by buried under 419s
Thu Nov 10, 2011 1:09 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 10 Nov 2011 05:58:10 -0800
Received: from nm10.bullet.mail.sp2.yahoo.com ([98.139.91.80])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1ROV8r-0004X8-CS
for ; Thu, 10 Nov 2011 05:58:10 -0800
Received: from [98.139.91.61] by nm10.bullet.mail.sp2.yahoo.com with NNFMP; 10 Nov 2011 13:58:06 -0000
Received: from [98.139.91.45] by tm1.bullet.mail.sp2.yahoo.com with NNFMP; 10 Nov 2011 13:58:06 -0000
Received: from [127.0.0.1] by omp1045.mail.sp2.yahoo.com with NNFMP; 10 Nov 2011 13:58:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 81824 invoked by uid 60001); 10 Nov 2011 13:58:05 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1320933485; bh=+95goejLmpwu2nCQAm1ntvVDH3t6Ke/nux5m5FVfKug=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=g/w14Q7EProDHd3i5ouK20Hox0guV27hsmjoxA8XKiFih1x2QUfNbNmB8FJP2Q+SHWZmNU8PdaETPzfHTugZGtUyNrCzU3LNNFQtyrqLwg4PRb33ntRXfUHK7wldn2akbw7C7qeMVUfSRR9h77FdD/qgqMEazr/UVJvqb/5xoIE=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=m6RJPq+GkLVLJxwt2kUPl+BQrHAL532t/bwolR6VpC5szIgFhCTc4kRNBk30ibOJKkv6e3eAdgZknfgIrjGFX5NTwpxFNYDHv0p/Hq16LdYDTLypnXSW42Q9dyJQh12cLi8mMpg2YvuBcP4wO+K+GAEjIVmZ5M6GAk2p8anRN8Y=;
X-YMail-OSG: s9vclPAVM1k5e4ZQjAuZIjH8kmwz6Uf6hu0GRiTRgYqxwDu
xBT0K6VVX
Received: from [41.216.50.33] by web190314.mail.sg3.yahoo.com via HTTP; Thu, 10 Nov 2011 21:58:01 SGT
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Thu, 10 Nov 2011 21:58:01 +0800 (SGT)
From: BARR PETER WILLIAM <[email protected]>
Reply-To: [email protected]
Subject: YOUR PAYMENT HAS BEEN SENT TO YOU THROUGH WESTERN UNION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1224473145-1301176533-1320933481=:73738"
X-Spam-Subject: ***SPAM*** YOUR PAYMENT HAS BEEN SENT TO YOU THROUGH WESTERN UNION
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: How are you today? I write to inform you that we have already
sent you USD $5000.00. dollars through Western union as we have been given
the mandate to transfer your full compensation payment total sum of USD $8.200.000.00
via western union by this governement. [...]
Content analysis details: (7.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(barrpeterwilliam24[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.80 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.216.50.33>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (barrpeterwilliam24[at]yahoo.com.ph)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5037]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.216.50.33 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
---1224473145-1301176533-1320933481=:73738
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
How are you today?
I write to inform you that we have already sent you USD $5000.00. dollars through Western union as we have been given the mandate to transfer your full compensation payment total sum of USD $8.200.000.00 via western union by this governement.
I was calling your telephone number to give you the information through phone but you did not pick up my calls throughout that yesterday even this morning.Now, I decided to email you the MTCN and sender name so that you will pick up this USD $5000.00. to enable us send another USD $5000.00. today as you know we will be sending you only US$5000.00. per day. Please pick up this information and run to western union to pick up the USD $5000.00. and call me back to send you another payment today,
Director western Union Benin Republic
Manager:::: Mr FRANK BEN
My direct phone line is +229-989-178-09,
EMAIL:::::: (( westernunion_bouns19@ globomail.com ))
call or email me once you picked up this USD $5000.00. today. Here is the western union information to pick up theUSD $5000.00.;
SENDER NAME:===BENJAMIN NWEKE
MTCN NUMBER:=== 0352193566
Text Question: HONEST
Answer: TRUST
Amount: USD $5000.00
I am waiting for your call once you pick up this USD $5000.00 Please email me your direct telephone number because I need to be calling you once we send any payment for the informations.
Thanks
BARR PETER WILLIAM
Envelope-to:
Delivery-date: Thu, 10 Nov 2011 05:58:10 -0800
Received: from nm10.bullet.mail.sp2.yahoo.com ([98.139.91.80])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1ROV8r-0004X8-CS
for ; Thu, 10 Nov 2011 05:58:10 -0800
Received: from [98.139.91.61] by nm10.bullet.mail.sp2.yahoo.com with NNFMP; 10 Nov 2011 13:58:06 -0000
Received: from [98.139.91.45] by tm1.bullet.mail.sp2.yahoo.com with NNFMP; 10 Nov 2011 13:58:06 -0000
Received: from [127.0.0.1] by omp1045.mail.sp2.yahoo.com with NNFMP; 10 Nov 2011 13:58:06 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 81824 invoked by uid 60001); 10 Nov 2011 13:58:05 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1320933485; bh=+95goejLmpwu2nCQAm1ntvVDH3t6Ke/nux5m5FVfKug=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=g/w14Q7EProDHd3i5ouK20Hox0guV27hsmjoxA8XKiFih1x2QUfNbNmB8FJP2Q+SHWZmNU8PdaETPzfHTugZGtUyNrCzU3LNNFQtyrqLwg4PRb33ntRXfUHK7wldn2akbw7C7qeMVUfSRR9h77FdD/qgqMEazr/UVJvqb/5xoIE=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=m6RJPq+GkLVLJxwt2kUPl+BQrHAL532t/bwolR6VpC5szIgFhCTc4kRNBk30ibOJKkv6e3eAdgZknfgIrjGFX5NTwpxFNYDHv0p/Hq16LdYDTLypnXSW42Q9dyJQh12cLi8mMpg2YvuBcP4wO+K+GAEjIVmZ5M6GAk2p8anRN8Y=;
X-YMail-OSG: s9vclPAVM1k5e4ZQjAuZIjH8kmwz6Uf6hu0GRiTRgYqxwDu
xBT0K6VVX
Received: from [41.216.50.33] by web190314.mail.sg3.yahoo.com via HTTP; Thu, 10 Nov 2011 21:58:01 SGT
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Thu, 10 Nov 2011 21:58:01 +0800 (SGT)
From: BARR PETER WILLIAM <[email protected]>
Reply-To: [email protected]
Subject: YOUR PAYMENT HAS BEEN SENT TO YOU THROUGH WESTERN UNION
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1224473145-1301176533-1320933481=:73738"
X-Spam-Subject: ***SPAM*** YOUR PAYMENT HAS BEEN SENT TO YOU THROUGH WESTERN UNION
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: How are you today? I write to inform you that we have already
sent you USD $5000.00. dollars through Western union as we have been given
the mandate to transfer your full compensation payment total sum of USD $8.200.000.00
via western union by this governement. [...]
Content analysis details: (7.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(barrpeterwilliam24[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.80 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.216.50.33>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (barrpeterwilliam24[at]yahoo.com.ph)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5037]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.216.50.33 listed in dnsbl.sorbs.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
---1224473145-1301176533-1320933481=:73738
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
How are you today?
I write to inform you that we have already sent you USD $5000.00. dollars through Western union as we have been given the mandate to transfer your full compensation payment total sum of USD $8.200.000.00 via western union by this governement.
I was calling your telephone number to give you the information through phone but you did not pick up my calls throughout that yesterday even this morning.Now, I decided to email you the MTCN and sender name so that you will pick up this USD $5000.00. to enable us send another USD $5000.00. today as you know we will be sending you only US$5000.00. per day. Please pick up this information and run to western union to pick up the USD $5000.00. and call me back to send you another payment today,
Director western Union Benin Republic
Manager:::: Mr FRANK BEN
My direct phone line is +229-989-178-09,
EMAIL:::::: (( westernunion_bouns19@ globomail.com ))
call or email me once you picked up this USD $5000.00. today. Here is the western union information to pick up theUSD $5000.00.;
SENDER NAME:===BENJAMIN NWEKE
MTCN NUMBER:=== 0352193566
Text Question: HONEST
Answer: TRUST
Amount: USD $5000.00
I am waiting for your call once you pick up this USD $5000.00 Please email me your direct telephone number because I need to be calling you once we send any payment for the informations.
Thanks
BARR PETER WILLIAM
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces