by buried under 419s
Wed May 25, 2011 5:18 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 25 May 2011 14:07:07 -0700
Received: from nm16-vm4.bullet.mail.ne1.yahoo.com ([98.138.91.176])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QPLII-0007oY-0C
for ; Wed, 25 May 2011 14:07:07 -0700
Received: from [98.138.90.53] by nm16.bullet.mail.ne1.yahoo.com with NNFMP; 25 May 2011 21:07:04 -0000
Received: from [98.138.89.195] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 25 May 2011 21:07:03 -0000
Received: from [127.0.0.1] by omp1053.mail.ne1.yahoo.com with NNFMP; 25 May 2011 21:07:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 97262 invoked by uid 60001); 25 May 2011 21:07:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1306357623; bh=c5+pwvkfplsJbAnk2UoSzpB5q/oaLN4dj3ODyoparSM=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=A+IZl110/O3VK+c+yPWTZ2APvaN6i+7e/DEw/SEL/hM21YsQRalc2eoABVVn2IKY/l06ibkBK5uAqDngibFQTM67IYhPyAANeogjvwflLpj3OGfFEDPp7sKP374PPs23odZtcmmX6evzLleMA+L9NXjeFKHDYq8rOr+ElUhuYck=
Message-ID: <[email protected]>
X-YMail-OSG: JN4Dfw0VM1lvUpsshrdw_z0NOePPnWrVa_ZEsdap.N6q1of
vY9Q.KcGWnwKPqQou0OlFtOe.u9yo0Lw11xxmYJXB4tpEnlSwDE0X29P7Qj9
2r_GDe6TYpA8ibs9EQG1uoE62ULwO.ew2628boWYElv3eWpaMg3MaAfGBAva
M3a3Hl9IjNLk5hoO6OEa_6l0Se9N3PtpCidVIo55zd0fzA5Je7GxvMYR4Lb6
3IqMmABB3jwndW7UtPDRzonvzPMZw9_bqNtQQZrgfWj0eKILybcGxtUsaila
Zb6K3Xv1VWjYbr1AWv_.1gQG2SFiNVzzHY2cZdpvoGFFd4FcTi4SvNpDY_zA
ZsnWlWV3TPzueiHiSYJ6kBKTOZhIIIBv6g876BJIXajOebzQiuJv98XhqifD
LgH1xEAEje32cs34XNQa7L1iBuelGsaL_OS4d__0Kx9qSltGCjzIilpFbyBs
s5kGR55tdf_C4R_oKq4Ag2GoqnSysSMEfPJBvzArlTHIZouqWZUg4UH8MseD
ovqqBysC3rjfHF1Vt9A1TdFHWv6jgPvZ1MemI6GDnhsovHIJhmlllWAm1kBo
QA8.anZKNkmAz797Vg3PGeUNOoyeTSWNUUPr8Lk..tMdYOOxxYfr3Z1HbjNc
FoVE4WD9DqCSO5a1t5LZNIqBnlv4aTZwnwLo.2A8Hjp15GN8cJZCRyf94hYx
yVHPjFXZmozEs_9Zoc2uAe57wbrj0HGTfu9o7mH35sw4.S7ZbUuz9iLMv0rm
UoiXN_n.2uLsagy.eEigGpKMWFWuimuHKgusvjuZg646gnyVaO4LjMQkq__d
_ScW6ptxQFM3UB4cykno1u9QKWhk2cuwXFa1mWgw-
Received: from [41.85.161.2] by web121803.mail.ne1.yahoo.com via HTTP; Wed, 25 May 2011 14:07:03 PDT
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/14.0.1 YahooMailWebService/0.8.111.303096
Date: Wed, 25 May 2011 14:07:03 -0700 (PDT)
From: "Henry A. Emeka" <[email protected]>
Reply-To: [email protected]
Subject: Attn: ATM CARD Payment Notification
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1144968969-1306357623=:92132"
X-Spam-Subject: ***SPAM*** Attn: ATM CARD Payment Notification
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: P {MARGIN:0px;}UL {MARGIN-TOP:5px;MARGIN-BOTTOM:5px;}OL {MARGIN-TOP:5px;MARGIN-BOTTOM:5px;}BRSÂ
BANK INTERNATIONAL BRSÂ Heights Plot 87 Ajose Adeogun Street, Cotonou Republic
Of Benin . Â Attn: Payment Notification , Â This is to bring to your notice
that, I have paid the re-activation fee and the delivery of your ATM.I paid
it because the ATM Card ($1.900,000.00)Â One Million Nine Hundred Thousand
United States Dollars. has less three days to expire and when it expires,
the money will go into Government purse. With that I decided to help you
pay the money so that the ATM CARD will not expire, because I know when you
get your ATM definitely you must pay me back my money and even compensate
me for helping you.  Now I want you to contact Fedex Delivery Service with
your Full Contact information’s so that they can deliver your Card to your
designated address without any delay. Like I stated earlier, the delivery
charges has been paid but I did not pay their official keeping fees since
they refused. They refused and the reason is that they do not know when you
are going to contact them and demurrage might have increase. Â They told
me that their keeping fee is $125usd per day and I deposited it on Monday
this week.  Below is their Contact Information’s,  Contact Person: Mr.Â
Morris Campos Fedex Courier Delivery Service Email: [email protected];
+229-99-155-140 Â Contact Today to avoid increase of their keeping fees and
let me know once you receive your Card.  Yours Dr. Henry A. Emeka. ATM
OFFICE BRSÂ BANK INTERNATIONAL [...]
Content analysis details: (15.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.85.161.2>]
3.2 MILLION_USD BODY: Talks about millions of dollars
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.85.161.2 listed in dnsbl.sorbs.net]
0.0 FREEMAIL_FROM Sender email is freemail
(mjofficeconsult524[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.176 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mjofficeconsult524[at]gmail.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.4 MONEY_ATM_CARD Lots of money on an ATM card
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1144968969-1306357623=:92132
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
;}BRS BANK INTERNATIONAL
BRS Heights Plot 87 Ajose Adeogun Street,
Cotonou Republic Of Benin .
Attn: Payment Notification ,
This is to bring to your notice that, I have paid the re-activation fee and the delivery of your ATM.I paid it because the ATM Card ($1.900,000.00) One Million Nine Hundred Thousand United States Dollars. has less three days to expire and when it expires, the money will go into Government purse. With that I decided to help you pay the money so that the ATM CARD will not expire, because I know when you get your ATM definitely you must pay me back my money and even compensate me for helping you.
Now I want you to contact Fedex Delivery Service with your Full Contact information’s so that they can deliver your Card to your designated address without any delay. Like I stated earlier, the delivery charges has been paid but I did not pay their official keeping fees since they refused. They refused and the reason is that they do not know when you are going to contact them and demurrage might have increase.
They told me that their keeping fee is $125usd per day and I deposited it on Monday this week.
Below is their Contact Information’s,
Contact Person: Mr. Morris Campos Fedex Courier Delivery Service
Email: [email protected] Tel; +229-99-155-140
Contact Today to avoid increase of their keeping fees and let me know once you receive your Card.
Yours
Dr. Henry A. Emeka.
ATM OFFICE
BRS BANK INTERNATIONAL
Envelope-to:
Delivery-date: Wed, 25 May 2011 14:07:07 -0700
Received: from nm16-vm4.bullet.mail.ne1.yahoo.com ([98.138.91.176])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QPLII-0007oY-0C
for ; Wed, 25 May 2011 14:07:07 -0700
Received: from [98.138.90.53] by nm16.bullet.mail.ne1.yahoo.com with NNFMP; 25 May 2011 21:07:04 -0000
Received: from [98.138.89.195] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 25 May 2011 21:07:03 -0000
Received: from [127.0.0.1] by omp1053.mail.ne1.yahoo.com with NNFMP; 25 May 2011 21:07:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 97262 invoked by uid 60001); 25 May 2011 21:07:03 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1306357623; bh=c5+pwvkfplsJbAnk2UoSzpB5q/oaLN4dj3ODyoparSM=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=A+IZl110/O3VK+c+yPWTZ2APvaN6i+7e/DEw/SEL/hM21YsQRalc2eoABVVn2IKY/l06ibkBK5uAqDngibFQTM67IYhPyAANeogjvwflLpj3OGfFEDPp7sKP374PPs23odZtcmmX6evzLleMA+L9NXjeFKHDYq8rOr+ElUhuYck=
Message-ID: <[email protected]>
X-YMail-OSG: JN4Dfw0VM1lvUpsshrdw_z0NOePPnWrVa_ZEsdap.N6q1of
vY9Q.KcGWnwKPqQou0OlFtOe.u9yo0Lw11xxmYJXB4tpEnlSwDE0X29P7Qj9
2r_GDe6TYpA8ibs9EQG1uoE62ULwO.ew2628boWYElv3eWpaMg3MaAfGBAva
M3a3Hl9IjNLk5hoO6OEa_6l0Se9N3PtpCidVIo55zd0fzA5Je7GxvMYR4Lb6
3IqMmABB3jwndW7UtPDRzonvzPMZw9_bqNtQQZrgfWj0eKILybcGxtUsaila
Zb6K3Xv1VWjYbr1AWv_.1gQG2SFiNVzzHY2cZdpvoGFFd4FcTi4SvNpDY_zA
ZsnWlWV3TPzueiHiSYJ6kBKTOZhIIIBv6g876BJIXajOebzQiuJv98XhqifD
LgH1xEAEje32cs34XNQa7L1iBuelGsaL_OS4d__0Kx9qSltGCjzIilpFbyBs
s5kGR55tdf_C4R_oKq4Ag2GoqnSysSMEfPJBvzArlTHIZouqWZUg4UH8MseD
ovqqBysC3rjfHF1Vt9A1TdFHWv6jgPvZ1MemI6GDnhsovHIJhmlllWAm1kBo
QA8.anZKNkmAz797Vg3PGeUNOoyeTSWNUUPr8Lk..tMdYOOxxYfr3Z1HbjNc
FoVE4WD9DqCSO5a1t5LZNIqBnlv4aTZwnwLo.2A8Hjp15GN8cJZCRyf94hYx
yVHPjFXZmozEs_9Zoc2uAe57wbrj0HGTfu9o7mH35sw4.S7ZbUuz9iLMv0rm
UoiXN_n.2uLsagy.eEigGpKMWFWuimuHKgusvjuZg646gnyVaO4LjMQkq__d
_ScW6ptxQFM3UB4cykno1u9QKWhk2cuwXFa1mWgw-
Received: from [41.85.161.2] by web121803.mail.ne1.yahoo.com via HTTP; Wed, 25 May 2011 14:07:03 PDT
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/14.0.1 YahooMailWebService/0.8.111.303096
Date: Wed, 25 May 2011 14:07:03 -0700 (PDT)
From: "Henry A. Emeka" <[email protected]>
Reply-To: [email protected]
Subject: Attn: ATM CARD Payment Notification
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1144968969-1306357623=:92132"
X-Spam-Subject: ***SPAM*** Attn: ATM CARD Payment Notification
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: P {MARGIN:0px;}UL {MARGIN-TOP:5px;MARGIN-BOTTOM:5px;}OL {MARGIN-TOP:5px;MARGIN-BOTTOM:5px;}BRSÂ
BANK INTERNATIONAL BRSÂ Heights Plot 87 Ajose Adeogun Street, Cotonou Republic
Of Benin . Â Attn: Payment Notification , Â This is to bring to your notice
that, I have paid the re-activation fee and the delivery of your ATM.I paid
it because the ATM Card ($1.900,000.00)Â One Million Nine Hundred Thousand
United States Dollars. has less three days to expire and when it expires,
the money will go into Government purse. With that I decided to help you
pay the money so that the ATM CARD will not expire, because I know when you
get your ATM definitely you must pay me back my money and even compensate
me for helping you.  Now I want you to contact Fedex Delivery Service with
your Full Contact information’s so that they can deliver your Card to your
designated address without any delay. Like I stated earlier, the delivery
charges has been paid but I did not pay their official keeping fees since
they refused. They refused and the reason is that they do not know when you
are going to contact them and demurrage might have increase. Â They told
me that their keeping fee is $125usd per day and I deposited it on Monday
this week.  Below is their Contact Information’s,  Contact Person: Mr.Â
Morris Campos Fedex Courier Delivery Service Email: [email protected];
+229-99-155-140 Â Contact Today to avoid increase of their keeping fees and
let me know once you receive your Card.  Yours Dr. Henry A. Emeka. ATM
OFFICE BRSÂ BANK INTERNATIONAL [...]
Content analysis details: (15.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.85.161.2>]
3.2 MILLION_USD BODY: Talks about millions of dollars
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.85.161.2 listed in dnsbl.sorbs.net]
0.0 FREEMAIL_FROM Sender email is freemail
(mjofficeconsult524[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.176 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mjofficeconsult524[at]gmail.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.4 MONEY_ATM_CARD Lots of money on an ATM card
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1144968969-1306357623=:92132
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
;}BRS BANK INTERNATIONAL
BRS Heights Plot 87 Ajose Adeogun Street,
Cotonou Republic Of Benin .
Attn: Payment Notification ,
This is to bring to your notice that, I have paid the re-activation fee and the delivery of your ATM.I paid it because the ATM Card ($1.900,000.00) One Million Nine Hundred Thousand United States Dollars. has less three days to expire and when it expires, the money will go into Government purse. With that I decided to help you pay the money so that the ATM CARD will not expire, because I know when you get your ATM definitely you must pay me back my money and even compensate me for helping you.
Now I want you to contact Fedex Delivery Service with your Full Contact information’s so that they can deliver your Card to your designated address without any delay. Like I stated earlier, the delivery charges has been paid but I did not pay their official keeping fees since they refused. They refused and the reason is that they do not know when you are going to contact them and demurrage might have increase.
They told me that their keeping fee is $125usd per day and I deposited it on Monday this week.
Below is their Contact Information’s,
Contact Person: Mr. Morris Campos Fedex Courier Delivery Service
Email: [email protected] Tel; +229-99-155-140
Contact Today to avoid increase of their keeping fees and let me know once you receive your Card.
Yours
Dr. Henry A. Emeka.
ATM OFFICE
BRS BANK INTERNATIONAL
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces