by buried under 419s
Mon Oct 31, 2011 3:40 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 31 Oct 2011 12:09:58 -0700
Received: from nm27.bullet.mail.sp2.yahoo.com ([98.139.91.97])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RKxF6-0006gO-BC
for ; Mon, 31 Oct 2011 12:09:58 -0700
Received: from [98.139.91.65] by nm27.bullet.mail.sp2.yahoo.com with NNFMP; 31 Oct 2011 19:09:55 -0000
Received: from [98.139.91.23] by tm5.bullet.mail.sp2.yahoo.com with NNFMP; 31 Oct 2011 19:09:55 -0000
Received: from [127.0.0.1] by omp1023.mail.sp2.yahoo.com with NNFMP; 31 Oct 2011 19:09:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 40722 invoked by uid 60001); 31 Oct 2011 19:09:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1320088193; bh=TUvWlVOv7mxQKM3UUHNKHA7QVi3330g81Nl0nSX6k14=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=oLrQqCkfjrSVByfCDCoYuhQjBXOFrJ9IqOsZ9Z0qW0sHpdOjyVPhU4gk2bgv7HAYhwoSK4VkkxnMWfdEFTm/xeGd6xV7gjw3w1LCXu5TAIwTs3hoSXk7+GWHGbJsg1hzM4gS5yMyk7qcxIw9T81+umgGiuahm/EMD/jlX10/WIg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=Lbl2vwUB83OMunZm/WjDsLo5zHlxe22fTn8uq3LMJQNJBW7lDmmo8h9EOJSW+ks6OtsR9EjcOcqUnYkcqcrgjUFyT0yYc7pB4BZ1UN5ReYHgDMkqinjOukdGlCMBdYUw7e70J2GV8lKzRopkI3y4Un4D/JJf4OgbF9IIMAOJziA=;
X-YMail-OSG: MS2yMkEVM1n8.nYQUUqw7fBMYGuM5azQrHPSroyHjTPNz1X
i99DgBwtw
Received: from [41.216.44.220] by web190311.mail.sg3.yahoo.com via HTTP; Tue, 01 Nov 2011 03:09:50 SGT
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Tue, 1 Nov 2011 03:09:50 +0800 (SGT)
From: "Diplomat Paul Eze." <[email protected]>
Reply-To: [email protected]
Subject: From Paul Eze, Email the diplomat council New York.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2105606761-1874603930-1320088190=:9578"
X-Spam-Subject: ***SPAM*** From Paul Eze, Email the diplomat council New York.
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn; I am Diplomat Paul Eze from Shallon Courier Company
Benin Republic, I have been waiting for you in John F Kennedy international
Airport New York for three days with your package which contains $1.5 million
USD, but my time has elapsed. Please be informed that your consignment box
is in custody of the diplomat council in New York . [...]
Content analysis details: (9.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(johnnweke75[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.97 listed in list.dnswl.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(diplomatcouncil2011[at]hotmail.com
)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (johnnweke75[at]yahoo.com.ph)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5002]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--2105606761-1874603930-1320088190=:9578
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attn;
I am Diplomat Paul Eze from Shallon Courier Company Benin Republic, I have been waiting for you in John F Kennedy international Airport New York for three days with your package which contains $1.5 million USD, but my time has elapsed. Please be informed that your consignment box is in custody of the diplomat council in New York .
Contact the diplomat council with below information.
Contact person: Robert Bowell.
Email ( [email protected] )
Kindly reconfirm the below information so that your consignment box will be delivered immediately.
NAME: ========
ADDRESS: =========
MOBILE NO.:===========
NAME OF YOUR NEAREST AIRPORT: ======
A COPY OF YOUR IDENTIFICATION: ==========
COUNTRY===============
COMPANY REGISTRATION NO: EG58945
CODE NUMBER: 0140479
NOTE: This information is confidential!! Because the Diplomat council does not know the content of the consignment and on no circumstances should you let them know the content, due to I deposited it as a Gift from Africa.
My Regards,
Diplomat Paul Eze.
Envelope-to:
Delivery-date: Mon, 31 Oct 2011 12:09:58 -0700
Received: from nm27.bullet.mail.sp2.yahoo.com ([98.139.91.97])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RKxF6-0006gO-BC
for ; Mon, 31 Oct 2011 12:09:58 -0700
Received: from [98.139.91.65] by nm27.bullet.mail.sp2.yahoo.com with NNFMP; 31 Oct 2011 19:09:55 -0000
Received: from [98.139.91.23] by tm5.bullet.mail.sp2.yahoo.com with NNFMP; 31 Oct 2011 19:09:55 -0000
Received: from [127.0.0.1] by omp1023.mail.sp2.yahoo.com with NNFMP; 31 Oct 2011 19:09:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 40722 invoked by uid 60001); 31 Oct 2011 19:09:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1320088193; bh=TUvWlVOv7mxQKM3UUHNKHA7QVi3330g81Nl0nSX6k14=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=oLrQqCkfjrSVByfCDCoYuhQjBXOFrJ9IqOsZ9Z0qW0sHpdOjyVPhU4gk2bgv7HAYhwoSK4VkkxnMWfdEFTm/xeGd6xV7gjw3w1LCXu5TAIwTs3hoSXk7+GWHGbJsg1hzM4gS5yMyk7qcxIw9T81+umgGiuahm/EMD/jlX10/WIg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=Lbl2vwUB83OMunZm/WjDsLo5zHlxe22fTn8uq3LMJQNJBW7lDmmo8h9EOJSW+ks6OtsR9EjcOcqUnYkcqcrgjUFyT0yYc7pB4BZ1UN5ReYHgDMkqinjOukdGlCMBdYUw7e70J2GV8lKzRopkI3y4Un4D/JJf4OgbF9IIMAOJziA=;
X-YMail-OSG: MS2yMkEVM1n8.nYQUUqw7fBMYGuM5azQrHPSroyHjTPNz1X
i99DgBwtw
Received: from [41.216.44.220] by web190311.mail.sg3.yahoo.com via HTTP; Tue, 01 Nov 2011 03:09:50 SGT
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Tue, 1 Nov 2011 03:09:50 +0800 (SGT)
From: "Diplomat Paul Eze." <[email protected]>
Reply-To: [email protected]
Subject: From Paul Eze, Email the diplomat council New York.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2105606761-1874603930-1320088190=:9578"
X-Spam-Subject: ***SPAM*** From Paul Eze, Email the diplomat council New York.
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn; I am Diplomat Paul Eze from Shallon Courier Company
Benin Republic, I have been waiting for you in John F Kennedy international
Airport New York for three days with your package which contains $1.5 million
USD, but my time has elapsed. Please be informed that your consignment box
is in custody of the diplomat council in New York . [...]
Content analysis details: (9.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(johnnweke75[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.97 listed in list.dnswl.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(diplomatcouncil2011[at]hotmail.com
)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (johnnweke75[at]yahoo.com.ph)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5002]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--2105606761-1874603930-1320088190=:9578
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attn;
I am Diplomat Paul Eze from Shallon Courier Company Benin Republic, I have been waiting for you in John F Kennedy international Airport New York for three days with your package which contains $1.5 million USD, but my time has elapsed. Please be informed that your consignment box is in custody of the diplomat council in New York .
Contact the diplomat council with below information.
Contact person: Robert Bowell.
Email ( [email protected] )
Kindly reconfirm the below information so that your consignment box will be delivered immediately.
NAME: ========
ADDRESS: =========
MOBILE NO.:===========
NAME OF YOUR NEAREST AIRPORT: ======
A COPY OF YOUR IDENTIFICATION: ==========
COUNTRY===============
COMPANY REGISTRATION NO: EG58945
CODE NUMBER: 0140479
NOTE: This information is confidential!! Because the Diplomat council does not know the content of the consignment and on no circumstances should you let them know the content, due to I deposited it as a Gift from Africa.
My Regards,
Diplomat Paul Eze.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces