by buried under 419s
Wed Sep 07, 2011 10:16 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 07 Sep 2011 02:29:55 -0700
Received: from relay.mageal.net ([195.189.45.2] helo=mageal.net)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R1ES9-0003Na-25
for ; Wed, 07 Sep 2011 02:29:55 -0700
Received: from localhost ([127.0.0.1] helo=mail.mageal.net)
by mageal.net with esmtp (Exim 4.71)
(envelope-from <[email protected]>)
id 1R1Ebl-0006Hr-Rf; Wed, 07 Sep 2011 12:39:49 +0300
Received: from 41.71.147.11
(SquirrelMail authenticated user admin)
by mail.mageal.net with HTTP;
Wed, 7 Sep 2011 12:39:49 +0300 (EEST)
Message-ID: <[email protected]>
Date: Wed, 7 Sep 2011 12:39:49 +0300 (EEST)
Subject: I HAVE REGISTERED YOUR PACKAGE WITH FEDEX COURIER COMPANY
From: "Mr. Donald Clay." <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.10a
MIME-Version: 1.0
Content-Type: text/plain;charset=koi8-r
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Spam-Subject: ***SPAM*** I HAVE REGISTERED YOUR PACKAGE WITH FEDEX COURIER COMPANY
X-Spam-Status: Yes, score=16.8
X-Spam-Score: 168
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Good day!!! I have been waiting for you since to contact me
for your Confirmable Bank Draft of $850,000 United States Dollars, but I
did not hear from you since for a couple of weeks now. Then I went to the
bank to confirm if the draft has expired or getting near to expire and Dr.Wilson
the Director Bank of Africa told me that before the draft will get to your
hand that it will expire. So I told him to cash the $850,000USD UNITED STATES
DOLLARS to cash payment to avoid losing this funds under expiration as I
will be out of the country for a 3 Months Course and I will not come back
till ending of December 2012. [...]
Content analysis details: (16.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 URG_BIZ BODY: Contains urgent matter
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[195.189.45.2 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[195.189.45.2 listed in bb.barracudacentral.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(acc_info[at]sify.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrdonaldclay121[at]hotmail.com
)
1.0 MISSING_HEADERS Missing To: header
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Good day!!!
I have been waiting for you since to contact me for your Confirmable Bank
Draft of $850,000 United States Dollars, but I did not hear from you since
for a couple of weeks now. Then I went to the bank to confirm if the draft
has expired or getting near to expire and Dr.Wilson the Director Bank of
Africa told me that before the draft will get to your hand that it will
expire. So I told him to cash the $850,000USD UNITED STATES DOLLARS to
cash payment to avoid losing this funds under expiration as I will be out
of the country for a 3 Months Course and I will not come back till ending
of December 2012.
What you have to do now is to contact FEDEX COURIER SERVICES as soon as
possible to know when they will deliver your Consignment to you because of
the expiring date. For your information, I have paid for the delivering
Charge, Insurance premium.
The only money you will send to the FEDEX COURIER SERVICES to deliver your
Consignment direct to your postal Address in your country is ($125.00 US)
One Hundred & Twenty five United States Dollars only being Security
Keeping Fee of the Courier Company so far. Again, dont be deceived by any
body to pay any other money except $125.00 US Dollars. I would have paid
that but they said no because they dont know when you will contact them
and in case of dumurrage. You have to contact FEDEX COURIER SERVICES now
for the delivery of your Draft with this information bellow;
Directors Name: Re.George William
Companys Name: FEDEX COURIER SERVICES
Email Address: [email protected]
Tel/Fax: +234-708-0315939
Finally, make sure that you reconfirm your Postal address and Direct
telephone number to them again to avoid any mistake on the Delivery and
ask them to give you the tracking number to enable you track your package
over there and know when it will get to your address.
Let me repeat again, try to contact them as soon as you receive this mail
to avoid any further delay and remember to pay them their Security Keeping
fee of $125.00 US Dollars for their immediate action. Note this. The FEDEX
COURIER SERVICES don't know the contents of the Box. I registered it as a
BOX of Africa cloths (family valuables).
They did not know the contents was money. this is to avoid them delaying
with the BOX. Don't let them know that box contains money ok.
I am waiting for your urgent response.
Yours Faithfully,
Mr. Donald Clay.
Envelope-to:
Delivery-date: Wed, 07 Sep 2011 02:29:55 -0700
Received: from relay.mageal.net ([195.189.45.2] helo=mageal.net)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R1ES9-0003Na-25
for ; Wed, 07 Sep 2011 02:29:55 -0700
Received: from localhost ([127.0.0.1] helo=mail.mageal.net)
by mageal.net with esmtp (Exim 4.71)
(envelope-from <[email protected]>)
id 1R1Ebl-0006Hr-Rf; Wed, 07 Sep 2011 12:39:49 +0300
Received: from 41.71.147.11
(SquirrelMail authenticated user admin)
by mail.mageal.net with HTTP;
Wed, 7 Sep 2011 12:39:49 +0300 (EEST)
Message-ID: <[email protected]>
Date: Wed, 7 Sep 2011 12:39:49 +0300 (EEST)
Subject: I HAVE REGISTERED YOUR PACKAGE WITH FEDEX COURIER COMPANY
From: "Mr. Donald Clay." <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.10a
MIME-Version: 1.0
Content-Type: text/plain;charset=koi8-r
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Spam-Subject: ***SPAM*** I HAVE REGISTERED YOUR PACKAGE WITH FEDEX COURIER COMPANY
X-Spam-Status: Yes, score=16.8
X-Spam-Score: 168
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Good day!!! I have been waiting for you since to contact me
for your Confirmable Bank Draft of $850,000 United States Dollars, but I
did not hear from you since for a couple of weeks now. Then I went to the
bank to confirm if the draft has expired or getting near to expire and Dr.Wilson
the Director Bank of Africa told me that before the draft will get to your
hand that it will expire. So I told him to cash the $850,000USD UNITED STATES
DOLLARS to cash payment to avoid losing this funds under expiration as I
will be out of the country for a 3 Months Course and I will not come back
till ending of December 2012. [...]
Content analysis details: (16.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 URG_BIZ BODY: Contains urgent matter
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[195.189.45.2 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[195.189.45.2 listed in bb.barracudacentral.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(acc_info[at]sify.com)
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mrdonaldclay121[at]hotmail.com
)
1.0 MISSING_HEADERS Missing To: header
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Good day!!!
I have been waiting for you since to contact me for your Confirmable Bank
Draft of $850,000 United States Dollars, but I did not hear from you since
for a couple of weeks now. Then I went to the bank to confirm if the draft
has expired or getting near to expire and Dr.Wilson the Director Bank of
Africa told me that before the draft will get to your hand that it will
expire. So I told him to cash the $850,000USD UNITED STATES DOLLARS to
cash payment to avoid losing this funds under expiration as I will be out
of the country for a 3 Months Course and I will not come back till ending
of December 2012.
What you have to do now is to contact FEDEX COURIER SERVICES as soon as
possible to know when they will deliver your Consignment to you because of
the expiring date. For your information, I have paid for the delivering
Charge, Insurance premium.
The only money you will send to the FEDEX COURIER SERVICES to deliver your
Consignment direct to your postal Address in your country is ($125.00 US)
One Hundred & Twenty five United States Dollars only being Security
Keeping Fee of the Courier Company so far. Again, dont be deceived by any
body to pay any other money except $125.00 US Dollars. I would have paid
that but they said no because they dont know when you will contact them
and in case of dumurrage. You have to contact FEDEX COURIER SERVICES now
for the delivery of your Draft with this information bellow;
Directors Name: Re.George William
Companys Name: FEDEX COURIER SERVICES
Email Address: [email protected]
Tel/Fax: +234-708-0315939
Finally, make sure that you reconfirm your Postal address and Direct
telephone number to them again to avoid any mistake on the Delivery and
ask them to give you the tracking number to enable you track your package
over there and know when it will get to your address.
Let me repeat again, try to contact them as soon as you receive this mail
to avoid any further delay and remember to pay them their Security Keeping
fee of $125.00 US Dollars for their immediate action. Note this. The FEDEX
COURIER SERVICES don't know the contents of the Box. I registered it as a
BOX of Africa cloths (family valuables).
They did not know the contents was money. this is to avoid them delaying
with the BOX. Don't let them know that box contains money ok.
I am waiting for your urgent response.
Yours Faithfully,
Mr. Donald Clay.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces