PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : VITAL INFO projecthsbl421@netscape.net



peter1962
24.06.2004, 09:04
From - Fri Jun 25 xx:xx:xx 2004
X-UIDL: [UID filtered]
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <project2003 [at] auctionpaymentss.com>
X-Flags: 1000
Delivered-To: GMX delivery to ..... [at] gmx.de
Received: (qmail 32510 invoked by UID: [UID filtered]
Received: from server010.webpack.hosteurope.de (EHLO server010.webpack.hosteurope.de) (80.237.130.18)
by mx0.gmx.net (mx032) with SMTP; 25 Jun 2004 xx:xx:xx +0200
Envelope-to: poor [at] spamvictim.tld
Received: from epsilon.mc1.hosteurope.de ([80.237.128.250])
by server010.webpack.hosteurope.de with esmtp (TLSv1:DES-CBC3-SHA:168)
(Exim 4.34)
ID: [ID filtered]
for poor [at] spamvictim.tld; Fri, 25 Jun 2004 xx:xx:xx +0200
Received: from appendix.udag.de ([62.146.106.70])
by epsilon.mc1.hosteurope.de with esmtp (Exim 4.34)
ID: [ID filtered]
for poor [at] spamvictim.tld; Fri, 25 Jun 2004 xx:xx:xx +0200
Received: from mail.rediffmailpro.com (f1mail.rediffmailpro.com [203.199.83.211])
by appendix.udag.de (Postfix) with SMTP ID: [ID filtered]
for <poor [at] spamvictim.tld>; Fri, 25 Jun 2004 xx:xx:xx +0200 (CEST)
Received: (qmail 11926 invoked by UID: [UID filtered]
Date: 25 Jun 2004 xx:xx:xx -0000
Message-ID: [ID filtered]
Received: from unknown (213.185.113.214) by rediffmail.com via HTTP; 25 Jun 2004 xx:xx:xx -0000
MIME-Version: 1.0
From: "project2003" <project2003 [at] auctionpaymentss.com>
Reply-To: "project2003" <project2003 [at] auctionpaymentss.com>
To: poor [at] spamvictim.tld
Subject: VITAL INFO
Content-type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
X-HE-Spam-Level: +++++++++
X-HE-Spam-Score: 9.0
X-HE-Spam-Report: Content analysis details: (9.0 points)
pts rule name description
---- ---------------------- --------------------------------------------------
0.9 FROM_ENDS_IN_NUMS From: ends in numbers
0.7 RISK_FREE BODY: Risk free. Suuurreeee....
1.1 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
0.6 SUBJ_ALL_CAPS Subject is all capitals
2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?213.185.113.214&gt;]
1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List
[<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL15296&gt;]
1.6 NIGERIAN_BODY1 Message body looks like a Nigerian spam message 1+
0.8 MSGID_FROM_MTA_HEADER Message-ID: [ID filtered]
X-GMX-Antivirus: -1 (not scanned, may not use virus scanner)
X-GMX-Antispam: 0 (Mail was not recognized as spam)

MR. WANG QIN
HANG SENG BANK LTD.
DES VOEUX RD. BRANCH,
CENTRAL HONG KONG,
HONK KONG.
EMAIL: projecthsbl421 [at] netscape.net

I am Mr. Wang Qin credit officer of the Hang Seng Bank Ltd.I have a concealed business suggestion for you.

Before the U.S and Iraqi war, our client General. Ibrahim Moussa who was with the Iraqi forces and also
business man made a numbered fixed deposit for 18 calendar months, with a value of Twenty millions Five
Hundred Thousand United State Dollars only in my branch.

Upon maturity several notice was sent to him, even during the war early this year.
Again after the war another notification was sent and still no response came from him.
We later find out that the General and his family had been killed during the war in bomb blast that hit their home.

After further investigation it was also discovered that Gen. Ibrahim Moussa dID: [ID filtered]
his official papers including the paper work of his bank deposit. And he also confided in me the last time he was
at my office that no one except me knew of his deposit in my bank.

So, Twenty millions Five Hundred Thousand United State Dollars is still lying in my bank and no one will ever come
forward to claim it. What bothers me most is that according to the to the laws of my country at the expiration
three years the funds will revert to the ownership of the Hong Kong Government if nobody applies to claim the funds.
Against this backdrop, my suggestion to you is that I will like you as a foreigner to stand as the next of kin to Gen.
Ibrahim Moussa so that you will be able to receive his funds.

WHAT IS TO BE DONE:

I want you to know that I have had everything planned out so that we shall come out successful.
I have contacted an attorney that will prepare the necessary document that will back you up as the
next of kin to Gen.Ibrahim Moussa,all that is required from you at this stage is for you to provide me with your
Full Names and Address so that the attorney can commence his job.After you have been made the next of kin,the attorney
will also fill in for claims on your behalf and secure the necessary approval and letter of probate in your favor for
the move of the funds to an account that will be provided by you.

There is no risk involved at all in the matter as we are going adopt a legalized method and the attorney will
prepare all the necessary documents. Please endeavor to observe utmost discretion in all matters concerning this issue.
Once the funds have been transferred to your nominated bank account we shall share in the ratio of 70% for me, 25% for
you and 5% for any expenses incurred during the course of this operation.

Should you be interested please send me your private phone and fax numbers for easy communication, you can write me
via my private box ( projecthsbl421 [at] netscape.net ) and i will provide you with more details of this operation.

Your earliest response to this letter will be appreciated.

Kind Regards
Wang Qin
...........................................................
Der Header sieht etwas wüst aus, da mehrfach weitergeleitet wurde.
Eingeworfen bei 213.185.113.214
Die Adresse wurde am 24.06.2004 um 02:11 Uhr
von 213.185.113.214 (Ibadan, Nigeria) geerntet.
Das heist, das das der Kerl entweder eine feste IP hat,
oder das der Proxy immer noch offen ist.
Gruß
Peter


Hier gibts Futter:
http://www.xspc.de/email.html

juanito
24.06.2004, 10:14
Hehe, schick ihm doch mal "seinen" Pass zur Ansicht, dann braucht er den nicht nochmal zu scannen http://img.homepagemodules.de/smokin.gif
http://img78.photobucket.com/albums/v248/cdick/qinpassport.jpg
Immerhin hat er Sinn für Humor, man beachte die beiden "419" in der Passnummer http://img.homepagemodules.de/clown.gif

mindphlux
24.06.2004, 10:26
Das ist ein Badger... wer heisst schon WANG QIN (=Wanking) und gibt das auch noch zu? Der Pass ist auch klar.

--------------------------------------------
"Africans, we count people first while money and other material things come after." -- Ann, 419 scammer
Spammer, go to http://www.arghcor.de/

Fidul
25.06.2004, 00:58
Das heist, das das der Kerl entweder eine feste IP hat,
oder das der Proxy immer noch offen ist.
Oder es ist wie häufig ein Internetcafe mit vielen fleißigen Lads an den Terminals.
Man vermutet übrigens, daß irgendwann in der Vergangenheit jemand einem Lad diesen "Paß" und Namen untergeschoben hat und daß dieses Teil seit damals eine höchst unerwartete Karriere macht.
--
Wir kriegen euch alle!