by buried under 419s
Sat Oct 08, 2011 11:43 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 08 Oct 2011 04:32:53 -0700
Received: from nm37-vm6.bullet.mail.ne1.yahoo.com ([98.138.229.134])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RCV9A-0004zW-96
for ; Sat, 08 Oct 2011 04:32:53 -0700
Received: from [98.138.90.54] by nm37.bullet.mail.ne1.yahoo.com with NNFMP; 08 Oct 2011 11:32:49 -0000
Received: from [98.138.89.193] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 08 Oct 2011 11:32:49 -0000
Received: from [127.0.0.1] by omp1051.mail.ne1.yahoo.com with NNFMP; 08 Oct 2011 11:32:49 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 15680 invoked by uid 60001); 8 Oct 2011 11:32:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1318073568; bh=d+/oJhDRJp7njQimYsGEuYkBOptCLpxXRNX+LJdTIwc=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KwN6dWMJY5/1mAa1kyNu7UVnYK+mpVG1hj22C/jf3xiJdPyRB14Haw0PsvuyszBs5H5CTjNmRNY4N41oLMtvYSToktqH7RF+gfeFgmaJoxBL13WbuZ8YkRDUfgUvMgYEwtp0I8NsW4hRv2kDmOXkmlumBfo1PK3z8cll8sgPf/Y=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=D1jHdzCQRbd9ujr3oZ5gpQCUiQn1onX2yVWcNZdMcS6aDOdqSEcAI7kR5+D0rc784Vp5FXOIvnhZf3VG3ENVKhIpnIkgObFE2FDTUGIjmuZu5boF+rxpUrwaM9Wc48v9YQb5viW3AHOb/BA1l9WPDk5wHSLY86uyoGseCWaFJmo=;
X-YMail-OSG: .xmCj.kVM1nol1eHfZWsuvtcTDodbti1la3eD8wsWi_YDcq
G45NzjnAZ
Received: from [41.203.79.249] by web190302.mail.sg3.yahoo.com via HTTP; Sat, 08 Oct 2011 19:32:44 SGT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Sat, 8 Oct 2011 19:32:44 +0800 (SGT)
From: Fedex Worldwide Delivery Service <[email protected]>
Reply-To: [email protected]
Subject: CONTACT FEDEX COURIER COMPANY FOR YOUR PACKAGE.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1075238418-1732096657-1318073564=:71077"
X-Spam-Subject: ***SPAM*** CONTACT FEDEX COURIER COMPANY FOR YOUR PACKAGE.
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Sir, Â I did not hear from you since for your consignment
box of (US$2.5Million) which I kept for you since my boss travelled. I went
and deposited it with FedEx Courier Company. So contact them with your information
to enable them deliver your package to your door steps. [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.203.79.249>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.203.79.249 listed in dnsbl.sorbs.net]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(wxxwxxwys[at]yahoo.com.ph)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.7 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
---1075238418-1732096657-1318073564=:71077
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Dear Sir,
I did not hear from you since for your consignment box of (US$2.5Million) which I kept for you since my boss travelled. I went and deposited it with FedEx Courier Company. So contact them with your information to enable them deliver your package to your door steps.
NB: Do not tell them the Consignment Box is Money, but tell them it is African Clothes for security seasons.
Now contact the Director of FedEx Courier Company Cotonou Republic of Benin Immediately to receive your CONSIGNMENT PACKAGE.
Contact Person: Mr. Lucky Nicolas (Director)
FedEx Courier Comapny Cotonou Benin Rep.
TEL: +229-93237876.
EMail: [email protected]
Forward the below informations to them:
1. Full Names___________
2. Your Address__________
3. Phone numbers__________
4. Your age__________
5. Your Country___________
6. Copy of your passport or driver’s license.
Regards,
Mr. Frank Daniel.
Email: [email protected]
Envelope-to:
Delivery-date: Sat, 08 Oct 2011 04:32:53 -0700
Received: from nm37-vm6.bullet.mail.ne1.yahoo.com ([98.138.229.134])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RCV9A-0004zW-96
for ; Sat, 08 Oct 2011 04:32:53 -0700
Received: from [98.138.90.54] by nm37.bullet.mail.ne1.yahoo.com with NNFMP; 08 Oct 2011 11:32:49 -0000
Received: from [98.138.89.193] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 08 Oct 2011 11:32:49 -0000
Received: from [127.0.0.1] by omp1051.mail.ne1.yahoo.com with NNFMP; 08 Oct 2011 11:32:49 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 15680 invoked by uid 60001); 8 Oct 2011 11:32:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1318073568; bh=d+/oJhDRJp7njQimYsGEuYkBOptCLpxXRNX+LJdTIwc=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KwN6dWMJY5/1mAa1kyNu7UVnYK+mpVG1hj22C/jf3xiJdPyRB14Haw0PsvuyszBs5H5CTjNmRNY4N41oLMtvYSToktqH7RF+gfeFgmaJoxBL13WbuZ8YkRDUfgUvMgYEwtp0I8NsW4hRv2kDmOXkmlumBfo1PK3z8cll8sgPf/Y=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=D1jHdzCQRbd9ujr3oZ5gpQCUiQn1onX2yVWcNZdMcS6aDOdqSEcAI7kR5+D0rc784Vp5FXOIvnhZf3VG3ENVKhIpnIkgObFE2FDTUGIjmuZu5boF+rxpUrwaM9Wc48v9YQb5viW3AHOb/BA1l9WPDk5wHSLY86uyoGseCWaFJmo=;
X-YMail-OSG: .xmCj.kVM1nol1eHfZWsuvtcTDodbti1la3eD8wsWi_YDcq
G45NzjnAZ
Received: from [41.203.79.249] by web190302.mail.sg3.yahoo.com via HTTP; Sat, 08 Oct 2011 19:32:44 SGT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Sat, 8 Oct 2011 19:32:44 +0800 (SGT)
From: Fedex Worldwide Delivery Service <[email protected]>
Reply-To: [email protected]
Subject: CONTACT FEDEX COURIER COMPANY FOR YOUR PACKAGE.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1075238418-1732096657-1318073564=:71077"
X-Spam-Subject: ***SPAM*** CONTACT FEDEX COURIER COMPANY FOR YOUR PACKAGE.
X-Spam-Status: Yes, score=17.6
X-Spam-Score: 176
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Sir, Â I did not hear from you since for your consignment
box of (US$2.5Million) which I kept for you since my boss travelled. I went
and deposited it with FedEx Courier Company. So contact them with your information
to enable them deliver your package to your door steps. [...]
Content analysis details: (17.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.203.79.249>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.203.79.249 listed in dnsbl.sorbs.net]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(wxxwxxwys[at]yahoo.com.ph)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.7 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
---1075238418-1732096657-1318073564=:71077
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Dear Sir,
I did not hear from you since for your consignment box of (US$2.5Million) which I kept for you since my boss travelled. I went and deposited it with FedEx Courier Company. So contact them with your information to enable them deliver your package to your door steps.
NB: Do not tell them the Consignment Box is Money, but tell them it is African Clothes for security seasons.
Now contact the Director of FedEx Courier Company Cotonou Republic of Benin Immediately to receive your CONSIGNMENT PACKAGE.
Contact Person: Mr. Lucky Nicolas (Director)
FedEx Courier Comapny Cotonou Benin Rep.
TEL: +229-93237876.
EMail: [email protected]
Forward the below informations to them:
1. Full Names___________
2. Your Address__________
3. Phone numbers__________
4. Your age__________
5. Your Country___________
6. Copy of your passport or driver’s license.
Regards,
Mr. Frank Daniel.
Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces