by buried under 419s
Thu Oct 13, 2011 12:22 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Oct 2011 03:26:06 -0700
Received: from nm10.bullet.mail.sp2.yahoo.com ([98.139.91.80])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1REIUG-0007RN-7m
for ; Thu, 13 Oct 2011 03:26:06 -0700
Received: from [98.139.91.64] by nm10.bullet.mail.sp2.yahoo.com with NNFMP; 13 Oct 2011 10:26:02 -0000
Received: from [98.139.91.32] by tm4.bullet.mail.sp2.yahoo.com with NNFMP; 13 Oct 2011 10:26:02 -0000
Received: from [127.0.0.1] by omp1032.mail.sp2.yahoo.com with NNFMP; 13 Oct 2011 10:26:02 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 70275 invoked by uid 60001); 13 Oct 2011 10:26:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1318501560; bh=LwpOU0PpLBCSEJe4SWivkVAgi9fLytlkFEUcBfba7L0=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ifY6KCfjLsi+KoTJJ8iHDUr5pIg4UTq+ara1YPh5xavzaQ4hoFDPkMbb9cH1fr7NK4YiGla9PRQP6ZnTqgGT/SAz8x4g5geM6mDGppIpDvTB+imle1cdHrkHzo73zxh12SDz42YhEETlZ9RKZ4bFlJ/YERF0bOWXpuGe7GL8rhk=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=wHFithK307jfPKme1Uo0rO/OxHMb3MHji1+BP8xlbKcEqXOHnh7TwYyCuccLN+BBVT3npQvxyDmVYplmmx+T8ntLGj6tG5KonQ99YzOdoAY0xdyeetbu/bRq6U+oU79XgYnNSu5LhrhJJhlj56KWWdXyf2ZRUwQc+k2M9/X9/3o=;
X-YMail-OSG: 4goPOSgVM1ntjLccAQaYovLO_LI1wqDbE7XyD84UUbrGEmE
GVNs3Gc9r
Received: from [82.128.87.158] by web190406.mail.sg3.yahoo.com via HTTP; Thu, 13 Oct 2011 18:25:59 SGT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Thu, 13 Oct 2011 18:25:59 +0800 (SGT)
From: Obi John <[email protected]>
Reply-To: [email protected]
Subject: Contact Dhl Courier Company For Your $1.5 M
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1886548795-956297375-1318501559=:62951"
X-Spam-Subject: ***SPAM*** Contact Dhl Courier Company For Your $1.5 M
X-Spam-Status: Yes, score=19.1
X-Spam-Score: 191
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: I have been waiting for you since to come down here
and pick your Bank Draft of ($1.5 M One million five hundrad thousand usd).but
did not heard from you since that time. Then I went and deposited the Draft
with DHL Company here in Benin Republic, because I travelled to Iraq to see
my boss and will not come back till next month end. I want You to contact
the Dhl Courier Company to know when they will deliver your package. I have
paid for the delivering charges and insurance fee.The only money you have
to send to them is there security keeping fee which is $150 Dollars to received
your package. This is their Contact Address, Contact Dr.Frank James. Director
Dhl courier company Benin Republic. E-mail:([email protected]) Phone
Number......+229 98768487 OR +234 8037464574 Try to contact them as soon
as possible to avoid increasing the security keeping fee. Below is the information
you required to send to them;(1)Full name (2)Home address........ (3)Telphone.........
(4)Age......... (5)Sex (6)A COPY OF YOUR PICTURE I gave them your delivering
address but you have to reconfirm it to them again to avoid any mistake on
the delivering. Note. The DHL courier company Benin Republic don't know the
contents of the Box. I registered it as a Box of an Africa cloths. They don't
know it contents money. this is to avoid them delaying with the Box. don't
let them know what is contains.I am waiting for your urgent response. DHL
COURIER COMPANY Let me know immediately you receive your Draft. Thanks. Mr
Obi John [...]
Content analysis details: (19.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(obijohn01[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.80 listed in list.dnswl.org]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (obijohn01[at]yahoo.com.ph)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[82.128.87.158 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
1.1 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.7 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.4 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--1886548795-956297375-1318501559=:62951
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attn: I have been waiting for you since to come down here and pick your Bank Draft of ($1.5 M One million five hundrad thousand usd).but did not heard from you since that time. Then I went and deposited the Draft with DHL Company here in Benin Republic, because I travelled to Iraq to see my boss and will not come back till next month end. I want You to contact the Dhl Courier Company to know when they will deliver your package. I have paid for the delivering charges and insurance fee.The only money you have to send to them is there security keeping fee which is $150 Dollars to received your package. This is their Contact Address, Contact Dr.Frank James.
Director Dhl courier company Benin Republic.
E-mail:( [email protected] )
Phone Number......+229 98768487 OR +234 8037464574 Try to contact them as soon as possible to avoid increasing the security keeping fee.
Below is the information you required to send to them;(1)Full name...........
(2)Home address........
(3)Telphone.........
(4)Age.........
(5)Sex................
(6)A COPY OF YOUR PICTURE............ I gave them your delivering address but you have to reconfirm it to them again to avoid any mistake on the delivering.
________________________________________________________________________________________________
Note. The DHL courier company Benin Republic don't know the contents of the Box. I registered it as a Box of an Africa cloths. They don't know it contents money.
this is to avoid them delaying with the Box. don't let them know what is contains.I am waiting for your urgent response. DHL COURIER COMPANY Let me know immediately you receive your Draft. Thanks.
Mr Obi John
Envelope-to:
Delivery-date: Thu, 13 Oct 2011 03:26:06 -0700
Received: from nm10.bullet.mail.sp2.yahoo.com ([98.139.91.80])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1REIUG-0007RN-7m
for ; Thu, 13 Oct 2011 03:26:06 -0700
Received: from [98.139.91.64] by nm10.bullet.mail.sp2.yahoo.com with NNFMP; 13 Oct 2011 10:26:02 -0000
Received: from [98.139.91.32] by tm4.bullet.mail.sp2.yahoo.com with NNFMP; 13 Oct 2011 10:26:02 -0000
Received: from [127.0.0.1] by omp1032.mail.sp2.yahoo.com with NNFMP; 13 Oct 2011 10:26:02 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 70275 invoked by uid 60001); 13 Oct 2011 10:26:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1318501560; bh=LwpOU0PpLBCSEJe4SWivkVAgi9fLytlkFEUcBfba7L0=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ifY6KCfjLsi+KoTJJ8iHDUr5pIg4UTq+ara1YPh5xavzaQ4hoFDPkMbb9cH1fr7NK4YiGla9PRQP6ZnTqgGT/SAz8x4g5geM6mDGppIpDvTB+imle1cdHrkHzo73zxh12SDz42YhEETlZ9RKZ4bFlJ/YERF0bOWXpuGe7GL8rhk=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=wHFithK307jfPKme1Uo0rO/OxHMb3MHji1+BP8xlbKcEqXOHnh7TwYyCuccLN+BBVT3npQvxyDmVYplmmx+T8ntLGj6tG5KonQ99YzOdoAY0xdyeetbu/bRq6U+oU79XgYnNSu5LhrhJJhlj56KWWdXyf2ZRUwQc+k2M9/X9/3o=;
X-YMail-OSG: 4goPOSgVM1ntjLccAQaYovLO_LI1wqDbE7XyD84UUbrGEmE
GVNs3Gc9r
Received: from [82.128.87.158] by web190406.mail.sg3.yahoo.com via HTTP; Thu, 13 Oct 2011 18:25:59 SGT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Thu, 13 Oct 2011 18:25:59 +0800 (SGT)
From: Obi John <[email protected]>
Reply-To: [email protected]
Subject: Contact Dhl Courier Company For Your $1.5 M
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1886548795-956297375-1318501559=:62951"
X-Spam-Subject: ***SPAM*** Contact Dhl Courier Company For Your $1.5 M
X-Spam-Status: Yes, score=19.1
X-Spam-Score: 191
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: I have been waiting for you since to come down here
and pick your Bank Draft of ($1.5 M One million five hundrad thousand usd).but
did not heard from you since that time. Then I went and deposited the Draft
with DHL Company here in Benin Republic, because I travelled to Iraq to see
my boss and will not come back till next month end. I want You to contact
the Dhl Courier Company to know when they will deliver your package. I have
paid for the delivering charges and insurance fee.The only money you have
to send to them is there security keeping fee which is $150 Dollars to received
your package. This is their Contact Address, Contact Dr.Frank James. Director
Dhl courier company Benin Republic. E-mail:([email protected]) Phone
Number......+229 98768487 OR +234 8037464574 Try to contact them as soon
as possible to avoid increasing the security keeping fee. Below is the information
you required to send to them;(1)Full name (2)Home address........ (3)Telphone.........
(4)Age......... (5)Sex (6)A COPY OF YOUR PICTURE I gave them your delivering
address but you have to reconfirm it to them again to avoid any mistake on
the delivering. Note. The DHL courier company Benin Republic don't know the
contents of the Box. I registered it as a Box of an Africa cloths. They don't
know it contents money. this is to avoid them delaying with the Box. don't
let them know what is contains.I am waiting for your urgent response. DHL
COURIER COMPANY Let me know immediately you receive your Draft. Thanks. Mr
Obi John [...]
Content analysis details: (19.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.6 URG_BIZ BODY: Contains urgent matter
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(obijohn01[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.80 listed in list.dnswl.org]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (obijohn01[at]yahoo.com.ph)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[82.128.87.158 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
1.1 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.7 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.4 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--1886548795-956297375-1318501559=:62951
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attn: I have been waiting for you since to come down here and pick your Bank Draft of ($1.5 M One million five hundrad thousand usd).but did not heard from you since that time. Then I went and deposited the Draft with DHL Company here in Benin Republic, because I travelled to Iraq to see my boss and will not come back till next month end. I want You to contact the Dhl Courier Company to know when they will deliver your package. I have paid for the delivering charges and insurance fee.The only money you have to send to them is there security keeping fee which is $150 Dollars to received your package. This is their Contact Address, Contact Dr.Frank James.
Director Dhl courier company Benin Republic.
E-mail:( [email protected] )
Phone Number......+229 98768487 OR +234 8037464574 Try to contact them as soon as possible to avoid increasing the security keeping fee.
Below is the information you required to send to them;(1)Full name...........
(2)Home address........
(3)Telphone.........
(4)Age.........
(5)Sex................
(6)A COPY OF YOUR PICTURE............ I gave them your delivering address but you have to reconfirm it to them again to avoid any mistake on the delivering.
________________________________________________________________________________________________
Note. The DHL courier company Benin Republic don't know the contents of the Box. I registered it as a Box of an Africa cloths. They don't know it contents money.
this is to avoid them delaying with the Box. don't let them know what is contains.I am waiting for your urgent response. DHL COURIER COMPANY Let me know immediately you receive your Draft. Thanks.
Mr Obi John
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces