by buried under 419s
Thu Sep 01, 2011 6:12 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 01 Sep 2011 02:58:16 -0700
Received: from [74.81.95.46] (helo=selangor.sfdns.net)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Qz42J-0006G7-2d
for ; Thu, 01 Sep 2011 02:58:16 -0700
Received: from nobody by selangor.sfdns.net with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1Qz41v-0000Ms-IP
for ; Thu, 01 Sep 2011 17:57:52 +0800
To:
Subject: FUND TRANSFER OF $7,000:00 USD
X-PHP-Script: www.perhentianisland.org/wp-content/upl ... oTuNjI.php for 41.216.50.34, 41.216.50.34
From: Kenneth Kuye <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Thu, 01 Sep 2011 17:57:51 +0800
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - selangor.sfdns.net
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - selangor.sfdns.net
X-Spam-Subject: ***SPAM*** FUND TRANSFER OF $7,000:00 USD
X-Spam-Status: Yes, score=11.7
X-Spam-Score: 117
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: INFORMATION REACHING US FROM OUR CORPORATE HEADQUARTERS NOW,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF
YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST US$7,000.00 FROM YOUR TOTAL (FUND)
SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT BEFORE DUE TO HIGH
COST OF THE ACTIVATION FEE BUT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND
PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME
UP WITH THE REQUIRED SUM , PLEASE BE FAST BECAUSE TIME IS NOT BY OUR SIDE
ANY MORE. [...]
Content analysis details: (11.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[74.81.95.46 listed in bb.barracudacentral.org]
0.0 FREEMAIL_FROM Sender email is freemail (kenneth_kuye03[at]yahoo.fr)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7947]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.9 FREEMAIL_REPLY From and body contain different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
INFORMATION REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST US$7,000.00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT BEFORE DUE TO HIGH COST OF THE ACTIVATION FEE BUT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM , PLEASE BE FAST BECAUSE TIME IS NOT BY OUR SIDE ANY MORE.
YOU ARE TO PAY WHAT EVER YOU HAVE FOR THE ACTIVATION FEE; WE WILL ACTIVATE YOUR MTCN UPON RECEIPT OF THIS PAYMENT.
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST US$7,000.00, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP ALL YOUR TOTAL FUND, I WANT YOU TO SEND FEE WITH THIS INFORMATION THROUGH MONEY UNION.
1.RECEIVER NAME:............. PETER EJIKE
2.COUNTRY:............. BENIN REPUBLIC .
3.CITY :............... COTONOU .
4..TEST QUESTION:....VERY
5.TEST ANSWER:......URGENT.
6.AMOUNT ..........
7,SENDER?S NAME????.
SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE FEE WE WILL SEND YOU THE FIRST RECIEPT OF YOUR US$7,000.00 TODAY AND NOT TOMORROW
SO CONTACT THIS EMAIL ( [email protected] )
MY DIRECT PHONE LINE IS FROM WESTERN UNION OFFICE BENIN REPUBLIC FOR YOUR PAYMENT
MR FAVOUR
OPRATION MANAGER.
MONEY UNION DEPARTMENT
Envelope-to:
Delivery-date: Thu, 01 Sep 2011 02:58:16 -0700
Received: from [74.81.95.46] (helo=selangor.sfdns.net)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Qz42J-0006G7-2d
for ; Thu, 01 Sep 2011 02:58:16 -0700
Received: from nobody by selangor.sfdns.net with local (Exim 4.69)
(envelope-from <[email protected]>)
id 1Qz41v-0000Ms-IP
for ; Thu, 01 Sep 2011 17:57:52 +0800
To:
Subject: FUND TRANSFER OF $7,000:00 USD
X-PHP-Script: www.perhentianisland.org/wp-content/upl ... oTuNjI.php for 41.216.50.34, 41.216.50.34
From: Kenneth Kuye <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Thu, 01 Sep 2011 17:57:51 +0800
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - selangor.sfdns.net
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - selangor.sfdns.net
X-Spam-Subject: ***SPAM*** FUND TRANSFER OF $7,000:00 USD
X-Spam-Status: Yes, score=11.7
X-Spam-Score: 117
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: INFORMATION REACHING US FROM OUR CORPORATE HEADQUARTERS NOW,
STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF
YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST US$7,000.00 FROM YOUR TOTAL (FUND)
SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT BEFORE DUE TO HIGH
COST OF THE ACTIVATION FEE BUT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND
PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME
UP WITH THE REQUIRED SUM , PLEASE BE FAST BECAUSE TIME IS NOT BY OUR SIDE
ANY MORE. [...]
Content analysis details: (11.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[74.81.95.46 listed in bb.barracudacentral.org]
0.0 FREEMAIL_FROM Sender email is freemail (kenneth_kuye03[at]yahoo.fr)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7947]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.9 FREEMAIL_REPLY From and body contain different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
INFORMATION REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST US$7,000.00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT BEFORE DUE TO HIGH COST OF THE ACTIVATION FEE BUT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM , PLEASE BE FAST BECAUSE TIME IS NOT BY OUR SIDE ANY MORE.
YOU ARE TO PAY WHAT EVER YOU HAVE FOR THE ACTIVATION FEE; WE WILL ACTIVATE YOUR MTCN UPON RECEIPT OF THIS PAYMENT.
BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST US$7,000.00, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP ALL YOUR TOTAL FUND, I WANT YOU TO SEND FEE WITH THIS INFORMATION THROUGH MONEY UNION.
1.RECEIVER NAME:............. PETER EJIKE
2.COUNTRY:............. BENIN REPUBLIC .
3.CITY :............... COTONOU .
4..TEST QUESTION:....VERY
5.TEST ANSWER:......URGENT.
6.AMOUNT ..........
7,SENDER?S NAME????.
SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE FEE WE WILL SEND YOU THE FIRST RECIEPT OF YOUR US$7,000.00 TODAY AND NOT TOMORROW
SO CONTACT THIS EMAIL ( [email protected] )
MY DIRECT PHONE LINE IS FROM WESTERN UNION OFFICE BENIN REPUBLIC FOR YOUR PAYMENT
MR FAVOUR
OPRATION MANAGER.
MONEY UNION DEPARTMENT
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces