by buried under 419s
Thu Sep 08, 2011 10:46 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 08 Sep 2011 07:05:19 -0700
Received: from col0-omc3-s14.col0.hotmail.com ([65.55.34.152])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R1fEE-0004uE-CY
for ; Thu, 08 Sep 2011 07:05:19 -0700
Received: from COL112-W31 ([65.55.34.135]) by col0-omc3-s14.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 8 Sep 2011 07:05:16 -0700
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_ea91a48d-51c7-4965-b6bd-fef1c6440cdb_"
X-Originating-IP: [82.128.2.64]
Reply-To: <[email protected]>
From: Sylvester Nwaka <[email protected]>
Subject: I am presently at JFK International Airport
Date: Thu, 8 Sep 2011 14:05:15 +0000
Importance: Normal
MIME-Version: 1.0
Bcc:
X-OriginalArrivalTime: 08 Sep 2011 14:05:16.0579 (UTC) FILETIME=[55EA0F30:01CC6E30]
X-Spam-Subject: ***SPAM*** I am presently at JFK International Airport
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: Beneficiary, I am a Diplomat named Sylvesyer Nwaka,
I am presently at JFK International Airport mandated to deliver your inheritance
to you in your country of residence. The funds total US$3.6 Million and you
were made the beneficiary of these funds by a benefactor whose details will
be revealed to you after handing over the funds to you in accordance with
the Agreement I signed with the benefactor when he enlisted my assistance
in delivering the funds to you. [...]
Content analysis details: (18.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sylvesternk_61[at]msn.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[65.55.34.152 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<sylvesternwaka07[at]yahoo.co.jp>
)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (sylvesternk_61[at]msn.com)
1.0 MISSING_HEADERS Missing To: header
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5266]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[82.128.2.64 listed in zen.spamhaus.org]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.7 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--_ea91a48d-51c7-4965-b6bd-fef1c6440cdb_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Attention: Beneficiary,
I am a Diplomat named Sylvesyer Nwaka, I am presently at JFK International Airport mandated to deliver your inheritance to you in your country of residence. The funds total US$3.6 Million and you were made the beneficiary of these funds by a benefactor whose details will be revealed to you after handing over the funds to you in accordance with the Agreement I signed with the benefactor when he enlisted my assistance in delivering the funds to you.
I am presently at JFK International Airport here in the United States of America and before I can deliver the package (funds) to you, you have to reconfirm the following information so as to ensure that I am dealing with the right person.
1. Full Name:
2. Residential Address:
3. Age:
4. Occupation:
5. Direct Telephone Numbers:
6. A Copy of Your Identification:
After verification of the information with what I have on file, I shall contact you so that we can make arrangements on the exact time I will be bringing your package to your residential address.
Send the requested information so that we can proceed.
Regards
Diplomat Sylvester Nwaka
JFK International Airport, New York
Envelope-to:
Delivery-date: Thu, 08 Sep 2011 07:05:19 -0700
Received: from col0-omc3-s14.col0.hotmail.com ([65.55.34.152])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R1fEE-0004uE-CY
for ; Thu, 08 Sep 2011 07:05:19 -0700
Received: from COL112-W31 ([65.55.34.135]) by col0-omc3-s14.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 8 Sep 2011 07:05:16 -0700
Message-ID: <[email protected]>
Content-Type: multipart/alternative;
boundary="_ea91a48d-51c7-4965-b6bd-fef1c6440cdb_"
X-Originating-IP: [82.128.2.64]
Reply-To: <[email protected]>
From: Sylvester Nwaka <[email protected]>
Subject: I am presently at JFK International Airport
Date: Thu, 8 Sep 2011 14:05:15 +0000
Importance: Normal
MIME-Version: 1.0
Bcc:
X-OriginalArrivalTime: 08 Sep 2011 14:05:16.0579 (UTC) FILETIME=[55EA0F30:01CC6E30]
X-Spam-Subject: ***SPAM*** I am presently at JFK International Airport
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: Beneficiary, I am a Diplomat named Sylvesyer Nwaka,
I am presently at JFK International Airport mandated to deliver your inheritance
to you in your country of residence. The funds total US$3.6 Million and you
were made the beneficiary of these funds by a benefactor whose details will
be revealed to you after handing over the funds to you in accordance with
the Agreement I signed with the benefactor when he enlisted my assistance
in delivering the funds to you. [...]
Content analysis details: (18.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sylvesternk_61[at]msn.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[65.55.34.152 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<sylvesternwaka07[at]yahoo.co.jp>
)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (sylvesternk_61[at]msn.com)
1.0 MISSING_HEADERS Missing To: header
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5266]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[82.128.2.64 listed in zen.spamhaus.org]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.7 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--_ea91a48d-51c7-4965-b6bd-fef1c6440cdb_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Attention: Beneficiary,
I am a Diplomat named Sylvesyer Nwaka, I am presently at JFK International Airport mandated to deliver your inheritance to you in your country of residence. The funds total US$3.6 Million and you were made the beneficiary of these funds by a benefactor whose details will be revealed to you after handing over the funds to you in accordance with the Agreement I signed with the benefactor when he enlisted my assistance in delivering the funds to you.
I am presently at JFK International Airport here in the United States of America and before I can deliver the package (funds) to you, you have to reconfirm the following information so as to ensure that I am dealing with the right person.
1. Full Name:
2. Residential Address:
3. Age:
4. Occupation:
5. Direct Telephone Numbers:
6. A Copy of Your Identification:
After verification of the information with what I have on file, I shall contact you so that we can make arrangements on the exact time I will be bringing your package to your residential address.
Send the requested information so that we can proceed.
Regards
Diplomat Sylvester Nwaka
JFK International Airport, New York
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces