by buried under 419s
Tue Jun 28, 2011 11:47 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 28 Jun 2011 08:10:52 -0700
Received: from nm1-vm1.bullet.mail.kr3.yahoo.com ([111.67.240.243])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QbZwA-0007w2-PP
for ; Tue, 28 Jun 2011 08:10:52 -0700
Received: from [111.67.240.250] by nm1.bullet.mail.kr3.yahoo.com with NNFMP; 28 Jun 2011 15:10:48 -0000
Received: from [111.67.240.253] by tm1.bullet.mail.kr3.yahoo.com with NNFMP; 28 Jun 2011 15:10:48 -0000
Received: from [127.0.0.1] by omp1002.mail.kr3.yahoo.com with NNFMP; 28 Jun 2011 15:10:48 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 33298 invoked by uid 60001); 28 Jun 2011 15:10:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1309273848; bh=LAenf6jbPdd5D816AOYn3kLUXt6HAKTZ3+x/0lQsU90=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vX0HjmbF2vk5l1LTmk56dVYANakjfZqZwYnRTX7y2JbmcYc7l2ydesODYeTmP3GKlFQCkVFaCYxc/CpX4uUQNMbnDmjpUA2tqXOTcVlXCC9nNIGIEnXqlC78reH3cIddrU20b6CWiFz41eSgYXTm5O2Qf5ZKPt9eruG5m7WQld4=
X-YMail-OSG: .mc0FCQVM1nTZHmCgnKd2cTMSspJ2nssOXFHpjcWGw8b8W4
Received: from [41.85.161.2] by web70704.mail.kr3.yahoo.com via HTTP; Wed, 29 Jun 2011 00:10:47 KST
X-RocketYMMF: alexset23
X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.307740
Message-ID: <[email protected]>
Date: Wed, 29 Jun 2011 00:10:47 +0900 (KST)
From: "Barr. Tony Wilfred" <[email protected]>
Reply-To: [email protected]
Subject: CONTACT DIPLOMAT STANLEY ADAMS AT YOUR AIRPORT
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1851021947-1309273847=:33118"
X-Spam-Subject: ***SPAM*** CONTACT DIPLOMAT STANLEY ADAMS AT YOUR AIRPORT
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention:Dearest friend, This is to inform you that the DIPLOMATIC
AGENT conveying the $750.000.00USD to you as a Consignment box is stranded
in your airport and he is waiting for [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is freemail (scccbr[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[111.67.240.243 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.85.161.2>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.85.161.2 listed in dnsbl.sorbs.net]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dhldiplomatic21[at]hotmail.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4994]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1851021947-1309273847=:33118
Content-Type: text/plain; charset=us-ascii
Attention:Dearest friend,
This is to inform you that the DIPLOMATIC AGENT conveying the $750.000.00USD
to you as a Consignment box is stranded in your airport and he is waiting for
your direction now. He misplace your address meanwhile, I'm not in Benin
Republic right now so kindly farword your below information to him to avoid
the divertion of your payment.
(1)YOUR FULL ADDRESS (2) YOUR NEAREST AIRPORT (3) FULL NAME (4) PRIVATE TELEPHONE.
Contact him right now because if they return the consignment back again,it
will be hard to ship the payment to you due to the problem we are having to
transfer money out of the Country. NOTE THIS, the diplomat carry out the
delivey as FAMILIES TREASURE so don't let him know that there is
$750.000.00USD inside the box delivering to you. E-mail the above information
to him now and make sure he deliver the consignment to you today.
CONTACT PERSON (MR. STANLEY ADAMS) DHL AGENT.
E-mail:[email protected]
Don't delay,i will be leaving the state for another 9months caurse so if you
dont hear from the DHL agent or company today then contact Mrs.Rose Zuba the
Ecobank accountant officer by phone calls +229 6693 9181 because she is only
person in the bank that helped me made the deposit with DHL courier company.
Let me know as soon as you receive the consignment to ensure we share the joy
together after the sufferness.
Thanks and God bless.
Barr. Tony Wilfred.
Envelope-to:
Delivery-date: Tue, 28 Jun 2011 08:10:52 -0700
Received: from nm1-vm1.bullet.mail.kr3.yahoo.com ([111.67.240.243])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QbZwA-0007w2-PP
for ; Tue, 28 Jun 2011 08:10:52 -0700
Received: from [111.67.240.250] by nm1.bullet.mail.kr3.yahoo.com with NNFMP; 28 Jun 2011 15:10:48 -0000
Received: from [111.67.240.253] by tm1.bullet.mail.kr3.yahoo.com with NNFMP; 28 Jun 2011 15:10:48 -0000
Received: from [127.0.0.1] by omp1002.mail.kr3.yahoo.com with NNFMP; 28 Jun 2011 15:10:48 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 33298 invoked by uid 60001); 28 Jun 2011 15:10:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1309273848; bh=LAenf6jbPdd5D816AOYn3kLUXt6HAKTZ3+x/0lQsU90=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=vX0HjmbF2vk5l1LTmk56dVYANakjfZqZwYnRTX7y2JbmcYc7l2ydesODYeTmP3GKlFQCkVFaCYxc/CpX4uUQNMbnDmjpUA2tqXOTcVlXCC9nNIGIEnXqlC78reH3cIddrU20b6CWiFz41eSgYXTm5O2Qf5ZKPt9eruG5m7WQld4=
X-YMail-OSG: .mc0FCQVM1nTZHmCgnKd2cTMSspJ2nssOXFHpjcWGw8b8W4
Received: from [41.85.161.2] by web70704.mail.kr3.yahoo.com via HTTP; Wed, 29 Jun 2011 00:10:47 KST
X-RocketYMMF: alexset23
X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.307740
Message-ID: <[email protected]>
Date: Wed, 29 Jun 2011 00:10:47 +0900 (KST)
From: "Barr. Tony Wilfred" <[email protected]>
Reply-To: [email protected]
Subject: CONTACT DIPLOMAT STANLEY ADAMS AT YOUR AIRPORT
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1851021947-1309273847=:33118"
X-Spam-Subject: ***SPAM*** CONTACT DIPLOMAT STANLEY ADAMS AT YOUR AIRPORT
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention:Dearest friend, This is to inform you that the DIPLOMATIC
AGENT conveying the $750.000.00USD to you as a Consignment box is stranded
in your airport and he is waiting for [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is freemail (scccbr[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[111.67.240.243 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.85.161.2>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.85.161.2 listed in dnsbl.sorbs.net]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dhldiplomatic21[at]hotmail.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4994]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1851021947-1309273847=:33118
Content-Type: text/plain; charset=us-ascii
Attention:Dearest friend,
This is to inform you that the DIPLOMATIC AGENT conveying the $750.000.00USD
to you as a Consignment box is stranded in your airport and he is waiting for
your direction now. He misplace your address meanwhile, I'm not in Benin
Republic right now so kindly farword your below information to him to avoid
the divertion of your payment.
(1)YOUR FULL ADDRESS (2) YOUR NEAREST AIRPORT (3) FULL NAME (4) PRIVATE TELEPHONE.
Contact him right now because if they return the consignment back again,it
will be hard to ship the payment to you due to the problem we are having to
transfer money out of the Country. NOTE THIS, the diplomat carry out the
delivey as FAMILIES TREASURE so don't let him know that there is
$750.000.00USD inside the box delivering to you. E-mail the above information
to him now and make sure he deliver the consignment to you today.
CONTACT PERSON (MR. STANLEY ADAMS) DHL AGENT.
E-mail:[email protected]
Don't delay,i will be leaving the state for another 9months caurse so if you
dont hear from the DHL agent or company today then contact Mrs.Rose Zuba the
Ecobank accountant officer by phone calls +229 6693 9181 because she is only
person in the bank that helped me made the deposit with DHL courier company.
Let me know as soon as you receive the consignment to ensure we share the joy
together after the sufferness.
Thanks and God bless.
Barr. Tony Wilfred.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces