by buried under 419s
Mon Nov 29, 2010 5:28 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 29 Nov 2010 08:22:25 -0800
Received: from mail.olmeca.edu.mx ([200.79.20.9])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PN6Ui-0007Ve-9l
for ; Mon, 29 Nov 2010 08:22:25 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.olmeca.edu.mx (Postfix) with ESMTP id F2CA13D8C6B;
Mon, 29 Nov 2010 10:22:23 -0600 (CST)
X-DKIM: Sendmail DKIM Filter v2.8.3 mail.olmeca.edu.mx F2CA13D8C6B
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=olmeca.edu.mx;
s=default; t=1291047744; bh=0jdApVH38Q6lAdTJx1yi8BjOfvg=;
h=Date:From:Reply-To:Message-ID:Subject:MIME-Version:Content-Type:
To;
b=ATVGdip55oJx5mnr/THkICjuNYgXFkU/BAhj9aA16Ug2GTSQasdyBmHECJwduCCug
ygImmmhGD0x4Qxj32OzArMT6Azw2g044ml1I71cjLUxmPbVJZ7zz7it3Bc59gGEsHl
9AAgenUw43bbiSmD8HvPOUEbHB1kzG+OlVjsdoKQ=
X-Virus-Scanned: amavisd-new at olmeca.edu.mx
Received: from mail.olmeca.edu.mx ([127.0.0.1])
by localhost (mail.olmeca.edu.mx [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id sXp1kFzT3oQ2; Mon, 29 Nov 2010 10:22:22 -0600 (CST)
Received: from mail.olmeca.edu.mx (mail.olmeca.edu.mx [200.79.20.9])
by mail.olmeca.edu.mx (Postfix) with ESMTP id 019F43D8ACA;
Mon, 29 Nov 2010 10:22:22 -0600 (CST)
Date: Mon, 29 Nov 2010 10:22:22 -0600 (CST)
From: WESTERN UNION MONEY TRANSFER <[email protected]>
Reply-To: Ryan Morgan <[email protected]>
Message-ID: <[email protected]>
Subject: Payment Alert From Western Union!!!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_17907_29148654.1291047741999"
X-Originating-IP: [200.79.20.9]
X-Mailer: Zimbra 6.0.6_GA_2330.RHEL5 (zclient/6.0.6_GA_2330.RHEL5)
To: undisclosed-recipients:;
X-Spam-Status: No, score=6.5
X-Spam-Score: 65
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: How are you doing today? I write to inform you that we have
already sent you USD5000.00 dollars through Western union as we have been
given the mandate to transfer your full compensation payment of USD1.800,000.00
via western union by the United Nation Government. I called to give you the
information through phone as internet hackers were many but i cannot reach
you for over one week now and even this morning. So,I decided to email you
the MTCN and Sender's Name so that can pick up this USD5000.00 to enable
us send another USD5000.00 by tomorrow as you knows we will be sending you
only USD5000.00 per day.Please pick up this information, you are run fast
to any western union in your country to pick up the USD5000.00 and send us
e-mail back so we can send you another payment tomorrow. [...]
Content analysis details: (6.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(ryan morgan
<wumt.onlinealert01[at]yahoo.com.hk>
)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6148]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO
------=_Part_17907_29148654.1291047741999
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
How are you doing today?
I write to inform you that we have
already sent you USD5000.00 dollars through Western union as we have
been given the mandate to transfer your full compensation payment of
USD1.800,000.00 via western union by the United Nation Government. I
called to give you the information through phone as internet hackers
were many but i cannot reach you for over one week now and even this
morning. So,I decided to email you the MTCN and Sender's Name so that
can pick up this USD5000.00 to enable us send another USD5000.00 by
tomorrow as you knows we will be sending you only USD5000.00 per
day.Please pick up this information, you are run fast to any western
union in your country to pick up the USD5000.00 and send us e-mail back
so we can send you another payment tomorrow.
Manager: Mr Andrew Goudie
website: www.westernunion.com
Telephone: +2347035359036
Email: [email protected]
E-mail me once you picked up this USD5000.00 today.
Here is the western union information to pick up the USD5000.00,
MTCN : 622 159 4597
Sender's Name: MC Yak
Question: Honest
Answer:Trust
Amount: $5000.00USD
I am waiting for your E-mail once you pick up USD5000.00,
For more information call +2347035359036
Thanks
RYAN MORGAN
Envelope-to:
Delivery-date: Mon, 29 Nov 2010 08:22:25 -0800
Received: from mail.olmeca.edu.mx ([200.79.20.9])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PN6Ui-0007Ve-9l
for ; Mon, 29 Nov 2010 08:22:25 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.olmeca.edu.mx (Postfix) with ESMTP id F2CA13D8C6B;
Mon, 29 Nov 2010 10:22:23 -0600 (CST)
X-DKIM: Sendmail DKIM Filter v2.8.3 mail.olmeca.edu.mx F2CA13D8C6B
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=olmeca.edu.mx;
s=default; t=1291047744; bh=0jdApVH38Q6lAdTJx1yi8BjOfvg=;
h=Date:From:Reply-To:Message-ID:Subject:MIME-Version:Content-Type:
To;
b=ATVGdip55oJx5mnr/THkICjuNYgXFkU/BAhj9aA16Ug2GTSQasdyBmHECJwduCCug
ygImmmhGD0x4Qxj32OzArMT6Azw2g044ml1I71cjLUxmPbVJZ7zz7it3Bc59gGEsHl
9AAgenUw43bbiSmD8HvPOUEbHB1kzG+OlVjsdoKQ=
X-Virus-Scanned: amavisd-new at olmeca.edu.mx
Received: from mail.olmeca.edu.mx ([127.0.0.1])
by localhost (mail.olmeca.edu.mx [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id sXp1kFzT3oQ2; Mon, 29 Nov 2010 10:22:22 -0600 (CST)
Received: from mail.olmeca.edu.mx (mail.olmeca.edu.mx [200.79.20.9])
by mail.olmeca.edu.mx (Postfix) with ESMTP id 019F43D8ACA;
Mon, 29 Nov 2010 10:22:22 -0600 (CST)
Date: Mon, 29 Nov 2010 10:22:22 -0600 (CST)
From: WESTERN UNION MONEY TRANSFER <[email protected]>
Reply-To: Ryan Morgan <[email protected]>
Message-ID: <[email protected]>
Subject: Payment Alert From Western Union!!!
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_17907_29148654.1291047741999"
X-Originating-IP: [200.79.20.9]
X-Mailer: Zimbra 6.0.6_GA_2330.RHEL5 (zclient/6.0.6_GA_2330.RHEL5)
To: undisclosed-recipients:;
X-Spam-Status: No, score=6.5
X-Spam-Score: 65
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: How are you doing today? I write to inform you that we have
already sent you USD5000.00 dollars through Western union as we have been
given the mandate to transfer your full compensation payment of USD1.800,000.00
via western union by the United Nation Government. I called to give you the
information through phone as internet hackers were many but i cannot reach
you for over one week now and even this morning. So,I decided to email you
the MTCN and Sender's Name so that can pick up this USD5000.00 to enable
us send another USD5000.00 by tomorrow as you knows we will be sending you
only USD5000.00 per day.Please pick up this information, you are run fast
to any western union in your country to pick up the USD5000.00 and send us
e-mail back so we can send you another payment tomorrow. [...]
Content analysis details: (6.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(ryan morgan
<wumt.onlinealert01[at]yahoo.com.hk>
)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6148]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO
------=_Part_17907_29148654.1291047741999
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
How are you doing today?
I write to inform you that we have
already sent you USD5000.00 dollars through Western union as we have
been given the mandate to transfer your full compensation payment of
USD1.800,000.00 via western union by the United Nation Government. I
called to give you the information through phone as internet hackers
were many but i cannot reach you for over one week now and even this
morning. So,I decided to email you the MTCN and Sender's Name so that
can pick up this USD5000.00 to enable us send another USD5000.00 by
tomorrow as you knows we will be sending you only USD5000.00 per
day.Please pick up this information, you are run fast to any western
union in your country to pick up the USD5000.00 and send us e-mail back
so we can send you another payment tomorrow.
Manager: Mr Andrew Goudie
website: www.westernunion.com
Telephone: +2347035359036
Email: [email protected]
E-mail me once you picked up this USD5000.00 today.
Here is the western union information to pick up the USD5000.00,
MTCN : 622 159 4597
Sender's Name: MC Yak
Question: Honest
Answer:Trust
Amount: $5000.00USD
I am waiting for your E-mail once you pick up USD5000.00,
For more information call +2347035359036
Thanks
RYAN MORGAN
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces