by buried under 419s
Wed Jul 02, 2014 4:01 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 02 Jul 2014 10:34:52 -0700
Received: from mail.centurylink.net ([205.219.233.9]:37499 helo=smtp.centurylink.net)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1X2OQg-0002xz-Dn
for ; Wed, 02 Jul 2014 10:34:52 -0700
DKIM-Signature: v=1; a=rsa-sha1; d=embarqmail.com; s=ctl201402; c=relaxed/simple;
q=dns/txt; [email protected]; t=1404322479;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=IvheZpOOyJF4LRfCQkcLjdbOc7Y=;
b=GCwsaTNm56jBepAXnrq0X4MVfiB/j+ATZNCqoqPU6L4I/+xErhRjrY7kuvKIwl1F
tIvAAE7nArju81sSq8jEMETZeZqodS5DwsSFA//x9tEdC/W9P+xAMu58KOB/r3nx
wg0wNO1iGlxwufprgvowY0XkMhsdk3adWfWxDUHnWxiy/X3H/Et9nICcsVGpQ2Qc
3D/w1/4DnO6LIwDmmxNfFRPc7/MHRpHn81mmfZlk1i1swwTpvIGG6jYpluc50pYs
1ZZfbKA0W+Jz8eA1vijbO3aW/R9AREptkjTSbErTzNZOZjLD9pqdlTrfsNxBLzI+
BfGLLRw9jFwws5JWziljSg==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.0 cv=f+LK9ZOM c=1 sm=1 a=9cW_t1CCXrUA:10 a=FKkrIqjQGGEA:10 a=1poGYrevpj8A:10 a=yyGz64G-kOMA:10 a=1oqGTYSLAAAA:8 a=gv4l6aEeuxxzeCLns_sA:9 a=QEXdDO2ut3YA:10 a=_W_S_7VecoQA:10 a=ZQsVYYh7dxUA:10 a=i4PDXFCCRecA:10 a=Z0vwQnTE3ZwA:10 a=1KfTNYgU3JyP_6FC4JoA:9 a=diV1Cm6KfS4A:10 a=1jTt-bcSpqgA:10 a=PIGhYTNJKqrrMJ2L:21 a=VkYt85h_JFO0GlIy:21 a=UDo720tNcInnqUF9S9yrCA==:117
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: bG9ja2VzQGVtYmFycW1haWwuY29t
Authentication-Results: smtp03.agate.dfw.synacor.com [email protected]; sender-id=neutral
Authentication-Results: smtp03.agate.dfw.synacor.com [email protected]; spf=neutral; sender-id=neutral
Received-SPF: neutral (smtp03.agate.dfw.synacor.com: 10.40.66.4 is neither permitted nor denied by domain of embarqmail.com)
Received: from [10.40.66.4] ([10.40.66.4:54074] helo=md29.agate.dfw.synacor.com)
by smtp.centurylink.net (envelope-from <[email protected]>)
(ecelerity 3.5.1.37854 r(Momo-dev:3.5.1.0)) with ESMTP
id DC/A6-22911-79244B35; Wed, 02 Jul 2014 13:34:33 -0400
Date: Wed, 2 Jul 2014 13:34:15 -0400 (EDT)
From: Pt <[email protected]>
Reply-To: Pt <[email protected]>
Message-ID: <[email protected]>
In-Reply-To: <[email protected]>
Subject: THANKS
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_15673747_1600489300.1404322455665"
X-Originating-IP: [10.40.0.33]
X-Mailer: Zimbra 7.2.2_GA_2852 (ZimbraWebClient - GC34 (Win)/7.2.2_GA_2852)
X-Spam-Status: No, score=5.0
X-Spam-Score: 50
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (5.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[205.219.233.9 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8822]
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
X-Spam-Flag: NO
------=_Part_15673747_1600489300.1404322455665
Content-Type: multipart/alternative;
boundary="----=_Part_15673748_43502778.1404322455665"
[ IRREVOCABLE PAYMENT NOTICE LETTER.doc ]
UNITED NATIONS ORGANIZATION
PALAIS DES NATIONS, 1211 GENEVA 10,
SWITZERLAND.
Dear Email Owner/Fund Beneficiary,
IRREVOCABLE PAYMENT ORDER VIA ATM CARD
We have actually been authorized by the newly appointed United Nation secretary general, and the governing body of the UNITED NATIONS Monetary Unit, to investigate the unnecessary delay on your payment, recommended and approved in your favor. During the course of our investigation, we discovered with dismay that your payment has been unnecessarily Delayed by corrupt officials of the Bank who are Trying to divert your funds into their private accounts.
To forestall this, security for your funds was organized in the form of your personal Identification number (PIN) ATM CARD and this will enable only you to have direct Control over your funds in the ATM CARD. We will monitor this payment ourselves to avoid the hopeless situation created by the Officials of the bank.
An irrevocable payment guarantee has been issued by the World Bank Group and the International Monetary Fund (IMF) on your Payment. However, we are happy to inform you that based on our recommendation/Instructions; your complete Inheritance funds have been credited in your favor through ATM VISA CARD.
You are therefore advice to contact:
Dr.Brian Robertson
Director ATM Payment Department
(HSBC Bank Plc United Kingdom)
Email Address: [email protected]
Direct Office lines: +44-741-847-8591
Fax Number: +44-844-774-4980
Contact him now for the delivery of your ATM Card. As soon as you establish a contact with him, an ATM card will be issued to you immediately which you can use to withdraw your funds in any Bank ATM Machine in your Country, but the maximum is $5000 per day. So if you like to receive your funds through this means you're advised to contact (Dr.Brian Robertson) with the following information as stated below:
1. Your Full Name:
2. Address Where You Want the Courier Company to Send Your ATM Card
To or (P.O Box)
3. Your Age:
4. Occupation:
5. Telephone Numbers:
6. Country:
NOTE: You are advised to furnish Dr. Brian Robertson with your correct and valid details. Also be informed that the amount to be paid to you is £1,000,000,00GBP. We expect your urgent response to this email to enable us monitor this payment effectively thereby making contact with DR .BRIAN ROBERTSON as directed to avoid further delay.
Congratulations.
MR. KASSYM-JOMART TOKAYEV
DIRECTOR-GENERAL
UNITED NATIONS ORGANIZATION
Envelope-to:
Delivery-date: Wed, 02 Jul 2014 10:34:52 -0700
Received: from mail.centurylink.net ([205.219.233.9]:37499 helo=smtp.centurylink.net)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1X2OQg-0002xz-Dn
for ; Wed, 02 Jul 2014 10:34:52 -0700
DKIM-Signature: v=1; a=rsa-sha1; d=embarqmail.com; s=ctl201402; c=relaxed/simple;
q=dns/txt; [email protected]; t=1404322479;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=IvheZpOOyJF4LRfCQkcLjdbOc7Y=;
b=GCwsaTNm56jBepAXnrq0X4MVfiB/j+ATZNCqoqPU6L4I/+xErhRjrY7kuvKIwl1F
tIvAAE7nArju81sSq8jEMETZeZqodS5DwsSFA//x9tEdC/W9P+xAMu58KOB/r3nx
wg0wNO1iGlxwufprgvowY0XkMhsdk3adWfWxDUHnWxiy/X3H/Et9nICcsVGpQ2Qc
3D/w1/4DnO6LIwDmmxNfFRPc7/MHRpHn81mmfZlk1i1swwTpvIGG6jYpluc50pYs
1ZZfbKA0W+Jz8eA1vijbO3aW/R9AREptkjTSbErTzNZOZjLD9pqdlTrfsNxBLzI+
BfGLLRw9jFwws5JWziljSg==;
X_CMAE_Category: , ,
X-CNFS-Analysis: v=2.0 cv=f+LK9ZOM c=1 sm=1 a=9cW_t1CCXrUA:10 a=FKkrIqjQGGEA:10 a=1poGYrevpj8A:10 a=yyGz64G-kOMA:10 a=1oqGTYSLAAAA:8 a=gv4l6aEeuxxzeCLns_sA:9 a=QEXdDO2ut3YA:10 a=_W_S_7VecoQA:10 a=ZQsVYYh7dxUA:10 a=i4PDXFCCRecA:10 a=Z0vwQnTE3ZwA:10 a=1KfTNYgU3JyP_6FC4JoA:9 a=diV1Cm6KfS4A:10 a=1jTt-bcSpqgA:10 a=PIGhYTNJKqrrMJ2L:21 a=VkYt85h_JFO0GlIy:21 a=UDo720tNcInnqUF9S9yrCA==:117
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
X-Authed-Username: bG9ja2VzQGVtYmFycW1haWwuY29t
Authentication-Results: smtp03.agate.dfw.synacor.com [email protected]; sender-id=neutral
Authentication-Results: smtp03.agate.dfw.synacor.com [email protected]; spf=neutral; sender-id=neutral
Received-SPF: neutral (smtp03.agate.dfw.synacor.com: 10.40.66.4 is neither permitted nor denied by domain of embarqmail.com)
Received: from [10.40.66.4] ([10.40.66.4:54074] helo=md29.agate.dfw.synacor.com)
by smtp.centurylink.net (envelope-from <[email protected]>)
(ecelerity 3.5.1.37854 r(Momo-dev:3.5.1.0)) with ESMTP
id DC/A6-22911-79244B35; Wed, 02 Jul 2014 13:34:33 -0400
Date: Wed, 2 Jul 2014 13:34:15 -0400 (EDT)
From: Pt <[email protected]>
Reply-To: Pt <[email protected]>
Message-ID: <[email protected]>
In-Reply-To: <[email protected]>
Subject: THANKS
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_15673747_1600489300.1404322455665"
X-Originating-IP: [10.40.0.33]
X-Mailer: Zimbra 7.2.2_GA_2852 (ZimbraWebClient - GC34 (Win)/7.2.2_GA_2852)
X-Spam-Status: No, score=5.0
X-Spam-Score: 50
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (5.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[205.219.233.9 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 MISSING_HEADERS Missing To: header
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8822]
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
X-Spam-Flag: NO
------=_Part_15673747_1600489300.1404322455665
Content-Type: multipart/alternative;
boundary="----=_Part_15673748_43502778.1404322455665"
[ IRREVOCABLE PAYMENT NOTICE LETTER.doc ]
UNITED NATIONS ORGANIZATION
PALAIS DES NATIONS, 1211 GENEVA 10,
SWITZERLAND.
Dear Email Owner/Fund Beneficiary,
IRREVOCABLE PAYMENT ORDER VIA ATM CARD
We have actually been authorized by the newly appointed United Nation secretary general, and the governing body of the UNITED NATIONS Monetary Unit, to investigate the unnecessary delay on your payment, recommended and approved in your favor. During the course of our investigation, we discovered with dismay that your payment has been unnecessarily Delayed by corrupt officials of the Bank who are Trying to divert your funds into their private accounts.
To forestall this, security for your funds was organized in the form of your personal Identification number (PIN) ATM CARD and this will enable only you to have direct Control over your funds in the ATM CARD. We will monitor this payment ourselves to avoid the hopeless situation created by the Officials of the bank.
An irrevocable payment guarantee has been issued by the World Bank Group and the International Monetary Fund (IMF) on your Payment. However, we are happy to inform you that based on our recommendation/Instructions; your complete Inheritance funds have been credited in your favor through ATM VISA CARD.
You are therefore advice to contact:
Dr.Brian Robertson
Director ATM Payment Department
(HSBC Bank Plc United Kingdom)
Email Address: [email protected]
Direct Office lines: +44-741-847-8591
Fax Number: +44-844-774-4980
Contact him now for the delivery of your ATM Card. As soon as you establish a contact with him, an ATM card will be issued to you immediately which you can use to withdraw your funds in any Bank ATM Machine in your Country, but the maximum is $5000 per day. So if you like to receive your funds through this means you're advised to contact (Dr.Brian Robertson) with the following information as stated below:
1. Your Full Name:
2. Address Where You Want the Courier Company to Send Your ATM Card
To or (P.O Box)
3. Your Age:
4. Occupation:
5. Telephone Numbers:
6. Country:
NOTE: You are advised to furnish Dr. Brian Robertson with your correct and valid details. Also be informed that the amount to be paid to you is £1,000,000,00GBP. We expect your urgent response to this email to enable us monitor this payment effectively thereby making contact with DR .BRIAN ROBERTSON as directed to avoid further delay.
Congratulations.
MR. KASSYM-JOMART TOKAYEV
DIRECTOR-GENERAL
UNITED NATIONS ORGANIZATION
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces