by buried under 419s
Thu Apr 21, 2011 1:03 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 21 Apr 2011 03:59:20 -0700
Received: from nm1-vm1.bullet.mail.kr3.yahoo.com ([111.67.240.243])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QCrbS-0008EH-1k
for ; Thu, 21 Apr 2011 03:59:20 -0700
Received: from [111.67.240.251] by nm1.bullet.mail.kr3.yahoo.com with NNFMP; 21 Apr 2011 10:59:14 -0000
Received: from [111.67.240.253] by tm2.bullet.mail.kr3.yahoo.com with NNFMP; 21 Apr 2011 10:59:14 -0000
Received: from [127.0.0.1] by omp1002.mail.kr3.yahoo.com with NNFMP; 21 Apr 2011 10:59:14 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 47505 invoked by uid 60001); 21 Apr 2011 10:59:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1303383554; bh=fFm5nCVL6zn2LheL541lSwrrhoD4u7Oebc6jfBRS+PI=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=A7B0T1fqE4cHswzWIxgJrKodmTCAfGrNKueSJtKjRsGYDjYGwpuT3SBbA8BYv5n2Mcs0jMACZW9pyXk60N7shZHF7N1rFFTkdqaoowquxdUg7gmLzh4Shu9VjwIluWvtBytRkIijABwV2CnIoN084ebxuymfSeTofzQf3NvUrsw=
Message-ID: <[email protected]>
X-YMail-OSG: ikhHXAQVM1lXPt67k55X.EXN0T2JtZ.jOTZP.KyyGMa4yMk
Received: from [41.138.172.144] by web70707.mail.kr3.yahoo.com via HTTP; Thu, 21 Apr 2011 19:59:14 KST
X-Mailer: YahooMailClassic/12.0.2 YahooMailWebService/0.8.110.299900
Date: Thu, 21 Apr 2011 19:59:11 +0900 (KST)
From: "Barr.Femi Lazak" <[email protected]>
Reply-To: [email protected]
Subject: RE:CONTACT WESTERN UNION PAYMENT CENTER
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-467816598-1303383554=:47398"
X-Spam-Subject: ***SPAM*** RE:CONTACT WESTERN UNION PAYMENT CENTER
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: Beneficiary, This is to inform you that your Emails
ID has won you prize money of USD$800,000.00(Eight hundred Thousand United
States Dollars) for this Year Lottery promotion organized by western union
Company here in Benin, Your Email-ID was selected by the Microsoft Corporation
which Always Supplied western union Company With Five Thousand Email Addresses
of Active Internet Users Yearly, And Your Email Address Was Submitted as
one Of the Active Internet Users For this Year. [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 LOTTO_AGENT BODY: Claims Agent
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[111.67.240.243 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail (ecdoffice[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 T_REMOTE_IMAGE Message contains an external image
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 MONEY_LOTTERY Lots of money from a lottery
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-467816598-1303383554=:47398
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Attention: Beneficiary,
This is to inform you that your Emails ID has won you prize money of USD$800,000.00(Eight hundred Thousand United States Dollars) for this Year Lottery promotion organized by western union Company here in Benin, Your Email-ID was selected by the Microsoft Corporation which Always Supplied western union Company With Five Thousand Email Addresses of Active Internet Users Yearly, And Your Email Address Was Submitted as one Of the Active Internet Users For this Year.
We have concluded to effect your payment via western union by $5000 Daily until the total payment of your payment $800,000.00 is completely sent to you.
The Director administrator of fund release has already signed your payment, Now contact the western union payment center to give you the MTCN and sender's name to pick up your money.
Contact Person
Mr.John Yisa Jr. )
Western Union payment officer,
Phone: +229-98395928.
E-mail; [email protected]
Contact Mr.John Yisa Jr. and ask him to give you the MTCN and sender's name to pick the $5000, send to him the blow information ASAP to avoid mistake.
Your full name:_________________________
Your address:__________________________
Your country:__________________________
Your Phone number:____________________
Thanks
Barr.Femi Lazak
Envelope-to:
Delivery-date: Thu, 21 Apr 2011 03:59:20 -0700
Received: from nm1-vm1.bullet.mail.kr3.yahoo.com ([111.67.240.243])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QCrbS-0008EH-1k
for ; Thu, 21 Apr 2011 03:59:20 -0700
Received: from [111.67.240.251] by nm1.bullet.mail.kr3.yahoo.com with NNFMP; 21 Apr 2011 10:59:14 -0000
Received: from [111.67.240.253] by tm2.bullet.mail.kr3.yahoo.com with NNFMP; 21 Apr 2011 10:59:14 -0000
Received: from [127.0.0.1] by omp1002.mail.kr3.yahoo.com with NNFMP; 21 Apr 2011 10:59:14 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 47505 invoked by uid 60001); 21 Apr 2011 10:59:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1303383554; bh=fFm5nCVL6zn2LheL541lSwrrhoD4u7Oebc6jfBRS+PI=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=A7B0T1fqE4cHswzWIxgJrKodmTCAfGrNKueSJtKjRsGYDjYGwpuT3SBbA8BYv5n2Mcs0jMACZW9pyXk60N7shZHF7N1rFFTkdqaoowquxdUg7gmLzh4Shu9VjwIluWvtBytRkIijABwV2CnIoN084ebxuymfSeTofzQf3NvUrsw=
Message-ID: <[email protected]>
X-YMail-OSG: ikhHXAQVM1lXPt67k55X.EXN0T2JtZ.jOTZP.KyyGMa4yMk
Received: from [41.138.172.144] by web70707.mail.kr3.yahoo.com via HTTP; Thu, 21 Apr 2011 19:59:14 KST
X-Mailer: YahooMailClassic/12.0.2 YahooMailWebService/0.8.110.299900
Date: Thu, 21 Apr 2011 19:59:11 +0900 (KST)
From: "Barr.Femi Lazak" <[email protected]>
Reply-To: [email protected]
Subject: RE:CONTACT WESTERN UNION PAYMENT CENTER
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-467816598-1303383554=:47398"
X-Spam-Subject: ***SPAM*** RE:CONTACT WESTERN UNION PAYMENT CENTER
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: Beneficiary, This is to inform you that your Emails
ID has won you prize money of USD$800,000.00(Eight hundred Thousand United
States Dollars) for this Year Lottery promotion organized by western union
Company here in Benin, Your Email-ID was selected by the Microsoft Corporation
which Always Supplied western union Company With Five Thousand Email Addresses
of Active Internet Users Yearly, And Your Email Address Was Submitted as
one Of the Active Internet Users For this Year. [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 LOTTO_AGENT BODY: Claims Agent
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[111.67.240.243 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail (ecdoffice[at]gmail.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 T_REMOTE_IMAGE Message contains an external image
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 MONEY_LOTTERY Lots of money from a lottery
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-467816598-1303383554=:47398
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Attention: Beneficiary,
This is to inform you that your Emails ID has won you prize money of USD$800,000.00(Eight hundred Thousand United States Dollars) for this Year Lottery promotion organized by western union Company here in Benin, Your Email-ID was selected by the Microsoft Corporation which Always Supplied western union Company With Five Thousand Email Addresses of Active Internet Users Yearly, And Your Email Address Was Submitted as one Of the Active Internet Users For this Year.
We have concluded to effect your payment via western union by $5000 Daily until the total payment of your payment $800,000.00 is completely sent to you.
The Director administrator of fund release has already signed your payment, Now contact the western union payment center to give you the MTCN and sender's name to pick up your money.
Contact Person
Mr.John Yisa Jr. )Western Union payment officer,
Phone: +229-98395928.
E-mail; [email protected]
Contact Mr.John Yisa Jr. and ask him to give you the MTCN and sender's name to pick the $5000, send to him the blow information ASAP to avoid mistake.
Your full name:_________________________
Your address:__________________________
Your country:__________________________
Your Phone number:____________________
Thanks
Barr.Femi Lazak
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces