by buried under 419s
Thu Mar 24, 2011 12:01 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 24 Mar 2011 03:04:52 -0700
Received: from nm28-vm1.bullet.mail.ne1.yahoo.com ([98.138.91.35])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2hPP-0001Dj-7a
for ; Thu, 24 Mar 2011 03:04:52 -0700
Received: from [98.138.90.53] by nm28.bullet.mail.ne1.yahoo.com with NNFMP; 24 Mar 2011 10:04:49 -0000
Received: from [98.138.87.7] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 24 Mar 2011 10:04:49 -0000
Received: from [127.0.0.1] by omp1007.mail.ne1.yahoo.com with NNFMP; 24 Mar 2011 10:04:49 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 50749 invoked by uid 60001); 24 Mar 2011 10:04:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1300961088; bh=fKry8Mz0UGqmplEt/CzphZYsYbOSJmPpsSFnho8itdQ=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=laYdoRbKpLwASvX45pRGzBv2et7ap1J1jmZROJjnV1dUhH6MVcsnKhIhF/tH1IakirIwvJ2iaeOOzGvs2kL7y+5TRpa57jSVV20DXcJ+QkyVdoO+TOAg7q4KtNBxrLDw2tcBl1Du0DKoly3Ps+H1n0rari8TvZ3eC+QLw99BFr0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=HLWeVFu65ze3gg+fkME/iGUI4NoWLVhpBO4yCsvXBRHk0xtjR5vHSSGsgBHNywYnovdwvggvzOg6VdT3SUaqRldPeWqgtH7dbVj5phMe/C8G4bsjuiJ0JrPn2nEFFU4xnskliP8DnnIAj+AwuS4hbuXXxZcpAqxJIJiEgnapiy4=;
Message-ID: <[email protected]>
X-YMail-OSG: ZCMtrW8VM1mVWkPbn4phLC.nWb6tVhUHU241v.4X4lJGN7u
Received: from [41.191.85.33] by web181301.mail.ne1.yahoo.com via HTTP; Thu, 24 Mar 2011 03:04:48 PDT
X-Mailer: YahooMailClassic/12.0.2 YahooMailWebService/0.8.109.295617
Date: Thu, 24 Mar 2011 03:04:48 -0700 (PDT)
From: "Mr. Paul Lucas" <[email protected]>
Reply-To: [email protected]
Subject: ATTENTION PLEASE;
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-421431670-1300961088=:44247"
X-Spam-Subject: ***SPAM*** ATTENTION PLEASE;
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION PLEASE; We wish to inform you that the diplomatic
agent conveying the consignment box valued the sum of $1.5 Million United
States Dollars misplaced your address and he is currently stranded at your
International airport now. We required you to re-confirm the following informations
below so that he can deliver your consignment box to you today. [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.35 listed in list.dnswl.org]
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is freemail
(james------terry07[at]att.net)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (james------terry07[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5541]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--0-421431670-1300961088=:44247
Content-Type: text/plain; charset=us-ascii
ATTENTION PLEASE;
We wish to inform you that the diplomatic agent conveying the consignment box
valued the sum of $1.5 Million United States Dollars misplaced your address and
he is currently stranded at your International airport now. We required you to
re-confirm the following informations below so that he can deliver your
consignment box to you today.
NAME:=============================
ADDRESS:==========================
MOBILE NO:========================
NAME OF YOUR NEAREST AIRPORT:=====
A COPY OF YOUR IDENTIFICATION:====
Please do contact the diplomatic agent with the email below with the
informations required.
Contact Person : Mr. Ejimofor Benson
Phone number; 1 (323) 786-8771
EMAIL:( [email protected] ) OR ( [email protected] )He is
waiting to hear from you today with the informations.
NOTE : The Diplomatic agent does not know that the content of the consignment
box is $1.5 Millions United States Dollars and on no circumstances should you
let him know the content. The consignments was moved from here as family
treasures, so never allow him to open the box.
Thanks.
Mr. Paul Lucas
Envelope-to:
Delivery-date: Thu, 24 Mar 2011 03:04:52 -0700
Received: from nm28-vm1.bullet.mail.ne1.yahoo.com ([98.138.91.35])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q2hPP-0001Dj-7a
for ; Thu, 24 Mar 2011 03:04:52 -0700
Received: from [98.138.90.53] by nm28.bullet.mail.ne1.yahoo.com with NNFMP; 24 Mar 2011 10:04:49 -0000
Received: from [98.138.87.7] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 24 Mar 2011 10:04:49 -0000
Received: from [127.0.0.1] by omp1007.mail.ne1.yahoo.com with NNFMP; 24 Mar 2011 10:04:49 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 50749 invoked by uid 60001); 24 Mar 2011 10:04:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1300961088; bh=fKry8Mz0UGqmplEt/CzphZYsYbOSJmPpsSFnho8itdQ=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=laYdoRbKpLwASvX45pRGzBv2et7ap1J1jmZROJjnV1dUhH6MVcsnKhIhF/tH1IakirIwvJ2iaeOOzGvs2kL7y+5TRpa57jSVV20DXcJ+QkyVdoO+TOAg7q4KtNBxrLDw2tcBl1Du0DKoly3Ps+H1n0rari8TvZ3eC+QLw99BFr0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=HLWeVFu65ze3gg+fkME/iGUI4NoWLVhpBO4yCsvXBRHk0xtjR5vHSSGsgBHNywYnovdwvggvzOg6VdT3SUaqRldPeWqgtH7dbVj5phMe/C8G4bsjuiJ0JrPn2nEFFU4xnskliP8DnnIAj+AwuS4hbuXXxZcpAqxJIJiEgnapiy4=;
Message-ID: <[email protected]>
X-YMail-OSG: ZCMtrW8VM1mVWkPbn4phLC.nWb6tVhUHU241v.4X4lJGN7u
Received: from [41.191.85.33] by web181301.mail.ne1.yahoo.com via HTTP; Thu, 24 Mar 2011 03:04:48 PDT
X-Mailer: YahooMailClassic/12.0.2 YahooMailWebService/0.8.109.295617
Date: Thu, 24 Mar 2011 03:04:48 -0700 (PDT)
From: "Mr. Paul Lucas" <[email protected]>
Reply-To: [email protected]
Subject: ATTENTION PLEASE;
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-421431670-1300961088=:44247"
X-Spam-Subject: ***SPAM*** ATTENTION PLEASE;
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION PLEASE; We wish to inform you that the diplomatic
agent conveying the consignment box valued the sum of $1.5 Million United
States Dollars misplaced your address and he is currently stranded at your
International airport now. We required you to re-confirm the following informations
below so that he can deliver your consignment box to you today. [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.35 listed in list.dnswl.org]
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is freemail
(james------terry07[at]att.net)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (james------terry07[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5541]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--0-421431670-1300961088=:44247
Content-Type: text/plain; charset=us-ascii
ATTENTION PLEASE;
We wish to inform you that the diplomatic agent conveying the consignment box
valued the sum of $1.5 Million United States Dollars misplaced your address and
he is currently stranded at your International airport now. We required you to
re-confirm the following informations below so that he can deliver your
consignment box to you today.
NAME:=============================
ADDRESS:==========================
MOBILE NO:========================
NAME OF YOUR NEAREST AIRPORT:=====
A COPY OF YOUR IDENTIFICATION:====
Please do contact the diplomatic agent with the email below with the
informations required.
Contact Person : Mr. Ejimofor Benson
Phone number; 1 (323) 786-8771
EMAIL:( [email protected] ) OR ( [email protected] )He is
waiting to hear from you today with the informations.
NOTE : The Diplomatic agent does not know that the content of the consignment
box is $1.5 Millions United States Dollars and on no circumstances should you
let him know the content. The consignments was moved from here as family
treasures, so never allow him to open the box.
Thanks.
Mr. Paul Lucas
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces