by buried under 419s
Tue Mar 01, 2011 9:43 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 01 Mar 2011 17:20:39 -0800
Received: from nm23-vm1.bullet.mail.ne1.yahoo.com ([98.138.91.50])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Puak1-0006lq-7X
for ; Tue, 01 Mar 2011 17:20:39 -0800
Received: from [98.138.90.51] by nm23.bullet.mail.ne1.yahoo.com with NNFMP; 02 Mar 2011 01:20:36 -0000
Received: from [98.138.86.156] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 02 Mar 2011 01:20:36 -0000
Received: from [127.0.0.1] by omp1014.mail.ne1.yahoo.com with NNFMP; 02 Mar 2011 01:20:36 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 13643 invoked by uid 60001); 2 Mar 2011 01:20:36 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1299028836; bh=BL/D68Ro4isnj1ju1G/7jKm8+ggX+lE6eEYdcHm/wU0=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TRAhvGnPBCiVYGlKR9MtOgc/hu6DJBcuR9BWCtwf0dl5GH4XWGNTwUH/MZkFNUd+WtN1jDUKwYXm91f8u6VaIiXEtBrT0YpRwiieSgubT9M1ZEwUPkorFLcp7J+3fW44jpTBp+tuRTm4xSD2p+c2G+DJtZMA9foEgL3ENjDOJw0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=rKtAqviUDR7vxjxhRL6G4wufNuiRt+o750sPJ7gzas7ZRtGh/Ifj+sBQVnvS6eh2RMObbhMd0JfSLE9NQjvvr0okbS/QUgs+EOVYuPHnmEquxuaT3IUCuEo/8twQADJezDP7CMIn7yBpAJ/8EYOF+VgMKPwdSwBjxn/AY3W6hf8=;
Message-ID: <[email protected]>
X-YMail-OSG: bsrDZ0AVM1k6.F6pVJEAvo3QoF82D7BHooxaGWOo89ckBEZ
Received: from [41.138.191.77] by web181201.mail.ne1.yahoo.com via HTTP; Tue, 01 Mar 2011 17:20:36 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Tue, 1 Mar 2011 17:20:36 -0800 (PST)
From: Office File <[email protected]>
Reply-To: [email protected]
Subject: Dear Friend,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1628761865-1299028836=:7582"
X-Spam-Subject: ***SPAM*** Dear Friend,
X-Spam-Status: Yes, score=14.3
X-Spam-Score: 143
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, How are you today? I am writing to inform you
that I have Paid the fee for your Draft which has been with me for a long
time. Mr. Johnson Yayi the Director Bank nof Africa told me that before the
draft will get to your hand that it will expire. We agreed to convect the
$1,200,000.00 USD In Cash. However, your [...]
Content analysis details: (14.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (officefi-----08[at]att.net)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officefi-----08[at]att.net)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5010]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.50 listed in list.dnswl.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FILL_THIS_FORM Fill in a form with personal information
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-1628761865-1299028836=:7582
Content-Type: text/plain; charset=us-ascii
Dear Friend,
How are you today? I am writing to inform you that I have Paid the fee for your Draft which has been with me for a long time. Mr. Johnson Yayi the Director
Bank nof Africa told me that before the draft will get to your hand that it will expire. We agreed to convect the $1,200,000.00 USD In Cash. However, your
bank draft worth $1,200,000.00 USD is now in cash in a trunk box.
The cash is now with Courier. Infact I thank God very much for all the movement I made, every thing went seccussful. Our agreement with the Courier they
promised that your consignment will leave this Country on or before 5 days from now, But the Director of the Courier said that they need your information's
to enable them locate you immediately on their arrived. Then the only fee you will send to them is just for the security Keeping which is just $105, and
nothing more then the package will be deliver to your address.
Contact them with below infos.
ATTN:DR Jude Anderson
Tel.: +234 80 9974 2695
Email: ( [email protected] )
Send them you information such as.
Full Name,
Your current mailling address
Your Direct mobile number.
Note:the FEDEX courier company did not know the content of the box as i register it as an african cotton and make sure you did not disclose the content to
them.
Regards.
Nichol Asha
Envelope-to:
Delivery-date: Tue, 01 Mar 2011 17:20:39 -0800
Received: from nm23-vm1.bullet.mail.ne1.yahoo.com ([98.138.91.50])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Puak1-0006lq-7X
for ; Tue, 01 Mar 2011 17:20:39 -0800
Received: from [98.138.90.51] by nm23.bullet.mail.ne1.yahoo.com with NNFMP; 02 Mar 2011 01:20:36 -0000
Received: from [98.138.86.156] by tm4.bullet.mail.ne1.yahoo.com with NNFMP; 02 Mar 2011 01:20:36 -0000
Received: from [127.0.0.1] by omp1014.mail.ne1.yahoo.com with NNFMP; 02 Mar 2011 01:20:36 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 13643 invoked by uid 60001); 2 Mar 2011 01:20:36 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1299028836; bh=BL/D68Ro4isnj1ju1G/7jKm8+ggX+lE6eEYdcHm/wU0=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=TRAhvGnPBCiVYGlKR9MtOgc/hu6DJBcuR9BWCtwf0dl5GH4XWGNTwUH/MZkFNUd+WtN1jDUKwYXm91f8u6VaIiXEtBrT0YpRwiieSgubT9M1ZEwUPkorFLcp7J+3fW44jpTBp+tuRTm4xSD2p+c2G+DJtZMA9foEgL3ENjDOJw0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=rKtAqviUDR7vxjxhRL6G4wufNuiRt+o750sPJ7gzas7ZRtGh/Ifj+sBQVnvS6eh2RMObbhMd0JfSLE9NQjvvr0okbS/QUgs+EOVYuPHnmEquxuaT3IUCuEo/8twQADJezDP7CMIn7yBpAJ/8EYOF+VgMKPwdSwBjxn/AY3W6hf8=;
Message-ID: <[email protected]>
X-YMail-OSG: bsrDZ0AVM1k6.F6pVJEAvo3QoF82D7BHooxaGWOo89ckBEZ
Received: from [41.138.191.77] by web181201.mail.ne1.yahoo.com via HTTP; Tue, 01 Mar 2011 17:20:36 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.292656
Date: Tue, 1 Mar 2011 17:20:36 -0800 (PST)
From: Office File <[email protected]>
Reply-To: [email protected]
Subject: Dear Friend,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1628761865-1299028836=:7582"
X-Spam-Subject: ***SPAM*** Dear Friend,
X-Spam-Status: Yes, score=14.3
X-Spam-Score: 143
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, How are you today? I am writing to inform you
that I have Paid the fee for your Draft which has been with me for a long
time. Mr. Johnson Yayi the Director Bank nof Africa told me that before the
draft will get to your hand that it will expire. We agreed to convect the
$1,200,000.00 USD In Cash. However, your [...]
Content analysis details: (14.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (officefi-----08[at]att.net)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officefi-----08[at]att.net)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5010]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.50 listed in list.dnswl.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FILL_THIS_FORM Fill in a form with personal information
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-1628761865-1299028836=:7582
Content-Type: text/plain; charset=us-ascii
Dear Friend,
How are you today? I am writing to inform you that I have Paid the fee for your Draft which has been with me for a long time. Mr. Johnson Yayi the Director
Bank nof Africa told me that before the draft will get to your hand that it will expire. We agreed to convect the $1,200,000.00 USD In Cash. However, your
bank draft worth $1,200,000.00 USD is now in cash in a trunk box.
The cash is now with Courier. Infact I thank God very much for all the movement I made, every thing went seccussful. Our agreement with the Courier they
promised that your consignment will leave this Country on or before 5 days from now, But the Director of the Courier said that they need your information's
to enable them locate you immediately on their arrived. Then the only fee you will send to them is just for the security Keeping which is just $105, and
nothing more then the package will be deliver to your address.
Contact them with below infos.
ATTN:DR Jude Anderson
Tel.: +234 80 9974 2695
Email: ( [email protected] )
Send them you information such as.
Full Name,
Your current mailling address
Your Direct mobile number.
Note:the FEDEX courier company did not know the content of the box as i register it as an african cotton and make sure you did not disclose the content to
them.
Regards.
Nichol Asha
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces