by buried under 419s
Fri Aug 26, 2011 7:35 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 26 Aug 2011 13:03:12 -0700
Received: from relay4.fnetindia.com ([209.160.26.207])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Qx2cR-0003NY-CR
for ; Fri, 26 Aug 2011 13:03:12 -0700
Received: from server.247c.in ([220.226.2.100])
(authenticated bits=0)
by relay4.fnetindia.com (8.13.8/8.13.
with ESMTP id p7QJsIPF023064;
Sat, 27 Aug 2011 01:24:19 +0530
Received: from corporate.autolec.com (unknown [118.102.252.18])
by server.247c.in (Postfix) with ESMTPSA id D12B39202C6;
Sat, 27 Aug 2011 01:24:17 +0530 (IST)
Received: from corporate.autolec.com (abs-static-18.252.102.118.aircel.co.in [118.102.252.18] (may be forged))
by corporate.autolec.com (8.13.8/8.12.5) with ESMTP id p7QJt630023225;
Sat, 27 Aug 2011 01:25:06 +0530
Received: (from apache@localhost)
by corporate.autolec.com (8.13.8/8.13.1/Submit) id p7QJqq6S023197;
Sat, 27 Aug 2011 01:22:52 +0530
Received: from 213.7.245.245
(SquirrelMail authenticated user administration)
by 118.102.252.18 with HTTP;
Sat, 27 Aug 2011 01:22:52 +0530 (IST)
Message-ID: <[email protected]>
Date: Sat, 27 Aug 2011 01:22:52 +0530 (IST)
Subject: Re:Release/Transfer Notice of your Approved Funds ( $800,
000.00 USD)
From: "ALPHA BANK PLC" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-5.el5.centos.10
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
X-Spam-Subject: ***SPAM*** Re:Release/Transfer Notice of your Approved Funds ( $800,
000.00 USD)
X-Spam-Status: Yes, score=17.2
X-Spam-Score: 172
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ALPHA BANK PLC 66 Cannon Street, EC4N 6EP From the Desk of
Herman Van Hayden *****24 HOURS SERVICE***** Official Web Account: Our Ref:
AB/OHG/OXD1/2011 TELEX: UKGOVAB. Date: 22th of August, 2011. Highly Confidential...
[...]
Content analysis details: (17.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (branch202bank[at]aol.co.uk)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.3 MAY_BE_FORGED Relay IP's reverse DNS does not resolve to IP
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
ALPHA BANK PLC
66 Cannon Street, EC4N 6EP
From the Desk of Herman Van Hayden
*****24 HOURS SERVICE*****
Official Web Account:
Our Ref: AB/OHG/OXD1/2011
TELEX: UKGOVAB.
Date: 22th of August, 2011.
Highly Confidential...
ATTENTION:
Re-release/Transfer Notice of your Approved Funds ( $800,000.00 USD) Eight
hundred thousand united states dollars. May you remain favored and I pray
that this email will find you in Good Spirits and of course always in the
best of health. This letter will definitely be amazing to you because of its
realistic
value. Sorry for the inconveniences that was rendered to you in your line
of contract/Inheritance Payment transaction with some government Officials
some while ago.
Without taking much of your time, my name is Herman Van Hayden, Presently
we are being paid by the WORLD BANK in conjunction with the ( UN ) in
other to avert beneficiary funds delays and compensate victims of scam in
recent times and also payment of contract inheritance sum. So far, we have
succeeded in Settling (Mrs. Ann Geyser, Mr. Edward Drake, Mr. hung Young,
etc).
Your Funds were returned back to Treasury, some while ago because you did
not finalize your claim for it. A week ago, The Executive Committee
collectively agreed to release the sum of $800,000.00 USD to you but to
our surprise you sent down your representatives, Mr. Tim Parker and
Mr. Rowland Isomer to collect this Fund on your behalf this morning.
Dear Beneficiary Did You Send Them?? And since you do not send them you
are advise to kindly re-confirm to us the followings:
1) Your full name:
2) Contact Address:
3) Phone:
4) Fax:
5) Occupation:
6) A valid proof of Identification:
Your payment has been approved by all International approval immediately
you receive
this mail for immediate payment, which is schedule to hold within 48 hours
upon confirmation of the above mention requirement, via
email ( [email protected] )
Officially Sealed
Herman Van Hayden
Personal Email: [email protected]
Managing Director {Alpha Bank
Envelope-to:
Delivery-date: Fri, 26 Aug 2011 13:03:12 -0700
Received: from relay4.fnetindia.com ([209.160.26.207])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Qx2cR-0003NY-CR
for ; Fri, 26 Aug 2011 13:03:12 -0700
Received: from server.247c.in ([220.226.2.100])
(authenticated bits=0)
by relay4.fnetindia.com (8.13.8/8.13.
with ESMTP id p7QJsIPF023064;Sat, 27 Aug 2011 01:24:19 +0530
Received: from corporate.autolec.com (unknown [118.102.252.18])
by server.247c.in (Postfix) with ESMTPSA id D12B39202C6;
Sat, 27 Aug 2011 01:24:17 +0530 (IST)
Received: from corporate.autolec.com (abs-static-18.252.102.118.aircel.co.in [118.102.252.18] (may be forged))
by corporate.autolec.com (8.13.8/8.12.5) with ESMTP id p7QJt630023225;
Sat, 27 Aug 2011 01:25:06 +0530
Received: (from apache@localhost)
by corporate.autolec.com (8.13.8/8.13.1/Submit) id p7QJqq6S023197;
Sat, 27 Aug 2011 01:22:52 +0530
Received: from 213.7.245.245
(SquirrelMail authenticated user administration)
by 118.102.252.18 with HTTP;
Sat, 27 Aug 2011 01:22:52 +0530 (IST)
Message-ID: <[email protected]>
Date: Sat, 27 Aug 2011 01:22:52 +0530 (IST)
Subject: Re:Release/Transfer Notice of your Approved Funds ( $800,
000.00 USD)
From: "ALPHA BANK PLC" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8-5.el5.centos.10
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
X-Spam-Subject: ***SPAM*** Re:Release/Transfer Notice of your Approved Funds ( $800,
000.00 USD)
X-Spam-Status: Yes, score=17.2
X-Spam-Score: 172
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ALPHA BANK PLC 66 Cannon Street, EC4N 6EP From the Desk of
Herman Van Hayden *****24 HOURS SERVICE***** Official Web Account: Our Ref:
AB/OHG/OXD1/2011 TELEX: UKGOVAB. Date: 22th of August, 2011. Highly Confidential...
[...]
Content analysis details: (17.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (branch202bank[at]aol.co.uk)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.3 MAY_BE_FORGED Relay IP's reverse DNS does not resolve to IP
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
ALPHA BANK PLC
66 Cannon Street, EC4N 6EP
From the Desk of Herman Van Hayden
*****24 HOURS SERVICE*****
Official Web Account:
Our Ref: AB/OHG/OXD1/2011
TELEX: UKGOVAB.
Date: 22th of August, 2011.
Highly Confidential...
ATTENTION:
Re-release/Transfer Notice of your Approved Funds ( $800,000.00 USD) Eight
hundred thousand united states dollars. May you remain favored and I pray
that this email will find you in Good Spirits and of course always in the
best of health. This letter will definitely be amazing to you because of its
realistic
value. Sorry for the inconveniences that was rendered to you in your line
of contract/Inheritance Payment transaction with some government Officials
some while ago.
Without taking much of your time, my name is Herman Van Hayden, Presently
we are being paid by the WORLD BANK in conjunction with the ( UN ) in
other to avert beneficiary funds delays and compensate victims of scam in
recent times and also payment of contract inheritance sum. So far, we have
succeeded in Settling (Mrs. Ann Geyser, Mr. Edward Drake, Mr. hung Young,
etc).
Your Funds were returned back to Treasury, some while ago because you did
not finalize your claim for it. A week ago, The Executive Committee
collectively agreed to release the sum of $800,000.00 USD to you but to
our surprise you sent down your representatives, Mr. Tim Parker and
Mr. Rowland Isomer to collect this Fund on your behalf this morning.
Dear Beneficiary Did You Send Them?? And since you do not send them you
are advise to kindly re-confirm to us the followings:
1) Your full name:
2) Contact Address:
3) Phone:
4) Fax:
5) Occupation:
6) A valid proof of Identification:
Your payment has been approved by all International approval immediately
you receive
this mail for immediate payment, which is schedule to hold within 48 hours
upon confirmation of the above mention requirement, via
email ( [email protected] )
Officially Sealed
Herman Van Hayden
Personal Email: [email protected]
Managing Director {Alpha Bank
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces