More Nigerian AOL Spam

Posted by Dave Yadallee on


From - Tue Mar 18 15:15:52 2014

X-Account-Key: account2

X-UIDL: 00057323501fb806

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-path:

Envelope-to: aboo@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Mar 2014 15:15:29 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.82)

(envelope-from )

id 1WQ0np-0005dP-Sl

for aboo@doctor.nl2k.ab.ca; Tue, 18 Mar 2014 14:40:02 -0600

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Tue, 18 Mar 2014 14:40:01 -0600

Resent-Message-ID: <20140318204001.GA18067@doctor.nl2k.ab.ca>

Resent-To: See root

Received: from omr-d09.mx.aol.com ([205.188.108.133])

by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)

(Exim 4.82)

(envelope-from )

id 1WPxPB-0004dK-M7

for doctor@doctor.nl2k.ab.ca; Tue, 18 Mar 2014 11:02:43 -0600

Received: from mtaomg-mbd01.mx.aol.com (mtaomg-mbd01.mx.aol.com [172.26.252.15])

by omr-d09.mx.aol.com (Outbound Mail Relay) with ESMTP id 9964F702380A8;

Tue, 18 Mar 2014 13:02:12 -0400 (EDT)

Received: from core-aaa04h.mail.aol.com (core-aaa04.mail.aol.com [172.26.125.4])

by mtaomg-mbd01.mx.aol.com (OMAG/Core Interface) with ESMTP id E31B238000083;

Tue, 18 Mar 2014 13:02:10 -0400 (EDT)

X-MB-Message-Source: WebUI

Subject: I DO APPRECIATE ALL YOUR EFFORTS.

X-MB-Message-Type: User

MIME-Version: 1.0

From: Bintou Abdallah

Content-Type: multipart/alternative;

boundary="--------MB_8D110E2EFC31760_D50_9522F_webmail-d136.sysops.aol.com"

X-Mailer: AOL WebMail 38442 - STANDARD

Received: from 41.138.99.35 by webmail-d136.sysops.aol.com (149.174.18.26) with HTTP (WebMailUI); Tue, 18 Mar 2014 13:02:10 -0400

Message-Id: <8D110E2EFB26DCE-D50-2C221@webmail-d136.sysops.aol.com>

X-Originating-IP: [41.138.99.35]

Date: Tue, 18 Mar 2014 13:02:10 -0400 (EDT)

x-aol-global-disposition: G

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;

s=20121107; t=1395162132;

bh=Kh10pDXMnfqiA+03lcOzM5pb4ycEe8p/1gMVDdbqt4A=;

h=From:Subject:Message-Id:Date:MIME-Version:Content-Type;

b=T+3L/64CTbKR0FJ1mzar7bd2lcXx1jqdhGGRfJHtnzaLDMaCKZ6CdTlIyiy9XUFKX

/2QG6bURDnudYxIfrzE/X+zlTWoS5MlZJxlI7F26PtiO1xIRhg8bxz8x//J481eIIz

aQtgOkbcHcveI3/H1ffxTNrEcpiUnnDxz0aoDVm8=

x-aol-sid: 3039ac1afc0f53287c121204

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Dear Partner. I'm happy to inform you about my success in

getting the fund transferred under the cooperation of a new partner from UNITED

STATES OF AMERICA. Presently I'm in AMERICA for investment projects with

my own share of the total sum. Meanwhile, I didn't forget your past efforts

and attempts to assist me in transferring those funds despite that it failed

us some how. [...]



Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FREEMAIL_FROM Sender email is freemail (bintou.abdallah1[at]aol.fr)

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit (bintou.abdallah1[at]aol.fr)

1.2 MISSING_HEADERS Missing To: header

1.2 HK_SCAM_N8 BODY: HK_SCAM_N8

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_REPLY From and body contain different freemails

0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL

0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} I DO APPRECIATE ALL YOUR EFFORTS.



This is a multi-part message in MIME format.

----------MB_8D110E2EFC31760_D50_9522F_webmail-d136.sysops.aol.com

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset="us-ascii"



Dear Partner.



I'm happy to inform you about my success in getting the fund transferred un=

der the cooperation of a new partner from UNITED STATES OF AMERICA. Present=

ly I'm in AMERICA for investment projects with my own share of the total su=

m. Meanwhile, I didn't forget your past efforts and attempts to assist me i=

n transferring those funds despite that it failed us some how.=20



Now contact my PASTOR, JUNE ALI and her private Email Address (pastor.june_=

ali@yahoo.com) ask him to send you the total $500.000.00 dollars only to yo=

ur account since the money was deposited in Apex Bank Of Africa which I kep=

t for your compensation for all the past efforts and attempts to assist me =

in this matter.



I appreciated your efforts at that time very much. So feel free and get in =

touched with my pastor as a honest man of God and instruct him where to sen=

d the amount to you through apex bank where the money was deposited.



Please do let me know immediately you receive it so that we can share the j=

oy after all the sufferness at that time. in the moment, I am very busy her=

e because of the investment projects which me and the new partner are havin=

g at hand, finally, remember that I had forwarded instruction to the pastor=

on your behalf to receive that amount, so feel free to get in touch with P=

astor June Ali and he will send the amount to you without any delay through=

apex bank where I deposited the money under fix depositing account.=20



With best regards.





323 KATAHDIN .

LEXINGTON, 02421

MASSACHUSETTS,

UNITED STATES OF AMERICA





----------MB_8D110E2EFC31760_D50_9522F_webmail-d136.sysops.aol.com

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset="us-ascii"



Dear Partner.





I'm happy to inform you about my success in getting the fund transferred un=

der the cooperation of a new partner from UNITED STATES OF AMERICA. Present=

ly I'm in AMERICA for investment projects with my own share of the total su=

m. Meanwhile, I didn't forget your past efforts and attempts to assist me i=

n transferring those funds despite that it failed us some how.





Now contact my PASTOR, JUNE ALI and her private Email Address (pastor.june_=

ali@yahoo.com) ask him to send you the total $500.000.00 dollars only to yo=

ur account since the money was deposited in Apex Bank Of Africa which I kep=

t for your compensation for all the past efforts and attempts to assist me =

in this matter.





I appreciated your efforts at that time very much. So feel free and get in =

touched with my pastor as a honest man of God and instruct him where to sen=

d the amount to you through apex bank where the money was deposited.





Please do let me know immediately you receive it so that we can share the j=

oy after all the sufferness at that time. in the moment, I am very busy her=

e because of the investment projects which me and the new partner are havin=

g at hand, finally, remember that I had forwarded instruction to the pastor=

on your behalf to receive that amount, so feel free to get in touch with P=

astor June Ali and he will send the amount to you without any delay through=

apex bank where I deposited the money under fix depositing account.





With best regards.








323 KATAHDIN .


LEXINGTON, 02421


MASSACHUSETTS,


UNITED STATES OF AMERICA







----------MB_8D110E2EFC31760_D50_9522F_webmail-d136.sysops.aol.com--



More Nigerian AOL Spam

Posted by Dave Yadallee on
From - Tue Mar 18 08:16:17 2014

X-Account-Key: account2

X-UIDL: 00057315501fb806

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-path:

Envelope-to: aboo@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Mar 2014 08:16:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.82)

(envelope-from )

id 1WPukF-0004Dk-9v

for aboo@doctor.nl2k.ab.ca; Tue, 18 Mar 2014 08:11:56 -0600

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Tue, 18 Mar 2014 08:11:55 -0600

Resent-Message-ID: <20140318141155.GB11783@doctor.nl2k.ab.ca>

Resent-To: See root

Received: from oms-dc01.r1000.mx.aol.com ([205.188.167.65])

by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)

(Exim 4.82)

(envelope-from )

id 1WPoWI-00003T-IV

for doctor@doctor.nl2k.ab.ca; Tue, 18 Mar 2014 01:33:41 -0600

Received: from mtaomg-mae02.mx.aol.com (mtaomg-mae02.mx.aol.com [172.26.254.144])

by oms-dc01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 5CA8638000314;

Tue, 18 Mar 2014 03:32:58 -0400 (EDT)

Received: from core-dfd004c.r1000.mail.aol.com (core-dfd004.r1000.mail.aol.com [172.29.55.79])

by mtaomg-mae02.mx.aol.com (OMAG/Core Interface) with ESMTP id DAAE438000081;

Tue, 18 Mar 2014 03:32:56 -0400 (EDT)

X-MB-Message-Source: WebUI

Subject: I NEED YOUR URGENT REPLY

X-MB-Message-Type: User

MIME-Version: 1.0

From: Mohammed Aziz

Content-Type: multipart/alternative;

boundary="--------MB_8D110936A62393A_2DA0_8952B_webmail-m138.sysops.aol.com"

X-Mailer: AOL WebMail 38442 - BASIC

Received: from 41.138.98.145 by webmail-m138.sysops.aol.com (149.174.9.12) with HTTP (WebMailUI); Tue, 18 Mar 2014 03:32:56 -0400

Message-Id: <8D110936A5FD7DA-2DA0-2A23C@webmail-m138.sysops.aol.com>

X-Originating-IP: [41.138.98.145]

Date: Tue, 18 Mar 2014 03:32:56 -0400 (EDT)

x-aol-global-disposition: S

X-SPAM-FLAG: YES

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;

s=20121107; t=1395127978;

bh=4ZvAks7equIQ4y6mPC+S+3YwHLzwbjLHERIzH6N6kl8=;

h=From:Subject:Message-Id:Date:MIME-Version:Content-Type;

b=FswiE1zjU/o/t4t/iYqFSUMWRG3Xa+STlfMze3anB2GRxOoM6t7JaxpvCJEJmn45j

/L0igbjkjhua4Vi1rv1GTUh1JJNCRyvlxdyr3RP1ZKdVkrryEIxfMqrTXaZR2XByd7

qubEbQvYGIvkVRg3AFU3SLg9VF1bSevKHyiWFfLU=

X-AOL-REROUTE: YES

x-aol-sid: 3039ac1afe905327f6a82d1d

X-Spam_score: 19.3

X-Spam_score_int: 193

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Dear Friend, I want to transfer US$20.5 Million to your bank

account. The fund belong to our deceased customer who died with his entire

family in Iraq War 2006, leaving nobody for the claim and as such, I decided

to contact you to enable us claim the fund. Your share is 40% while 60% for

me. This transaction is 100% risky free. Contact me for more details on my

private email address which is � (mohammedaziz349@gmail.com)� � [...]



Content analysis details: (19.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FREEMAIL_FROM Sender email is freemail (mohammed_aziz33[at]aol.fr)

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit (mohammed_aziz33[at]aol.fr)

1.2 MISSING_HEADERS Missing To: header

0.9 URG_BIZ BODY: Contains urgent matter

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_REPLY From and body contain different freemails

1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases

0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} I NEED YOUR URGENT REPLY



This is a multi-part message in MIME format.

----------MB_8D110936A62393A_2DA0_8952B_webmail-m138.sysops.aol.com

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset="utf-8"



=20



Dear Friend,=20



I want to transfer US$20.5 Million to your bank account. The fund belong to=

our deceased customer who died with his entire family in Iraq War 2006, le=

aving nobody for the claim and as such, I decided to contact you to enable =

us claim the fund. Your share is 40% while 60% for me. This transaction is =

100% risky free. Contact me for more details on my private email address wh=

ich is

=C2=A0(mohammedaziz349@gmail.com)=C2=A0=C2=A0=20



Thanks,

Mohammed Aziz.

Banque R=C3=A9gionale de Solidarite( BRS),

ouagadougou,Burkina Faso





----------MB_8D110936A62393A_2DA0_8952B_webmail-m138.sysops.aol.com

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset="utf-8"












Dear Friend,





I want to transfer US$20.5 Million to your bank account. The fund belong to=

our deceased customer who died with his entire family in Iraq War 2006, le=

aving nobody for the claim and as such, I decided to contact you to enable =

us claim the fund. Your share is 40% while 60% for me. This transaction is =

100% risky free. Contact me for more details on my private email address wh=

ich is


 (mohammedaziz349@gmail.com)  





Thanks,


Mohammed Aziz.


Banque R=C3=A9gionale de Solidarite( BRS),


ouagadougou,Burkina Faso











----------MB_8D110936A62393A_2DA0_8952B_webmail-m138.sysops.aol.com--



More Fraud AOL Spam

Posted by Dave Yadallee on
From - Tue Mar 18 08:04:12 2014

X-Account-Key: account2

X-UIDL: 00057313501fb806

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-path:

Envelope-to: aboo@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Mar 2014 08:03:27 -0600

Received: from oms-dc04.r1000.mx.aol.com ([205.188.167.69])

by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)

(Exim 4.82)

(envelope-from )

id 1WPubT-0003oB-He

for aboo@doctor.nl2k.ab.ca; Tue, 18 Mar 2014 08:03:25 -0600

Received: from mtaomg-mae01.mx.aol.com (mtaomg-mae01.mx.aol.com [172.26.254.143])

by oms-dc04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 9DF4138002505;

Tue, 18 Mar 2014 10:02:42 -0400 (EDT)

Received: from core-dhd003c.r1000.mail.aol.com (core-dhd003.r1000.mail.aol.com [172.29.209.131])

by mtaomg-mae01.mx.aol.com (OMAG/Core Interface) with ESMTP id DC39738000085;

Tue, 18 Mar 2014 10:02:40 -0400 (EDT)

X-MB-Message-Source: WebUI

Subject: Urgent & Important.

X-MB-Message-Type: User

MIME-Version: 1.0

From: Nikolay Sintsov

Content-Type: multipart/alternative;

boundary="--------MB_8D110C9DC458951_3AAC_8E37E_webmail-m300.sysops.aol.com"

X-Mailer: AOL WebMail 38442 - STANDARD

Received: from 41.138.100.139 by webmail-m300.sysops.aol.com (64.12.152.39) with HTTP (WebMailUI); Tue, 18 Mar 2014 10:02:40 -0400

Message-Id: <8D110C9DC458951-3AAC-2C49A@webmail-m300.sysops.aol.com>

X-Originating-IP: [41.138.100.139]

Date: Tue, 18 Mar 2014 10:02:40 -0400 (EDT)

x-aol-global-disposition: S

X-SPAM-FLAG: YES

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;

s=20121107; t=1395151362;

bh=3sFcR3IVwRKJ2Dny9BpjKQYphCFUzasd38VO0JARCcI=;

h=From:Subject:Message-Id:Date:MIME-Version:Content-Type;

b=Bw2U8xdTJR1IhMWU/v3oA1pB8DY31nSWhv8LqsePavsrv0GWB8UKWHQ8V28oZ48eN

L6kttKH9GebuZPEKX3Xt7Dye+w/8dViaFZ/12QhdkFDcV5Dfh/0+cZ768GH0cBpHVF

/y0D5WO3YnEJS28xWK6Zq9LEWxUPvTds8j9R3A3Q=

X-AOL-REROUTE: YES

x-aol-sid: 3039ac1afe8f532852007b23

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Good day, I am Nikolay Sintsov, personal assistant to Mikhail

Khodorkovsky, once rated as the richest man in Russia and owner of YUKOS

OIL (Russian largest oil company),chairman CEO: Menatep SBP Bank (a well reputable

financial institution with its branches all over the world). SOURCE OF FUNDS:

[...]



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FREEMAIL_FROM Sender email is freemail (nikolaysintsov1[at]aol.fr)

2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit (nikolaysintsov1[at]aol.fr)

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} Urgent & Important.



This is a multi-part message in MIME format.

----------MB_8D110C9DC458951_3AAC_8E37E_webmail-m300.sysops.aol.com

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset="us-ascii"





=20



=20



Good day,

I am Nikolay Sintsov, personal assistant to Mikhail Khodorkovsky, once ra=

ted as the richest man in Russia and owner of YUKOS OIL (Russian largest oi=

l company),chairman CEO: Menatep SBP Bank (a well reputable financial insti=

tution with its branches all over the world).

SOURCE OF FUNDS:

=20

=20

I have a profiling amount in an excess of US$40.5M, which I seek you to a=

ccommodate for me. You will be rewarded with 40% of the total sum for your =

partnership. Can you handle this? As his personal assistant, I was authoriz=

ed to transfer money of an American oil merchant for his last oil deal with=

my boss Mikhail Khodorkovsky.

=20

=20

The funds have since left the shores of America to a European private fin=

ancial institution where the final crediting is to be carried out. While I =

was on the process, my boss got arrested for his involvement in politics by=

financing the

=20

leading and opposing political parties (the Union of Right Forces, led by=

Boris Nemtsov, and Yabloko, a liberal/social democratic party led by Grego=

r

Yavlinsky), which posed as a threat to President Vladimir Putin's second =

Tenure as Russian president. Since then, I have placed on hold all transact=

ions concerning this amount. You can catch more of the story on this websit=

e:

=20

=20

http://www.yukos.com

http://news.ft.com/cms/4bb9612a-d254-11d8-b661-00000e2511c8.html

http://www.hoovers.com/yukos/--ID__53700--/free-co-factsheet.xhtml

http://newsfromrussia.com/main/2003/11/13/51215.html

YOUR ROLE:

=20

=20

All I need from you is to stand as the beneficiary of the above mentioned=

sum and I will re-profile the funds with your data, which will enable the =

financial firm transfer the sum to you. I have decided to use this sum to r=

elocate to the

=20

American continent and never to be connected to any of Mikhail Khodorkovs=

ky conglomerates, presently I am in London, for a hide out,

=20

The transaction has to be concluded as soon and as I confirm your readine=

ss to proceed with me, I will provide you with details. Reply to my private=

email:(n.sintsov@yandex.com)

Thank you very much.

=20

Regards,

Nikolay Sintsov=20

=20



----------MB_8D110C9DC458951_3AAC_8E37E_webmail-m300.sysops.aol.com

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset="us-ascii"

































Good day,






I am Nikolay Sintsov, personal assistant to Mikhail Khodorkovsky, once ra=

ted as the richest man in Russia and owner of YUKOS OIL (Russian largest oi=

l company),chairman CEO: Menatep SBP Bank (a well reputable financial insti=

tution with its branches all over the world).






SOURCE OF FUNDS:




















I have a profiling amount in an excess of US$40.5M, which I seek you to a=

ccommodate for me. You will be rewarded with 40% of the total sum for your =

partnership. Can you handle this? As his personal assistant, I was authoriz=

ed to transfer money of an American oil merchant for his last oil deal with=

my boss Mikhail Khodorkovsky.




















The funds have since left the shores of America to a European private fin=

ancial institution where the final crediting is to be carried out. While I =

was on the process, my boss got arrested for his involvement in politics by=

financing the













leading and opposing political parties (the Union of Right Forces, led by=

Boris Nemtsov, and Yabloko, a liberal/social democratic party led by Grego=

r






Yavlinsky), which posed as a threat to President Vladimir Putin's second =

Tenure as Russian president. Since then, I have placed on hold all transact=

ions concerning this amount. You can catch more of the story on this websit=

e:




















http://www.yukos.com






http://news.ft.com/cms/4bb9612a-d254-11d8-b661-00000e2511c8.html






http://www.hoovers.com/yukos/--ID__53700--/free-co-factsheet.xhtml






http://newsfromrussia.com/main/2003/11/13/51215.html






YOUR ROLE:




















All I need from you is to stand as the beneficiary of the above mentioned=

sum and I will re-profile the funds with your data, which will enable the =

financial firm transfer the sum to you. I have decided to use this sum to r=

elocate to the













American continent and never to be connected to any of Mikhail Khodorkovs=

ky conglomerates, presently I am in London, for a hide out,













The transaction has to be concluded as soon and as I confirm your readine=

ss to proceed with me, I will provide you with details. Reply to my private=

email:(n.sintsov@yandex.com)






Thank you very much.













Regards,






Nikolay Sintsov






=20







----------MB_8D110C9DC458951_3AAC_8E37E_webmail-m300.sysops.aol.com--



More Nigerian AOL Spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: sales@nk.ca

Delivery-date: Mon, 17 Mar 2014 06:58:45 -0600

Received: from oms-md01.mx.aol.com ([64.12.81.145])

by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)

(Exim 4.82)

(envelope-from )

id 1WPX7L-0006jJ-UD

for sales@nk.ca; Mon, 17 Mar 2014 06:58:44 -0600

Received: from mtaout-mbd01.mx.aol.com (mtaout-mbd01.mx.aol.com [172.26.252.13])

by oms-md01.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 9864938000314

for ; Mon, 17 Mar 2014 08:58:03 -0400 (EDT)

Received: from system-67370fe2 (unknown [197.255.169.45])

by mtaout-mbd01.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id EDE91380000B4

for ; Mon, 17 Mar 2014 08:57:59 -0400 (EDT)

From: "AGRICULTURAL DEVELOPMENT BANK (ADB)"

Subject: Dear partner

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="XleJ6vi0=_EEUa4BkKildcP7hPYfYi7NkK0"

MIME-Version: 1.0

Reply-To: martinegobia0003@live.com

Date: Mon, 17 Mar 2014 14:00:51 -0800

x-aol-global-disposition: S

X-SPAM-FLAG: YES

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;

s=20121107; t=1395061083;

bh=M1g4iQGv7WISVUb9+AJxOamRBskI6EM+l28YfQL6PCA=;

h=From:To:Subject:Date:MIME-Version:Content-Type;

b=opxLl/MdZKdYSKjd8bfBIz6aL/VIzcywlQEwEoh4GeKqnE3VFyto9DLO/uKdRiapB

dxrfIW0JtwQBTBh26Ylv6IlDyx8lX9hqn0c+QzOpJIsOk+K906+OxBCLe5Y7fUely9

tmXJJwQpHlfcPLQVkaSdDQMi8nNEN0YEtRpS4Bts=

X-AOL-REROUTE: YES

x-aol-sid: 3039ac1afc0d5326f157165b

X-AOL-IP: 197.255.169.45

X-Spam_score: 22.7

X-Spam_score_int: 227

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: - This mail is in HTML. Some elements may be ommited in plain

text. - FROM THE DESK OF MR. MARTIN EGOBIA, DIRECTOR AUDIT DEPARTMENT, AGRICULTURAL

DEVELOPMENT BANK (ADB) Dear partner - 17-03-2014, I AM MR. MARTIN EGOBIA,

DIRECTOR, AUDIT DEPARTMENT OF THE AGRICULTURAL DEVELOPMENT BANK (ADB). I

am soliciting for your immediate assistance in transferring the sum of ($45.5M)

million into your bank account within 10 to 14 bank working days. This account

belongs to a foreign customer by name, Engineer Luther Fraatz who died in

a plane crash in 2000. The late Engr. Luther Fraatz was one of the Accredited

Engineers to the Nigerian National Petroleum Corporations (NNPC) You can

view the website below for more details: WEB SITE http://news.bbc.co.uk/2/hi/europe/859479.stm

Before now, top management of my Bank has tried all they could to locate

the next of kin to the late engineer but all to no avail as his only known

wife also died with him on the crash. Just last week, a decision has been

reached by our Board of Directors that the late Engineers fund shall be declared

as "UNCLIMBABLE' by the end of March.2014 if no one (Beneficiary) come forward

for it. It was in view of this, that i decided to contact you so that I can

present you to my bank as the next of kin to the Late Engr.Luther Fraatz

so that we could have the fund transferred to your nominated Bank account

anywhere in the world. I have already done my home work in regards to this

and i am 100% sure that all will be well at the end of the day.So, I know

you may be apprehensive, but let me assure you that we are sure to succeed

provided you co-operate with me. Let me also assure you here that all legal

documents to back up the claim will be carefully perfected so that they would

authenticate you as the true beneficiary to the Late Engr. Fraatz before

submitting them to the Foreign Remittance Section of my Bank for the commencement

of the fund transfer.For your collaboration, 30% of the entire fund shall

be your own share of the deal, while 65% will come to me and my colleague

at the Computer Department and the remaining 5% will be set [...]



Content analysis details: (22.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FREEMAIL_FROM Sender email is freemail (kjdhgjxx76[at]aol.com)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

(martinegobia0003[at]live.com

)

2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit (kjdhgjxx76[at]aol.com)

0.0 HK_SCAM_N2 BODY: HK_SCAM_N2

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 MISSING_MID Missing Message-Id: header

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.5 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 DECEASED_NO_ML Dead not via mailing list

0.0 FILL_THIS_FORM Fill in a form with personal information

2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form

1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form

0.0 MONEY_FORM Lots of money if you fill out a form

0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases

0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases

0.5 FORM_FRAUD_5 Fill a form and many fraud phrases

0.5 FORM_FRAUD_3 Fill a form and several fraud phrases

Subject: {SPAM?} Dear partner



This is a multi-part message in MIME format



--XleJ6vi0=_EEUa4BkKildcP7hPYfYi7NkK0

Content-Type: text/plain

Content-Transfer-Encoding: quoted-printable



- This mail is in HTML. Some elements may be ommited in plain text. -



FROM THE DESK OF MR. MARTIN EGOBIA,

DIRECTOR AUDIT DEPARTMENT,

AGRICULTURAL DEVELOPMENT BANK (ADB)

Dear partner - 17-03-2014,

I AM MR. MARTIN EGOBIA, DIRECTOR, AUDIT DEPARTMENT OF THE AGRICULTURAL=

DEVELOPMENT BANK (ADB). I am soliciting for your immediate assistance

in transferring the sum of ($45.5M) million into your bank account wit=

hin 10 to 14 bank working days.

This account belongs to a foreign customer by name, Engineer Luther Fr=

aatz who died in a plane crash in 2000. The late Engr. Luther Fraatz

was one of the Accredited Engineers to the Nigerian National Petroleum=

Corporations

(NNPC) You can view the website below for more details:

WEB SITE

http://news.bbc.co.uk/2/hi/europe/859479.stm

Before now, top management of my Bank has tried all they could to loca=

te the next of kin to the late engineer but all to no avail as his onl=

y known wife also died with him on the crash. Just last week, a

decision has been reached by our Board of Directors that the late Engi=

neers fund shall be declared as "UNCLIMBABLE' by the end of March.2014=

if no one (Beneficiary) come forward for it. It was in view of

this, that i decided to contact you so that I can present you to my ba=

nk as the next of kin to the Late Engr.Luther Fraatz so that we could =

have the fund transferred to your nominated Bank account anywhere in the

world. I have already done my home work in regards to this and i am 10=

0% sure that all will be well at the end of the day.So, I know you may=

be apprehensive, but let me assure you that we are sure to succeed pr=

ovided you co-operate with me.

Let me also assure you here that all legal documents to back up the cl=

aim will be carefully perfected so that they would authenticate you as=

the true beneficiary to the Late Engr. Fraatz before submitting them =

to the Foreign

Remittance Section of my Bank for the commencement of the fund transfe=

r.For your collaboration, 30% of the entire fund shall be your own sha=

re of the deal, while 65% will come to me and my colleague at the Comp=

uter Department and the remaining 5% will be set aside to off-set any =

expenses that might come up in the course of the transfer. As soon

as the fund transfer is successful, I will come over to your country f=

or the disbursement of the fund according to the agreed percentage ind=

icated.Reply me if interested without much delay as I am due to submit=

final report

on the matter few days from now.

However, to facilitate the immediate processing of all the necessary i=

nformation/documents in this transaction,

I will appreciate if you

could fill in your personal information as indicated below:

1. YOUR FULL NAMES:... ....................

2. YOUR ADDRESS:...........................

3. YOUR CELLPHONE..........................

4. AGE.....................................

5. SEX:....................................

6. YOUR OCCUPATION.........................

I wait to receive your immediate response.

Best Regards,

MR. MARTIN EGOBIA

DIRECTOR, AUDIT DEPARTMENT

AGRICULTURAL DEVELOPMENT BANK (ADB)



--XleJ6vi0=_EEUa4BkKildcP7hPYfYi7NkK0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable







FROM THE DESK OF MR. MARTIN EGOBIA,
DIRECTOR AUDIT DEPARTMENT,
R>AGRICULTURAL DEVELOPMENT BANK (ADB)



Dear partner - 17-03-2014,



I AM MR. MARTIN EGOBIA, DIRECTOR, AUDIT DEPARTMENT OF THE AGRICULTU=

RAL DEVELOPMENT BANK (ADB). I am soliciting for your immediate  a=

ssistance
in transferring the sum of ($45.5M) million into your ban=

k account within 10 to 14 bank working days.



This account belongs to a foreign customer by name, Engineer Luther=

Fraatz who died in a plane crash in 2000. The late Engr. Luther Fraat=

z
was one of the Accredited Engineers to the Nigerian National Petr=

oleum Corporations
(NNPC) You can    view the websit=

e below for more details:



WEB SITE h=

ttp://news.bbc.co.uk/2/hi/europe/859479.stm




Before now, top management of my Bank has tried all they could =

to locate the next of kin to the late engineer but all to no avail as =

his only known wife also died with him on the crash. Just last week, a=


decision has been reached by our Board of Directors that the late =

Engineers fund shall be declared as "UNCLIMBABLE' by the end of March.=

2014 if no one (Beneficiary) come forward for it. It was in view of
>this, that i decided to contact you so that I can present you to my b=

ank as the next of kin to the Late Engr.Luther Fraatz so that we could=

have the fund transferred to your nominated Bank account anywhere in =

the
world. I have already done my home work in regards to this and =

i am 100% sure that all will be well at the end of the day.So, I know =

you may be apprehensive, but let me assure you that we are sure to suc=

ceed provided you co-operate with me.



Let me also assure you here that all legal documents to back up the=

claim will be carefully perfected so that they would authenticate you=

as the true beneficiary to the Late Engr. Fraatz before submitting th=

em to the Foreign
Remittance Section of my Bank for the commencemen=

t of the fund transfer.For your collaboration, 30% of the entire fund =

shall be your own share of the deal, while 65% will come to me and my =

colleague at the Computer Department and the remaining 5% will be set =

aside to off-set any expenses that might come up in the course of the =

transfer. As soon
as the fund transfer is successful, I will come o=

ver to your country for the disbursement of the fund according to the =

agreed percentage indicated.Reply me if interested without much delay =

as I am due to submit final report
on the matter few days from now.=



However, to facilitate the immediate processing of all the necessar=

y information/documents in this transaction,



I will appreciate if you
could fill in your personal information=

as indicated below:



1. YOUR FULL NAMES:... ....................
2. YOUR ADDRESS:....=

.......................
3. YOUR CELLPHONE.........................=

.
4. AGE.....................................
5. SEX:..........=

..........................
6. YOUR OCCUPATION.....................=

....



I wait to receive your immediate response.



Best Regards,



MR. MARTIN EGOBIA
DIRECTOR, AUDIT DEPARTMENT
AGRICULTURAL DEV=

ELOPMENT BANK (ADB)





--XleJ6vi0=_EEUa4BkKildcP7hPYfYi7NkK0--