by buried under 419s
Mon Mar 21, 2011 2:33 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 21 Mar 2011 09:12:36 -0700
Received: from nm23-vm1.bullet.mail.ne1.yahoo.com ([98.138.91.50])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q1hic-0005OG-SV
for Mon, 21 Mar 2011 09:12:36 -0700
Received: from [98.138.90.56] by nm23.bullet.mail.ne1.yahoo.com with NNFMP; 21 Mar 2011 16:12:33 -0000
Received: from [98.138.87.10] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 21 Mar 2011 16:12:33 -0000
Received: from [127.0.0.1] by omp1010.mail.ne1.yahoo.com with NNFMP; 21 Mar 2011 16:12:33 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 99745 invoked by uid 60001); 21 Mar 2011 16:12:33 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1300723953; bh=gbWaC0GOD3jzJNzbL7cDfaEIlTHmxX2hz0PHnvaOlV4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=mN6CyXinzzzeVi6UcVCfPGY6d5znD7hsnNDqbfJLlYbDKHNyl8/WSr2HPUy6P+v/ptRAUOv6K6psX6u8142fwlM06YEd/YJUwEUIq++K8blTABIKl9RUkhnHLRnYichxNRtrheDLJeMmUIxVaZTG9nXNhX4cjJQR7Qy6teCfty0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=V0SKvFEgItBLjX1hTKzExD5BBceNKIi91qgkG2gD3WJzYOv1ShEy4ec4Tm7SzXbwCzsHmwnbqb538HyeH7G933BGYm6H8IIT85T0HzH4CFNgsKDceIYjKnTkeU0NKiMypoNTGXWyTrEO7d1vU+sjfRjWuHGiIdzKQbWE9xtTWDk=;
Message-ID: <[email protected]>
X-YMail-OSG: vzBSmgEVM1n78rRicEJ2g8PG033gVOgdGL6byZN_5dvFsxE
Received: from [41.217.65.11] by web181306.mail.ne1.yahoo.com via HTTP; Mon, 21 Mar 2011 09:12:33 PDT
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.295617
Date: Mon, 21 Mar 2011 09:12:33 -0700 (PDT)
From: "Gov. Lamido Sanusi. CBN." <[email protected]>
Reply-To: [email protected]
Subject: Please Confirm This Information:(CODE :FGN/CBN3124-FILE111-CBN)c
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-977038224-1300723953=:98987"
X-Spam-Subject: ***SPAM*** Please Confirm This Information:(CODE :FGN/CBN3124-FILE111-CBN)c
X-Spam-Status: Yes, score=18.7
X-Spam-Score: 187
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn:Beneficiary, Please confirm this information. Did you
ask MR Edmond Stock Beneker from USA to claim your funds Valued at $ 10 million
from the central bank of Nigeria? This man was directed to us by Mr.John
Adams the diplomat that are suppose to deliver your fund to you Please with
matter of urgency get back to me immediately before things will go wrong.
Below is the account details of Mr Edmond Beneker Where he want us to transfer
your fund into. [...]
Content analysis details: (18.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (abc----04[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.50 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.217.65.11>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.217.65.11 listed in dnsbl.sorbs.net]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (abc----04[at]att.net)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-977038224-1300723953=:98987
Content-Type: text/plain; charset=us-ascii
Attn:Beneficiary,
Please confirm this information. Did you ask MR Edmond Stock Beneker from USA to claim your funds Valued at $ 10 million from the central bank of Nigeria? This man was directed to us by Mr.John Adams the diplomat that are suppose to deliver your fund to you Please with matter of urgency get back to me immediately before things will go wrong. Below is the account details of Mr Edmond Beneker Where he want us to transfer your fund into.
Name on account: Edmond Beneker
Bank:Wachovia
Address:8233 Rochester Hwy. SC4600 Salem, SC 29676 USA
Acct.# : 1010246561978
Routing#:053207766
Swift Code: pnbpus76
He is trying to pay all the charges about your funds and claim your funds. Please your urgent confirmation is highly needed now before Your fund will be released to him in the next 48 hours,and please if you know that you never instructed him kindly get back to me immediately via my alternative email address:- [email protected]
Re-confirm the following immediately for payment approval:
1) Your full name.
2) Phone, fax and mobile #.
3) Company name, position and address.
4) Profession, age and marital status.
5) Copy of int'l passport, driver's license, or any valid ID card.
Please quote this payment codes (CODE :FGN/CBN3124-FILE111-CBN) in all conversation or else you will not be recognized as a beneficiary/contractor with this Government and note any further message without my pictured should be disregarded to avoid any fraudulent hijack of information.
Regards,
SANUSI LAMIDO
Governor Central Bank of Nigeria
Envelope-to:
Delivery-date: Mon, 21 Mar 2011 09:12:36 -0700
Received: from nm23-vm1.bullet.mail.ne1.yahoo.com ([98.138.91.50])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q1hic-0005OG-SV
for Mon, 21 Mar 2011 09:12:36 -0700
Received: from [98.138.90.56] by nm23.bullet.mail.ne1.yahoo.com with NNFMP; 21 Mar 2011 16:12:33 -0000
Received: from [98.138.87.10] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 21 Mar 2011 16:12:33 -0000
Received: from [127.0.0.1] by omp1010.mail.ne1.yahoo.com with NNFMP; 21 Mar 2011 16:12:33 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 99745 invoked by uid 60001); 21 Mar 2011 16:12:33 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1300723953; bh=gbWaC0GOD3jzJNzbL7cDfaEIlTHmxX2hz0PHnvaOlV4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=mN6CyXinzzzeVi6UcVCfPGY6d5znD7hsnNDqbfJLlYbDKHNyl8/WSr2HPUy6P+v/ptRAUOv6K6psX6u8142fwlM06YEd/YJUwEUIq++K8blTABIKl9RUkhnHLRnYichxNRtrheDLJeMmUIxVaZTG9nXNhX4cjJQR7Qy6teCfty0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=V0SKvFEgItBLjX1hTKzExD5BBceNKIi91qgkG2gD3WJzYOv1ShEy4ec4Tm7SzXbwCzsHmwnbqb538HyeH7G933BGYm6H8IIT85T0HzH4CFNgsKDceIYjKnTkeU0NKiMypoNTGXWyTrEO7d1vU+sjfRjWuHGiIdzKQbWE9xtTWDk=;
Message-ID: <[email protected]>
X-YMail-OSG: vzBSmgEVM1n78rRicEJ2g8PG033gVOgdGL6byZN_5dvFsxE
Received: from [41.217.65.11] by web181306.mail.ne1.yahoo.com via HTTP; Mon, 21 Mar 2011 09:12:33 PDT
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.295617
Date: Mon, 21 Mar 2011 09:12:33 -0700 (PDT)
From: "Gov. Lamido Sanusi. CBN." <[email protected]>
Reply-To: [email protected]
Subject: Please Confirm This Information:(CODE :FGN/CBN3124-FILE111-CBN)c
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-977038224-1300723953=:98987"
X-Spam-Subject: ***SPAM*** Please Confirm This Information:(CODE :FGN/CBN3124-FILE111-CBN)c
X-Spam-Status: Yes, score=18.7
X-Spam-Score: 187
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn:Beneficiary, Please confirm this information. Did you
ask MR Edmond Stock Beneker from USA to claim your funds Valued at $ 10 million
from the central bank of Nigeria? This man was directed to us by Mr.John
Adams the diplomat that are suppose to deliver your fund to you Please with
matter of urgency get back to me immediately before things will go wrong.
Below is the account details of Mr Edmond Beneker Where he want us to transfer
your fund into. [...]
Content analysis details: (18.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (abc----04[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.50 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.217.65.11>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.217.65.11 listed in dnsbl.sorbs.net]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (abc----04[at]att.net)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-977038224-1300723953=:98987
Content-Type: text/plain; charset=us-ascii
Attn:Beneficiary,
Please confirm this information. Did you ask MR Edmond Stock Beneker from USA to claim your funds Valued at $ 10 million from the central bank of Nigeria? This man was directed to us by Mr.John Adams the diplomat that are suppose to deliver your fund to you Please with matter of urgency get back to me immediately before things will go wrong. Below is the account details of Mr Edmond Beneker Where he want us to transfer your fund into.
Name on account: Edmond Beneker
Bank:Wachovia
Address:8233 Rochester Hwy. SC4600 Salem, SC 29676 USA
Acct.# : 1010246561978
Routing#:053207766
Swift Code: pnbpus76
He is trying to pay all the charges about your funds and claim your funds. Please your urgent confirmation is highly needed now before Your fund will be released to him in the next 48 hours,and please if you know that you never instructed him kindly get back to me immediately via my alternative email address:- [email protected]
Re-confirm the following immediately for payment approval:
1) Your full name.
2) Phone, fax and mobile #.
3) Company name, position and address.
4) Profession, age and marital status.
5) Copy of int'l passport, driver's license, or any valid ID card.
Please quote this payment codes (CODE :FGN/CBN3124-FILE111-CBN) in all conversation or else you will not be recognized as a beneficiary/contractor with this Government and note any further message without my pictured should be disregarded to avoid any fraudulent hijack of information.
Regards,
SANUSI LAMIDO
Governor Central Bank of Nigeria
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces