by buried under 419s
Sat Jul 09, 2011 8:04 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 09 Jul 2011 04:42:20 -0700
Received: from nm4.bullet.mail.in.yahoo.com ([121.101.151.226])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QfVvO-0004rK-Oc
For ; Sat, 09 Jul 2011 04:42:20 -0700
Received: from [121.101.151.236] by nm4.bullet.mail.in.yahoo.com with NNFMP; 09 Jul 2011 11:44:55 -0000
Received: from [121.101.151.233] by tm1.bullet.mail.in.yahoo.com with NNFMP; 09 Jul 2011 11:44:11 -0000
Received: from [127.0.0.1] by omp1002.mail.in.yahoo.com with NNFMP; 09 Jul 2011 11:45:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 94028 invoked by uid 60001); 9 Jul 2011 11:42:13 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310211733; bh=roWJVRaKmbPqlaRS3rzTMZYqqJNYG0qw2FQxm3Bo3n0=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=NOjjVfBsFgxsT7TqzOdJtEVY9cyO35L/sWOuH1bC7m35UxpKeX8b/L591COFmPM1WSNrumwDYNo3La41eQtusZXLqn4Fp6m0EB7dMVexWX59DZ74g10WMPYCj4TluSbBZcSdA/htgMSdEg/a+48vHeDU/C/5hMqCe2PO7cR+JcQ=
X-YMail-OSG: ueqYomEVM1nSNMciMky4VrKVTNWM0gO0TLdJAtjG_mkUqIq
Received: from [41.138.89.38] by web137113.mail.in.yahoo.com via HTTP; Sat, 09 Jul 2011 17:12:13 IST
X-RocketYMMF: r.aishwarya82
X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.307740
Message-ID: <[email protected]>
Date: Sat, 9 Jul 2011 17:12:13 +0530 (IST)
From: OFFICE CONSULTANT <[email protected]>
Reply-To: [email protected]
Subject: FINAL DELIVERY NOTICE FOR YOUR ATM CARD,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1081848695-1310211733=:74418"
X-Spam-Subject: ***SPAM*** FINAL DELIVERY NOTICE FOR YOUR ATM CARD,
X-Spam-Status: Yes, score=19.7
X-Spam-Score: 197
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beneficiary, This is to bring to your notice that because
of the impossibility of your fund transfer through the western union network,
we have credited your total sum of $2.7millon valid fund into an ATM MASTER
CARD and I have paid the re-activation fee and the delivery of the ATM Card
To you, I paid it because the ATM Card worth of $2.700,000.00 which I have
registered for delivery yesterday has less than Four Monthlys to expire in
the custody of the TNT Company and when it expires, the money will go into
Federal Government treasury account. [...]
Content analysis details: (19.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.138.89.38>]
0.0 FREEMAIL_FROM Sender email is freemail
(officeconsult001[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[121.101.151.226 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.138.89.38 listed in dnsbl.sorbs.net]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officeconsult001[at]gmail.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.4 MONEY_ATM_CARD Lots of money on an ATM card
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1081848695-1310211733=:74418
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear Beneficiary,
This is to bring to your notice that because of the impossibility of your fund transfer through the western union network, we have credited your total sum of $2.7millon valid fund into an ATM MASTER CARD and I have paid the re-activation fee and the delivery of the ATM Card To you, I paid it because the ATM Card worth of $2.700,000.00 which I have registered for delivery yesterday has less than Four Monthlys to expire in the custody of the TNT Company and when it expires, the money will go into Federal Government treasury account.
With that we decided to help you pay off the money so that the ATM Card will not expire, because I trust that when you receive your ATM Card definitely you must pay me back my money and even compensate me for helping you.I was calling the telephone number you provided then, but unavailable to confirm if you still living in your formal address in for the registration of the ATM Card. Now I want you to contact TNT Express Delivery with your physical address you desire the delivery to be made so that they can deliver your ATM Card to your designated address without any delay.
Like I stated earlier, the crediting re-activation, delivery and the company registration charges has been paid by me, but I did not pay their official keeping fees since they refused, they refused and the reason is that they do not know when you are going to contact them and the demurrage might have increased by then, They told me that their keeping fees is $25 per day only, and I deposited it on 6th of July 2011:
Below is the Contact Information of the TNT, Express Customer Service Director Mr. Kelly Hall, Email Address online:
( [email protected] )Tel: +229 66 69 35 49. Contact them today and also send them the security official keeping charge to avoid increase of their fees and let me know once you receive your ATM card, Important Notice, your ATM CARD package was registered as a gift so that the diplomatic Agent will not know the content of your package okay.
Yours Sincerely, Mrs. Robin David.
Envelope-to:
Delivery-date: Sat, 09 Jul 2011 04:42:20 -0700
Received: from nm4.bullet.mail.in.yahoo.com ([121.101.151.226])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QfVvO-0004rK-Oc
For ; Sat, 09 Jul 2011 04:42:20 -0700
Received: from [121.101.151.236] by nm4.bullet.mail.in.yahoo.com with NNFMP; 09 Jul 2011 11:44:55 -0000
Received: from [121.101.151.233] by tm1.bullet.mail.in.yahoo.com with NNFMP; 09 Jul 2011 11:44:11 -0000
Received: from [127.0.0.1] by omp1002.mail.in.yahoo.com with NNFMP; 09 Jul 2011 11:45:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 94028 invoked by uid 60001); 9 Jul 2011 11:42:13 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310211733; bh=roWJVRaKmbPqlaRS3rzTMZYqqJNYG0qw2FQxm3Bo3n0=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=NOjjVfBsFgxsT7TqzOdJtEVY9cyO35L/sWOuH1bC7m35UxpKeX8b/L591COFmPM1WSNrumwDYNo3La41eQtusZXLqn4Fp6m0EB7dMVexWX59DZ74g10WMPYCj4TluSbBZcSdA/htgMSdEg/a+48vHeDU/C/5hMqCe2PO7cR+JcQ=
X-YMail-OSG: ueqYomEVM1nSNMciMky4VrKVTNWM0gO0TLdJAtjG_mkUqIq
Received: from [41.138.89.38] by web137113.mail.in.yahoo.com via HTTP; Sat, 09 Jul 2011 17:12:13 IST
X-RocketYMMF: r.aishwarya82
X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.307740
Message-ID: <[email protected]>
Date: Sat, 9 Jul 2011 17:12:13 +0530 (IST)
From: OFFICE CONSULTANT <[email protected]>
Reply-To: [email protected]
Subject: FINAL DELIVERY NOTICE FOR YOUR ATM CARD,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1081848695-1310211733=:74418"
X-Spam-Subject: ***SPAM*** FINAL DELIVERY NOTICE FOR YOUR ATM CARD,
X-Spam-Status: Yes, score=19.7
X-Spam-Score: 197
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beneficiary, This is to bring to your notice that because
of the impossibility of your fund transfer through the western union network,
we have credited your total sum of $2.7millon valid fund into an ATM MASTER
CARD and I have paid the re-activation fee and the delivery of the ATM Card
To you, I paid it because the ATM Card worth of $2.700,000.00 which I have
registered for delivery yesterday has less than Four Monthlys to expire in
the custody of the TNT Company and when it expires, the money will go into
Federal Government treasury account. [...]
Content analysis details: (19.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.138.89.38>]
0.0 FREEMAIL_FROM Sender email is freemail
(officeconsult001[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[121.101.151.226 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.138.89.38 listed in dnsbl.sorbs.net]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officeconsult001[at]gmail.com)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.4 MONEY_ATM_CARD Lots of money on an ATM card
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1081848695-1310211733=:74418
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear Beneficiary,
This is to bring to your notice that because of the impossibility of your fund transfer through the western union network, we have credited your total sum of $2.7millon valid fund into an ATM MASTER CARD and I have paid the re-activation fee and the delivery of the ATM Card To you, I paid it because the ATM Card worth of $2.700,000.00 which I have registered for delivery yesterday has less than Four Monthlys to expire in the custody of the TNT Company and when it expires, the money will go into Federal Government treasury account.
With that we decided to help you pay off the money so that the ATM Card will not expire, because I trust that when you receive your ATM Card definitely you must pay me back my money and even compensate me for helping you.I was calling the telephone number you provided then, but unavailable to confirm if you still living in your formal address in for the registration of the ATM Card. Now I want you to contact TNT Express Delivery with your physical address you desire the delivery to be made so that they can deliver your ATM Card to your designated address without any delay.
Like I stated earlier, the crediting re-activation, delivery and the company registration charges has been paid by me, but I did not pay their official keeping fees since they refused, they refused and the reason is that they do not know when you are going to contact them and the demurrage might have increased by then, They told me that their keeping fees is $25 per day only, and I deposited it on 6th of July 2011:
Below is the Contact Information of the TNT, Express Customer Service Director Mr. Kelly Hall, Email Address online:
( [email protected] )Tel: +229 66 69 35 49. Contact them today and also send them the security official keeping charge to avoid increase of their fees and let me know once you receive your ATM card, Important Notice, your ATM CARD package was registered as a gift so that the diplomatic Agent will not know the content of your package okay.
Yours Sincerely, Mrs. Robin David.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces