by buried under 419s
Sat Jul 23, 2011 12:06 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 23 Jul 2011 06:46:10 -0700
Received: from nm2-vm1.bullet.mail.ne1.yahoo.com ([98.138.91.33])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QkcWv-0005Yy-2i
for ; Sat, 23 Jul 2011 06:46:10 -0700
Received: from [98.138.90.53] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 23 Jul 2011 13:46:06 -0000
Received: from [98.138.89.252] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 23 Jul 2011 13:46:06 -0000
Received: from [127.0.0.1] by omp1044.mail.ne1.yahoo.com with NNFMP; 23 Jul 2011 13:46:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 70873 invoked by uid 60001); 23 Jul 2011 13:46:05 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1311428765; bh=59tzl7Vt/3MlHV+NPY6Tc1VLPIp9Mklo0L/xlXw213E=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=OuRcQwBXaRZ5lzQqf53UrED5i/VrL9VFQNAoK6GTkOseTlebVwfwcwSu15P0p1dCmBEpwjiUwW6oc5/M8DRU1+R/w5Lh9KH+IWfTRCo0fw723BDC+DyBpgyZG51ea9+FDMC0JzIEVNwYNfXZ0/cQMhC/jhaiQYPLXcVXSA+yLBI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=6OPssTyFOJzs6E7mC8lRXS+AwMc5uRcSQVq20RBZw8ZuWsodAvmxEMvW45l34Fv9huz8zU7IPNor8DwBJdL1jNVqlk3lcbc6fdqAnNKjX5n+4mZKS/7UNNKaFIKwjej+0uBZZuHQxoyMRm1OFjEoBZX7quyQDcFlypViGi9Gj8o=;
X-YMail-OSG: YLI1r2EVM1lomqal7D4Lh4CVOkCVpj4.3MfAh0OgaKTA3km
1IWN_O0udie3Cloh1yq4_lpB6lInh..hXmp03dwUWXTWCB0ZpjBKh1NELKKf
_2aAZkkXdEyRmYKH1KY.Oq_2HvIOcN7z81jnVY36y5JRSgFrow4TCJpVUDiy
HTs_EXqR9Z_W.LgbQl36PXH1ePH8JlrlPoGUAME6z1l63x8wU6Pkp4OVtCGw
pMRWDfKOGgofm14h6v1Zxsyp4eRypT.OM_GfvATPGZ6l0zELZJxGTU9pu_j_
BqqQ_rYWcLEy5som5rof5bT.thCByLKS2zj6EhyhfuyFSkBbohNkPG2nBnk9
90duQrqr1.Az8qUz1Y.zlQ_scuStGNF5476akKWVN.l3LuTYn0dhwosT4nH5
WQFWCCXfrXqcZ494URVTfBXNwUv.ojJn_9bhUXpt8OA.nZTkxBnqKXAk5SEc
gVvoDCJ5XMVJ._Uyj7C_sRA4_Y6CTwembmg7.x5M0qkYWjFAuq9MGceZ4dIk
YcOhLlbwiiR_EPQwrlFZ3BYxmMjloy3_d.XGO0c.EEDXoChVA8RUmNLhFRuv
uIOSmd39UUAom_g6kGyo-
Received: from [41.71.147.150] by web37305.mail.mud.yahoo.com via HTTP; Sat, 23 Jul 2011 06:46:05 PDT
X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.310352
Message-ID: <[email protected]>
Date: Sat, 23 Jul 2011 06:46:05 -0700 (PDT)
From: "Dr. Ndubuisi Eze" <[email protected]>
Reply-To: [email protected]
Subject: Please read this message carefully
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1556849428-1311428765=:1921"
X-Spam-Subject: ***SPAM*** Please read this message carefully
X-Spam-Status: Yes, score=11.4
X-Spam-Score: 114
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Respective, Please read this message carefully. This is to
notify you that your over due contract/inheritance claim fund part payment
of US$1,800,000.00 as approved by the Federal Ministry of Finance and funded
by the Central Bank has been released for payment and loaded into an ATM
card for your use till further payments will be made to you from our offshore
account abroad later next year. [...]
Content analysis details: (11.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.33 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail (fkodit[at]yahoo.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.4 MONEY_ATM_CARD Lots of money on an ATM card
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1556849428-1311428765=:1921
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Respective,
Please read this message carefully. This is to notify you that your over due contract/inheritance claim fund part payment of US$1,800,000.00 as approved by the Federal Ministry of Finance and funded by the Central Bank has been released for payment and loaded into an ATM card for your use till further payments will be made to you from our offshore account abroad later next year.
To activate your ATM Card, you need to go to any ATM terminal that has "MULTI EXPRESSO" logo. Put the card to ATM and press your PIN. And done! Also, when you get a letter containing your ATM Card PIN number, please check as there is a 16-digit reference number that is valid for 90 days in that letter. You can use that 16-digit reference number to change your ATM Card PIN.
Here below is the information of a shipment of such nature as yours which you can log on to http://www.ups.com and track the shipment with Tracking number 1Z73257A0473182415 of an ATM CARD that was sent out by this office and delivered some weeks ago to the owner. Your brochure information is as follows:
Initial pin: 8376
ATM pin: 488
Your ATM card is ready and available to be delivered to you. Here are the details of your package awaiting dispatch. As soon as we get your payment information, your package will be dispatched immediately. Your identification number is MMNG/CXS/4476, while your package color is BROWN. Here is a breakdown of the charges to be met:
COURIER CHARGES......................:US$25.00
CUSTOM DUTIES...........................:US$10.5
ADMINISTRATIVE CHARGES.....:US$30.00
TOTAL AMOUNT TO SEND..........:US$65.5
By normal calculations on the delivery charges, you are supposed to be sending to this office, the sum of US$65.5, but we prefer that you send US$65 to give it a whole number as the $0.5 is insignificant.
You are to make this payment via WESTERN UNION MONEY TRANSFER in the name of our accounts officer and forward payment details and also attach the payment slip to this office via email which must include the following:
Receiver’s name:...........Nwagu Stephen
Receiver’s address:........Lagos Nigeria
Test question.................Green or white.
Test answer....................Green
Name of sender:.............your own name
Address of sender:.........your own address
Amount sent:.................UD$65.00 dollars
Control number :..........(M.T.C.N)
In receipt of your payment, we will ship your ATM card to you and also send to you via e-mail attachment the dispatch delivery receipt with the tracking number that will enable you to track it online to verify when your ATM card will arrive to your designated address as you have forwarded to us
Lastly, you can verify by tracking through http://www.ups.com of our American beneficiaries that have received their own ATM cards sometimes back. You can track them to verify by yourself as to clarify you properly. Below are the tracking numbers.
1Z73257A0473182415
Treat very urgently as we also remind you again that your ATM card is ready and we have very little time to dispatch your ATM card to you. Please confirm the receipt of this mail and get back to this office accordingly. To be sure your ATM package will get to you this month as stated; here are dispatches verifications of people that have been paid by this office in time past also.
You can track the package history online to see that I am diligent on my duties and I have never disappointed nor failed since I took over the helm of affairs.
You can also track this package history online also to know that your own case can not be different from theirs since I started heading this office. I have ship and delivered packages to our government contract executors and fund beneficiaries and nobody ever complained. So, as soon as you send in your balance of US$65 as instructed in my email, I will send you your tracker number and date of delivery. Please call to confirm your ATM card.
Best regards,
Dr. Ndubuisi Eze
Hotline: +2348028647437
Envelope-to:
Delivery-date: Sat, 23 Jul 2011 06:46:10 -0700
Received: from nm2-vm1.bullet.mail.ne1.yahoo.com ([98.138.91.33])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QkcWv-0005Yy-2i
for ; Sat, 23 Jul 2011 06:46:10 -0700
Received: from [98.138.90.53] by nm2.bullet.mail.ne1.yahoo.com with NNFMP; 23 Jul 2011 13:46:06 -0000
Received: from [98.138.89.252] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 23 Jul 2011 13:46:06 -0000
Received: from [127.0.0.1] by omp1044.mail.ne1.yahoo.com with NNFMP; 23 Jul 2011 13:46:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 70873 invoked by uid 60001); 23 Jul 2011 13:46:05 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1311428765; bh=59tzl7Vt/3MlHV+NPY6Tc1VLPIp9Mklo0L/xlXw213E=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=OuRcQwBXaRZ5lzQqf53UrED5i/VrL9VFQNAoK6GTkOseTlebVwfwcwSu15P0p1dCmBEpwjiUwW6oc5/M8DRU1+R/w5Lh9KH+IWfTRCo0fw723BDC+DyBpgyZG51ea9+FDMC0JzIEVNwYNfXZ0/cQMhC/jhaiQYPLXcVXSA+yLBI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=6OPssTyFOJzs6E7mC8lRXS+AwMc5uRcSQVq20RBZw8ZuWsodAvmxEMvW45l34Fv9huz8zU7IPNor8DwBJdL1jNVqlk3lcbc6fdqAnNKjX5n+4mZKS/7UNNKaFIKwjej+0uBZZuHQxoyMRm1OFjEoBZX7quyQDcFlypViGi9Gj8o=;
X-YMail-OSG: YLI1r2EVM1lomqal7D4Lh4CVOkCVpj4.3MfAh0OgaKTA3km
1IWN_O0udie3Cloh1yq4_lpB6lInh..hXmp03dwUWXTWCB0ZpjBKh1NELKKf
_2aAZkkXdEyRmYKH1KY.Oq_2HvIOcN7z81jnVY36y5JRSgFrow4TCJpVUDiy
HTs_EXqR9Z_W.LgbQl36PXH1ePH8JlrlPoGUAME6z1l63x8wU6Pkp4OVtCGw
pMRWDfKOGgofm14h6v1Zxsyp4eRypT.OM_GfvATPGZ6l0zELZJxGTU9pu_j_
BqqQ_rYWcLEy5som5rof5bT.thCByLKS2zj6EhyhfuyFSkBbohNkPG2nBnk9
90duQrqr1.Az8qUz1Y.zlQ_scuStGNF5476akKWVN.l3LuTYn0dhwosT4nH5
WQFWCCXfrXqcZ494URVTfBXNwUv.ojJn_9bhUXpt8OA.nZTkxBnqKXAk5SEc
gVvoDCJ5XMVJ._Uyj7C_sRA4_Y6CTwembmg7.x5M0qkYWjFAuq9MGceZ4dIk
YcOhLlbwiiR_EPQwrlFZ3BYxmMjloy3_d.XGO0c.EEDXoChVA8RUmNLhFRuv
uIOSmd39UUAom_g6kGyo-
Received: from [41.71.147.150] by web37305.mail.mud.yahoo.com via HTTP; Sat, 23 Jul 2011 06:46:05 PDT
X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.310352
Message-ID: <[email protected]>
Date: Sat, 23 Jul 2011 06:46:05 -0700 (PDT)
From: "Dr. Ndubuisi Eze" <[email protected]>
Reply-To: [email protected]
Subject: Please read this message carefully
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1556849428-1311428765=:1921"
X-Spam-Subject: ***SPAM*** Please read this message carefully
X-Spam-Status: Yes, score=11.4
X-Spam-Score: 114
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Respective, Please read this message carefully. This is to
notify you that your over due contract/inheritance claim fund part payment
of US$1,800,000.00 as approved by the Federal Ministry of Finance and funded
by the Central Bank has been released for payment and loaded into an ATM
card for your use till further payments will be made to you from our offshore
account abroad later next year. [...]
Content analysis details: (11.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.91.33 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is freemail (fkodit[at]yahoo.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.4 MONEY_ATM_CARD Lots of money on an ATM card
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1556849428-1311428765=:1921
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Respective,
Please read this message carefully. This is to notify you that your over due contract/inheritance claim fund part payment of US$1,800,000.00 as approved by the Federal Ministry of Finance and funded by the Central Bank has been released for payment and loaded into an ATM card for your use till further payments will be made to you from our offshore account abroad later next year.
To activate your ATM Card, you need to go to any ATM terminal that has "MULTI EXPRESSO" logo. Put the card to ATM and press your PIN. And done! Also, when you get a letter containing your ATM Card PIN number, please check as there is a 16-digit reference number that is valid for 90 days in that letter. You can use that 16-digit reference number to change your ATM Card PIN.
Here below is the information of a shipment of such nature as yours which you can log on to http://www.ups.com and track the shipment with Tracking number 1Z73257A0473182415 of an ATM CARD that was sent out by this office and delivered some weeks ago to the owner. Your brochure information is as follows:
Initial pin: 8376
ATM pin: 488
Your ATM card is ready and available to be delivered to you. Here are the details of your package awaiting dispatch. As soon as we get your payment information, your package will be dispatched immediately. Your identification number is MMNG/CXS/4476, while your package color is BROWN. Here is a breakdown of the charges to be met:
COURIER CHARGES......................:US$25.00
CUSTOM DUTIES...........................:US$10.5
ADMINISTRATIVE CHARGES.....:US$30.00
TOTAL AMOUNT TO SEND..........:US$65.5
By normal calculations on the delivery charges, you are supposed to be sending to this office, the sum of US$65.5, but we prefer that you send US$65 to give it a whole number as the $0.5 is insignificant.
You are to make this payment via WESTERN UNION MONEY TRANSFER in the name of our accounts officer and forward payment details and also attach the payment slip to this office via email which must include the following:
Receiver’s name:...........Nwagu Stephen
Receiver’s address:........Lagos Nigeria
Test question.................Green or white.
Test answer....................Green
Name of sender:.............your own name
Address of sender:.........your own address
Amount sent:.................UD$65.00 dollars
Control number :..........(M.T.C.N)
In receipt of your payment, we will ship your ATM card to you and also send to you via e-mail attachment the dispatch delivery receipt with the tracking number that will enable you to track it online to verify when your ATM card will arrive to your designated address as you have forwarded to us
Lastly, you can verify by tracking through http://www.ups.com of our American beneficiaries that have received their own ATM cards sometimes back. You can track them to verify by yourself as to clarify you properly. Below are the tracking numbers.
1Z73257A0473182415
Treat very urgently as we also remind you again that your ATM card is ready and we have very little time to dispatch your ATM card to you. Please confirm the receipt of this mail and get back to this office accordingly. To be sure your ATM package will get to you this month as stated; here are dispatches verifications of people that have been paid by this office in time past also.
You can track the package history online to see that I am diligent on my duties and I have never disappointed nor failed since I took over the helm of affairs.
You can also track this package history online also to know that your own case can not be different from theirs since I started heading this office. I have ship and delivered packages to our government contract executors and fund beneficiaries and nobody ever complained. So, as soon as you send in your balance of US$65 as instructed in my email, I will send you your tracker number and date of delivery. Please call to confirm your ATM card.
Best regards,
Dr. Ndubuisi Eze
Hotline: +2348028647437
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces