by buried under 419s
Sat Nov 12, 2011 2:25 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 12 Nov 2011 06:16:21 -0800
Received: from nm1-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.203])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RPENB-00081m-OB
for ; Sat, 12 Nov 2011 06:16:21 -0800
Received: from [98.139.91.62] by nm1.bullet.mail.sp2.yahoo.com with NNFMP; 12 Nov 2011 14:15:55 -0000
Received: from [98.139.91.42] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 12 Nov 2011 14:15:55 -0000
Received: from [127.0.0.1] by omp1042.mail.sp2.yahoo.com with NNFMP; 12 Nov 2011 14:15:55 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 91850 invoked by uid 60001); 12 Nov 2011 14:15:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1321107353; bh=HJu/UGFmVSgTLrExmEQjQvaUju0qHCKWQVIUpwb0iVw=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=jBjj3TMhwxGDzfq8WkKZs05SwTr3pFQzlI/Cv6rn7dTv8hfNdhwzYU9HEpYicVotvI5XihAFQOQBcUfcv7yhosxg63MCZ13KW6DVwR+tH9u+WhCGQIDGpqGAMfYMy2R9hfcS7C89w8bi+16kOWD5egpZM0qrcy0jnSyWKh5DRx0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=N+h7IAjkUvlfi1JtUTYNve+j88QnISZ0vaKRKLkEVxGL6Nf/lhzbdCX2kog7CRmYWkmA5kzgXbjYqSKSbCiYxkQG0wHgIO04wVa+0CBHUiATGVuSmMDgWeSHkYrqiMyFAY2Rpx4cj1j5TPd0DfmyIxLURBPkRs8HhqqY+VgINFY=;
X-YMail-OSG: 3HldHoEVM1mYXK2aw2_CqVd7vZ9k1QPAM7eEpxcML8OQ9.N
UXOjze1Vk
Received: from [41.191.85.241] by web190105.mail.sg3.yahoo.com via HTTP; Sat, 12 Nov 2011 22:15:49 SGT
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Sat, 12 Nov 2011 22:15:49 +0800 (SGT)
From: Ali Tonato <[email protected]>
Reply-To: [email protected]
Subject: YOUR PACKAGE WITH FEDEX COMPANY.
To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1546225855-22912367-1321107349=:87880"
X-Spam-Subject: ***SPAM*** YOUR PACKAGE WITH FEDEX COMPANY.
X-Spam-Status: Yes, score=16.8
X-Spam-Score: 168
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: My dear friend, I have paid the fee for your cheque/draft
and I took it to the FINANCIAL BANK PLC to confirm it then the Manager of
the Bank MR. BENARD EZEUGO told me that before the check can get to you it
will expire on the way and if it expired it will become useless so he advice
me to convert $1.850.000.00US dollars (ONE MILLION EIGHT HUNDRED AND FIFTY
THOUSAND DOLLARS) into cash and packed it into the strong iron box and deposited
it with FEDEX EXPRESS COURIER COMPANY BENIN REPUBLIC to deliver it in cash
to you and I did it as he advice me because he is a banker he knows the durability
of any foreign cheque/draft. [...]
Content analysis details: (16.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.203 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrtonato[at]yahoo.com.ph)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
1.1 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.7 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.4 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
---1546225855-22912367-1321107349=:87880
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Attn: My dear friend,
I have paid the fee for your cheque/draft and I took it to the FINANCIAL BANK PLC to confirm it then the Manager of the Bank MR. BENARD EZEUGO told me that before the check can get to you it will expire on the way and if it expired it will become useless so he advice me to convert $1.850.000.00US dollars (ONE MILLION EIGHT HUNDRED AND FIFTY THOUSAND DOLLARS) into cash and packed it into the strong iron box and deposited it with FEDEX EXPRESS COURIER COMPANY BENIN REPUBLIC to deliver it in cash to you and I did it as he advice me because he is a banker he knows the durability of any foreign cheque/draft.
I deposited the said package with the FEDEX EXPRESS COURIER COMPANY as cotton materials for security reasons. This is the registration number of your package FDX/122p/mtm/2009 Zip Code: 0113388 so do not let the company know the real contents of the consignment so that they can deliver it to you safely. I want you to contact the company immediately with the following information; though I gave them your information but you still need to re-confirm it for them.
Below is the required information you needed to give them now:
1.) YOUR FULL NAME AND HOME ADDRESS:
2.) YOUR PHONE NUMBER:
3.) A COPY OF YOUR PHOTO:
4.) YOUR AGE AND MARITAL STATUS:
5.) YOUR COUNTRY AND CITY:
6.) YOUR OCCUPATION:
All these things is what they needed from you now to submit to the company for urgent delivery of your package contains $1.850.000.00USD. Please contact the delivery company immediately and re-confirm your info to them to enable their agent locate you when he arrived in your country. This is the company contact info.
DR. MARK DUBOR (Director General)
Email: ( [email protected] )
FEDEX EXPRESS COURIER COMPANY BENIN REPUBLIC. Please contact the company immediately you receive this email so that your package will leave tonight to be delivered to you. Get back to me as soon as you receive your package from the company.
Thank you and God bless.
Mr. Ali Tonato.
Envelope-to:
Delivery-date: Sat, 12 Nov 2011 06:16:21 -0800
Received: from nm1-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.203])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RPENB-00081m-OB
for ; Sat, 12 Nov 2011 06:16:21 -0800
Received: from [98.139.91.62] by nm1.bullet.mail.sp2.yahoo.com with NNFMP; 12 Nov 2011 14:15:55 -0000
Received: from [98.139.91.42] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 12 Nov 2011 14:15:55 -0000
Received: from [127.0.0.1] by omp1042.mail.sp2.yahoo.com with NNFMP; 12 Nov 2011 14:15:55 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 91850 invoked by uid 60001); 12 Nov 2011 14:15:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1321107353; bh=HJu/UGFmVSgTLrExmEQjQvaUju0qHCKWQVIUpwb0iVw=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=jBjj3TMhwxGDzfq8WkKZs05SwTr3pFQzlI/Cv6rn7dTv8hfNdhwzYU9HEpYicVotvI5XihAFQOQBcUfcv7yhosxg63MCZ13KW6DVwR+tH9u+WhCGQIDGpqGAMfYMy2R9hfcS7C89w8bi+16kOWD5egpZM0qrcy0jnSyWKh5DRx0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=N+h7IAjkUvlfi1JtUTYNve+j88QnISZ0vaKRKLkEVxGL6Nf/lhzbdCX2kog7CRmYWkmA5kzgXbjYqSKSbCiYxkQG0wHgIO04wVa+0CBHUiATGVuSmMDgWeSHkYrqiMyFAY2Rpx4cj1j5TPd0DfmyIxLURBPkRs8HhqqY+VgINFY=;
X-YMail-OSG: 3HldHoEVM1mYXK2aw2_CqVd7vZ9k1QPAM7eEpxcML8OQ9.N
UXOjze1Vk
Received: from [41.191.85.241] by web190105.mail.sg3.yahoo.com via HTTP; Sat, 12 Nov 2011 22:15:49 SGT
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Sat, 12 Nov 2011 22:15:49 +0800 (SGT)
From: Ali Tonato <[email protected]>
Reply-To: [email protected]
Subject: YOUR PACKAGE WITH FEDEX COMPANY.
To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1546225855-22912367-1321107349=:87880"
X-Spam-Subject: ***SPAM*** YOUR PACKAGE WITH FEDEX COMPANY.
X-Spam-Status: Yes, score=16.8
X-Spam-Score: 168
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: My dear friend, I have paid the fee for your cheque/draft
and I took it to the FINANCIAL BANK PLC to confirm it then the Manager of
the Bank MR. BENARD EZEUGO told me that before the check can get to you it
will expire on the way and if it expired it will become useless so he advice
me to convert $1.850.000.00US dollars (ONE MILLION EIGHT HUNDRED AND FIFTY
THOUSAND DOLLARS) into cash and packed it into the strong iron box and deposited
it with FEDEX EXPRESS COURIER COMPANY BENIN REPUBLIC to deliver it in cash
to you and I did it as he advice me because he is a banker he knows the durability
of any foreign cheque/draft. [...]
Content analysis details: (16.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.203 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrtonato[at]yahoo.com.ph)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
1.1 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.7 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.4 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
---1546225855-22912367-1321107349=:87880
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Attn: My dear friend,
I have paid the fee for your cheque/draft and I took it to the FINANCIAL BANK PLC to confirm it then the Manager of the Bank MR. BENARD EZEUGO told me that before the check can get to you it will expire on the way and if it expired it will become useless so he advice me to convert $1.850.000.00US dollars (ONE MILLION EIGHT HUNDRED AND FIFTY THOUSAND DOLLARS) into cash and packed it into the strong iron box and deposited it with FEDEX EXPRESS COURIER COMPANY BENIN REPUBLIC to deliver it in cash to you and I did it as he advice me because he is a banker he knows the durability of any foreign cheque/draft.
I deposited the said package with the FEDEX EXPRESS COURIER COMPANY as cotton materials for security reasons. This is the registration number of your package FDX/122p/mtm/2009 Zip Code: 0113388 so do not let the company know the real contents of the consignment so that they can deliver it to you safely. I want you to contact the company immediately with the following information; though I gave them your information but you still need to re-confirm it for them.
Below is the required information you needed to give them now:
1.) YOUR FULL NAME AND HOME ADDRESS:
2.) YOUR PHONE NUMBER:
3.) A COPY OF YOUR PHOTO:
4.) YOUR AGE AND MARITAL STATUS:
5.) YOUR COUNTRY AND CITY:
6.) YOUR OCCUPATION:
All these things is what they needed from you now to submit to the company for urgent delivery of your package contains $1.850.000.00USD. Please contact the delivery company immediately and re-confirm your info to them to enable their agent locate you when he arrived in your country. This is the company contact info.
DR. MARK DUBOR (Director General)
Email: ( [email protected] )
FEDEX EXPRESS COURIER COMPANY BENIN REPUBLIC. Please contact the company immediately you receive this email so that your package will leave tonight to be delivered to you. Get back to me as soon as you receive your package from the company.
Thank you and God bless.
Mr. Ali Tonato.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces