Offer to become Trustee for 8 Million Dollar

Received: by 10.220.153.143 with SMTP id k15cs89215vcw;
        Tue, 27 Sep 2011 16:56:20 -0700 (PDT)
Received: by 10.229.79.5 with SMTP id n5mr6330652qck.275.1317167779521;
        Tue, 27 Sep 2011 16:56:19 -0700 (PDT)
Return-Path: <m.cavazzini @ delmarvacom.com>
Received: from msmail.mediaspa.net (msmail.mediaspa.net. [216.105.120.144])
        by mx.google.com with ESMTP id l5si5979172qcw.24.2011.09.27.16.56.09;
        Tue, 27 Sep 2011 16:56:19 -0700 (PDT)
Received-SPF: neutral (google.com: 216.105.120.144 is neither permitted nor denied by best guess record for domain of m.cavazzini @ delmarvacom.com) client-ip=216.105.120.144;

Something unnecessary was here.

Received: from User ([72.149.157.234]) by mediaspa.net with MailEnable ESMTP; Tue, 27 Sep 2011 13:28:12 -0400

Reply-To: <patreynolds11 @ w.cn>

From: "Patrick Reynolds"<m.cavazzini @ delmarvacom.com>

Subject: Associate Request

Date: Tue, 27 Sep 2011 12:28:14 -0500
MIME-Version: 1.0
Content-Type: text/html;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <4CD85666B3964F568E93758CC923FAAC.MAI @ mediaspa.net>
X-ME-Bayesian: 0.000000

Attn:
Confident this letter meets you in good health.

I am Patrick Reynolds; an underwriter with BSN Venture Capital Fund Management Co Malaysia; that specializes in private equity and property equity investment.

Have contacted you on the hope of presenting you as my associate to assume the new recipient of a Fixed-Income deposit valued at $40,000,000.00 .

You get 20% of the total $40,000,000.00 equity investment as your commission for acting as my TRUSTEE.

Will need your legal details; names, address and phone numbers to enable me re-profile your details on the $40million with the institution where the funds is presently domile as the new recipient.

Note that time is of the essence since the fixed-income deposit has to be cleared before the ending of this third quarter of the financial fiscal year 2011

I will enumerate further upon your response.

Patrick Reynolds.
patreynolds11 @ w.cn

I can earn $8,000,000 (20% of $40,000,000) for just becoming a Trustee   ;-)
But I can't trust on this e-mail.

My e-mail id has won J500,000.00 GBP in BBC National Lottery

Received: by 10.220.141.9 with SMTP id k9cs22735vcu;
        Sat, 24 Sep 2011 08:43:53 -0700 (PDT)
Received: by 10.223.29.21 with SMTP id o21mr7225855fac.4.1316879032941;
        Sat, 24 Sep 2011 08:43:52 -0700 (PDT)
Return-Path: <noticemail9 @ yahoo.com.au>
Received: from fep13.mx.upcmail.net (fep13.mx.upcmail.net. [62.179.121.33])
        by mx.google.com with ESMTP id y6si508398fal.38.2011.09.24.08.43.50;
        Sat, 24 Sep 2011 08:43:52 -0700 (PDT)
Received-SPF: neutral (google.com: 62.179.121.33 is neither permitted nor denied by best guess record for domain of noticemail9 @ yahoo.com.au) client-ip=62.179.121.33;
Authentication-Results: mx.google.com; spf=neutral (google.com: 62.179.121.33 is neither permitted nor denied by best guess record for domain of noticemail9 @ yahoo.com.au) smtp.mail=noticemail9 @ yahoo.com.au
Received: from edge03.upcmail.net ([192.168.13.238])
        by viefep13-int.chello.at
        (InterMail vM.8.01.02.02 201-2260-120-106-20100312) with ESMTP
        id <20110924154350.DXI1686.viefep13-int.chello.at @ edge03.upcmail.net>;
        Sat, 24 Sep 2011 17:43:50 +0200
Received: from User ([116.203.51.21])
        by edge03.upcmail.net with edge
        id cfjV1h00l0TSpzG03fjY9r; Sat, 24 Sep 2011 17:43:50 +0200
X-SourceIP: 116.203.51.21
X-Authenticated-Sender: nvanderham @ upcmail.nl

Reply-To: <claims_payout1 @ 9.cn>

From: "BBC NATIONAL LOTTERY"<noticemail9 @ yahoo.com.au>

Subject: Contact: Mr. Desmond River.

Date: Sat, 24 Sep 2011 21:13:25 +0530
MIME-Version: 1.0
Content-Type: text/plain;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20110924154350.DXI1686.viefep13-int.chello.at @ edge03.upcmail.net>

Something unnecessary was here.

Wednesday September 21st
Draw No. 1643

It's been notified by our organization that your e-mail ID won the sum of
J500,000.00 GBP, in the BBC NATION NATIONAL LOTTERY on
our 2011 charity bonanza.
For more information, Contact: Mr. Desmond River.
Tel: with your Name:/Address:/Age:/Sex:/Phone:/Occupation:/Country:

For confirmation of your winning numbers, please ensure you check your
winning details on our site given below: http://www.bbc.co.uk/lottery/
Sincerely,(Web-Email Information Manager)

The web address/URL provided at the bottom of the message seems legitimate and therefore someone may try to contact on the reply-to e-mail address without looking it.
There is nothing like Charity Bonanza on BBC's National Lottery and incorrect words are used in the message text as "BBC NATION NATIONAL LOTTERY". However correct words are used in the subject line of the message.

Sale roots of plants at $300 (Rs ~14,000), having original price of Rs 4,000

X-RocketMail: 00000006;R---S-----------;4494
X-RocketUID: 0000000000
X-RocketYMUMID: AHriimIAAIibTmv8JgdEWWswERY
X-RocketMIF: 1315699750;5184;
X-Apparently-To: nikunj_bhatt_84 @ yahoo.com via 98.138.226.122; Sat, 10 Sep 2011 17:09:10 -0700
X-RocketRCL: 1980;1;937125487;2002
Return-Path: <benson_james2006 @ yahoo.com>
X-RocketTIP: 61.9.168.149 ; NO_TIP_HEADER_ALLOWED ;
X-RocketSRV: s_ip=61.9.168.149;d_t=1315699750;url=yahoo.com,mailto:benson_james2006 @ yahoo.com;Retro=Y;SgrnP=N
X-Rocket-Spam: 61.9.168.149
X-YahooFilteredBulk: 61.9.168.149
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-Rocket-Track: cat=SP; info=rule:SP<id=226>;cconsam:UK;dmcu:UK<token=NO_MATCH>;hfeat:NN;ip:NN<ip=61.9.168.149,policy=n-w0,n100,g0,s>;ipst:GD<ip=61.9.168.149>;ltmsfp:SP<prob=0.998>;cmsgbl:UK<s=23,m=0>;cmsgbk:UK<s=23,m=12>;cmsgob:UK<s=23,m=0>;mip:UK<p=not_run>;cptron:UK<prob=0.76>;phhr:NN<score=6>;ipsp:GD;csubbl:UK;csubbk:UK;turl:UK;url2db:NN<url=yahoo.com>;wlrcpts:UK;sgor:UK;abaca:SP<-982, fh=mta1082; fi=98.139.52.61:14050; MB=0; GT=0; fs=-982; ns=-684; sc=0,0; st=BDSW; id=UpGzwWo1-8A1709Aa; rv=ymaint.3-g767ab14/98.139.52.61:14051; ts=FoaDB; gv=-33; fp=JLt/h; gd=1; ip=61.9.168.149; he=OVtfaaEqUti; ht=1; nr=6; nt=0; ho=PqcwCxEXZvf; hd=Pn67EoFGniL; hf=jfs5kEsRtg; hF=COsQRJ3Sen6; hj=IUjEckcpznb; ZM=PC0T0rXvmfq; ZB=i8ZTi+ls3G; ZB=EiQ1q+h9Sz0; ZB=PNp87FsTUmJ; ZB=HRiN3T1JCfc; ZB=MIm70YOow+K; ZF=FDSxvNakJuM; Zi=CWjYg6XbrrU; sh=1; sv=nikhilsamtani91 @ yahoo.com:-369,niki.wahi @ yahoo.com:-369,nikunj_bhatt_84 @ yahoo.com:-369,nil_rajguru @ yahoo.com:-369,nikhilwilliams @ yahoo.com:-402,nikki.pathak @ yahoo.com:-402;, SRV_OR=1,WS_OR=1,WSS_OR=1,OR=1,AB_WS_IP=0>

Here was encoded text which is not required to show.

X-RocketHELO: nskntmtas05p.mx.bigpond.com
X-RocketMAILFROM: benson_james2006 @ yahoo.com
X-RocketRCPTTO: 0-nikhilsamtani91 @ yahoo.com,0-nikhilwilliams @ yahoo.com,0-niki.wahi @ yahoo.com,0-nikijai @ yahoo.com,0-nikiman_clapher @ yahoo.com,0-nikki.pathak @ yahoo.com,0-nikonele @ yahoo.com,0-nikslover_ferrari @ yahoo.com,0-nikumbhanil @ yahoo.com,0-nikunj_bhatt_84 @ yahoo.com,0-nikunj_bhatt2000 @ yahoo.com,0-nil_rajguru @ yahoo.com
X-RocketMSGID:1315699745.687530.72866 @ mta1082.mail.ac4.yahoo.com#0
X-Originating-IP: [61.9.168.149]
Authentication-Results: mta1082.mail.ac4.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nskntmtas05p.mx.bigpond.com) (61.9.168.149)
        by mta1082.mail.ac4.yahoo.com with SMTP; Sat, 10 Sep 2011 17:09:10 -0700
Received: from nskntotgx04p.mx.bigpond.com ([14.98.163.37])
        by nskntmtas05p.mx.bigpond.com with ESMTP
        id <20110911000905.FBAP23624.nskntmtas05p.mx.bigpond.com @ nskntotgx04p.mx.bigpond.com>;
        Sun, 11 Sep 2011 00:09:05 +0000
Received: from User ([14.98.163.37]) by nskntotgx04p.mx.bigpond.com
        with ESMTP
        id <20110911000904.KTZY1840.nskntotgx04p.mx.bigpond.com @ User>;
        Sun, 11 Sep 2011 00:09:04 +0000

Reply-To: <benson_james2006 @ yahoo.com>

From: "BENSON JAMES"<benson_james2006 @ yahoo.com>

Subject: URGENT RESPOND

Date: Mon, 12 Sep 2011 01:07:51 +0530
MIME-Version: 1.0
Content-Type: text/plain;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Authentication-Info: Submitted using SMTP AUTH LOGIN at nskntotgx04p.mx.bigpond.com from [14.98.163.37] using ID ozzyjim @ bigpond.net.au at Sun, 11 Sep 2011 00:08:44 +0000
Message-Id: <20110911000904.KTZY1840.nskntotgx04p.mx.bigpond.com @ User>
Content-Length: 1980

SENDER: DR. Benson James
        PRIVATE -EMAIL: benson_james2006 @ yahoo.com

        SUBJECT: URGENT RESPONSE.

        Attention: Sir,

        Compliment of the season to you over there, how are you and your family, hope every one of your family are living fine. If so Glory is to Almighty God.

        I got your contact through (Chamber and commerce) in your country as well reliable, responsible and trustworthiness; I humble introduce myself to you. I am Dr.Benson James happy married with three children, am working with (AIRMID PHARMA LABORATORY COMPANY, LONDON) my company use to send me down to your country in India as delegate who will come and purchase the root that will use to dilute with some other medicine before supply to refuge camp throughout the world under the habilitation of (UNITED NATION WORLD WIDE)


        They are not nominating me again as delegate who will come down to India and purchase the root for our company, I am now promoted to deputy director in my company that is why am not being imposition of delegate again. When I bought this root from the local seller in India at the rate of 4,000 India rupees, I will now sell to my company at the rate of $300 United State Dollars

        Due to my promotion as deputy director in my company. I will not be coming to India as delegate any more, and I don't want my other colleagues to know the real price that am purchasing the root in your country in India, if they were know the real price, they will surely report to my director and I will be query and sack by our director authority. That is the reason why I quickly contact you, so that you can finance the business in your country and send my own share to me as well trusted, reliable and honest someone. If you assure that you are capable to handle this supply by finance in your country, do not hesitate to reply me very urgent.

        Extend my greeting to your family.

        Dr. Benson James
        Private email: benson_james2006 @ yahoo.com
        FORMAL DELEGATE

I think, Dr Benson is dealing with some illegal drugs and he wants me to deliver those drugs to him ;-)
This e-mail is not asking any details about me, but I am sure that if I reply to this e-mail, the next e-mail will ask those details. I had tried this previously. The sender is at-least aware that I am living in India.
There are other recipients too, but those e-mail addresses could be fake; and if they are real, it means I am not the only target and available in "Chamber and Commerce" (it should be Chamber of Commerce) as well reliable, responsible and trustworthy person/firm.
There are many grammatical errors in this e-mail.

The Federal Ministry of Finance is giving me $5000 per day

Received: by 10.220.83.210 with SMTP id g18cs12698vcl;
        Thu, 15 Sep 2011 07:50:30 -0700 (PDT)
Received: by 10.42.161.3 with SMTP id r3mr1338879icx.186.1316098229389;
        Thu, 15 Sep 2011 07:50:29 -0700 (PDT)
Return-Path: <cforeign @ accountant.com>
Received: from nm4-vm0.bullet.mail.in.yahoo.com (nm4-vm0.bullet.mail.in.yahoo.com. [121.101.151.213])
        by mx.google.com with SMTP id v3si3326622icz.42.2011.09.15.07.50.28;
        Thu, 15 Sep 2011 07:50:29 -0700 (PDT)
Received-SPF: neutral (google.com: 121.101.151.213 is neither permitted nor denied by best guess record for domain of cforeign @ accountant.com) client-ip=121.101.151.213;
Authentication-Results: mx.google.com; spf=neutral (google.com: 121.101.151.213 is neither permitted nor denied by best guess record for domain of cforeign @ accountant.com) smtp.mail=cforeign @ accountant.com; dkim=pass (test mode) header.i= @ yahoo.com
Received: from [121.101.151.236] by nm4.bullet.mail.in.yahoo.com with NNFMP; 15 Sep 2011 14:52:57 -0000
Received: from [121.101.151.234] by tm1.bullet.mail.in.yahoo.com with NNFMP; 15 Sep 2011 14:52:12 -0000
Received: from [127.0.0.1] by omp1003.mail.in.yahoo.com with NNFMP; 15 Sep 2011 14:50:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 440964.49273.bm @ omp1003.mail.in.yahoo.com
Received: (qmail 50373 invoked by uid 60001); 15 Sep 2011 14:50:25 -0000

Here was encoded text which is not required to show.

Received: from [41.203.232.193] by web137617.mail.in.yahoo.com via HTTP; Thu, 15 Sep 2011 20:20:21 IST
X-RocketYMMF: vinhciu
X-Mailer: YahooMailClassic/14.0.5 YahooMailWebService/0.8.113.315625
Message-ID: <1316098221.14032.YahooMailClassic @ web137617.mail.in.yahoo.com>
Date: Thu, 15 Sep 2011 20:20:21 +0530 (IST)

From: Eco Bank Burkina-Faso <cforeign @ accountant.com>

Reply-To: cforeign @ accountant.com

Subject: Menssage from the Eco Bank Ltd,

To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Attention Customer,

There is an issue involving $900,000 USD which was called to Our Bank(Eco Bank) from THE FEDERAL MINISTRY OF FINANCE concerning your compensation of $900,000.00 USD has been forwarded to Western Union Money Transfer and An instruction has come directly from Mr.Jona Akim of Ministry Of Finance.

He asked us to start sending your fund installmentally $5000 per a day through western union money transfer.This type of transfer means you will be recieving $5000 every day through western union until the total of $900,000 USD is completely transfered to you.

Today,our bank has effected your first payment of $5000 through western union.
Now you have to Contact Rev Paul O.Sawadogo on his contact below as he is the person incharge of your payment.

The Western union Agent is:
Name: Rev Paul O.Sawadogo
Email:unite @ fastservice.com
Tel 00226 73 96 68 21,

Money sent Through Peter Joe, amount sent $5,000.00 to you today. So contact Rev Paul O.Sawadogo on above email address and tell him to give you needed information and also for him to help you pick the $5,000.00.

Recomfirm your address
(1)Your Full name: ................
(2)Your Phone number: ...................
(3)Your Contact address: ..................
(4)Your Country :.......................

Contact Rev Paul O.Sawadogo ASAP on how to get the payment information,

Yours in Service.
Ouagadougou Burkina Faso
Mrs Faith Traore,

This e-mail is a multipart e-mail, one part of plain text (for those e-mail clients which can not render the content in HTML) and other part with HTML formatting. I have removed the HTML part.
There are lots of spelling errors in this e-mail.

Mrs. Aisha Karam is giving me US$ 8.5 Million

Received: by 10.220.193.198 with SMTP id dv6cs133884vcb;
        Mon, 8 Aug 2011 20:40:24 -0700 (PDT)
Received: from mr.google.com ([10.216.184.137])
        by 10.216.184.137 with SMTP id s9mr6902291wem.96.1312861224378 (num_hops = 1);
        Mon, 08 Aug 2011 20:40:24 -0700 (PDT)
Received: by 10.216.184.137 with SMTP id s9mr4882307wem.96.1312861223419;
        Mon, 08 Aug 2011 20:40:23 -0700 (PDT)
Return-Path: <drgreed @ uwclub.net>
Received: from webmail.uwclub.net (mail2.telecomplus.org.uk [80.40.249.18])
        by mx.google.com with ESMTP id h10si5054216wee.98.2011.08.08.20.40.12;
        Mon, 08 Aug 2011 20:40:23 -0700 (PDT)
Received-SPF: neutral (google.com: 80.40.249.18 is neither permitted nor denied by best guess record for domain of drgreed @ uwclub.net) client-ip=80.40.249.18;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.40.249.18 is neither permitted nor denied by best guess record for domain of drgreed @ uwclub.net) smtp.mail=drgreed @ uwclub.net
Message-Id: <4e40ac27.0a4fd80a.50ba.ffff97f9SMTPIN_ADDED @ mx.google.com>
Received: from ppp91-76-85-91.pppoe.mtu-net.ru ([91.76.85.91] helo=User)
        by webmail.uwclub.net with esmtpa (Exim 4.69)
        (envelope-from <drgreed @ uwclub.net>)
        id 1QqXhS-00037z-3t; Mon, 08 Aug 2011 22:49:30 +0100

Reply-To: <mrs.aishakaram @ hotmail.co.uk>

From: "Mrs. Aisha Karam"<drgreed @ uwclub.net>

Subject: Assalam Alaikum..My Beloved

Date: Mon, 8 Aug 2011 14:49:43 -0700
MIME-Version: 1.0
Content-Type: text/plain;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Assalam Alaikum..My Beloved

I am Mrs. Aisha Karam a citizen of Kuwait but currently residing in the United Kingdom. I was married to Late Farooq Karam of blessed memory who was an oil explorer in Kuwait and Angola for twelve years before he died in the year 2000. We were married for twelve years without a child; he died after a brief illness that lasted for only four days. Since his death I too have been battling with both Cancer and fibroid problems. When my late Husband was alive he deposited a substantial amount of money worth US$8.5Million with a bank in the United Kingdom which I inherited after his death.

Recently, my doctor told me that I have only 2 month to live due to my ailment. Having known my condition I decided to donate this fund to either a charity/orphanage home or devoted Allah (God) fearing individual that will utilize this money the way I am going to instruct therein. I want this organization or individual to use this money in all sincerity to fund charity homes (motherless homes), orphanages, and widows. I took this decision because I don't have any child that will inherit this money and my husbands relatives are into radical organization and I don't want a situation where this money will be used in an unholy manner, hence the reasons for this bold decision. Please, pray for me to recover as your prayers will go a long way in uplifting my spirit.

I don't need any telephone communication in this regard because of my health condition which has seriously affected my speech and also because of the presence of my husband's relatives around me always. I don't want them to know about this development. As soon as I receive your reply I shall give you further directives on what to do and how to go about actualizing this project. I will also instruct my lawyer to file an application on your behalf to the bank where the funds were deposited for the transfer of the money to you for this purpose. I want you to always pray for me. Any delay in your reply will give room in sourcing for an organization or a devoted Individual for this same purpose.

Until I hear from you by email; my dreams will rest squarely on your shoulders.

Remain blessed,
Mrs. Aisha Karam.

At the first glance of listing of my spam folder and looked at the subject line, I felt that I have received a love letter ;-)

This is the first phishing email which doesn't contain and spelling or grammatical error, this is strange (and doubtful!!!).

A secret plan to get US$16,500,000 from an account of National Bank of Abu-Dhabi

Received: by 10.220.80.148 with SMTP id t20cs112322vck;
        Fri, 19 Aug 2011 17:13:16 -0700 (PDT)
Received: by 10.52.21.104 with SMTP id u8mr304114vde.409.1313799195469;
        Fri, 19 Aug 2011 17:13:15 -0700 (PDT)
Return-Path: <amalalhammadi7 @ gmail.com>
Received: from jason-vz1.ampledns.com ([216.246.30.179])
        by mx.google.com with ESMTPS id jf2si8543144vdb.113.2011.08.19.17.13.12
        (version=TLSv1/SSLv3 cipher=OTHER);
        Fri, 19 Aug 2011 17:13:15 -0700 (PDT)
Received-SPF: neutral (google.com: 216.246.30.179 is neither permitted nor denied by domain of amalalhammadi7 @ gmail.com) client-ip=216.246.30.179;
Authentication-Results: mx.google.com; spf=neutral (google.com: 216.246.30.179 is neither permitted nor denied by domain of amalalhammadi7 @ gmail.com) smtp.mail=amalalhammadi7 @ gmail.com
Message-Id: <4e4efc1b.6272340a.7751.0efbSMTPIN_ADDED @ mx.google.com>
Received: from 173-22-63-177.client.mchsi.com ([173.22.63.177]:1572 helo=User)
        by jason-vz1.ampledns.com with esmtpa (Exim 4.69)
        (envelope-from <amalalhammadi7 @ gmail.com>)
        id 1QuZBP-0008Sg-FP; Sat, 20 Aug 2011 02:13:04 +0200

Reply-To: <mr.amalalhammadi40 @ hotmail.com>

From: "Mr.Amal Al Hammadi"<amalalhammadi7 @ gmail.com>

Subject: GET BACK TO ME

Date: Sat, 20 Aug 2011 04:12:39 +0400
MIME-Version: 1.0
Content-Type: text/plain;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - jason-vz1.ampledns.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Source:
X-Source-Args:
X-Source-Dir:

From: Mr.Amal Al Hammadi
MANAGER National Bank of Abu-Dhabi
Government Complex Branch (Delma)In Tamm Center.
P.O.BOX 50670 Abu-Dhabi,
U.A.E.

Dear Friend,

This letter must come to you as a surprise, but I believe it is only a day that people meet and become great friends and business partners. I am pleased to get across to you for a very urgent and profitable business proposal; I got your e-mail address through an internet yellow page web directory and decided to contact you and ask for your assistance in this urgent matter, requiring trust and confidentiality, I am Mr.Amal Al Hamadi, the Branch manager, National Bank of Abu-Dhabi Government Complex Branch (Delma)In Tamm Center. Abu-Dhabi (U.A.E) United Arab Emirates, married with four children. I am writing this letter to ask for your support and co-operation to carry out this business opportunity in my department, On June 6, 1999, an America Oil consultant/contractor with Petroleum Corporation, Mr. Elsayed Agwah, made a numbered time (fixed) deposit for twelve calendar months, Valued at US$16,500,000.00(sixhteen Million Five Hundred Thousand Dollars )in my branch upon maturity. I sent a routine notif

http://www.cbsnews.com/stories/1999/11/01/iran/main49778.shtml
http://www.cbsnews.com/stories/1999/11/01/iran/main49778.shtml

Most astonishing of my discovery was that, all records bear no next of kin, meaning no member of Mr.Elsayed Agwah family knows about the deposit therefore ,no member of his family will ever come forward to claim the money, In order for the bank not to transfer the said sum of sixteen Million, Five Hundred Thousand Dollars ($18,500,000.00) as unclaimed funds to the emirates treasury account, the above stated funds most be claimed immediately by somebody standing in as late Mr.Elsayed Agwah, Next of Kin, because According to (UNITED ARAB EMIRATES LAW), at the expiration of (eleven) years; the money will revert to the ownership of the (UNITED ARAB EMIRATES) Government if nobody applies to claim the fund, This revelation is only known to me because I was his personal account officer before I was posted to become the branch manager , now I seek your collaboration to act as next of kin to late Mr.Elsayed Agwah to claim the funds and move them into useful investments, we shall split the cash between our

to my private email : mr.amalalhammadi31 @ hotmail.com

1) Your direct mobile/number...............
(2) Your Full name..........................................
(3) Country resident address.................................
(4) Your private E-mail box..............................
(5) Company name and position.............................
Then I shall furnish you with due process of concluding this transaction without any delay.

Kindly reply me with this email:
Regards
Mr.Amal Al Hammadi

Nothing to say about this email. It's a very looooooooooooooooooong story.... ;-)

Completing my payment transaction of 50,500,000 or 10,500,000 USD or Pound???

Received: by 10.220.149.200 with SMTP id u8cs792vcv;
        Tue, 23 Aug 2011 20:57:25 -0700 (PDT)
Received: by 10.216.154.145 with SMTP id h17mr119548wek.39.1314158231623;
        Tue, 23 Aug 2011 20:57:11 -0700 (PDT)
Return-Path: <fredallibone @ pemail.co.za>
Received: from dns2.everywhere.co.za (dns2.everywhere.co.za [41.193.54.12])
        by mx.google.com with ESMTPS id u9si1470384wec.115.2011.08.23.20.42.18
        (version=TLSv1/SSLv3 cipher=OTHER);
        Tue, 23 Aug 2011 20:57:11 -0700 (PDT)
Received-SPF: neutral (google.com: 41.193.54.12 is neither permitted nor denied by best guess record for domain of fredallibone @ pemail.co.za) client-ip=41.193.54.12;
Authentication-Results: mx.google.com; spf=neutral (google.com: 41.193.54.12 is neither permitted nor denied by best guess record for domain of fredallibone @ pemail.co.za) smtp.mail=fredallibone @ pemail.co.za
Received: from localhost ([127.0.0.1])
        by dns2.everywhere.co.za (RDP Server 7.0.321/7.0.323 [267.8.16]) with SMTP id HJV97409;
        Wed, 24 Aug 2011 03:49:09 +0200
Date: Wed, 24 Aug 2011 04:49:09 +0300

From: mr.dannygreen @ 3mail.ie

Reply-To: mr.dannygreen @ 3mail.ie

To: hopeorphanagehome @ hotmail.com

Subject: Completing your payment transaction/read details

Message-ID: <03bb19ee86ddf042f6e5819f3f0db65b @ pemail.co.za>
X-Mailer: IceWarp Web Mail 5.6.7
X-Originating-IP: 41.206.15.32
MIME-Version: 1.0
X-Priority: High
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

HSBC BANK LONDON
REF.: FUND RELEASE UPDATE.
VALUED: $50,500,000.00.USD
VIA: ONLINE BANK ACCOUNT.

Dear Beneficiary,

This is to inform you that we have been instructed by the United Nacion organization (UNO), Financial Services Authority (FSA) and British Bankers Association (BBA) to carry out the transfer of your funds valued US$10,500,000.00 (Ten Million Five Hundred Thousand pounds) which was On-Hold in our Bank to any Bank Account of your choice? or via Online Bank Account with our Bank upon your response.

However, you are required to forward you're details including copy of your identification for further verification purpose before final transfer is made to you as instructed.

Officer in Charge:
Name: Mr. Danny Green
Our Branch Online Account Department
Telephone No: +44 703 596 7054
Email: mr.dannygreen @ 3mail.ie

THE REQUIRED DETAILS ARE:-
Name:
Address:
Country:
Tel:
Mobile:

As soon as the above details are received by Ms. Diana Nee the Online Account Officer, she will instruct you further on how to proceed in regards to the release of your funds to you without any further delays.

Looking forward to hearing from you to enable us serve you better.

Yours truly,

Ms. Daina Nee
Operations Manager
HSBC Bank London
WWW.HSBC.COM

At the top of the body of the message, the amount is 50,500,000 USD and at other place, it is US$10,500,000 (but in words, it is Ten Million Five Hundred Thousand pounds!!! If the amount would have been written right, I might apply for it. ;-)
You should also know for general knowledge that UNO has changed its name to : United Nacion organization!!!

Winning Notification from Coca-Cola Company Promotion

Received: by 10.220.149.200 with SMTP id u8cs51832vcv;
        Thu, 25 Aug 2011 02:39:05 -0700 (PDT)
Received: by 10.227.177.133 with SMTP id bi5mr1303274wbb.39.1314265142527;
        Thu, 25 Aug 2011 02:39:02 -0700 (PDT)
Return-Path: <info @ cocacola.com>
Received: from palgdns4.tda.dz (ns4.tda.dz [80.246.0.10])
        by mx.google.com with SMTP id fe9si996216wbb.136.2011.08.25.02.26.34;
        Thu, 25 Aug 2011 02:39:01 -0700 (PDT)
Received-SPF: neutral (google.com: 80.246.0.10 is neither permitted nor denied by best guess record for domain of info @ cocacola.com) client-ip=80.246.0.10;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.246.0.10 is neither permitted nor denied by best guess record for domain of info @ cocacola.com)
smtp.mail=info @ cocacola.com
Received: from mail.m-culture.gov.dz (unknown [127.0.0.1])
        by palgdns4.tda.dz (Postfix) with ESMTP id 4ADC3D0024B;
        Fri, 19 Aug 2011 10:02:20 +0100 (CET)
Received: from 182.62.26.12
        (SquirrelMail authenticated user toualbi)
        by {palgdns4.tda.dz} with HTTP;
        Fri, 19 Aug 2011 10:02:20 +0100 (CET)
Message-ID: <3247.182.62.26.12.1313744540.squirrel @ {palgdns4.tda.dz}>
Date: Fri, 19 Aug 2011 10:02:20 +0100 (CET)

Subject: Winning Notification

From: "COCA COLA COMPANY OFFICIAL PRIZE NOTIFICATION" <info @ cocacola.com>

Reply-To: cocacolaofficialprize @ live.com.my

MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable

Dear e-Mail Winner,

This is to inform you that you have won a prize money of ONE MILLION GREAT
BRITISH POUNDS (1,000,000) for this month Donation promotion which is
organized by COCA\'COLA COMPANY PROMOTION.

THE COCA\'COLA COMPANY PROMOTION, collects all the email addresses of the
people that are active online, among the millions that subscribed to Yahoo
and Hotmail, Gmail, Rediffmail etc. we only select ten people this Month
as our winners through electronic balloting System without the winner
applying,we congratulate you for being one of the people selected. To
begin he processing of your prize you are to contact our fiduaciary claims
department for more infomation as regards procedures to claim your prize.

Mrs. Anne Bank
Email: cocacolaofficialprize @ live.com.my
Tel::(+60)1627-93690

Contact her by sending her with the underlisted informations :

1.Name.2.Address.3.Nationality.4.Age.5.Occupation.6.Phone/Fax.

Yours faithfully,
Charlotte Rogers.

This e-mail also shows that it is from Coca-cola but it is actually from an individual who has an account at the live.com.my, which you can find in the reply-to address and in the body of the e-mail message.

From Coca-Cola Award Claim Department about winning the Online Sweepstakes Promo

Received: by 10.220.191.203 with SMTP id dn11cs50413vcb;
        Tue, 30 Aug 2011 10:04:17 -0700 (PDT)
Received: by 10.91.208.20 with SMTP id k20mr3371982agq.70.1314723855411;
        Tue, 30 Aug 2011 10:04:15 -0700 (PDT)
Return-Path: <info @ cocacola.com>
Received: from cc.ncue.edu.tw (cc.ncue.edu.tw [120.107.179.225])
        by mx.google.com with ESMTP id n38si7784653ani.163.2011.08.30.10.04.14;
        Tue, 30 Aug 2011 10:04:15 -0700 (PDT)
Received-SPF: neutral (google.com: 120.107.179.225 is neither permitted nor denied by best guess record for domain of info @ cocacola.com) client-ip=120.107.179.225;
Authentication-Results: mx.google.com; spf=neutral (google.com: 120.107.179.225 is neither permitted nor denied by best guess record for domain of info @ cocacola.com) smtp.mail=info @ cocacola.com
Received: from cc.ncue.edu.tw (localhost [127.0.0.1])
        by cc.ncue.edu.tw (Postfix) with ESMTP id BE8FA7B27;
Tue, 30 Aug 2011 17:00:22 +0800 (CST)

From: "Coca-Cola Award Claim Department" <info @ cocacola.com>

Reply-To: cocacolaclaim-hq3 @ gncn.net

Subject:

Date: Tue, 30 Aug 2011 17:00:22 +0800
Message-Id: < 20110830090023.M39008 @ cocacola.com >
X-Mailer: Open WebMail
X-OriginatingIP: 116.203.110.88 (antai)
MIME-Version: 1.0
Content-Type: text/plain;
        charset=big5
To: undisclosed-recipients:;

Dear beneficiary, This is to notify you that your Email ID have won One
Million Great British Pounds in the Coca Cola online sweepstakes promo 2011,
for claim respond with your Name, Address, Country, and your Phone number as
soon as possible.

Regards
Coca Cola Online Co-ordinator

Notice that  the Reply-To e-mail address (the domain name gncn.net) is different than the sender's e-mail address. Therefore if the user replies to this e-mail, then it will be sent to a Chinese website gncn.net. However this website is not fraud but it is hacked by the sender of the e-mail.