by buried under 419s
Wed Nov 16, 2011 2:07 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 16 Nov 2011 04:27:31 -0800
Received: from nm12.access.bullet.mail.sp2.yahoo.com ([98.139.44.139])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RQeaR-0004mn-EH
for ; Wed, 16 Nov 2011 04:27:31 -0800
Received: from [98.139.44.100] by nm12.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Nov 2011 12:27:28 -0000
Received: from [98.139.44.68] by tm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Nov 2011 12:27:28 -0000
Received: from [127.0.0.1] by omp1005.access.mail.sp2.yahoo.com with NNFMP; 16 Nov 2011 12:27:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 36570 invoked by uid 60001); 16 Nov 2011 12:27:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1321446448; bh=ymaBrEY2Ey918IW37Acyx2BzeheFFC+pcebzewwGjuU=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=dQJKH221ff/63ryUBXyX3smmBba0SDuQhMTY/ExhdEKGXovMz1N/pxhkx4SgGkM1jBXDNn48fBnLLFNT45p4Vf1EUl+5Zk072LWnSb5fwgEEymFc/zQ83tpfFA/DoxPQFXqDxIpNzxZ/K4VEUEFowIIaa2l2xf/vQNGJCE1uVHA=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=5meIxJ+/GLpC9llNF5dwYLHbMxBqsriJS1ZED2aJjAUjNmx26JxknKFDqjGOP0I7uBhP1iUVkGBkTDjomNC/weHP+XTWo88qaBfKNi/xqeY4q/OSbKqhl7sMM10l8AJv5bZx7x98F4R7uTOe1uGnUkGPCK8lJiijNT1NiSKZqL8=;
X-YMail-OSG: jE38WkYVM1k10XyIMWWn0PACoZt8C3mWROyfYb_GIiRG1ZN
SmptrPor1oaWRx6O31m5pYmFdj6i24fYSPe2.Vc2sdq0bBnNoD.2L8bwBH7S
ouQuUcQ0EU2XTt2jDRnLfTnl.G2mbwsoKXW9jqadZKn25q.KMrMLrZBAWGp9
wT.Fc7BICb_rHxdEcWWQf7t3dVPBx9G8M.luAK8y9xPNoqEZso6VMVYkXNhu
ITo_w7q6nebPsObRlpN2OM00.2.S0KbaidmQARdjbHDCXWcx1dh8mqZWtBoH
WVvHP.23j9neiNLhs8dn8zckx1XiK4v3ZIdc4lbh9.D0BmR6Rtaq.cuAGek6
G8UZRGDKvrx9AympUKArIJXsxVl037w_aU6GqF3CxOb7bYpI2vteJa9wvOIw
56WLyIbukVOWLafNtsLwMarN49UyYjOeXEB5bVwbWGBeOKelCG10U_JMyOHL
4FYT3hXXXcH27N_7gjgUDA34sp9b14EnEafxrZkXmDCIQXybHkZPXNTfsHfg
FWBfKz3oLlQQk8m4wLuAavZwxM8UmQjGrhFCH_0KLZzUR3HDbVyIfCw--
Received: from [41.49.76.226] by web80015.mail.sp1.yahoo.com via HTTP; Wed, 16 Nov 2011 04:27:28 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Wed, 16 Nov 2011 04:27:28 -0800 (PST)
From: Mr Frank Khunene <[email protected]>
Reply-To: [email protected]
Subject: I trust you are well. After our long time of searching for my late client possible relative, I came across your last name which matches with his last name. He passes away five years ago in a boat disaster. In view of this I seek your consent to present you as inheritor to his funds estimated to the tune of $16.7m, There are claim documents to enable you file in and claim the funds legitimately, if you like to be presented please contact me with your names, age, Phone and Nationality for more details on how to claim the funds. Regards, Frank Khunene (Mr.)
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-570753174-1321446448=:97415"
X-Spam-Status: No, score=5.2
X-Spam-Score: 52
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: YOUR LAST NAME MATCHES YOUR LAST NAME MATCHES [...]
Content analysis details: (5.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webc44[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.139 listed in list.dnswl.org]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (webc44[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: NO
--0-570753174-1321446448=:97415
Content-Type: text/plain; charset=us-ascii
YOUR LAST NAME MATCHES
Envelope-to:
Delivery-date: Wed, 16 Nov 2011 04:27:31 -0800
Received: from nm12.access.bullet.mail.sp2.yahoo.com ([98.139.44.139])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RQeaR-0004mn-EH
for ; Wed, 16 Nov 2011 04:27:31 -0800
Received: from [98.139.44.100] by nm12.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Nov 2011 12:27:28 -0000
Received: from [98.139.44.68] by tm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Nov 2011 12:27:28 -0000
Received: from [127.0.0.1] by omp1005.access.mail.sp2.yahoo.com with NNFMP; 16 Nov 2011 12:27:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 36570 invoked by uid 60001); 16 Nov 2011 12:27:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1321446448; bh=ymaBrEY2Ey918IW37Acyx2BzeheFFC+pcebzewwGjuU=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=dQJKH221ff/63ryUBXyX3smmBba0SDuQhMTY/ExhdEKGXovMz1N/pxhkx4SgGkM1jBXDNn48fBnLLFNT45p4Vf1EUl+5Zk072LWnSb5fwgEEymFc/zQ83tpfFA/DoxPQFXqDxIpNzxZ/K4VEUEFowIIaa2l2xf/vQNGJCE1uVHA=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=5meIxJ+/GLpC9llNF5dwYLHbMxBqsriJS1ZED2aJjAUjNmx26JxknKFDqjGOP0I7uBhP1iUVkGBkTDjomNC/weHP+XTWo88qaBfKNi/xqeY4q/OSbKqhl7sMM10l8AJv5bZx7x98F4R7uTOe1uGnUkGPCK8lJiijNT1NiSKZqL8=;
X-YMail-OSG: jE38WkYVM1k10XyIMWWn0PACoZt8C3mWROyfYb_GIiRG1ZN
SmptrPor1oaWRx6O31m5pYmFdj6i24fYSPe2.Vc2sdq0bBnNoD.2L8bwBH7S
ouQuUcQ0EU2XTt2jDRnLfTnl.G2mbwsoKXW9jqadZKn25q.KMrMLrZBAWGp9
wT.Fc7BICb_rHxdEcWWQf7t3dVPBx9G8M.luAK8y9xPNoqEZso6VMVYkXNhu
ITo_w7q6nebPsObRlpN2OM00.2.S0KbaidmQARdjbHDCXWcx1dh8mqZWtBoH
WVvHP.23j9neiNLhs8dn8zckx1XiK4v3ZIdc4lbh9.D0BmR6Rtaq.cuAGek6
G8UZRGDKvrx9AympUKArIJXsxVl037w_aU6GqF3CxOb7bYpI2vteJa9wvOIw
56WLyIbukVOWLafNtsLwMarN49UyYjOeXEB5bVwbWGBeOKelCG10U_JMyOHL
4FYT3hXXXcH27N_7gjgUDA34sp9b14EnEafxrZkXmDCIQXybHkZPXNTfsHfg
FWBfKz3oLlQQk8m4wLuAavZwxM8UmQjGrhFCH_0KLZzUR3HDbVyIfCw--
Received: from [41.49.76.226] by web80015.mail.sp1.yahoo.com via HTTP; Wed, 16 Nov 2011 04:27:28 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Wed, 16 Nov 2011 04:27:28 -0800 (PST)
From: Mr Frank Khunene <[email protected]>
Reply-To: [email protected]
Subject: I trust you are well. After our long time of searching for my late client possible relative, I came across your last name which matches with his last name. He passes away five years ago in a boat disaster. In view of this I seek your consent to present you as inheritor to his funds estimated to the tune of $16.7m, There are claim documents to enable you file in and claim the funds legitimately, if you like to be presented please contact me with your names, age, Phone and Nationality for more details on how to claim the funds. Regards, Frank Khunene (Mr.)
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-570753174-1321446448=:97415"
X-Spam-Status: No, score=5.2
X-Spam-Score: 52
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: YOUR LAST NAME MATCHES YOUR LAST NAME MATCHES [...]
Content analysis details: (5.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webc44[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.139 listed in list.dnswl.org]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (webc44[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: NO
--0-570753174-1321446448=:97415
Content-Type: text/plain; charset=us-ascii
YOUR LAST NAME MATCHES
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces