by buried under 419s
Fri Aug 05, 2011 8:47 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 05 Aug 2011 14:15:20 -0700
Received: from nm3-vm0.bullet.mail.in.yahoo.com ([121.101.151.212])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QpRjg-0005zE-UI
for ; Fri, 05 Aug 2011 14:15:20 -0700
Received: from [121.101.151.237] by nm3.bullet.mail.in.yahoo.com with NNFMP; 05 Aug 2011 21:19:08 -0000
Received: from [121.101.151.232] by tm2.bullet.mail.in.yahoo.com with NNFMP; 05 Aug 2011 21:15:02 -0000
Received: from [127.0.0.1] by omp1001.mail.in.yahoo.com with NNFMP; 05 Aug 2011 21:15:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 91759 invoked by uid 60001); 5 Aug 2011 21:15:07 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1312578907; bh=3vYRhElRJ3RJQpe+il9uWcFQD+6oCEBdWQgNpTzHZjc=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=maCI+FTniDlZcZdiyK71JCvLKfjSOeUckfCdcezLLNNtLbyNzhJQJEhuo+4vlaASvThkPI+Y+8ntQoj1j1+SbMLNlvGeJd1X9sqE8kBwqwZFccCgvwqprApsxiNDvoQVV+XOA0Du72IwkIOOSzq4RxgxQAuPZS3fN+ZxsM1SUL4=
X-YMail-OSG: 81RPdO4VM1lItH9IoY.H7G9pxyO2Fe18SVmY3EWs1buFypG
Received: from [41.216.40.128] by web95205.mail.in2.yahoo.com via HTTP; Sat, 06 Aug 2011 02:45:07 IST
X-RocketYMMF: basubipasha43
X-Mailer: YahooMailClassic/14.0.4 YahooMailWebService/0.8.113.313619
Message-ID: <[email protected]>
Date: Sat, 6 Aug 2011 02:45:07 +0530 (IST)
From: John Marthins <[email protected]>
Reply-To: [email protected]
Subject: YOUR PAYMENT IS ALREADY SENT CONTACT WESTERN UNION NOW,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1949187500-1312578907=:31568"
X-Spam-Subject: ***SPAM*** YOUR PAYMENT IS ALREADY SENT CONTACT WESTERN UNION NOW,
X-Spam-Status: Yes, score=12.4
X-Spam-Score: 124
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: WELCOME TO WESTERN UNION MONEY TRANSFER [...]
Content analysis details: (12.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (jjhook123[at]tlen.pl)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[121.101.151.212 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=j ... roject.com]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jjhook123[at]tlen.pl)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_REMOTE_IMAGE Message contains an external image
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-1949187500-1312578907=:31568
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
WELCOME TO
WESTERN UNION
MONEY
TRANSFER
Western Union®Welcome to Western
Union
Send Money Worldwide
FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER.
COTONOU BENIN
REPUBLIC/ADDRESS 455 AGBOKOU,ANKPA
ROAD OPPOSITE TUNDE MOTORS
COTONOU.
Telephone +229-98-70-79-00
Western Union Contact
Email:
( [email protected] )
Attn; Beneficiary,
How are you today? I was
calling your phone through yesterday and you don't feel to carry my calls why,
When you are now at least geting $5.000.00 to $10.000.00 thousand transfer
payment since yesterday and today because I later raise $100.00 to use help you
cover up the required $195.00 to enable you start receiving your payment as from
tomorrow morning once this office open.
But I was calling you to inform
you that I want to help you with $100.00 while you pay balance of $65.00 but you
was not picking up my calls, Well you still have the opportunity to send this
$65.00 today. then i will help you complete it for you to get atleast one
transfer tomorrow if you send the money in time because our Bank here promise
send you another two payment tomorrow been August 3th before our closing
hours.
So, try as much as possible to see how you will send this balance
of $65.00 this afternoon with this given information,
RECEIVER NAME:
MR, NWAEKWU BEJAMIN
COUNTRY: BENIN
REPUBLIC
CITY: COTONOU
QUESTION: HOW
LONG?
ANSWER: 24HOURS
AMOUNT: $65.00
If you
send $65.00 today, I will help you with balance of $100.00 atleast you will get
$5.000.00 transfer tomorrow.that is my agreement with our department now. So run
around and see that you send the $65.00,this afternoon I knew the reason why I
say this, I knew it will help you alot to pay all the expense you have sofar, I
have done my best to help you out. So is your duty to complete the rest and
start receiveing your payment as from today or tomorrow morning if send the
money in time today.
(2)This is your payment tracking number and it is
Available to pick up by receiver but you can not pick it up as for now untill
you send the transfer charge before you can have full information to pick up the
$5.000.00 tomorrow ok. ENTER OUR WEBSITE WWW.WESTERNUNION.COM
Sender,s first Name== john mike
Text Question..........How
long
Answer..................Today
Mtcn.......................
2612591885
Amount...................$5.000.00
Click tracking. and enter
the MTCN 2612591885 then sender name first ( john ) Sender Second name ( mike )
to see that your payment is available to pick up by receiver but you cannot pick
it until you send the $65.00 before we will give the full information to pick up
immediately. Check status of the transfer
I am waiting for the
MTCN:
God bless you.
Dr Mr. Zack Daniel
WESTERN UNION HEAD OFFICE
DEPARTMENT
REPUBLIC
OF BENIN.
FOREGN CONTRACTOR PAYMENT OFFICE Western
Union Contact Email:( [email protected] )
Envelope-to:
Delivery-date: Fri, 05 Aug 2011 14:15:20 -0700
Received: from nm3-vm0.bullet.mail.in.yahoo.com ([121.101.151.212])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QpRjg-0005zE-UI
for ; Fri, 05 Aug 2011 14:15:20 -0700
Received: from [121.101.151.237] by nm3.bullet.mail.in.yahoo.com with NNFMP; 05 Aug 2011 21:19:08 -0000
Received: from [121.101.151.232] by tm2.bullet.mail.in.yahoo.com with NNFMP; 05 Aug 2011 21:15:02 -0000
Received: from [127.0.0.1] by omp1001.mail.in.yahoo.com with NNFMP; 05 Aug 2011 21:15:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 91759 invoked by uid 60001); 5 Aug 2011 21:15:07 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1312578907; bh=3vYRhElRJ3RJQpe+il9uWcFQD+6oCEBdWQgNpTzHZjc=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=maCI+FTniDlZcZdiyK71JCvLKfjSOeUckfCdcezLLNNtLbyNzhJQJEhuo+4vlaASvThkPI+Y+8ntQoj1j1+SbMLNlvGeJd1X9sqE8kBwqwZFccCgvwqprApsxiNDvoQVV+XOA0Du72IwkIOOSzq4RxgxQAuPZS3fN+ZxsM1SUL4=
X-YMail-OSG: 81RPdO4VM1lItH9IoY.H7G9pxyO2Fe18SVmY3EWs1buFypG
Received: from [41.216.40.128] by web95205.mail.in2.yahoo.com via HTTP; Sat, 06 Aug 2011 02:45:07 IST
X-RocketYMMF: basubipasha43
X-Mailer: YahooMailClassic/14.0.4 YahooMailWebService/0.8.113.313619
Message-ID: <[email protected]>
Date: Sat, 6 Aug 2011 02:45:07 +0530 (IST)
From: John Marthins <[email protected]>
Reply-To: [email protected]
Subject: YOUR PAYMENT IS ALREADY SENT CONTACT WESTERN UNION NOW,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1949187500-1312578907=:31568"
X-Spam-Subject: ***SPAM*** YOUR PAYMENT IS ALREADY SENT CONTACT WESTERN UNION NOW,
X-Spam-Status: Yes, score=12.4
X-Spam-Score: 124
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: WELCOME TO WESTERN UNION MONEY TRANSFER [...]
Content analysis details: (12.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (jjhook123[at]tlen.pl)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[121.101.151.212 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=j ... roject.com]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jjhook123[at]tlen.pl)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_REMOTE_IMAGE Message contains an external image
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
--0-1949187500-1312578907=:31568
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
WELCOME TO
WESTERN UNION
MONEY
TRANSFER
Western Union®Welcome to Western
Union
Send Money Worldwide
FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER.
COTONOU BENIN
REPUBLIC/ADDRESS 455 AGBOKOU,ANKPA
ROAD OPPOSITE TUNDE MOTORS
COTONOU.
Telephone +229-98-70-79-00
Western Union Contact
Email:
( [email protected] )
Attn; Beneficiary,
How are you today? I was
calling your phone through yesterday and you don't feel to carry my calls why,
When you are now at least geting $5.000.00 to $10.000.00 thousand transfer
payment since yesterday and today because I later raise $100.00 to use help you
cover up the required $195.00 to enable you start receiving your payment as from
tomorrow morning once this office open.
But I was calling you to inform
you that I want to help you with $100.00 while you pay balance of $65.00 but you
was not picking up my calls, Well you still have the opportunity to send this
$65.00 today. then i will help you complete it for you to get atleast one
transfer tomorrow if you send the money in time because our Bank here promise
send you another two payment tomorrow been August 3th before our closing
hours.
So, try as much as possible to see how you will send this balance
of $65.00 this afternoon with this given information,
RECEIVER NAME:
MR, NWAEKWU BEJAMIN
COUNTRY: BENIN
REPUBLIC
CITY: COTONOU
QUESTION: HOW
LONG?
ANSWER: 24HOURS
AMOUNT: $65.00
If you
send $65.00 today, I will help you with balance of $100.00 atleast you will get
$5.000.00 transfer tomorrow.that is my agreement with our department now. So run
around and see that you send the $65.00,this afternoon I knew the reason why I
say this, I knew it will help you alot to pay all the expense you have sofar, I
have done my best to help you out. So is your duty to complete the rest and
start receiveing your payment as from today or tomorrow morning if send the
money in time today.
(2)This is your payment tracking number and it is
Available to pick up by receiver but you can not pick it up as for now untill
you send the transfer charge before you can have full information to pick up the
$5.000.00 tomorrow ok. ENTER OUR WEBSITE WWW.WESTERNUNION.COM
Sender,s first Name== john mike
Text Question..........How
long
Answer..................Today
Mtcn.......................
2612591885
Amount...................$5.000.00
Click tracking. and enter
the MTCN 2612591885 then sender name first ( john ) Sender Second name ( mike )
to see that your payment is available to pick up by receiver but you cannot pick
it until you send the $65.00 before we will give the full information to pick up
immediately. Check status of the transfer
I am waiting for the
MTCN:
God bless you.
Dr Mr. Zack Daniel
WESTERN UNION HEAD OFFICE
DEPARTMENT
REPUBLIC
OF BENIN.
FOREGN CONTRACTOR PAYMENT OFFICE Western
Union Contact Email:( [email protected] )
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces