification from you and the appropriate authorities in the release of your fund, kindly advise us appropriately whether the two men are acting on your permission and instruction or not. This measure is being taken to avoid
making payment into wrong account. We hope you will avail yourself the opportunity by complying with the above directive, so as to enable us release your fund as scheduled.
We look forward hearing from you.
Yours faithfully,
Mrs. Susan Dang
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces