by buried under 419s
Fri Oct 14, 2011 6:55 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 14 Oct 2011 15:20:10 -0700
Received: from nai.nairobihost.com ([184.172.130.98])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1REq6r-0007VE-5U
for ; Fri, 14 Oct 2011 15:20:10 -0700
Received: from localhost.localdomain ([127.0.0.1] helo=localhost)
by nai.nairobihost.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1REq4a-0000ww-N8; Fri, 14 Oct 2011 17:17:56 -0500
Received: from 41.138.183.251 ([41.138.183.251]) by
webmail.buildingkenya.com (Horde Framework) with HTTP; Fri, 14 Oct 2011
17:17:38 -0500
Message-ID: <[email protected]>
Date: Fri, 14 Oct 2011 17:17:38 -0500
From: BARCLAYS BANK PLC <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: CHANGE OF BENEFICIARY 14/10/2011
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.9)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - nai.nairobihost.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - barclays.com
X-Spam-Subject: ***SPAM*** CHANGE OF BENEFICIARY 14/10/2011
X-Spam-Status: Yes, score=15.8
X-Spam-Score: 158
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FROM: MR FRED WILSON BARCLAYS BANK PLC. 4 PERRY CLOSE LEKKI,
LAGOS, NIGERIA. Attention: Beneficiary, CHANGE OF BENEFICIARY [...]
Content analysis details: (15.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[184.172.130.98 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
FROM: MR FRED WILSON
BARCLAYS BANK PLC.
4 PERRY CLOSE LEKKI,
LAGOS, NIGERIA.
Attention: Beneficiary,
CHANGE OF BENEFICIARY
This is very urgent and an urgent attention is needed to this.
In our office today, was a present of One Mr. John T. Kehoe of 1200
Fitch Way, Sacramento, Ca. 95864 filing application contrary to your
pending fund transfer.The above mentioned person visited this Bank
yesterday with a power of attorney given in his favor by your good
self, granting him the benefit to process and claim your inheritance
of $5,000,000.00( Five Million United States Dollars Only) for
personal reasons.
He further Stated that the online account be Terminated while the fund
should be wired to his Bank account with Bank Of America, Routing
Number 121000358.Our office have ask Mr. John T. Kehoe return back to
the Bank within 48hours to enable us have a personal confirmation from
you being hitherto the beneficiary.
We are sorry to have delayed your instruction in giving out this fund
since we must adhere to the procedures of this honorable bank by
making sure this request is verified and confirmed by the beneficiary
and his existing attorney.
Your confirmation to the above will be appreciated. We look forward to
hearing from you soon via this email ( [email protected] )
Yours sincerely,
Mr. Fred Wilson
Head of Operations.
Barclays Bank Plc
Tel: +234 70 5298 5445
CALL ME IMMEDIATELY.
Envelope-to:
Delivery-date: Fri, 14 Oct 2011 15:20:10 -0700
Received: from nai.nairobihost.com ([184.172.130.98])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1REq6r-0007VE-5U
for ; Fri, 14 Oct 2011 15:20:10 -0700
Received: from localhost.localdomain ([127.0.0.1] helo=localhost)
by nai.nairobihost.com with esmtpa (Exim 4.69)
(envelope-from <[email protected]>)
id 1REq4a-0000ww-N8; Fri, 14 Oct 2011 17:17:56 -0500
Received: from 41.138.183.251 ([41.138.183.251]) by
webmail.buildingkenya.com (Horde Framework) with HTTP; Fri, 14 Oct 2011
17:17:38 -0500
Message-ID: <[email protected]>
Date: Fri, 14 Oct 2011 17:17:38 -0500
From: BARCLAYS BANK PLC <[email protected]>
Reply-to: [email protected]
To: undisclosed-recipients:;
Subject: CHANGE OF BENEFICIARY 14/10/2011
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.9)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - nai.nairobihost.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - barclays.com
X-Spam-Subject: ***SPAM*** CHANGE OF BENEFICIARY 14/10/2011
X-Spam-Status: Yes, score=15.8
X-Spam-Score: 158
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FROM: MR FRED WILSON BARCLAYS BANK PLC. 4 PERRY CLOSE LEKKI,
LAGOS, NIGERIA. Attention: Beneficiary, CHANGE OF BENEFICIARY [...]
Content analysis details: (15.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[184.172.130.98 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
FROM: MR FRED WILSON
BARCLAYS BANK PLC.
4 PERRY CLOSE LEKKI,
LAGOS, NIGERIA.
Attention: Beneficiary,
CHANGE OF BENEFICIARY
This is very urgent and an urgent attention is needed to this.
In our office today, was a present of One Mr. John T. Kehoe of 1200
Fitch Way, Sacramento, Ca. 95864 filing application contrary to your
pending fund transfer.The above mentioned person visited this Bank
yesterday with a power of attorney given in his favor by your good
self, granting him the benefit to process and claim your inheritance
of $5,000,000.00( Five Million United States Dollars Only) for
personal reasons.
He further Stated that the online account be Terminated while the fund
should be wired to his Bank account with Bank Of America, Routing
Number 121000358.Our office have ask Mr. John T. Kehoe return back to
the Bank within 48hours to enable us have a personal confirmation from
you being hitherto the beneficiary.
We are sorry to have delayed your instruction in giving out this fund
since we must adhere to the procedures of this honorable bank by
making sure this request is verified and confirmed by the beneficiary
and his existing attorney.
Your confirmation to the above will be appreciated. We look forward to
hearing from you soon via this email ( [email protected] )
Yours sincerely,
Mr. Fred Wilson
Head of Operations.
Barclays Bank Plc
Tel: +234 70 5298 5445
CALL ME IMMEDIATELY.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces