by Reportandie
Sat Dec 08, 2012 11:05 pm
Delivered-To: [my.redacted.address]
Received: by 10.194.77.6 with SMTP id o6csp428318wjw;
Sat, 8 Dec 2012 05:23:11 -0800 (PST)
Received: by 10.204.148.22 with SMTP id n22mr2875563bkv.6.1354972991201;
Sat, 08 Dec 2012 05:23:11 -0800 (PST)
Return-Path: <[email protected]>
Received: from asmtp02.www1.dk (asmtp02.www1.dk. [91.144.243.216])
by mx.google.com with ESMTPS id ia12si19857616bkc.11.2012.12.08.05.23.10
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 08 Dec 2012 05:23:11 -0800 (PST)
Received-SPF: neutral (google.com: 91.144.243.216 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=91.144.243.216;
Authentication-Results: mx.google.com; spf=neutral (google.com: 91.144.243.216 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from [91.144.243.214] (helo=asmtp.www1.dk)
by asmtp02.www1.dk with esmtp (Exim 4.80 (FreeBSD))
(envelope-from <[email protected]>)
id 1ThKN4-000JHK-3r
for [my.redacted.address]; Sat, 08 Dec 2012 14:23:10 +0100
Received: from mailnull by asmtp.www1.dk with sa-bad (Exim 4.80 (FreeBSD))
(envelope-from <[email protected]>)
id 1ThKN2-000IY3-Sy
for [my.redacted.address]; Sat, 08 Dec 2012 14:23:09 +0100
Received: from [31.193.237.146] (helo=cp4.danhost.dk)
by asmtp.www1.dk with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80 (FreeBSD))
(envelope-from <[email protected]>)
id 1ThKN2-000ITo-8D
for [my.redacted.address]; Sat, 08 Dec 2012 14:23:08 +0100
Received: from dan17381 by cp4.danhost.dk with local (Exim 4.77 (FreeBSD))
(envelope-from <[email protected]>)
id 1ThKN1-000Mav-TL
for [my.redacted.address]; Sat, 08 Dec 2012 14:23:07 +0100
To: [redacted]
Subject: URGENT AND CONFIDENTIAL!!!
X-PHP-Script: www.broenderslev-mfk.dk/images/stories/mailer1.php for 184.170.142.207
From: Botiumelo Kubu <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sat, 08 Dec 2012 14:23:07 +0100
X-Spam-Status: Yes, score=41.8
X-Spam-Score: 418
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "sa01.danhost.dk", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
The administrator of that system for details.
Content preview: Dearest One, I know that this proposal will come to you as
a big surprise considering the fact that we have not had any formal acquaintance
before or met in person but all the same I want you for the sake of God to
give this an immediate attention in view of the fact that the security of
life and possession is at stake. I am Miss. Boitumelo Kubu a 24 years old
girl from war ravaged SIERRA LEONE but presently leaving in Zimbabwe with
my brother David who is 16 years old. My father Dr.John Muluzu kubu who before
his untimely assassination by the rebels was the Director of SIERRA LEONE
Diamond corporation (SLDC).He was killed in our government residential house
along side two of my other brothers, two house maids and security aid, fortunately
for me and my younger brother including our mother we were on a weekend visit
to our home town. A as we got the news of the tragedy, we immediately managed
to ran! into neighboring country Zimbabwe for refuge. In the same vain, as
Faith would have it we lost our dear mother after a month we lost our father
(may soul rest in peace) as a result of what the Doctor called cardiac arrest.
As we were coming into this country, we had some documents of a deposit of
$ 28,500.000.00 USD (Twenty Eight million Five hundred thousand USD) made
by my late father in a security and trust company, according to the note
we found in our father's brief case, he intended to use this fund for his
international business transaction after his tenure in office but was unfortunately
murdered. We have located the security company where the money is deposited
with the help of an attorney and established ownership having been told that
the consignment is been held at their headquater in Europe for security reasons.
Though, our father did not declare the deposit as real cash rather as family
treasures/valuables Worth US$28.5M. ! ; Please considering the bitter experiences
we had in our country and the war still going on especially in diamond area
which incidentally is where we came from plus the incessant [...]
Content analysis details: (41.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(boitumelokubu[at]yahoo.com)
0.5 SUBJ_ALL_CAPS Subject is all capitals
2.4 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.8 URG_BIZ BODY: Contains urgent matter
3.8 MILLION_USD BODY: Talks about millions of dollars
0.4 HK_SCAM_N8 BODY: HK_SCAM_N8
2.6 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.6 HK_SCAM_S7 BODY: HK_SCAM_S7
0.0 HTML_MESSAGE BODY: HTML included in message
2.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.6 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.9 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.6 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
2.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
4.1 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
Dearest One, I know that this proposal will come to you as a big surprise considering the fact that we have not had any formal acquaintance before or met in person but all the same I want you for the sake of God to give this an immediate attention in view of the fact that the security of life and possession is at stake. I am Miss. Boitumelo Kubu a 24 years old girl from war ravaged SIERRA LEONE but presently leaving in Zimbabwe with my brother David who is 16 years old. My father Dr.John Muluzu kubu who before his untimely assassination by the rebels was the Director of SIERRA LEONE Diamond corporation (SLDC).He was killed in our government residential house along side two of my other brothers, two house maids and security aid, fortunately for me and my younger brother including our mother we were on a weekend visit to our home town. A as we got the news of the tragedy, we immediately managed to ran! into neighboring country Zimbabwe for refuge. In the same vain, as Faith would have it we lost our dear mother after a month we lost our father (may soul rest in peace) as a result of what the Doctor called cardiac arrest. As we were coming into this country, we had some documents of a deposit of $ 28,500.000.00 USD (Twenty Eight million Five hundred thousand USD) made by my late father in a security and trust company, according to the note we found in our father's brief case, he intended to use this fund for his international business transaction after his tenure in office but was unfortunately murdered. We have located the security company where the money is deposited with the help of an attorney and established ownership having been told that the consignment is been held at their headquater in Europe for security reasons. Though, our father did not declare the deposit as real cash rather as family treasures/valuables Worth US$28.5M. ! ; Please considering the bitter experiences we had in our country and the war still going on especially in diamond area which incidentally is where we came from plus the incessant political upheavals and hostilities in this country Zimbabwe, we desire seriously to leave here and live the rest of our life into a more peaceful and politically stable country like yours hence this proposal and request is made to you. I therefore on behalf on my only brother seek your kind assistance towards helping us to claim the money from where is deposited. My attorney will work out a change of ownership to your name so that you will be legally empowered to represent me claim the money from the company. After the conclusion of the transaction, you will help us to invest the money into a lucrative business and also assist my brother get a college admission to further his education. Please I know that this letter may sound strange and incredible to you but the CNN and the BBC African bulletin normally have it as their major news features. Therefore for the sake of God and humanity kindly give an immediate and positive consideration. I will willingly agree to any suitable percentage of the money you will propose as your compensation for your assistance with regards to the above .please in view of our sensitive refugee status and as we are still conscious of our father's enemies, I would like you to give this a highly confidential approach. I await your response. Miss. Boitumelo Kubu
Received: by 10.194.77.6 with SMTP id o6csp428318wjw;
Sat, 8 Dec 2012 05:23:11 -0800 (PST)
Received: by 10.204.148.22 with SMTP id n22mr2875563bkv.6.1354972991201;
Sat, 08 Dec 2012 05:23:11 -0800 (PST)
Return-Path: <[email protected]>
Received: from asmtp02.www1.dk (asmtp02.www1.dk. [91.144.243.216])
by mx.google.com with ESMTPS id ia12si19857616bkc.11.2012.12.08.05.23.10
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 08 Dec 2012 05:23:11 -0800 (PST)
Received-SPF: neutral (google.com: 91.144.243.216 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=91.144.243.216;
Authentication-Results: mx.google.com; spf=neutral (google.com: 91.144.243.216 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: from [91.144.243.214] (helo=asmtp.www1.dk)
by asmtp02.www1.dk with esmtp (Exim 4.80 (FreeBSD))
(envelope-from <[email protected]>)
id 1ThKN4-000JHK-3r
for [my.redacted.address]; Sat, 08 Dec 2012 14:23:10 +0100
Received: from mailnull by asmtp.www1.dk with sa-bad (Exim 4.80 (FreeBSD))
(envelope-from <[email protected]>)
id 1ThKN2-000IY3-Sy
for [my.redacted.address]; Sat, 08 Dec 2012 14:23:09 +0100
Received: from [31.193.237.146] (helo=cp4.danhost.dk)
by asmtp.www1.dk with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80 (FreeBSD))
(envelope-from <[email protected]>)
id 1ThKN2-000ITo-8D
for [my.redacted.address]; Sat, 08 Dec 2012 14:23:08 +0100
Received: from dan17381 by cp4.danhost.dk with local (Exim 4.77 (FreeBSD))
(envelope-from <[email protected]>)
id 1ThKN1-000Mav-TL
for [my.redacted.address]; Sat, 08 Dec 2012 14:23:07 +0100
To: [redacted]
Subject: URGENT AND CONFIDENTIAL!!!
X-PHP-Script: www.broenderslev-mfk.dk/images/stories/mailer1.php for 184.170.142.207
From: Botiumelo Kubu <[email protected]>
Reply-To: [email protected]
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sat, 08 Dec 2012 14:23:07 +0100
X-Spam-Status: Yes, score=41.8
X-Spam-Score: 418
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "sa01.danhost.dk", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
The administrator of that system for details.
Content preview: Dearest One, I know that this proposal will come to you as
a big surprise considering the fact that we have not had any formal acquaintance
before or met in person but all the same I want you for the sake of God to
give this an immediate attention in view of the fact that the security of
life and possession is at stake. I am Miss. Boitumelo Kubu a 24 years old
girl from war ravaged SIERRA LEONE but presently leaving in Zimbabwe with
my brother David who is 16 years old. My father Dr.John Muluzu kubu who before
his untimely assassination by the rebels was the Director of SIERRA LEONE
Diamond corporation (SLDC).He was killed in our government residential house
along side two of my other brothers, two house maids and security aid, fortunately
for me and my younger brother including our mother we were on a weekend visit
to our home town. A as we got the news of the tragedy, we immediately managed
to ran! into neighboring country Zimbabwe for refuge. In the same vain, as
Faith would have it we lost our dear mother after a month we lost our father
(may soul rest in peace) as a result of what the Doctor called cardiac arrest.
As we were coming into this country, we had some documents of a deposit of
$ 28,500.000.00 USD (Twenty Eight million Five hundred thousand USD) made
by my late father in a security and trust company, according to the note
we found in our father's brief case, he intended to use this fund for his
international business transaction after his tenure in office but was unfortunately
murdered. We have located the security company where the money is deposited
with the help of an attorney and established ownership having been told that
the consignment is been held at their headquater in Europe for security reasons.
Though, our father did not declare the deposit as real cash rather as family
treasures/valuables Worth US$28.5M. ! ; Please considering the bitter experiences
we had in our country and the war still going on especially in diamond area
which incidentally is where we came from plus the incessant [...]
Content analysis details: (41.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(boitumelokubu[at]yahoo.com)
0.5 SUBJ_ALL_CAPS Subject is all capitals
2.4 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.8 URG_BIZ BODY: Contains urgent matter
3.8 MILLION_USD BODY: Talks about millions of dollars
0.4 HK_SCAM_N8 BODY: HK_SCAM_N8
2.6 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.6 HK_SCAM_S7 BODY: HK_SCAM_S7
0.0 HTML_MESSAGE BODY: HTML included in message
2.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.6 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.9 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.6 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
2.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
4.1 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
Dearest One, I know that this proposal will come to you as a big surprise considering the fact that we have not had any formal acquaintance before or met in person but all the same I want you for the sake of God to give this an immediate attention in view of the fact that the security of life and possession is at stake. I am Miss. Boitumelo Kubu a 24 years old girl from war ravaged SIERRA LEONE but presently leaving in Zimbabwe with my brother David who is 16 years old. My father Dr.John Muluzu kubu who before his untimely assassination by the rebels was the Director of SIERRA LEONE Diamond corporation (SLDC).He was killed in our government residential house along side two of my other brothers, two house maids and security aid, fortunately for me and my younger brother including our mother we were on a weekend visit to our home town. A as we got the news of the tragedy, we immediately managed to ran! into neighboring country Zimbabwe for refuge. In the same vain, as Faith would have it we lost our dear mother after a month we lost our father (may soul rest in peace) as a result of what the Doctor called cardiac arrest. As we were coming into this country, we had some documents of a deposit of $ 28,500.000.00 USD (Twenty Eight million Five hundred thousand USD) made by my late father in a security and trust company, according to the note we found in our father's brief case, he intended to use this fund for his international business transaction after his tenure in office but was unfortunately murdered. We have located the security company where the money is deposited with the help of an attorney and established ownership having been told that the consignment is been held at their headquater in Europe for security reasons. Though, our father did not declare the deposit as real cash rather as family treasures/valuables Worth US$28.5M. ! ; Please considering the bitter experiences we had in our country and the war still going on especially in diamond area which incidentally is where we came from plus the incessant political upheavals and hostilities in this country Zimbabwe, we desire seriously to leave here and live the rest of our life into a more peaceful and politically stable country like yours hence this proposal and request is made to you. I therefore on behalf on my only brother seek your kind assistance towards helping us to claim the money from where is deposited. My attorney will work out a change of ownership to your name so that you will be legally empowered to represent me claim the money from the company. After the conclusion of the transaction, you will help us to invest the money into a lucrative business and also assist my brother get a college admission to further his education. Please I know that this letter may sound strange and incredible to you but the CNN and the BBC African bulletin normally have it as their major news features. Therefore for the sake of God and humanity kindly give an immediate and positive consideration. I will willingly agree to any suitable percentage of the money you will propose as your compensation for your assistance with regards to the above .please in view of our sensitive refugee status and as we are still conscious of our father's enemies, I would like you to give this a highly confidential approach. I await your response. Miss. Boitumelo Kubu