by buried under 419s
Thu Sep 08, 2011 10:55 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 08 Sep 2011 01:32:31 -0700
Received: from nm16-vm2.bullet.mail.ne1.yahoo.com ([98.138.91.92])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R1a2A-0006G8-ML
for ; Thu, 08 Sep 2011 01:32:31 -0700
Received: from [98.138.90.56] by nm16.bullet.mail.ne1.yahoo.com with NNFMP; 08 Sep 2011 08:32:26 -0000
Received: from [98.138.89.173] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 08 Sep 2011 08:32:26 -0000
Received: from [127.0.0.1] by omp1029.mail.ne1.yahoo.com with NNFMP; 08 Sep 2011 08:32:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 30854 invoked by uid 60001); 8 Sep 2011 08:32:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1315470746; bh=ZAndGA+/76AsAlKQffoC14XIDZdOV04rcz9ASJoAKuI=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=FnAgZEwlCd4oGjj468krP+V3qw0Rh/ytgyfaRc4W+MFNTevq7oe7W5dmcGZpb9sBUsi5dPCjWISz//K+pMciVOSvhidWespH1gMH7ex6yqkGZSEtkIOSHT+LvfE3HPITQahXKC0Gg5xiRg39cIJK1t0t6ZZTmdgu/Fg4oxRdIbI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type;
b=Y5CK4uudCJpC0i/Wt6M8ude4mE2YZ4Ec+AV4b+AqoX11sFZsoy7iDPXS3hG7SzXWpkxq8UqyRI5aT8ePQsJ+wAJbwCbm9iXn35YlNGbWf03nePG2bCgCojCwmljWPvO4Uc2hwaz1Cf0hSep0P17f9lObGIrsDxZfjOA1N5jsft4=;
X-YMail-OSG: aBtwwnMVM1kOiMCxXGv1Gv9BsS1KO5WRa8BDYKLARa1Si.O
4Azqsso8OjPMsx6_eqRPXWpSTjm6wfm3dUvJaNw6IDbT536evbdUMkX.qsKV
CXftC9m0k138WcgXz0wJvikpPo9BnUi3APXVr9V9KQdshFvbwqxLFvqSFa38
goa0gKOOXFEOu1OdXffAj7SycB39OgsmfJF4MhyazzZyraSKOVxwi7ceTydZ
M7XoTw3XcJgIvq0EgLKajPgNPgPj3H_gjmyLiRmdsFLeaqiko.v3Gaw2NiHD
nRE9vQTc3nZqPsHCIysrkYpO9R1i2ILB42bsg2uZkakXG68_MeSVJLj7WqLS
I_keCbltIjohqRTgk0WgkC1Zn9JcdWNGyBOdy.QERj5eRpZqU_h0H5hlmoI8
wLSzc2U91nPzWUOg-
Received: from [41.58.130.243] by web120118.mail.ne1.yahoo.com via HTTP; Thu, 08 Sep 2011 01:32:26 PDT
X-Mailer: YahooMailClassic/14.0.5 YahooMailWebService/0.8.113.315625
Message-ID: <[email protected]>
Date: Thu, 8 Sep 2011 01:32:26 -0700 (PDT)
From: Drernest Ebi <[email protected]>
Subject: Attention:,
To:
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1717132450-1315470746=:7198"
X-Spam-Subject: ***SPAM*** Attention:,
X-Spam-Status: Yes, score=9.8
X-Spam-Score: 98
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: CONTRACT #: MAV/NNPC/FGN/MIN/0010, Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678 Our Ref: CBN/IRD/CBX/021/04 Attention:,
With respect to the provision Section 17 of decree 114 of the 1999 constitution,
I was directed to inform you today that your payment verification and confirmations
is "OK". Therefore, we are happy to inform you that arrangements has perfectly
concluded to effect your payment as soon as possible in our bid to be transparent
inline with programmed of the present administration of Dr.Goodluck Jonathan
, President of the Federal Republic of Nigeria in his crusade against corruption
in Nigeria. However, it is our pleasure to inform you that ATM Card has been
approved and upgraded in your favor and have been instructed by our bank
Central Bank of Nigeria to issue it to you. Meanwhile, your Secret Pin Number
will be send across to you via attachmeent. The ATM Card Value is $3.5million
USD Only. You are advised that a maximum withdrawal value of US$7,000.00
is permitted daily. And we are duly inter-switched and you can make withdrawal
in any location of the ATM Center of your choice/nearest to you. We have
also concluded delivery arrangement with our accredited courier service Company
to be fully insured by Fedex Courier Service Company (Fedex) to oversee the
delivery of the ATM Card to you without any further delay. In view of this
development, you are requested to immediately forward your full contact information
were the delivery will be made to Advice this office of your preferred time
of visitation to delivery so that we can inform the courier service Company.
And be informed that your valid I.D card must be presented to the dispatchers
before release will be done to you to avoid wrong delivery, therefore you
are directed to present your ID to the Courier on receipt of you package.
Treat as very urgent, as we also remind you once again that your ATM Card
is ready. You call me as soon as you receive this message +2348067169072
[...]
Content analysis details: (9.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.91.92 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.58.130.243 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.58.130.243>]
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(drernestebi90.cbn63[at]yahoo.com)
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (drernestebi90.cbn63[at]yahoo.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MONEY_ATM_CARD Lots of money on an ATM card
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1717132450-1315470746=:7198
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
CONTRACT #: MAV/NNPC/FGN/MIN/0010,
Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678
Our Ref: CBN/IRD/CBX/021/04
Attention:,
With respect to the provision Section 17 of decree 114 of the 1999 constitution, I was directed to inform you today that your payment verification and confirmations is "OK".
Therefore, we are happy to inform you that arrangements has perfectly concluded to effect your payment as soon as possible in our bid to be transparent inline with programmed of the present administration of Dr.Goodluck Jonathan , President of the Federal Republic of Nigeria in his crusade against corruption in Nigeria.
However, it is our pleasure to inform you that ATM Card has been approved and upgraded in your favor and have been instructed by our bank Central Bank of Nigeria to issue it to you. Meanwhile, your Secret Pin Number will be send across to you via attachmeent. The ATM Card Value is $3.5million USD Only.
You are advised that a maximum withdrawal value of US$7,000.00 is permitted daily. And we are duly inter-switched and you can make withdrawal in any location of the ATM Center of your choice/nearest to you.
We have also concluded delivery arrangement with our accredited courier service Company to be fully insured by Fedex Courier Service Company (Fedex) to oversee the delivery of the ATM Card to you without any further delay.
In view of this development, you are requested to immediately forward your full contact information were the delivery will be made to Advice this office of your preferred time of visitation to delivery so that we can inform the courier service Company.
And be informed that your valid I.D card must be presented to the dispatchers before release will be done to you to avoid wrong delivery, therefore you are directed to present your ID to the Courier on receipt of you package. Treat as very urgent, as we also remind you once again that your ATM Card is ready.
You call me as soon as you receive this message +2348067169072
Kind regards
Dr.Ernest Ebi
Deputy Governor Central Bank of Nigeria
Envelope-to:
Delivery-date: Thu, 08 Sep 2011 01:32:31 -0700
Received: from nm16-vm2.bullet.mail.ne1.yahoo.com ([98.138.91.92])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R1a2A-0006G8-ML
for ; Thu, 08 Sep 2011 01:32:31 -0700
Received: from [98.138.90.56] by nm16.bullet.mail.ne1.yahoo.com with NNFMP; 08 Sep 2011 08:32:26 -0000
Received: from [98.138.89.173] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 08 Sep 2011 08:32:26 -0000
Received: from [127.0.0.1] by omp1029.mail.ne1.yahoo.com with NNFMP; 08 Sep 2011 08:32:26 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 30854 invoked by uid 60001); 8 Sep 2011 08:32:26 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1315470746; bh=ZAndGA+/76AsAlKQffoC14XIDZdOV04rcz9ASJoAKuI=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type; b=FnAgZEwlCd4oGjj468krP+V3qw0Rh/ytgyfaRc4W+MFNTevq7oe7W5dmcGZpb9sBUsi5dPCjWISz//K+pMciVOSvhidWespH1gMH7ex6yqkGZSEtkIOSHT+LvfE3HPITQahXKC0Gg5xiRg39cIJK1t0t6ZZTmdgu/Fg4oxRdIbI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Subject:To:MIME-Version:Content-Type;
b=Y5CK4uudCJpC0i/Wt6M8ude4mE2YZ4Ec+AV4b+AqoX11sFZsoy7iDPXS3hG7SzXWpkxq8UqyRI5aT8ePQsJ+wAJbwCbm9iXn35YlNGbWf03nePG2bCgCojCwmljWPvO4Uc2hwaz1Cf0hSep0P17f9lObGIrsDxZfjOA1N5jsft4=;
X-YMail-OSG: aBtwwnMVM1kOiMCxXGv1Gv9BsS1KO5WRa8BDYKLARa1Si.O
4Azqsso8OjPMsx6_eqRPXWpSTjm6wfm3dUvJaNw6IDbT536evbdUMkX.qsKV
CXftC9m0k138WcgXz0wJvikpPo9BnUi3APXVr9V9KQdshFvbwqxLFvqSFa38
goa0gKOOXFEOu1OdXffAj7SycB39OgsmfJF4MhyazzZyraSKOVxwi7ceTydZ
M7XoTw3XcJgIvq0EgLKajPgNPgPj3H_gjmyLiRmdsFLeaqiko.v3Gaw2NiHD
nRE9vQTc3nZqPsHCIysrkYpO9R1i2ILB42bsg2uZkakXG68_MeSVJLj7WqLS
I_keCbltIjohqRTgk0WgkC1Zn9JcdWNGyBOdy.QERj5eRpZqU_h0H5hlmoI8
wLSzc2U91nPzWUOg-
Received: from [41.58.130.243] by web120118.mail.ne1.yahoo.com via HTTP; Thu, 08 Sep 2011 01:32:26 PDT
X-Mailer: YahooMailClassic/14.0.5 YahooMailWebService/0.8.113.315625
Message-ID: <[email protected]>
Date: Thu, 8 Sep 2011 01:32:26 -0700 (PDT)
From: Drernest Ebi <[email protected]>
Subject: Attention:,
To:
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1717132450-1315470746=:7198"
X-Spam-Subject: ***SPAM*** Attention:,
X-Spam-Status: Yes, score=9.8
X-Spam-Score: 98
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: CONTRACT #: MAV/NNPC/FGN/MIN/0010, Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678 Our Ref: CBN/IRD/CBX/021/04 Attention:,
With respect to the provision Section 17 of decree 114 of the 1999 constitution,
I was directed to inform you today that your payment verification and confirmations
is "OK". Therefore, we are happy to inform you that arrangements has perfectly
concluded to effect your payment as soon as possible in our bid to be transparent
inline with programmed of the present administration of Dr.Goodluck Jonathan
, President of the Federal Republic of Nigeria in his crusade against corruption
in Nigeria. However, it is our pleasure to inform you that ATM Card has been
approved and upgraded in your favor and have been instructed by our bank
Central Bank of Nigeria to issue it to you. Meanwhile, your Secret Pin Number
will be send across to you via attachmeent. The ATM Card Value is $3.5million
USD Only. You are advised that a maximum withdrawal value of US$7,000.00
is permitted daily. And we are duly inter-switched and you can make withdrawal
in any location of the ATM Center of your choice/nearest to you. We have
also concluded delivery arrangement with our accredited courier service Company
to be fully insured by Fedex Courier Service Company (Fedex) to oversee the
delivery of the ATM Card to you without any further delay. In view of this
development, you are requested to immediately forward your full contact information
were the delivery will be made to Advice this office of your preferred time
of visitation to delivery so that we can inform the courier service Company.
And be informed that your valid I.D card must be presented to the dispatchers
before release will be done to you to avoid wrong delivery, therefore you
are directed to present your ID to the Courier on receipt of you package.
Treat as very urgent, as we also remind you once again that your ATM Card
is ready. You call me as soon as you receive this message +2348067169072
[...]
Content analysis details: (9.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.91.92 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.58.130.243 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.58.130.243>]
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(drernestebi90.cbn63[at]yahoo.com)
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (drernestebi90.cbn63[at]yahoo.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 MONEY_ATM_CARD Lots of money on an ATM card
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-1717132450-1315470746=:7198
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
CONTRACT #: MAV/NNPC/FGN/MIN/0010,
Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678
Our Ref: CBN/IRD/CBX/021/04
Attention:,
With respect to the provision Section 17 of decree 114 of the 1999 constitution, I was directed to inform you today that your payment verification and confirmations is "OK".
Therefore, we are happy to inform you that arrangements has perfectly concluded to effect your payment as soon as possible in our bid to be transparent inline with programmed of the present administration of Dr.Goodluck Jonathan , President of the Federal Republic of Nigeria in his crusade against corruption in Nigeria.
However, it is our pleasure to inform you that ATM Card has been approved and upgraded in your favor and have been instructed by our bank Central Bank of Nigeria to issue it to you. Meanwhile, your Secret Pin Number will be send across to you via attachmeent. The ATM Card Value is $3.5million USD Only.
You are advised that a maximum withdrawal value of US$7,000.00 is permitted daily. And we are duly inter-switched and you can make withdrawal in any location of the ATM Center of your choice/nearest to you.
We have also concluded delivery arrangement with our accredited courier service Company to be fully insured by Fedex Courier Service Company (Fedex) to oversee the delivery of the ATM Card to you without any further delay.
In view of this development, you are requested to immediately forward your full contact information were the delivery will be made to Advice this office of your preferred time of visitation to delivery so that we can inform the courier service Company.
And be informed that your valid I.D card must be presented to the dispatchers before release will be done to you to avoid wrong delivery, therefore you are directed to present your ID to the Courier on receipt of you package. Treat as very urgent, as we also remind you once again that your ATM Card is ready.
You call me as soon as you receive this message +2348067169072
Kind regards
Dr.Ernest Ebi
Deputy Governor Central Bank of Nigeria
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces