Spam E-mails

Offer of 30% of 8 Mn from a West African Lady

2011-10-31T04:01:00.000-07:00

Received: by 10.224.67.71 with SMTP id q7cs76757qai;
Tue, 25 Oct 2011 09:48:38 -0700 (PDT)
Received: by 10.151.13.10 with SMTP id q10mr25628288ybi.86.1319561316682;
Tue, 25 Oct 2011 09:48:36 -0700 (PDT)
Return-Path: <aminataabdullah3 @ gmail.com>
Received: from nm3-vm1.bullet.mail.sp2.yahoo.com (nm3-vm1.bullet.mail.sp2.yahoo.com. [98.139.90.231])
by mx.google.com with SMTP id b17si11403889ybc.83.2011.10.25.09.48.36;
Tue, 25 Oct 2011 09:48:36 -0700 (PDT)
Received-SPF: neutral (google.com: 98.139.90.231 is neither permitted nor denied by domain of aminataabdullah3 @ gmail.com) client-ip=98.139.90.231;
Authentication-Results: mx.google.com; spf=neutral (google.com: 98.139.90.231 is neither permitted nor denied by domain of aminataabdullah3 @ gmail.com) smtp.mail=aminataabdullah3 @ gmail.com; dkim=pass (test mode) header.i= @ yahoo.com
Received: from [98.139.91.62] by nm3.bullet.mail.sp2.yahoo.com with NNFMP; 25 Oct 2011 16:48:34 -0000
Received: from [98.139.91.29] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 25 Oct 2011 16:45:51 -0000
Received: from [127.0.0.1] by omp1029.mail.sp2.yahoo.com with NNFMP; 25 Oct 2011 16:45:51 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 431249.28671.bm @ omp1029.mail.sp2.yahoo.com
Received: (qmail 6325 invoked by uid 60001); 25 Oct 2011 16:45:49 -0000

Unnecessary extra content removed

Message-ID: <1319561146.2525.YahooMailClassic @ web190105.mail.sg3.yahoo.com>
Date: Wed, 26 Oct 2011 00:45:46 +0800 (SGT)

From: "Mrs.Aminata Abdullahi" <aminataabdullah3 @ gmail.com>

Reply-To: aminataabdullah3 @ gmail.com

To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

READ AND GET BACK TO ME

I want you to patiently read this offer. I am Mrs.Aminata Abdullahi,the wife to the deceased former Head of Delegation to the World Bank in West Africa. My husband was the linkman between the Organization for Petroleum Exporting Countries - OPEC and the petroleum sector in a West African country. He also attend OPEC meetings constantly in Geneva before his death caused by cardiac arrest in our home town.
Through the sale of our allocated oil quota in OPEC, he was able to make S$8.million.(EIGHT MILLION UNITED STATES DOLLARS)I want you to assist me to claim this money as i cannot claim it directly because he made the deposit as a fund belonging to his business associate in order not to raise eyebrow since he was a civil servant during that time, and the code of conduct bureau forbids him or his wife to acquire such amount of money.
It is on this basis that I am contacting you for assistance, if you will be interested, claim documents will been processed and sent to you. The documents with which the fund is deposited will be amended to reflect you as the beneficiary so that you will be eligible to collect the fund as his business associate.
You shall be entitled to 30% of the total funds while the rest will be given to me on arrival in your country for the up keeping of my only son and for further investment under your kind control there in your country as I can not be able to do any investment here in West Africa due to the origin of the said fund.
I will not fail to bring to your notice that this business is risk free and doesn't have any negative implication. You should not entertain any fear as all modalities for the smooth and easy transfer of this fund have been finalized. If you can conveniently assure me of your ability to keep this business very secret and confidential, you can write back to me for further details.
Expecting your urgent response.
Best regards,
Mrs.Aminata Abdullahi

This e-mail has no subject.
If the fund can not be claimed by you then you can contact someone in your country, why are you contacting someone outside your country?

I have won 800,000 Pounds in BBC ONE National Lottery Saturday Night Draws

2011-10-11T20:43:00.000-07:00

Received: by 10.220.94.4 with SMTP id x4cs12187vcm;
Sat, 8 Oct 2011 07:11:41 -0700 (PDT)
Received: by 10.151.108.17 with SMTP id k17mr1316828ybm.62.1318083094142;
Sat, 08 Oct 2011 07:11:34 -0700 (PDT)
Return-Path: <danibona @ icb.ufmg.br>
Received: from mail.icb.ufmg.br (mail.icb.ufmg.br. [150.164.24.4])
by mx.google.com with ESMTPS id c25si5046333anp.30.2011.10.08.07.09.59
(version=TLSv1/SSLv3 cipher=OTHER);
Sat, 08 Oct 2011 07:11:33 -0700 (PDT)
Received-SPF: pass (google.com: domain of danibona @ icb.ufmg.br designates 150.164.24.4 as permitted sender) client-ip=150.164.24.4;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of danibona @ icb.ufmg.br designates 150.164.24.4 as permitted sender) smtp.mail=danibona @ icb.ufmg.br
Received: from localhost ([127.0.0.1])
by mail.icb.ufmg.br with esmtp (Exim 4.63)
(envelope-from <danibona @ icb.ufmg.br>)
id 1RCXbC-0004a6-8I; Sat, 08 Oct 2011 11:09:58 -0300
X-Virus-Scanned: amavisd-new at icb.ufmg.br
Received: from mail.icb.ufmg.br ([127.0.0.1])
by localhost (mail.icb.ufmg.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id s+kv7uCegh1Q; Sat, 8 Oct 2011 11:09:57 -0300 (BRT)
Received: from mail.icb.ufmg.br ([150.164.24.4] helo=webmail.icb.ufmg.br)
by mail.icb.ufmg.br with esmtp (Exim 4.63)
(envelope-from <danibona @ icb.ufmg.br>)
id 1RCXb7-0004Zd-AX; Sat, 08 Oct 2011 11:09:53 -0300
Received: from 115.240.15.243
(SquirrelMail authenticated user danibona)
by webmail.icb.ufmg.br with HTTP;
Sat, 8 Oct 2011 11:09:53 -0300 (BRT)
Message-ID: <2832.115.240.15.243.1318082993.squirrel @ webmail.icb.ufmg.br>
Date: Sat, 8 Oct 2011 11:09:53 -0300 (BRT)

Subject: BBC OCTOBER DRAWS

From: "BBC WORLD" <danibona @ icb.ufmg.br>

Reply-To: cashcntr @ bbconeserv.co.cc

User-Agent: SquirrelMail/1.4.8
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal

Dear Winner,

The BBC ONE National Lottery Saturday Night Draws presented by John Partridge
with special guests Nick Knowles was confirmed that your Email ID won 800,000.00
Pounds in Lotto Draw 1647. Send your details, Full name.....Age.....Address.....
City:..... State:.... and Country...... Direct Mobile Number.

BBC LOTTERY ONLINE CO-ORDINATOR
Mr Ellis Brown
E-mail:cashcntr @ bbconeserv.co.cc
http://www.bbc.co.uk/lottery/

This e-mail has the "Subject" header before the "From" & "Reply-To" headers, this is, I think, the first message with this sequence of headers. This e-mail is routed through many servers, this is also uneven.

Business opportunity with Apha Bank Group of Greece

2011-10-10T20:21:00.000-07:00

Received: by 10.220.94.4 with SMTP id x4cs202020vcm;
Fri, 7 Oct 2011 00:46:14 -0700 (PDT)
Received: by 10.68.60.2 with SMTP id d2mr12138926pbr.82.1317973573520;
Fri, 07 Oct 2011 00:46:13 -0700 (PDT)
Return-Path: <adamsdimtras @ hotmail.com>
Received: from neodic.com ([112.216.247.174])
by mx.google.com with ESMTP id q2si9394370pbc.17.2011.10.07.00.41.29;
Fri, 07 Oct 2011 00:46:13 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning adamsdimtras @ hotmail.com does not designate 112.216.247.174 as permitted sender) client-ip=112.216.247.174;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning adamsdimtras @ hotmail.com does not designate 112.216.247.174 as permitted sender) smtp.mail=adamsdimtras @ hotmail.com
Received: from User (unknown [46.198.137.13])
(Authenticated sender: admin)
by neodic.com (Postfix) with ESMTPA id 15FCA64A4C5;
Fri, 7 Oct 2011 04:50:19 +0900 (KST)

Reply-To: <adamsdimitras @ hotmail.com.>

From: "MR.Adams Dimitras"<adamsdimtras @ hotmail.com>

Subject: CONFIRM YOUR BUSINESS OPPORTUNITY !!!

Date: Thu, 6 Oct 2011 22:50:38 +0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20111006195020.15FCA64A4C5 @ neodic.com>
To: undisclosed-recipients:;

MR.Adams Dimitras
PRINCIPAL PORTFOLIO MANAGER
ALPHA BANK GROUP GREECE.
105, ATHINON AVENUE ,
ATHENS GREECE 104 47(1ST FLOOR).
EMAIL: adamsdimitras @ hotmail.com

I am MR.Adams Dimitras, i have a proposal for you, What I require from you is your honest co-operation and all confirmable documents to back up this transaction shall be made available to you as soon as I received your reply via my private EMAIL: adamsdimitras @ hotmail.com.
You can find more details from the link below:

http://www.athensnews.gr/portal/9/33734
http://greece.greekreporter.com/2010/11/17/armed-robber-kills-bank-manager-in-orestiada/
http://www.emportal.rs/en/news/region/138750.html

Friendly regards
MR.Adams Dimitras
PRINCIPAL PORTFOLIO MANAGER
ALPHA BANK GROUP GREECE

I followed the links and they all seems to be of good source. All are news websites and an article open with the news of killing of bank manager of Alpha bank branch in Orestiada, Greece. None of the news articles have provided name of the bank manager, and this is suspicious.
But, but, but I can't understand why the links are in this message? How the articles are related with this e-mail? Is this e-mail sent by the same, killed bank manager, MR.Adams Dimitras, from heaven? :-|

An e-mail having everything-to-explain in just Subject, without message body

2011-10-09T20:11:00.000-07:00

Received: by 10.220.94.4 with SMTP id x4cs80284vcm;
Mon, 3 Oct 2011 21:15:41 -0700 (PDT)
Received: by 10.224.214.73 with SMTP id gz9mr646076qab.25.1317701741467;
Mon, 03 Oct 2011 21:15:41 -0700 (PDT)
Return-Path: <veenajay @ omantel.net.om>
Received: from fmgw1.omantel.net.om (send1.omantel.net.om. [212.72.4.86])
by mx.google.com with ESMTPS id hp8si10070719qab.60.2011.10.03.21.15.39
(version=TLSv1/SSLv3 cipher=OTHER);
Mon, 03 Oct 2011 21:15:41 -0700 (PDT)
Received-SPF: pass (google.com: domain of veenajay @ omantel.net.om designates 212.72.4.86 as permitted sender) client-ip=212.72.4.86;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of veenajay @ omantel.net.om designates 212.72.4.86 as permitted sender) smtp.mail=veenajay @ omantel.net.om

Reply-To: <bjmfirm @ msn.com>

From: "Barrister Jay Mchenry"<veenajay @ omantel.net.om>

Subject: Reply to this email This is Barr Jay Mchenry reconfirm your mail regarding Mrs Mellisa Lewis funds $14,258,000.00 Ref:(JJ/MMS/953/5015/GwrI/316us/uk For charity organization in your country.Email:bjmfirm01 @ live.com

Date: Mon, 3 Oct 2011 21:12:49 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 111003-1, 10/03/2011), Outbound message
X-Antivirus-Status: Clean
Bcc:
Message-ID: <SMTP040Ne0PaLI9mK6P00059f52 @ smtp04.netzone.net.om>
X-OriginalArrivalTime: 04 Oct 2011 04:13:12.0153 (UTC) FILETIME=[EE725490:01CC824B]
X-MS-Antispam-Report: v=1.1 cv=INaNQ7uogzBnWuybIiRuz5luh3gu7kLOF6ppDfJn0fU= c=0 sm=1 p=SSV8fFotg6IA:10 a=Dyoqhi_TatcA:10
X-Junk-Mail:

This e-mail does not contain message body!!!

I will loose the Unclaimed Inheritance Fund

2011-10-08T07:39:00.000-07:00

Received: by 10.220.153.143 with SMTP id k15cs4400vcw;
Fri, 30 Sep 2011 00:47:13 -0700 (PDT)
Received: by 10.151.21.1 with SMTP id y1mr3381583ybi.20.1317368832960;
Fri, 30 Sep 2011 00:47:12 -0700 (PDT)
Return-Path: <abdulhakim.binherz @ gmail.com>
Received: from uranus.terasaki.com.sg (uranus.terasaki.com.sg. [58.185.104.131])
by mx.google.com with ESMTP id j7si2032986ybg.102.2011.09.30.00.46.57;
Fri, 30 Sep 2011 00:47:12 -0700 (PDT)
Received-SPF: neutral (google.com: 58.185.104.131 is neither permitted nor denied by domain of abdulhakim.binherz @ gmail.com) client-ip=58.185.104.131;
Authentication-Results: mx.google.com; spf=neutral (google.com: 58.185.104.131 is neither permitted nor denied by domain of abdulhakim.binherz @ gmail.com) smtp.mail=abdulhakim.binherz @ gmail.com
Received: from User ([61.178.127.140] RDNS failed) by uranus.terasaki.com.sg with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 30 Sep 2011 15:50:09 +0800

Reply-To: <abdulhakim.binherz @ w.cn>

From: "Abdulhakim Binherz"<abdulhakim.binherz @ gmail.com>

Subject: waiting for your response

Date: Fri, 30 Sep 2011 15:46:48 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: abdulhakim.binherz @ gmail.com
Message-ID: <URANUSVWNJaDk1JMYWx00026716 @ uranus.terasaki.com.sg>
X-OriginalArrivalTime: 30 Sep 2011 07:50:11.0703 (UTC) FILETIME=[950D0070:01CC7F45]

Dear Friend

I am contacting you to see if we can make a deal, My name is Robert Adam ,
I discovered an unclaimed inheritance fund in our bank, Actually I don’t have to involve myself officially because of my job, but I know what will
be required to release the fund to you.

Please get back to me with the following information via e-mail for more details
robertadams400 @ w.cn:

Best regards,

Robert Adam

In the message, "with the following information" is written but nothing is specified below it; how would I know what details to send! I will loose the unclaimed inheritance fund :-(

Offer to become Trustee for 8 Million Dollar

2011-09-29T07:34:00.000-07:00

Received: by 10.220.153.143 with SMTP id k15cs89215vcw;
Tue, 27 Sep 2011 16:56:20 -0700 (PDT)
Received: by 10.229.79.5 with SMTP id n5mr6330652qck.275.1317167779521;
Tue, 27 Sep 2011 16:56:19 -0700 (PDT)
Return-Path: <m.cavazzini @ delmarvacom.com>
Received: from msmail.mediaspa.net (msmail.mediaspa.net. [216.105.120.144])
by mx.google.com with ESMTP id l5si5979172qcw.24.2011.09.27.16.56.09;
Tue, 27 Sep 2011 16:56:19 -0700 (PDT)
Received-SPF: neutral (google.com: 216.105.120.144 is neither permitted nor denied by best guess record for domain of m.cavazzini @ delmarvacom.com) client-ip=216.105.120.144;

Something unnecessary was here.

Received: from User ([72.149.157.234]) by mediaspa.net with MailEnable ESMTP; Tue, 27 Sep 2011 13:28:12 -0400

Reply-To: <patreynolds11 @ w.cn>

From: "Patrick Reynolds"<m.cavazzini @ delmarvacom.com>

Subject: Associate Request

Date: Tue, 27 Sep 2011 12:28:14 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <4CD85666B3964F568E93758CC923FAAC.MAI @ mediaspa.net>
X-ME-Bayesian: 0.000000

Attn:
Confident this letter meets you in good health.

I am Patrick Reynolds; an underwriter with BSN Venture Capital Fund Management Co Malaysia; that specializes in private equity and property equity investment.

Have contacted you on the hope of presenting you as my associate to assume the new recipient of a Fixed-Income deposit valued at $40,000,000.00 .

You get 20% of the total $40,000,000.00 equity investment as your commission for acting as my TRUSTEE.

Will need your legal details; names, address and phone numbers to enable me re-profile your details on the $40million with the institution where the funds is presently domile as the new recipient.

Note that time is of the essence since the fixed-income deposit has to be cleared before the ending of this third quarter of the financial fiscal year 2011

I will enumerate further upon your response.

Patrick Reynolds.
patreynolds11 @ w.cn

I can earn $8,000,000 (20% of $40,000,000) for just becoming a Trustee ;-)
But I can't trust on this e-mail.

My e-mail id has won J500,000.00 GBP in BBC National Lottery

2011-09-24T13:33:00.000-07:00

Received: by 10.220.141.9 with SMTP id k9cs22735vcu;
Sat, 24 Sep 2011 08:43:53 -0700 (PDT)
Received: by 10.223.29.21 with SMTP id o21mr7225855fac.4.1316879032941;
Sat, 24 Sep 2011 08:43:52 -0700 (PDT)
Return-Path: <noticemail9 @ yahoo.com.au>
Received: from fep13.mx.upcmail.net (fep13.mx.upcmail.net. [62.179.121.33])
by mx.google.com with ESMTP id y6si508398fal.38.2011.09.24.08.43.50;
Sat, 24 Sep 2011 08:43:52 -0700 (PDT)
Received-SPF: neutral (google.com: 62.179.121.33 is neither permitted nor denied by best guess record for domain of noticemail9 @ yahoo.com.au) client-ip=62.179.121.33;
Authentication-Results: mx.google.com; spf=neutral (google.com: 62.179.121.33 is neither permitted nor denied by best guess record for domain of noticemail9 @ yahoo.com.au) smtp.mail=noticemail9 @ yahoo.com.au
Received: from edge03.upcmail.net ([192.168.13.238])
by viefep13-int.chello.at
(InterMail vM.8.01.02.02 201-2260-120-106-20100312) with ESMTP
id <20110924154350.DXI1686.viefep13-int.chello.at @ edge03.upcmail.net>;
Sat, 24 Sep 2011 17:43:50 +0200
Received: from User ([116.203.51.21])
by edge03.upcmail.net with edge
id cfjV1h00l0TSpzG03fjY9r; Sat, 24 Sep 2011 17:43:50 +0200
X-SourceIP: 116.203.51.21
X-Authenticated-Sender: nvanderham @ upcmail.nl

Reply-To: <claims_payout1 @ 9.cn>

From: "BBC NATIONAL LOTTERY"<noticemail9 @ yahoo.com.au>

Subject: Contact: Mr. Desmond River.

Date: Sat, 24 Sep 2011 21:13:25 +0530
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20110924154350.DXI1686.viefep13-int.chello.at @ edge03.upcmail.net>

Something unnecessary was here.

Wednesday September 21st
Draw No. 1643

It's been notified by our organization that your e-mail ID won the sum of
J500,000.00 GBP, in the BBC NATION NATIONAL LOTTERY on
our 2011 charity bonanza.
For more information, Contact: Mr. Desmond River.
Tel: with your Name:/Address:/Age:/Sex:/Phone:/Occupation:/Country:

For confirmation of your winning numbers, please ensure you check your
winning details on our site given below: http://www.bbc.co.uk/lottery/
Sincerely,(Web-Email Information Manager)

The web address/URL provided at the bottom of the message seems legitimate and therefore someone may try to contact on the reply-to e-mail address without looking it.
There is nothing like Charity Bonanza on BBC's National Lottery and incorrect words are used in the message text as "BBC NATION NATIONAL LOTTERY". However correct words are used in the subject line of the message.

Sale roots of plants at $300 (Rs ~14,000), having original price of Rs 4,000

2011-09-17T12:57:00.000-07:00

X-RocketMail: 00000006;R---S-----------;4494
X-RocketUID: 0000000000
X-RocketYMUMID: AHriimIAAIibTmv8JgdEWWswERY
X-RocketMIF: 1315699750;5184;
X-Apparently-To: nikunj_bhatt_84 @ yahoo.com via 98.138.226.122; Sat, 10 Sep 2011 17:09:10 -0700
X-RocketRCL: 1980;1;937125487;2002
Return-Path: <benson_james2006 @ yahoo.com>
X-RocketTIP: 61.9.168.149 ; NO_TIP_HEADER_ALLOWED ;
X-RocketSRV: s_ip=61.9.168.149;d_t=1315699750;url=yahoo.com,mailto:benson_james2006 @ yahoo.com;Retro=Y;SgrnP=N
X-Rocket-Spam: 61.9.168.149
X-YahooFilteredBulk: 61.9.168.149
Received-SPF: none (domain of yahoo.com does not designate permitted sender hosts)
X-Rocket-Track: cat=SP; info=rule:SP<id=226>;cconsam:UK;dmcu:UK<token=NO_MATCH>;hfeat:NN;ip:NN<ip=61.9.168.149,policy=n-w0,n100,g0,s>;ipst:GD<ip=61.9.168.149>;ltmsfp:SP<prob=0.998>;cmsgbl:UK<s=23,m=0>;cmsgbk:UK<s=23,m=12>;cmsgob:UK<s=23,m=0>;mip:UK<p=not_run>;cptron:UK<prob=0.76>;phhr:NN<score=6>;ipsp:GD;csubbl:UK;csubbk:UK;turl:UK;url2db:NN<url=yahoo.com>;wlrcpts:UK;sgor:UK;abaca:SP<-982, fh=mta1082; fi=98.139.52.61:14050; MB=0; GT=0; fs=-982; ns=-684; sc=0,0; st=BDSW; id=UpGzwWo1-8A1709Aa; rv=ymaint.3-g767ab14/98.139.52.61:14051; ts=FoaDB; gv=-33; fp=JLt/h; gd=1; ip=61.9.168.149; he=OVtfaaEqUti; ht=1; nr=6; nt=0; ho=PqcwCxEXZvf; hd=Pn67EoFGniL; hf=jfs5kEsRtg; hF=COsQRJ3Sen6; hj=IUjEckcpznb; ZM=PC0T0rXvmfq; ZB=i8ZTi+ls3G; ZB=EiQ1q+h9Sz0; ZB=PNp87FsTUmJ; ZB=HRiN3T1JCfc; ZB=MIm70YOow+K; ZF=FDSxvNakJuM; Zi=CWjYg6XbrrU; sh=1; sv=nikhilsamtani91 @ yahoo.com:-369,niki.wahi @ yahoo.com:-369,nikunj_bhatt_84 @ yahoo.com:-369,nil_rajguru @ yahoo.com:-369,nikhilwilliams @ yahoo.com:-402,nikki.pathak @ yahoo.com:-402;, SRV_OR=1,WS_OR=1,WSS_OR=1,OR=1,AB_WS_IP=0>

Here was encoded text which is not required to show.

X-RocketHELO: nskntmtas05p.mx.bigpond.com
X-RocketMAILFROM: benson_james2006 @ yahoo.com
X-RocketRCPTTO: 0-nikhilsamtani91 @ yahoo.com,0-nikhilwilliams @ yahoo.com,0-niki.wahi @ yahoo.com,0-nikijai @ yahoo.com,0-nikiman_clapher @ yahoo.com,0-nikki.pathak @ yahoo.com,0-nikonele @ yahoo.com,0-nikslover_ferrari @ yahoo.com,0-nikumbhanil @ yahoo.com,0-nikunj_bhatt_84 @ yahoo.com,0-nikunj_bhatt2000 @ yahoo.com,0-nil_rajguru @ yahoo.com
X-RocketMSGID:1315699745.687530.72866 @ mta1082.mail.ac4.yahoo.com#0
X-Originating-IP: [61.9.168.149]
Authentication-Results: mta1082.mail.ac4.yahoo.com from=yahoo.com; domainkeys=neutral (no sig); from=yahoo.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO nskntmtas05p.mx.bigpond.com) (61.9.168.149)
by mta1082.mail.ac4.yahoo.com with SMTP; Sat, 10 Sep 2011 17:09:10 -0700
Received: from nskntotgx04p.mx.bigpond.com ([14.98.163.37])
by nskntmtas05p.mx.bigpond.com with ESMTP
id <20110911000905.FBAP23624.nskntmtas05p.mx.bigpond.com @ nskntotgx04p.mx.bigpond.com>;
Sun, 11 Sep 2011 00:09:05 +0000
Received: from User ([14.98.163.37]) by nskntotgx04p.mx.bigpond.com
with ESMTP
id <20110911000904.KTZY1840.nskntotgx04p.mx.bigpond.com @ User>;
Sun, 11 Sep 2011 00:09:04 +0000

Reply-To: <benson_james2006 @ yahoo.com>

From: "BENSON JAMES"<benson_james2006 @ yahoo.com>

Subject: URGENT RESPOND

Date: Mon, 12 Sep 2011 01:07:51 +0530
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Authentication-Info: Submitted using SMTP AUTH LOGIN at nskntotgx04p.mx.bigpond.com from [14.98.163.37] using ID ozzyjim @ bigpond.net.au at Sun, 11 Sep 2011 00:08:44 +0000
Message-Id: <20110911000904.KTZY1840.nskntotgx04p.mx.bigpond.com @ User>
Content-Length: 1980

SENDER: DR. Benson James
PRIVATE -EMAIL: benson_james2006 @ yahoo.com

SUBJECT: URGENT RESPONSE.

Attention: Sir,

Compliment of the season to you over there, how are you and your family, hope every one of your family are living fine. If so Glory is to Almighty God.

I got your contact through (Chamber and commerce) in your country as well reliable, responsible and trustworthiness; I humble introduce myself to you. I am Dr.Benson James happy married with three children, am working with (AIRMID PHARMA LABORATORY COMPANY, LONDON) my company use to send me down to your country in India as delegate who will come and purchase the root that will use to dilute with some other medicine before supply to refuge camp throughout the world under the habilitation of (UNITED NATION WORLD WIDE)

They are not nominating me again as delegate who will come down to India and purchase the root for our company, I am now promoted to deputy director in my company that is why am not being imposition of delegate again. When I bought this root from the local seller in India at the rate of 4,000 India rupees, I will now sell to my company at the rate of $300 United State Dollars

Due to my promotion as deputy director in my company. I will not be coming to India as delegate any more, and I don't want my other colleagues to know the real price that am purchasing the root in your country in India, if they were know the real price, they will surely report to my director and I will be query and sack by our director authority. That is the reason why I quickly contact you, so that you can finance the business in your country and send my own share to me as well trusted, reliable and honest someone. If you assure that you are capable to handle this supply by finance in your country, do not hesitate to reply me very urgent.

Extend my greeting to your family.

Dr. Benson James
Private email: benson_james2006 @ yahoo.com
FORMAL DELEGATE

I think, Dr Benson is dealing with some illegal drugs and he wants me to deliver those drugs to him ;-)
This e-mail is not asking any details about me, but I am sure that if I reply to this e-mail, the next e-mail will ask those details. I had tried this previously. The sender is at-least aware that I am living in India.
There are other recipients too, but those e-mail addresses could be fake; and if they are real, it means I am not the only target and available in "Chamber and Commerce" (it should be Chamber of Commerce) as well reliable, responsible and trustworthy person/firm.
There are many grammatical errors in this e-mail.

The Federal Ministry of Finance is giving me $5000 per day

2011-09-15T11:25:00.000-07:00

Received: by 10.220.83.210 with SMTP id g18cs12698vcl;
Thu, 15 Sep 2011 07:50:30 -0700 (PDT)
Received: by 10.42.161.3 with SMTP id r3mr1338879icx.186.1316098229389;
Thu, 15 Sep 2011 07:50:29 -0700 (PDT)
Return-Path: <cforeign @ accountant.com>
Received: from nm4-vm0.bullet.mail.in.yahoo.com (nm4-vm0.bullet.mail.in.yahoo.com. [121.101.151.213])
by mx.google.com with SMTP id v3si3326622icz.42.2011.09.15.07.50.28;
Thu, 15 Sep 2011 07:50:29 -0700 (PDT)
Received-SPF: neutral (google.com: 121.101.151.213 is neither permitted nor denied by best guess record for domain of cforeign @ accountant.com) client-ip=121.101.151.213;
Authentication-Results: mx.google.com; spf=neutral (google.com: 121.101.151.213 is neither permitted nor denied by best guess record for domain of cforeign @ accountant.com) smtp.mail=cforeign @ accountant.com; dkim=pass (test mode) header.i= @ yahoo.com
Received: from [121.101.151.236] by nm4.bullet.mail.in.yahoo.com with NNFMP; 15 Sep 2011 14:52:57 -0000
Received: from [121.101.151.234] by tm1.bullet.mail.in.yahoo.com with NNFMP; 15 Sep 2011 14:52:12 -0000
Received: from [127.0.0.1] by omp1003.mail.in.yahoo.com with NNFMP; 15 Sep 2011 14:50:57 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 440964.49273.bm @ omp1003.mail.in.yahoo.com
Received: (qmail 50373 invoked by uid 60001); 15 Sep 2011 14:50:25 -0000

Here was encoded text which is not required to show.

Received: from [41.203.232.193] by web137617.mail.in.yahoo.com via HTTP; Thu, 15 Sep 2011 20:20:21 IST
X-RocketYMMF: vinhciu
X-Mailer: YahooMailClassic/14.0.5 YahooMailWebService/0.8.113.315625
Message-ID: <1316098221.14032.YahooMailClassic @ web137617.mail.in.yahoo.com>
Date: Thu, 15 Sep 2011 20:20:21 +0530 (IST)

From: Eco Bank Burkina-Faso <cforeign @ accountant.com>

Reply-To: cforeign @ accountant.com

Subject: Menssage from the Eco Bank Ltd,

To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Attention Customer,

There is an issue involving $900,000 USD which was called to Our Bank(Eco Bank) from THE FEDERAL MINISTRY OF FINANCE concerning your compensation of $900,000.00 USD has been forwarded to Western Union Money Transfer and An instruction has come directly from Mr.Jona Akim of Ministry Of Finance.

He asked us to start sending your fund installmentally $5000 per a day through western union money transfer.This type of transfer means you will be recieving $5000 every day through western union until the total of $900,000 USD is completely transfered to you.

Today,our bank has effected your first payment of $5000 through western union.
Now you have to Contact Rev Paul O.Sawadogo on his contact below as he is the person incharge of your payment.

The Western union Agent is:
Name: Rev Paul O.Sawadogo
Email:unite @ fastservice.com
Tel 00226 73 96 68 21,

Money sent Through Peter Joe, amount sent $5,000.00 to you today. So contact Rev Paul O.Sawadogo on above email address and tell him to give you needed information and also for him to help you pick the $5,000.00.

Recomfirm your address
(1)Your Full name: ................
(2)Your Phone number: ...................
(3)Your Contact address: ..................
(4)Your Country :.......................

Contact Rev Paul O.Sawadogo ASAP on how to get the payment information,

Yours in Service.
Ouagadougou Burkina Faso
Mrs Faith Traore,

This e-mail is a multipart e-mail, one part of plain text (for those e-mail clients which can not render the content in HTML) and other part with HTML formatting. I have removed the HTML part.
There are lots of spelling errors in this e-mail.

Mrs. Aisha Karam is giving me US$ 8.5 Million

2011-09-12T08:26:00.000-07:00

Received: by 10.220.193.198 with SMTP id dv6cs133884vcb;
Mon, 8 Aug 2011 20:40:24 -0700 (PDT)
Received: from mr.google.com ([10.216.184.137])
by 10.216.184.137 with SMTP id s9mr6902291wem.96.1312861224378 (num_hops = 1);
Mon, 08 Aug 2011 20:40:24 -0700 (PDT)
Received: by 10.216.184.137 with SMTP id s9mr4882307wem.96.1312861223419;
Mon, 08 Aug 2011 20:40:23 -0700 (PDT)
Return-Path: <drgreed @ uwclub.net>
Received: from webmail.uwclub.net (mail2.telecomplus.org.uk [80.40.249.18])
by mx.google.com with ESMTP id h10si5054216wee.98.2011.08.08.20.40.12;
Mon, 08 Aug 2011 20:40:23 -0700 (PDT)
Received-SPF: neutral (google.com: 80.40.249.18 is neither permitted nor denied by best guess record for domain of drgreed @ uwclub.net) client-ip=80.40.249.18;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.40.249.18 is neither permitted nor denied by best guess record for domain of drgreed @ uwclub.net) smtp.mail=drgreed @ uwclub.net
Message-Id: <4e40ac27.0a4fd80a.50ba.ffff97f9SMTPIN_ADDED @ mx.google.com>
Received: from ppp91-76-85-91.pppoe.mtu-net.ru ([91.76.85.91] helo=User)
by webmail.uwclub.net with esmtpa (Exim 4.69)
(envelope-from <drgreed @ uwclub.net>)
id 1QqXhS-00037z-3t; Mon, 08 Aug 2011 22:49:30 +0100

Reply-To: <mrs.aishakaram @ hotmail.co.uk>

From: "Mrs. Aisha Karam"<drgreed @ uwclub.net>

Subject: Assalam Alaikum..My Beloved

Date: Mon, 8 Aug 2011 14:49:43 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Assalam Alaikum..My Beloved

I am Mrs. Aisha Karam a citizen of Kuwait but currently residing in the United Kingdom. I was married to Late Farooq Karam of blessed memory who was an oil explorer in Kuwait and Angola for twelve years before he died in the year 2000. We were married for twelve years without a child; he died after a brief illness that lasted for only four days. Since his death I too have been battling with both Cancer and fibroid problems. When my late Husband was alive he deposited a substantial amount of money worth US$8.5Million with a bank in the United Kingdom which I inherited after his death.

Recently, my doctor told me that I have only 2 month to live due to my ailment. Having known my condition I decided to donate this fund to either a charity/orphanage home or devoted Allah (God) fearing individual that will utilize this money the way I am going to instruct therein. I want this organization or individual to use this money in all sincerity to fund charity homes (motherless homes), orphanages, and widows. I took this decision because I don't have any child that will inherit this money and my husbands relatives are into radical organization and I don't want a situation where this money will be used in an unholy manner, hence the reasons for this bold decision. Please, pray for me to recover as your prayers will go a long way in uplifting my spirit.

I don't need any telephone communication in this regard because of my health condition which has seriously affected my speech and also because of the presence of my husband's relatives around me always. I don't want them to know about this development. As soon as I receive your reply I shall give you further directives on what to do and how to go about actualizing this project. I will also instruct my lawyer to file an application on your behalf to the bank where the funds were deposited for the transfer of the money to you for this purpose. I want you to always pray for me. Any delay in your reply will give room in sourcing for an organization or a devoted Individual for this same purpose.

Until I hear from you by email; my dreams will rest squarely on your shoulders.

Remain blessed,
Mrs. Aisha Karam.

At the first glance of listing of my spam folder and looked at the subject line, I felt that I have received a love letter ;-)

This is the first phishing email which doesn't contain and spelling or grammatical error, this is strange (and doubtful!!!).

A secret plan to get US$16,500,000 from an account of National Bank of Abu-Dhabi

2011-09-08T12:44:00.000-07:00

Received: by 10.220.80.148 with SMTP id t20cs112322vck;
Fri, 19 Aug 2011 17:13:16 -0700 (PDT)
Received: by 10.52.21.104 with SMTP id u8mr304114vde.409.1313799195469;
Fri, 19 Aug 2011 17:13:15 -0700 (PDT)
Return-Path: <amalalhammadi7 @ gmail.com>
Received: from jason-vz1.ampledns.com ([216.246.30.179])
by mx.google.com with ESMTPS id jf2si8543144vdb.113.2011.08.19.17.13.12
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 19 Aug 2011 17:13:15 -0700 (PDT)
Received-SPF: neutral (google.com: 216.246.30.179 is neither permitted nor denied by domain of amalalhammadi7 @ gmail.com) client-ip=216.246.30.179;
Authentication-Results: mx.google.com; spf=neutral (google.com: 216.246.30.179 is neither permitted nor denied by domain of amalalhammadi7 @ gmail.com) smtp.mail=amalalhammadi7 @ gmail.com
Message-Id: <4e4efc1b.6272340a.7751.0efbSMTPIN_ADDED @ mx.google.com>
Received: from 173-22-63-177.client.mchsi.com ([173.22.63.177]:1572 helo=User)
by jason-vz1.ampledns.com with esmtpa (Exim 4.69)
(envelope-from <amalalhammadi7 @ gmail.com>)
id 1QuZBP-0008Sg-FP; Sat, 20 Aug 2011 02:13:04 +0200

Reply-To: <mr.amalalhammadi40 @ hotmail.com>

From: "Mr.Amal Al Hammadi"<amalalhammadi7 @ gmail.com>

Subject: GET BACK TO ME

Date: Sat, 20 Aug 2011 04:12:39 +0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - jason-vz1.ampledns.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Source:
X-Source-Args:
X-Source-Dir:

From: Mr.Amal Al Hammadi
MANAGER National Bank of Abu-Dhabi
Government Complex Branch (Delma)In Tamm Center.
P.O.BOX 50670 Abu-Dhabi,
U.A.E.

Dear Friend,

This letter must come to you as a surprise, but I believe it is only a day that people meet and become great friends and business partners. I am pleased to get across to you for a very urgent and profitable business proposal; I got your e-mail address through an internet yellow page web directory and decided to contact you and ask for your assistance in this urgent matter, requiring trust and confidentiality, I am Mr.Amal Al Hamadi, the Branch manager, National Bank of Abu-Dhabi Government Complex Branch (Delma)In Tamm Center. Abu-Dhabi (U.A.E) United Arab Emirates, married with four children. I am writing this letter to ask for your support and co-operation to carry out this business opportunity in my department, On June 6, 1999, an America Oil consultant/contractor with Petroleum Corporation, Mr. Elsayed Agwah, made a numbered time (fixed) deposit for twelve calendar months, Valued at US$16,500,000.00(sixhteen Million Five Hundred Thousand Dollars )in my branch upon maturity. I sent a routine notif

http://www.cbsnews.com/stories/1999/11/01/iran/main49778.shtml
http://www.cbsnews.com/stories/1999/11/01/iran/main49778.shtml

Most astonishing of my discovery was that, all records bear no next of kin, meaning no member of Mr.Elsayed Agwah family knows about the deposit therefore ,no member of his family will ever come forward to claim the money, In order for the bank not to transfer the said sum of sixteen Million, Five Hundred Thousand Dollars ($18,500,000.00) as unclaimed funds to the emirates treasury account, the above stated funds most be claimed immediately by somebody standing in as late Mr.Elsayed Agwah, Next of Kin, because According to (UNITED ARAB EMIRATES LAW), at the expiration of (eleven) years; the money will revert to the ownership of the (UNITED ARAB EMIRATES) Government if nobody applies to claim the fund, This revelation is only known to me because I was his personal account officer before I was posted to become the branch manager , now I seek your collaboration to act as next of kin to late Mr.Elsayed Agwah to claim the funds and move them into useful investments, we shall split the cash between our

to my private email : mr.amalalhammadi31 @ hotmail.com

1) Your direct mobile/number...............
(2) Your Full name..........................................
(3) Country resident address.................................
(4) Your private E-mail box..............................
(5) Company name and position.............................
Then I shall furnish you with due process of concluding this transaction without any delay.

Kindly reply me with this email:
Regards
Mr.Amal Al Hammadi

Nothing to say about this email. It's a very looooooooooooooooooong story.... ;-)

Completing my payment transaction of 50,500,000 or 10,500,000 USD or Pound???

2011-09-07T15:25:00.000-07:00

Received: by 10.220.149.200 with SMTP id u8cs792vcv;
Tue, 23 Aug 2011 20:57:25 -0700 (PDT)
Received: by 10.216.154.145 with SMTP id h17mr119548wek.39.1314158231623;
Tue, 23 Aug 2011 20:57:11 -0700 (PDT)
Return-Path: <fredallibone @ pemail.co.za>
Received: from dns2.everywhere.co.za (dns2.everywhere.co.za [41.193.54.12])
by mx.google.com with ESMTPS id u9si1470384wec.115.2011.08.23.20.42.18
(version=TLSv1/SSLv3 cipher=OTHER);
Tue, 23 Aug 2011 20:57:11 -0700 (PDT)
Received-SPF: neutral (google.com: 41.193.54.12 is neither permitted nor denied by best guess record for domain of fredallibone @ pemail.co.za) client-ip=41.193.54.12;
Authentication-Results: mx.google.com; spf=neutral (google.com: 41.193.54.12 is neither permitted nor denied by best guess record for domain of fredallibone @ pemail.co.za) smtp.mail=fredallibone @ pemail.co.za
Received: from localhost ([127.0.0.1])
by dns2.everywhere.co.za (RDP Server 7.0.321/7.0.323 [267.8.16]) with SMTP id HJV97409;
Wed, 24 Aug 2011 03:49:09 +0200
Date: Wed, 24 Aug 2011 04:49:09 +0300

From: mr.dannygreen @ 3mail.ie

Reply-To: mr.dannygreen @ 3mail.ie

To: hopeorphanagehome @ hotmail.com

Subject: Completing your payment transaction/read details

Message-ID: <03bb19ee86ddf042f6e5819f3f0db65b @ pemail.co.za>
X-Mailer: IceWarp Web Mail 5.6.7
X-Originating-IP: 41.206.15.32
MIME-Version: 1.0
X-Priority: High
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit

HSBC BANK LONDON
REF.: FUND RELEASE UPDATE.
VALUED: $50,500,000.00.USD
VIA: ONLINE BANK ACCOUNT.

Dear Beneficiary,

This is to inform you that we have been instructed by the United Nacion organization (UNO), Financial Services Authority (FSA) and British Bankers Association (BBA) to carry out the transfer of your funds valued US$10,500,000.00 (Ten Million Five Hundred Thousand pounds) which was On-Hold in our Bank to any Bank Account of your choice? or via Online Bank Account with our Bank upon your response.

However, you are required to forward you're details including copy of your identification for further verification purpose before final transfer is made to you as instructed.

Officer in Charge:
Name: Mr. Danny Green
Our Branch Online Account Department
Telephone No: +44 703 596 7054
Email: mr.dannygreen @ 3mail.ie

THE REQUIRED DETAILS ARE:-
Name:
Address:
Country:
Tel:
Mobile:

As soon as the above details are received by Ms. Diana Nee the Online Account Officer, she will instruct you further on how to proceed in regards to the release of your funds to you without any further delays.

Looking forward to hearing from you to enable us serve you better.

Yours truly,

Ms. Daina Nee
Operations Manager
HSBC Bank London
WWW.HSBC.COM

At the top of the body of the message, the amount is 50,500,000 USD and at other place, it is US$10,500,000 (but in words, it is Ten Million Five Hundred Thousand pounds!!! If the amount would have been written right, I might apply for it. ;-)
You should also know for general knowledge that UNO has changed its name to : United Nacion organization!!!

Winning Notification from Coca-Cola Company Promotion

2011-09-04T14:57:00.000-07:00

Received: by 10.220.149.200 with SMTP id u8cs51832vcv;
Thu, 25 Aug 2011 02:39:05 -0700 (PDT)
Received: by 10.227.177.133 with SMTP id bi5mr1303274wbb.39.1314265142527;
Thu, 25 Aug 2011 02:39:02 -0700 (PDT)
Return-Path: <info @ cocacola.com>
Received: from palgdns4.tda.dz (ns4.tda.dz [80.246.0.10])
by mx.google.com with SMTP id fe9si996216wbb.136.2011.08.25.02.26.34;
Thu, 25 Aug 2011 02:39:01 -0700 (PDT)
Received-SPF: neutral (google.com: 80.246.0.10 is neither permitted nor denied by best guess record for domain of info @ cocacola.com) client-ip=80.246.0.10;
Authentication-Results: mx.google.com; spf=neutral (google.com: 80.246.0.10 is neither permitted nor denied by best guess record for domain of info @ cocacola.com)
smtp.mail=info @ cocacola.com
Received: from mail.m-culture.gov.dz (unknown [127.0.0.1])
by palgdns4.tda.dz (Postfix) with ESMTP id 4ADC3D0024B;
Fri, 19 Aug 2011 10:02:20 +0100 (CET)
Received: from 182.62.26.12
(SquirrelMail authenticated user toualbi)
by {palgdns4.tda.dz} with HTTP;
Fri, 19 Aug 2011 10:02:20 +0100 (CET)
Message-ID: <3247.182.62.26.12.1313744540.squirrel @ {palgdns4.tda.dz}>
Date: Fri, 19 Aug 2011 10:02:20 +0100 (CET)

Subject: Winning Notification

From: "COCA COLA COMPANY OFFICIAL PRIZE NOTIFICATION" <info @ cocacola.com>

Reply-To: cocacolaofficialprize @ live.com.my

MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
To: undisclosed-recipients:;
Content-Transfer-Encoding: quoted-printable

Dear e-Mail Winner,

This is to inform you that you have won a prize money of ONE MILLION GREAT
BRITISH POUNDS (1,000,000) for this month Donation promotion which is
organized by COCA\'COLA COMPANY PROMOTION.

THE COCA\'COLA COMPANY PROMOTION, collects all the email addresses of the
people that are active online, among the millions that subscribed to Yahoo
and Hotmail, Gmail, Rediffmail etc. we only select ten people this Month
as our winners through electronic balloting System without the winner
applying,we congratulate you for being one of the people selected. To
begin he processing of your prize you are to contact our fiduaciary claims
department for more infomation as regards procedures to claim your prize.

Mrs. Anne Bank
Email: cocacolaofficialprize @ live.com.my
Tel::(+60)1627-93690

Contact her by sending her with the underlisted informations :

1.Name.2.Address.3.Nationality.4.Age.5.Occupation.6.Phone/Fax.

Yours faithfully,
Charlotte Rogers.

This e-mail also shows that it is from Coca-cola but it is actually from an individual who has an account at the live.com.my, which you can find in the reply-to address and in the body of the e-mail message.

From Coca-Cola Award Claim Department about winning the Online Sweepstakes Promo

2011-09-04T12:30:00.000-07:00

Received: by 10.220.191.203 with SMTP id dn11cs50413vcb;
Tue, 30 Aug 2011 10:04:17 -0700 (PDT)
Received: by 10.91.208.20 with SMTP id k20mr3371982agq.70.1314723855411;
Tue, 30 Aug 2011 10:04:15 -0700 (PDT)
Return-Path: <info @ cocacola.com>
Received: from cc.ncue.edu.tw (cc.ncue.edu.tw [120.107.179.225])
by mx.google.com with ESMTP id n38si7784653ani.163.2011.08.30.10.04.14;
Tue, 30 Aug 2011 10:04:15 -0700 (PDT)
Received-SPF: neutral (google.com: 120.107.179.225 is neither permitted nor denied by best guess record for domain of info @ cocacola.com) client-ip=120.107.179.225;
Authentication-Results: mx.google.com; spf=neutral (google.com: 120.107.179.225 is neither permitted nor denied by best guess record for domain of info @ cocacola.com) smtp.mail=info @ cocacola.com
Received: from cc.ncue.edu.tw (localhost [127.0.0.1])
by cc.ncue.edu.tw (Postfix) with ESMTP id BE8FA7B27;
Tue, 30 Aug 2011 17:00:22 +0800 (CST)

From: "Coca-Cola Award Claim Department" <info @ cocacola.com>

Reply-To: cocacolaclaim-hq3 @ gncn.net

Subject:

Date: Tue, 30 Aug 2011 17:00:22 +0800
Message-Id: < 20110830090023.M39008 @ cocacola.com >
X-Mailer: Open WebMail
X-OriginatingIP: 116.203.110.88 (antai)
MIME-Version: 1.0
Content-Type: text/plain;
charset=big5
To: undisclosed-recipients:;

Dear beneficiary, This is to notify you that your Email ID have won One
Million Great British Pounds in the Coca Cola online sweepstakes promo 2011,
for claim respond with your Name, Address, Country, and your Phone number as
soon as possible.

Regards
Coca Cola Online Co-ordinator

Notice that the Reply-To e-mail address (the domain name gncn.net) is different than the sender's e-mail address. Therefore if the user replies to this e-mail, then it will be sent to a Chinese website gncn.net. However this website is not fraud but it is hacked by the sender of the e-mail.