[email protected] Elder Francis Idris

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 24 Nov 2010 02:43:30 -0800
Received: from nm27-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.233])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PLCoz-0007Su-Lq
for ; Wed, 24 Nov 2010 02:43:30 -0800
Received: from [98.139.91.68] by nm27.bullet.mail.sp2.yahoo.com with NNFMP; 24 Nov 2010 10:43:26 -0000
Received: from [98.139.91.10] by tm8.bullet.mail.sp2.yahoo.com with NNFMP; 24 Nov 2010 10:43:26 -0000
Received: from [127.0.0.1] by omp1010.mail.sp2.yahoo.com with NNFMP; 24 Nov 2010 10:43:26 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 63072 invoked by uid 60001); 24 Nov 2010 10:43:25 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1290595405; bh=qUZ+nZGe1VFMoK3iggrpLk0qrOPCQiEM2Cto6aRF6yg=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=BvyZnitXBE8KwHxyKgQraM2LUdlcMJqlunRHkQIzawqV1qPsRKx6hdhYalErPFWYni/hao6iV0O652oGNAsOpIoxrVqKliFKPLs0llZ+uMTzUNFnnaLKbkvRKdZCN/GMv3U0u2pa9PrxBuun1A6bGMzq5gcEH94rlQGrq1hBiYI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=3fDAEMtGQaXBbGzCaqalfECfd6ZEutHlra1Y3A4blpB5CUx93qhp9EtO4YBnGRsJvTUaJYnZROnGiFwwbw0a+0qRFoCq2fY1IcroCxc7xP1VFME3VQkY8qvy5sCmiV1zIdHpQ621/Vi4hu+Lbgs49Y2zOPg5ZPmREkm/CuaodbU=;
Message-ID: <[email protected]>
X-YMail-OSG: mWDIxM8VM1mDIqkzoWnpyzn0nEZpG8u.E..1PBZhWO6Xbn3
Received: from [41.184.32.145] by web83901.mail.sp1.yahoo.com via HTTP; Wed, 24 Nov 2010 02:43:25 PST
X-Mailer: YahooMailClassic/11.4.9 YahooMailWebService/0.8.107.285259
Date: Wed, 24 Nov 2010 02:43:25 -0800 (PST)
From: Elder Francis Idris <[email protected]>
Reply-To: [email protected]
Subject: CONFIRM
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1898405097-1290595405=:61193"
X-Spam-Subject: ***SPAM*** CONFIRM
X-Spam-Status: Yes, score=13.2
X-Spam-Score: 132
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: From:Elder Francis Idris. Director Contract Payment / Verification
Dept. [...]
Content analysis details: (13.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.91.233 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail (mffr[at]att.net)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.7 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5233]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FILL_THIS_FORM Fill in a form with personal information
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.5 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES

--0-1898405097-1290595405=:61193
Content-Type: text/plain; charset=us-ascii



From:Elder Francis Idris.

Director Contract Payment / Verification

Dept.

Abuja Nigeria.



Dear Beneficiary,



I am Elder Francis Idris director contract award payment/verification dept.This is to inform you that the total sum of $21,300,000.00 Million (Twenty-One Million Three Hundred Thousand USA Dollars) has been approved for immediate delivery/transfer in your favor to your designated account or address.



For the purpose of clarification, you are advised to confirm the information as given below ,which will enable the release of the above mentioned funds to your destination without any delay. I shall proceed to include your name and information on the payment schedule list immediately i receive your information and re-confirmation of the receipt of this very proposal back to me and details shall be giving to you on how to proceed with the transfer without further delay.



Beneficiary address and Name...................?

Your phone #...................................?

Your Occupation.................................?

Age....................................?

Also needed, a Scan copy of your Int'l Passport/ID Card............?



Kindly get back via Email; [email protected] , your quick response will be highly

appreciate.



Regards

Elder Francis Idris.

another script from this email
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 29 Jan 2011 01:59:47 -0800
Received: from nm28-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.235])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Pj7ar-0007xG-Ov
for ; Sat, 29 Jan 2011 01:59:47 -0800
Received: from [98.139.91.62] by nm28.bullet.mail.sp2.yahoo.com with NNFMP; 29 Jan 2011 09:59:44 -0000
Received: from [98.139.91.37] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 29 Jan 2011 09:59:44 -0000
Received: from [127.0.0.1] by omp1037.mail.sp2.yahoo.com with NNFMP; 29 Jan 2011 09:59:44 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 73321 invoked by uid 60001); 29 Jan 2011 09:59:44 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1296295183; bh=0AP2Zc+DmBSPc51Ss0Ct5PSWSyPvJC3FAnHQwh82gOk=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=M9crWkxkORN8ZH7rVwnsJob0L79RlTBLORx6EKHh0gTXJvaGZvNp2+Mf+aLYAYGjZkuBA0TOmMEZaV01vlFHzkRUVrkccGEAHKMbKSN/zqtK2yT8AwZDjMrAaGYgPDOsFTh1fNwutlwf1HfI7Y6/D1JGx+GCIGewceV4qecIIBw=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=LWUX4y8RUGK3ivz22BgbQRpfOhBm0FDrNfK7CkksTEiNhe+RzTGi+Cg/XH5mxAxxs8kSXVRSYrcuFq2A24wnXyGBYeAGC59lkNzCxgB2DCqm1wXHMIUmLK2Nw2H+bzdFIcSDwmV+V+q6RqryljJ5hV6GrTz6ySTt4EH9Hn79bgg=;
Message-ID: <[email protected]>
X-YMail-OSG: YgaVsEcVM1moztQA2pRgvhtPtwT4mpVLVmK6TFCI1Up9G6t
Received: from [41.184.32.145] by web83808.mail.sp1.yahoo.com via HTTP; Sat, 29 Jan 2011 01:59:43 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
Date: Sat, 29 Jan 2011 01:59:43 -0800 (PST)
From: Elder Frank <[email protected]>
Reply-To: [email protected]
Subject: DEAR FRIEND DID DID YOU RECEIVED MY MAIL?
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-438153220-1296295183=:70097"
X-Spam-Subject: ***SPAM*** DEAR FRIEND DID DID YOU RECEIVED MY MAIL?
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beneficiary, This is to inform you about our proposal
to build Real Estate or Tourist Hotel in your country with the sum valued
at US$25.3 Million which have been approved in your name for immediate delivery
to you as the beneficiary. [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.91.235 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.184.32.145>]
0.0 FREEMAIL_FROM Sender email is freemail (wsh------xx[at]att.net)
1.5 SUBJ_ALL_CAPS Subject is all capitals
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6566]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES

--0-438153220-1296295183=:70097
Content-Type: text/plain; charset=us-ascii



Dear Beneficiary,



This is to inform you about our proposal to build Real Estate or Tourist Hotel in your country with the sum valued at US$25.3 Million which have been approved in your name for immediate delivery to you as the beneficiary.



For the purpose of clarification, you are advised to reconfirm the information as given below (1)Your Full Names/House Address (2)Your Telephone Numbers and Office Address(3)Your Occupation,which will enable the delivery of the above funds to your destination without any delay.



I shall give the full details on how you inherited the funds once you return this inheritance payment notification letter to me.



Kindly get back via Email : [email protected]

Your quick response will be highly appreciate.



Regards

Elder Frank.

Email: [email protected]