by buried under 419s
Fri Nov 04, 2011 4:02 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 03 Nov 2011 23:54:35 -0700
Received: from nm29-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.236])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RMDfd-0004j5-Cd
for ; Thu, 03 Nov 2011 23:54:35 -0700
Received: from [98.139.91.67] by nm29.bullet.mail.sp2.yahoo.com with NNFMP; 04 Nov 2011 06:54:32 -0000
Received: from [98.139.91.35] by tm7.bullet.mail.sp2.yahoo.com with NNFMP; 04 Nov 2011 06:54:32 -0000
Received: from [127.0.0.1] by omp1035.mail.sp2.yahoo.com with NNFMP; 04 Nov 2011 06:54:32 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 89898 invoked by uid 60001); 4 Nov 2011 06:54:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1320389671; bh=mOzKvqMXCqAr3mtvVpZaCH2HkQVOyG0vkbEp4USs8Vg=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=efOOv+Rhe8ZbQtFPiUbQIFQmnup9cCz+YyQF/AGW5mxEVOYFsUzKAkKx86Psoz6o6DGhXgazuoJ8fQx7a17o8Kdh+o/qC08ayGVfLEfgOvjAX3PgAgUvBBp05kqt4QbRaqEdwz+61VHlkJyZ802CAqc9+O/cQaPKInwDvpMgghc=
X-YMail-OSG: CjCZy2kVM1kIWPEoRrriUc_gheLVBtsolJ_n5BKTWIxCPFo
IbNeofl_Q
Received: from [41.216.44.199] by web190317.mail.sg3.yahoo.com via HTTP; Fri, 04 Nov 2011 14:54:27 SGT
X-RocketYMMF: cefileo
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Fri, 4 Nov 2011 14:54:27 +0800 (SGT)
From: "Mrs,Robin Heller," <[email protected]>
Reply-To: [email protected]
Subject: First payment of $6000.00 was sent today
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="113243074-525727230-1320389667=:83718"
X-Spam-Subject: ***SPAM*** First payment of $6000.00 was sent today
X-Spam-Status: Yes, score=8.8
X-Spam-Score: 88
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention My Dear Friend This is to inform you that this office
was instructed to pay your fund $4.5Million U.S.A Dollars by America security
leading team and America representative embassy between now until end of
Oct 2011 per day you will receive the sum of $6,000 Dollars, And send them
85.00 immediately for transfer charge immediately before pick up this first
paypayment of $6,000.00 USD right now [...]
Content analysis details: (8.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(alainsamul[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.236 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--113243074-525727230-1320389667=:83718
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attention My Dear Friend
This is to inform you that this office was instructed to pay your fund $4.5Million U.S.A Dollars by America security leading team and America representative embassy between now until end of Oct 2011 per day you will receive the sum of $6,000 Dollars,
And send them 85.00 immediately for transfer charge immediately before pick up this first paypayment of $6,000.00 USD right now
However be informed that we have send the sum of $6,000 Dollars this morning to avoid cancellation of your payment you have only four hours to call this office upon the receipt of this email the maximum amount you will be receiving per day starting from today is $6,000 in three different payments and the Money Transfer Control Number of today is below.
Once again be advice to reconfirm your address such as and collect information from them now to send the $85.00 immediately and pick up your first payment of $6000.00.
RECEIVER NAME____
COUNTRY___________
CITY________________
TEL_________________
TEST QUESTION______
ANSWER_____________
Furthermore you advised to call us as the instruction was passed that within 10 hours without hearing from you. Count your payment cancelled. Number to call is below listed Manager Director Office Mr.Richard Larry , of release order: +229 998440141 .E-mail addresses : ( [email protected] )Or ( [email protected] )
Thanks and my regards
Mrs,Robin Heller,
Envelope-to:
Delivery-date: Thu, 03 Nov 2011 23:54:35 -0700
Received: from nm29-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.236])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RMDfd-0004j5-Cd
for ; Thu, 03 Nov 2011 23:54:35 -0700
Received: from [98.139.91.67] by nm29.bullet.mail.sp2.yahoo.com with NNFMP; 04 Nov 2011 06:54:32 -0000
Received: from [98.139.91.35] by tm7.bullet.mail.sp2.yahoo.com with NNFMP; 04 Nov 2011 06:54:32 -0000
Received: from [127.0.0.1] by omp1035.mail.sp2.yahoo.com with NNFMP; 04 Nov 2011 06:54:32 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 89898 invoked by uid 60001); 4 Nov 2011 06:54:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1320389671; bh=mOzKvqMXCqAr3mtvVpZaCH2HkQVOyG0vkbEp4USs8Vg=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=efOOv+Rhe8ZbQtFPiUbQIFQmnup9cCz+YyQF/AGW5mxEVOYFsUzKAkKx86Psoz6o6DGhXgazuoJ8fQx7a17o8Kdh+o/qC08ayGVfLEfgOvjAX3PgAgUvBBp05kqt4QbRaqEdwz+61VHlkJyZ802CAqc9+O/cQaPKInwDvpMgghc=
X-YMail-OSG: CjCZy2kVM1kIWPEoRrriUc_gheLVBtsolJ_n5BKTWIxCPFo
IbNeofl_Q
Received: from [41.216.44.199] by web190317.mail.sg3.yahoo.com via HTTP; Fri, 04 Nov 2011 14:54:27 SGT
X-RocketYMMF: cefileo
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Fri, 4 Nov 2011 14:54:27 +0800 (SGT)
From: "Mrs,Robin Heller," <[email protected]>
Reply-To: [email protected]
Subject: First payment of $6000.00 was sent today
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="113243074-525727230-1320389667=:83718"
X-Spam-Subject: ***SPAM*** First payment of $6000.00 was sent today
X-Spam-Status: Yes, score=8.8
X-Spam-Score: 88
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention My Dear Friend This is to inform you that this office
was instructed to pay your fund $4.5Million U.S.A Dollars by America security
leading team and America representative embassy between now until end of
Oct 2011 per day you will receive the sum of $6,000 Dollars, And send them
85.00 immediately for transfer charge immediately before pick up this first
paypayment of $6,000.00 USD right now [...]
Content analysis details: (8.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(alainsamul[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.236 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--113243074-525727230-1320389667=:83718
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attention My Dear Friend
This is to inform you that this office was instructed to pay your fund $4.5Million U.S.A Dollars by America security leading team and America representative embassy between now until end of Oct 2011 per day you will receive the sum of $6,000 Dollars,
And send them 85.00 immediately for transfer charge immediately before pick up this first paypayment of $6,000.00 USD right now
However be informed that we have send the sum of $6,000 Dollars this morning to avoid cancellation of your payment you have only four hours to call this office upon the receipt of this email the maximum amount you will be receiving per day starting from today is $6,000 in three different payments and the Money Transfer Control Number of today is below.
Once again be advice to reconfirm your address such as and collect information from them now to send the $85.00 immediately and pick up your first payment of $6000.00.
RECEIVER NAME____
COUNTRY___________
CITY________________
TEL_________________
TEST QUESTION______
ANSWER_____________
Furthermore you advised to call us as the instruction was passed that within 10 hours without hearing from you. Count your payment cancelled. Number to call is below listed Manager Director Office Mr.Richard Larry , of release order: +229 998440141 .E-mail addresses : ( [email protected] )Or ( [email protected] )
Thanks and my regards
Mrs,Robin Heller,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces