by buried under 419s
Wed Sep 14, 2011 11:22 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 14 Sep 2011 04:06:33 -0700
Received: from nm10-vm3.bullet.mail.ne1.yahoo.com ([98.138.91.140])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R3nIX-0006yX-3E
for ; Wed, 14 Sep 2011 04:06:33 -0700
Received: from [98.138.90.50] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 14 Sep 2011 11:06:29 -0000
Received: from [98.138.89.240] by tm3.bullet.mail.ne1.yahoo.com with NNFMP; 14 Sep 2011 11:06:29 -0000
Received: from [127.0.0.1] by omp1013.mail.ne1.yahoo.com with NNFMP; 14 Sep 2011 11:06:29 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 83006 invoked by uid 60001); 14 Sep 2011 11:06:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1315998388; bh=/vwGCWqYa1ChgEevyRftJ4ZTyoWUE+XSx1PihsRjhuA=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=QkwDm+EE1S5UbDihwl6AHzVHV+dc02vLCK4qGmjSPAYVWlJCYfcK+WHYVng+JJCdsn48Gg9/v9SCNjyqrTFvz/F3oTtnSulcPGu6vbcFQpLB+Oqww0xBQN/BLedAydYsek2k6zSK7DRR7I0u4ir2ySldhb8PQ6d5vGzGRHzn15c=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=SHgyaHQcrm3vseqO20/QEHqpOc8m0a/is+vqWRnL/xk1vjVfkhwmdt9Ts+Z8KY39R/UYBXkOXWgTIUpNyI80/KH/ayBqoZE0ZhOoIA9mEdxWON6yq0bqindczDVpItrTmljIJPYhb9ezGGVZOosROMj32PkZf5IGEDRpMyHSyOc=;
X-YMail-OSG: 52NxAQoVM1m_G2X3eTXQYGQTzj2CPvQJc3gm.k.Z4GFAvWV
kGHdzqbmyafxyLtekHH0DA30_EXm6aCDRihjJ3r07UYFiL62uOqN9MvVc_uA
qC7EW0Yy5WOcl6RseCVBGiJxNy0njrkcqferz7gbYaOoh3_5NFDFbUIIz4z.
SLvBeouVF7hOVM9CFgklVxSMcOe7VwN00U5gXVI5Sv1eTse9GtAY_HqfMeSa
_G2R5VDmZ6kQT2LZBKsOxwtr2Eon1XTT91N56Qi1uzdyZ9RF9lHLPJjQl6hb
skhp4kpgz_Y3zZWN9RKO5hjqX07qutWPAdNfgouNsazkFjc8V8Zsd7_.Txzd
jp7beYyazU46.3ldayQD9HxcOmGvpOfI9zPsJVSzTta0oJ.oMMgFojlfuhXW
H5MCfI6H9ZS1IBDolscdABaROKh6Z3v7c.zh6RU4himMrKDmflOV5JTrNNqe
k84rGbUCV9h0L714e7p8iayzcml5HDP4QaF3n3zER8KGiQfelol3tTFuLDjW
JF8OYBYlMZ650X9XinHy3rays8GGd79_78VOtxLnGwTVW4qN3rkO6sxg-
Received: from [41.138.179.85] by web120608.mail.ne1.yahoo.com via HTTP; Wed, 14 Sep 2011 04:06:28 PDT
X-Mailer: YahooMailClassic/14.0.5 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Wed, 14 Sep 2011 04:06:28 -0700 (PDT)
From: Terry Danga <[email protected]>
Reply-To: [email protected]
Subject: =?utf-8?B?RGlkIHlvdSBpbnN0cnVjdGVkIEdSRUdPUlkgUEhJTElQUyBBTkQgSElTIEFU?=
=?utf-8?B?VE9STkVZIHRvIGNsYWltIHlvdXIgaW5oZXJpdGFuY2XigIs=?=
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1576383343-372532941-1315998388=:79933"
X-Spam-Subject: ***SPAM*** Did you instructed GREGORY PHILIPS AND HIS ATTORNEY to claim your inheritance​
X-Spam-Status: Yes, score=11.6
X-Spam-Score: 116
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: THE PRESIDENCY LAGOS (LIA SON) OFFICE OF HIS EXCELLENCY 15
AWOLOWO ROAD IKOYI, LAGOS SPECIAL DEPARTMENT INVESTIGATION ECONOMIC & FINANCIAL
CRIME COMMISSION E-MAIL: [email protected] FROM THE DESK OF: TERRY
DAGOGO TEL:2348101650045 [...]
Content analysis details: (11.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(aliyumohammed_011[at]yahoo.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.91.140 listed in list.dnswl.org]
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (aliyumohammed_011[at]yahoo.com)
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--1576383343-372532941-1315998388=:79933
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
THE PRESIDENCY
LAGOS (LIA SON) OFFICE OF HIS EXCELLENCY
15 AWOLOWO ROAD IKOYI, LAGOS SPECIAL DEPARTMENT
INVESTIGATION ECONOMIC & FINANCIAL CRIME COMMISSION
E-MAIL: [email protected]
FROM THE DESK OF: TERRY DAGOGO
TEL:2348101650045
Attn: Beneficiary :
Did you instructed GREGORY PHILIPS AND HIS ATTORNEY to claim your inheritance?
THIS EMAIL IS TO INFORM YOU THAT A MAN IDENTIFIED AS MR. GREGORY
PHILIPS AND HIS ATTORNEY VISITED OUR OFFICE TODAY HANDING OVER TO ME A SWORN
AFFIDAVIT FROM THE SUPREME COURT OF JUSTICE WITH A SWORN
AFFIDAVIT FROM YOU AND AN APPLICATION FOR CHANGE OF FUND OWNERSHIP
INSTRUCTING ME TO REDIRECT THE TRANSFER OF YOUR ABANDONED INHERITANCE FUND TOTAL $15.5 MILLION USD TO THE FOLLOWING BANK ACCOUNT BELOW IN THE UNITED STATES:
ACCOUNT: GREGORY PHILIPS
NAVY FEDERAL CREDIT UNION
ACCOUNT NO: 2157192705
ROUTING NO: 256074974
DURING MY DISCUSSION WITH MR. GREGORY PHILIPS AND HIS ATTORNEY, I
FOUND OUT THAT THEY WERE TOO ANXIOUS TO GET THE TRANSFER CARRIED OUT IMMEDIATELY
AS THEY WAS READY TO SETTLE ALL THE TRANSFER CHARGES ATTACHED TO YOUR FUND ON THE SPOT AS HE HAS ALL LEGAL DOCUMENT TO BACK UP HIS CLAIM.HOWEVER, IN ORDER FOR THEM TO GIVE ME ROOM FOR FURTHER INVESTIGATIONS I TOLD THEM THAT THE TRANSFER COULD NOT BE CARRIED OUT IMMEDIATELY BECAUSE OF SOME TELEGRAPHIC NETWORKING ERRORS OCCURRED AND ASK THEM TO COME BACK IN THE NEXT 3DAYS.
PLEASE RESPOND TO THIS EMAIL IMMEDIATELY AND LET ME KNOW IF THEY HAVE YOUR KNOWLEDGE TOWARDS THIS OWNERSHIP CHANGE OF YOUR FUND BECAUSE IF I DID NOT HEAR
FROM YOU BEFORE 48HRS FROM NOW, I WILL HAVE NO OTHER OPTION THAN TO DANCE TO
THEIR TONE.
BEST REGARDS
Terry Dagogo
[email protected]
Deputy Chairman Investigation Committee (EFCC)
Envelope-to:
Delivery-date: Wed, 14 Sep 2011 04:06:33 -0700
Received: from nm10-vm3.bullet.mail.ne1.yahoo.com ([98.138.91.140])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R3nIX-0006yX-3E
for ; Wed, 14 Sep 2011 04:06:33 -0700
Received: from [98.138.90.50] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 14 Sep 2011 11:06:29 -0000
Received: from [98.138.89.240] by tm3.bullet.mail.ne1.yahoo.com with NNFMP; 14 Sep 2011 11:06:29 -0000
Received: from [127.0.0.1] by omp1013.mail.ne1.yahoo.com with NNFMP; 14 Sep 2011 11:06:29 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 83006 invoked by uid 60001); 14 Sep 2011 11:06:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1315998388; bh=/vwGCWqYa1ChgEevyRftJ4ZTyoWUE+XSx1PihsRjhuA=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=QkwDm+EE1S5UbDihwl6AHzVHV+dc02vLCK4qGmjSPAYVWlJCYfcK+WHYVng+JJCdsn48Gg9/v9SCNjyqrTFvz/F3oTtnSulcPGu6vbcFQpLB+Oqww0xBQN/BLedAydYsek2k6zSK7DRR7I0u4ir2ySldhb8PQ6d5vGzGRHzn15c=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=SHgyaHQcrm3vseqO20/QEHqpOc8m0a/is+vqWRnL/xk1vjVfkhwmdt9Ts+Z8KY39R/UYBXkOXWgTIUpNyI80/KH/ayBqoZE0ZhOoIA9mEdxWON6yq0bqindczDVpItrTmljIJPYhb9ezGGVZOosROMj32PkZf5IGEDRpMyHSyOc=;
X-YMail-OSG: 52NxAQoVM1m_G2X3eTXQYGQTzj2CPvQJc3gm.k.Z4GFAvWV
kGHdzqbmyafxyLtekHH0DA30_EXm6aCDRihjJ3r07UYFiL62uOqN9MvVc_uA
qC7EW0Yy5WOcl6RseCVBGiJxNy0njrkcqferz7gbYaOoh3_5NFDFbUIIz4z.
SLvBeouVF7hOVM9CFgklVxSMcOe7VwN00U5gXVI5Sv1eTse9GtAY_HqfMeSa
_G2R5VDmZ6kQT2LZBKsOxwtr2Eon1XTT91N56Qi1uzdyZ9RF9lHLPJjQl6hb
skhp4kpgz_Y3zZWN9RKO5hjqX07qutWPAdNfgouNsazkFjc8V8Zsd7_.Txzd
jp7beYyazU46.3ldayQD9HxcOmGvpOfI9zPsJVSzTta0oJ.oMMgFojlfuhXW
H5MCfI6H9ZS1IBDolscdABaROKh6Z3v7c.zh6RU4himMrKDmflOV5JTrNNqe
k84rGbUCV9h0L714e7p8iayzcml5HDP4QaF3n3zER8KGiQfelol3tTFuLDjW
JF8OYBYlMZ650X9XinHy3rays8GGd79_78VOtxLnGwTVW4qN3rkO6sxg-
Received: from [41.138.179.85] by web120608.mail.ne1.yahoo.com via HTTP; Wed, 14 Sep 2011 04:06:28 PDT
X-Mailer: YahooMailClassic/14.0.5 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Wed, 14 Sep 2011 04:06:28 -0700 (PDT)
From: Terry Danga <[email protected]>
Reply-To: [email protected]
Subject: =?utf-8?B?RGlkIHlvdSBpbnN0cnVjdGVkIEdSRUdPUlkgUEhJTElQUyBBTkQgSElTIEFU?=
=?utf-8?B?VE9STkVZIHRvIGNsYWltIHlvdXIgaW5oZXJpdGFuY2XigIs=?=
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1576383343-372532941-1315998388=:79933"
X-Spam-Subject: ***SPAM*** Did you instructed GREGORY PHILIPS AND HIS ATTORNEY to claim your inheritance​
X-Spam-Status: Yes, score=11.6
X-Spam-Score: 116
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: THE PRESIDENCY LAGOS (LIA SON) OFFICE OF HIS EXCELLENCY 15
AWOLOWO ROAD IKOYI, LAGOS SPECIAL DEPARTMENT INVESTIGATION ECONOMIC & FINANCIAL
CRIME COMMISSION E-MAIL: [email protected] FROM THE DESK OF: TERRY
DAGOGO TEL:2348101650045 [...]
Content analysis details: (11.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(aliyumohammed_011[at]yahoo.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.91.140 listed in list.dnswl.org]
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (aliyumohammed_011[at]yahoo.com)
3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--1576383343-372532941-1315998388=:79933
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
THE PRESIDENCY
LAGOS (LIA SON) OFFICE OF HIS EXCELLENCY
15 AWOLOWO ROAD IKOYI, LAGOS SPECIAL DEPARTMENT
INVESTIGATION ECONOMIC & FINANCIAL CRIME COMMISSION
E-MAIL: [email protected]
FROM THE DESK OF: TERRY DAGOGO
TEL:2348101650045
Attn: Beneficiary :
Did you instructed GREGORY PHILIPS AND HIS ATTORNEY to claim your inheritance?
THIS EMAIL IS TO INFORM YOU THAT A MAN IDENTIFIED AS MR. GREGORY
PHILIPS AND HIS ATTORNEY VISITED OUR OFFICE TODAY HANDING OVER TO ME A SWORN
AFFIDAVIT FROM THE SUPREME COURT OF JUSTICE WITH A SWORN
AFFIDAVIT FROM YOU AND AN APPLICATION FOR CHANGE OF FUND OWNERSHIP
INSTRUCTING ME TO REDIRECT THE TRANSFER OF YOUR ABANDONED INHERITANCE FUND TOTAL $15.5 MILLION USD TO THE FOLLOWING BANK ACCOUNT BELOW IN THE UNITED STATES:
ACCOUNT: GREGORY PHILIPS
NAVY FEDERAL CREDIT UNION
ACCOUNT NO: 2157192705
ROUTING NO: 256074974
DURING MY DISCUSSION WITH MR. GREGORY PHILIPS AND HIS ATTORNEY, I
FOUND OUT THAT THEY WERE TOO ANXIOUS TO GET THE TRANSFER CARRIED OUT IMMEDIATELY
AS THEY WAS READY TO SETTLE ALL THE TRANSFER CHARGES ATTACHED TO YOUR FUND ON THE SPOT AS HE HAS ALL LEGAL DOCUMENT TO BACK UP HIS CLAIM.HOWEVER, IN ORDER FOR THEM TO GIVE ME ROOM FOR FURTHER INVESTIGATIONS I TOLD THEM THAT THE TRANSFER COULD NOT BE CARRIED OUT IMMEDIATELY BECAUSE OF SOME TELEGRAPHIC NETWORKING ERRORS OCCURRED AND ASK THEM TO COME BACK IN THE NEXT 3DAYS.
PLEASE RESPOND TO THIS EMAIL IMMEDIATELY AND LET ME KNOW IF THEY HAVE YOUR KNOWLEDGE TOWARDS THIS OWNERSHIP CHANGE OF YOUR FUND BECAUSE IF I DID NOT HEAR
FROM YOU BEFORE 48HRS FROM NOW, I WILL HAVE NO OTHER OPTION THAN TO DANCE TO
THEIR TONE.
BEST REGARDS
Terry Dagogo
[email protected]
Deputy Chairman Investigation Committee (EFCC)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces