by buried under 419s
Thu Oct 06, 2011 5:31 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 06 Oct 2011 14:04:12 -0700
Received: from nm26-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.231])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RBv6w-00088s-Pm
for ; Thu, 06 Oct 2011 14:04:11 -0700
Received: from [98.139.91.65] by nm26.bullet.mail.sp2.yahoo.com with NNFMP; 06 Oct 2011 21:04:09 -0000
Received: from [98.139.91.8] by tm5.bullet.mail.sp2.yahoo.com with NNFMP; 06 Oct 2011 21:04:09 -0000
Received: from [127.0.0.1] by omp1008.mail.sp2.yahoo.com with NNFMP; 06 Oct 2011 21:04:09 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 97478 invoked by uid 60001); 6 Oct 2011 21:04:07 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1317935047; bh=MCD15DMYXdJKVViL0Z/PZhgTMrZrkaEIBknap9cWc2g=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=GS9DduDhWwGYWC0d6dhWvD28DKPHix03Q9T/GpFc+s2NcjdU+C2kSB/+JKb+bY5u/gZ7WFKoTzJdVYUXYFTKSfYqJohlKviI5SjinBTd/X+4lqU8ckk9E6MBdZhZSv4ZHcxlIiyLl3GVcQOyvJPt/uIiwihSP54DAndnsop/8dU=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=k/szTeQRU6J/fBNDrvDz1uoKQ6KKRva/04ExPLV42IP8WLQF/itYxT5DmdGDVV2vcbsPFleijZTDR6PYX3aCAL2TBqcPH0ikndkWaIF+AIOwkZD3Wca8/Vs5lb7uuYUCuqQ+TjVsS2cqhZ9HjyNpvYYMAYNNr+JKF0FDFq4O1pM=;
X-YMail-OSG: TQJ2G6wVM1mXwAij8.jflmEem8SsBwNtYz8twZn7a8b8x5Q
SzCQd_Fuq
Received: from [81.91.230.131] by web190407.mail.sg3.yahoo.com via HTTP; Fri, 07 Oct 2011 05:04:07 SGT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Fri, 7 Oct 2011 05:04:07 +0800 (SGT)
From: "REV. JAMES GOODLUCK" <[email protected]>
Reply-To: [email protected]
Subject: He is waiting to hear from you today with the information
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="576668365-1892647707-1317935047=:56649"
X-Spam-Subject: ***SPAM*** He is waiting to hear from you today with the information
X-Spam-Status: Yes, score=16.6
X-Spam-Score: 166
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention:Extreme customer. We wish to inform you that the
diplomatic agent conveying the consignment box valued the sum of $2.5 Million
United States Dollars misplaced your address and he is currently stranded
at the International airport now. We required you re-confirm the following
information below so that he can deliver your consignment box to you today
and You can also call him immediately to enable him complete your delivery
today because he has been long there waiting for your call. [...]
Content analysis details: (16.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(brigtfrier[at]yahoo.com.ph)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?81.91.230.131>]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(marcanthony66[at]hotmail.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.231 listed in list.dnswl.org]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--576668365-1892647707-1317935047=:56649
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Attention:Extreme customer.
We wish to inform you that the diplomatic agent conveying the consignment box valued the sum of $2.5 Million United States Dollars misplaced your address and he is currently stranded at the International airport now. We required you re-confirm the following information below so that he can deliver your consignment box to you today and You can also call him immediately to enable him complete your delivery today because he has been long there waiting for your call.
(1)Your Full ============
(2)Mobile Phone/ Cell ==========
(3)Current Home Address========
(4)Occupation====================
(4)Fax Number================
(5)Country====================
(6)City======================
(7)Nearest Airport==============
(8)A Copy of Your I D For Identification
Please do contact the diplomatic agent with the email below with the information required.
Contact Person
aul Anthony
Email: [email protected]
He is waiting to hear from you today with the information
Yours Sincerely,
REV. JAMES GOODLUCK
UPS MANAGING DIRECTOR BENIN REPUBLIC
TELEPHONE:+229 98900664
Email: [email protected]
Envelope-to:
Delivery-date: Thu, 06 Oct 2011 14:04:12 -0700
Received: from nm26-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.231])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RBv6w-00088s-Pm
for ; Thu, 06 Oct 2011 14:04:11 -0700
Received: from [98.139.91.65] by nm26.bullet.mail.sp2.yahoo.com with NNFMP; 06 Oct 2011 21:04:09 -0000
Received: from [98.139.91.8] by tm5.bullet.mail.sp2.yahoo.com with NNFMP; 06 Oct 2011 21:04:09 -0000
Received: from [127.0.0.1] by omp1008.mail.sp2.yahoo.com with NNFMP; 06 Oct 2011 21:04:09 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 97478 invoked by uid 60001); 6 Oct 2011 21:04:07 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1317935047; bh=MCD15DMYXdJKVViL0Z/PZhgTMrZrkaEIBknap9cWc2g=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=GS9DduDhWwGYWC0d6dhWvD28DKPHix03Q9T/GpFc+s2NcjdU+C2kSB/+JKb+bY5u/gZ7WFKoTzJdVYUXYFTKSfYqJohlKviI5SjinBTd/X+4lqU8ckk9E6MBdZhZSv4ZHcxlIiyLl3GVcQOyvJPt/uIiwihSP54DAndnsop/8dU=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=k/szTeQRU6J/fBNDrvDz1uoKQ6KKRva/04ExPLV42IP8WLQF/itYxT5DmdGDVV2vcbsPFleijZTDR6PYX3aCAL2TBqcPH0ikndkWaIF+AIOwkZD3Wca8/Vs5lb7uuYUCuqQ+TjVsS2cqhZ9HjyNpvYYMAYNNr+JKF0FDFq4O1pM=;
X-YMail-OSG: TQJ2G6wVM1mXwAij8.jflmEem8SsBwNtYz8twZn7a8b8x5Q
SzCQd_Fuq
Received: from [81.91.230.131] by web190407.mail.sg3.yahoo.com via HTTP; Fri, 07 Oct 2011 05:04:07 SGT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Fri, 7 Oct 2011 05:04:07 +0800 (SGT)
From: "REV. JAMES GOODLUCK" <[email protected]>
Reply-To: [email protected]
Subject: He is waiting to hear from you today with the information
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="576668365-1892647707-1317935047=:56649"
X-Spam-Subject: ***SPAM*** He is waiting to hear from you today with the information
X-Spam-Status: Yes, score=16.6
X-Spam-Score: 166
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention:Extreme customer. We wish to inform you that the
diplomatic agent conveying the consignment box valued the sum of $2.5 Million
United States Dollars misplaced your address and he is currently stranded
at the International airport now. We required you re-confirm the following
information below so that he can deliver your consignment box to you today
and You can also call him immediately to enable him complete your delivery
today because he has been long there waiting for your call. [...]
Content analysis details: (16.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(brigtfrier[at]yahoo.com.ph)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?81.91.230.131>]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(marcanthony66[at]hotmail.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.231 listed in list.dnswl.org]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--576668365-1892647707-1317935047=:56649
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Attention:Extreme customer.
We wish to inform you that the diplomatic agent conveying the consignment box valued the sum of $2.5 Million United States Dollars misplaced your address and he is currently stranded at the International airport now. We required you re-confirm the following information below so that he can deliver your consignment box to you today and You can also call him immediately to enable him complete your delivery today because he has been long there waiting for your call.
(1)Your Full ============
(2)Mobile Phone/ Cell ==========
(3)Current Home Address========
(4)Occupation====================
(4)Fax Number================
(5)Country====================
(6)City======================
(7)Nearest Airport==============
(8)A Copy of Your I D For Identification
Please do contact the diplomatic agent with the email below with the information required.
Contact Person
aul AnthonyEmail: [email protected]
He is waiting to hear from you today with the information
Yours Sincerely,
REV. JAMES GOODLUCK
UPS MANAGING DIRECTOR BENIN REPUBLIC
TELEPHONE:+229 98900664
Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces