by buried under 419s
Mon Nov 21, 2011 5:51 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 21 Nov 2011 01:40:26 -0800
Received: from nm26-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.230])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RSQMQ-0002JR-6D
for ; Mon, 21 Nov 2011 01:40:26 -0800
Received: from [98.139.91.66] by nm26.bullet.mail.sp2.yahoo.com with NNFMP; 21 Nov 2011 09:40:18 -0000
Received: from [98.139.91.51] by tm6.bullet.mail.sp2.yahoo.com with NNFMP; 21 Nov 2011 09:40:18 -0000
Received: from [127.0.0.1] by omp1051.mail.sp2.yahoo.com with NNFMP; 21 Nov 2011 09:40:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 1179 invoked by uid 60001); 21 Nov 2011 09:40:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1321868414; bh=7zQvvwmHw6tRbd/OhCoKtSrK4hHbTl2wYhgPI3PmNwY=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=jWeDRDKJjLKs/nMNOGaOmE2UgsEjs4CdIYzhYO8j0twmznZUCFbqwhpfOu20+C9u/92wIumlgKXdBAt0V3R/hcOU8nHxbpgw3mIY/TrPhDxP1kFsOiqzm8GDbLJVH2qeWOYOjzDcaoVYEM2CXiLyORPILOh1/AVjDe02L4Ky0rA=
X-YMail-OSG: MzBuQuIVM1nBslhq4nBcuauuufMmuZLAhtmPg5e9_itK7At
sAQe46Fl3
Received: from [41.71.178.53] by web190309.mail.sg3.yahoo.com via HTTP; Mon, 21 Nov 2011 17:40:11 SGT
X-RocketYMMF: fileoffice745
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Mon, 21 Nov 2011 17:40:11 +0800 (SGT)
From: WESTERN UNION MONEY TRANSFER <[email protected]>
Reply-To: [email protected]
Subject: WESTERN UNION FINAL NOTICE
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-629259839-1704303478-1321868411=:43488"
X-Spam-Subject: ***SPAM*** WESTERN UNION FINAL NOTICE
X-Spam-Status: Yes, score=10.9
X-Spam-Score: 109
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTN: CUSTOMER: FUND TRANSFER OF $5,000:00 USD INFORMATION
REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE
48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH
UP YOUR FIRST PAYMENT OF $5,000:00 FROM YOUR TOTAL FUND (ONE MILLION EIGHT
HUNDRED AND FIFTY THOUSAND UNITED STATE OF AMERICA DOLLARS) SINCE YOU ARE
FINDING IT DIFFICULT TO MAKE THIS PAYMENT IT HAS BEEN DECIDED BY OUR HEAD
QUARTER THAT YOU ARE TO GO AHEAD AND PAY ANY AMOUNT FOR THE ACTIVATION FEE
SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM, TIME IS OF THE ESSENCE
HERE. YOU ARE TO PAY ANY AMOUNT FOR ACTIVATION OF YOUR MTCN; WE WILL ACTIVATE
YOUR MTCN UPON RECEIPT OF THIS PAYMENT.BE INFORMED THAT YOU WILL HAVE TO
PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00
USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE
SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU
WILL AND CAN NEVER CASH UP THE BALANCE SUM I WANT YOU TO SEND THE RENEWING
AND TRANSFER FEE WITH THE INFORMATION BELLOW. 1.RECEIVER NAME: OKOYE STEPHEN
AMECHI 2.COUNTRY: BENIN REPUBLIC. 3.CITY : . PORTNOVO 4.TEST QUESTION:....HONEST
5.TEST ANSWER:......TRUST. 6.AMOUNT ? SEND US THE MTCN NUMBER IMMEDIATELY
YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER FEE WE WILL SEND
YOU THE FIRST RECEIPT OF YOUR $5000 TODAY AND NOT TOMORROW. REGARDS MY DIRECT
PHONE LINE IS +229-67 25 1380 MR. EDWARD MATTEW FROM WESTERN UNION OFFICE
FEDERAL REPUBLIC OF BENIN. MR. EDWARD MATTEW OPERATION MANAGER. WESTERN UNION
DEPARTMENT NOTE AFTER THE PAYMENT FORWARD THE MTCN NUMBER TO OUR EMAIL ADDRESS([email protected])
WITH YOUR FULL INFORMATION'S TO AVOID WRONG TRANSFER. [...]
Content analysis details: (10.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.230 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(filefile8342[at]live.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (filefile8342[at]live.com)
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9804]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
---629259839-1704303478-1321868411=:43488
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
ATTN: CUSTOMER:
FUND TRANSFER OF $5,000:00 USD INFORMATION REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST PAYMENT OF $5,000:00 FROM YOUR TOTAL FUND (ONE MILLION EIGHT HUNDRED AND FIFTY THOUSAND UNITED STATE OF AMERICA DOLLARS) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT IT HAS BEEN DECIDED BY OUR HEAD QUARTER THAT YOU ARE TO GO AHEAD AND PAY ANY AMOUNT FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM, TIME IS OF THE ESSENCE HERE.
YOU ARE TO PAY ANY AMOUNT FOR ACTIVATION OF YOUR MTCN; WE WILL ACTIVATE YOUR MTCN UPON RECEIPT OF THIS PAYMENT.BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM I WANT YOU TO SEND THE RENEWING AND TRANSFER FEE WITH THE INFORMATION BELLOW.
1.RECEIVER NAME:............. OKOYE STEPHEN AMECHI
2.COUNTRY:............. BENIN REPUBLIC.
3.CITY :............... . PORTNOVO
4.TEST QUESTION:....HONEST
5.TEST ANSWER:......TRUST.
6.AMOUNT ..........?
SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER FEE WE WILL SEND YOU THE FIRST RECEIPT OF YOUR $5000 TODAY AND NOT TOMORROW.
REGARDS MY DIRECT PHONE LINE IS +229-67 25 1380 MR. EDWARD MATTEW
FROM WESTERN UNION OFFICE FEDERAL REPUBLIC OF BENIN.
MR. EDWARD MATTEW
OPERATION MANAGER.
WESTERN UNION DEPARTMENT
NOTE AFTER THE PAYMENT FORWARD THE MTCN NUMBER TO OUR EMAIL ADDRESS( [email protected] ) WITH YOUR FULL INFORMATION'S TO AVOID WRONG TRANSFER.
Envelope-to:
Delivery-date: Mon, 21 Nov 2011 01:40:26 -0800
Received: from nm26-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.230])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RSQMQ-0002JR-6D
for ; Mon, 21 Nov 2011 01:40:26 -0800
Received: from [98.139.91.66] by nm26.bullet.mail.sp2.yahoo.com with NNFMP; 21 Nov 2011 09:40:18 -0000
Received: from [98.139.91.51] by tm6.bullet.mail.sp2.yahoo.com with NNFMP; 21 Nov 2011 09:40:18 -0000
Received: from [127.0.0.1] by omp1051.mail.sp2.yahoo.com with NNFMP; 21 Nov 2011 09:40:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 1179 invoked by uid 60001); 21 Nov 2011 09:40:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1321868414; bh=7zQvvwmHw6tRbd/OhCoKtSrK4hHbTl2wYhgPI3PmNwY=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=jWeDRDKJjLKs/nMNOGaOmE2UgsEjs4CdIYzhYO8j0twmznZUCFbqwhpfOu20+C9u/92wIumlgKXdBAt0V3R/hcOU8nHxbpgw3mIY/TrPhDxP1kFsOiqzm8GDbLJVH2qeWOYOjzDcaoVYEM2CXiLyORPILOh1/AVjDe02L4Ky0rA=
X-YMail-OSG: MzBuQuIVM1nBslhq4nBcuauuufMmuZLAhtmPg5e9_itK7At
sAQe46Fl3
Received: from [41.71.178.53] by web190309.mail.sg3.yahoo.com via HTTP; Mon, 21 Nov 2011 17:40:11 SGT
X-RocketYMMF: fileoffice745
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Mon, 21 Nov 2011 17:40:11 +0800 (SGT)
From: WESTERN UNION MONEY TRANSFER <[email protected]>
Reply-To: [email protected]
Subject: WESTERN UNION FINAL NOTICE
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-629259839-1704303478-1321868411=:43488"
X-Spam-Subject: ***SPAM*** WESTERN UNION FINAL NOTICE
X-Spam-Status: Yes, score=10.9
X-Spam-Score: 109
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTN: CUSTOMER: FUND TRANSFER OF $5,000:00 USD INFORMATION
REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE
48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH
UP YOUR FIRST PAYMENT OF $5,000:00 FROM YOUR TOTAL FUND (ONE MILLION EIGHT
HUNDRED AND FIFTY THOUSAND UNITED STATE OF AMERICA DOLLARS) SINCE YOU ARE
FINDING IT DIFFICULT TO MAKE THIS PAYMENT IT HAS BEEN DECIDED BY OUR HEAD
QUARTER THAT YOU ARE TO GO AHEAD AND PAY ANY AMOUNT FOR THE ACTIVATION FEE
SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM, TIME IS OF THE ESSENCE
HERE. YOU ARE TO PAY ANY AMOUNT FOR ACTIVATION OF YOUR MTCN; WE WILL ACTIVATE
YOUR MTCN UPON RECEIPT OF THIS PAYMENT.BE INFORMED THAT YOU WILL HAVE TO
PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00
USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE
SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU
WILL AND CAN NEVER CASH UP THE BALANCE SUM I WANT YOU TO SEND THE RENEWING
AND TRANSFER FEE WITH THE INFORMATION BELLOW. 1.RECEIVER NAME: OKOYE STEPHEN
AMECHI 2.COUNTRY: BENIN REPUBLIC. 3.CITY : . PORTNOVO 4.TEST QUESTION:....HONEST
5.TEST ANSWER:......TRUST. 6.AMOUNT ? SEND US THE MTCN NUMBER IMMEDIATELY
YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER FEE WE WILL SEND
YOU THE FIRST RECEIPT OF YOUR $5000 TODAY AND NOT TOMORROW. REGARDS MY DIRECT
PHONE LINE IS +229-67 25 1380 MR. EDWARD MATTEW FROM WESTERN UNION OFFICE
FEDERAL REPUBLIC OF BENIN. MR. EDWARD MATTEW OPERATION MANAGER. WESTERN UNION
DEPARTMENT NOTE AFTER THE PAYMENT FORWARD THE MTCN NUMBER TO OUR EMAIL ADDRESS([email protected])
WITH YOUR FULL INFORMATION'S TO AVOID WRONG TRANSFER. [...]
Content analysis details: (10.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.230 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(filefile8342[at]live.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (filefile8342[at]live.com)
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9804]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
---629259839-1704303478-1321868411=:43488
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
ATTN: CUSTOMER:
FUND TRANSFER OF $5,000:00 USD INFORMATION REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE 48HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST PAYMENT OF $5,000:00 FROM YOUR TOTAL FUND (ONE MILLION EIGHT HUNDRED AND FIFTY THOUSAND UNITED STATE OF AMERICA DOLLARS) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT IT HAS BEEN DECIDED BY OUR HEAD QUARTER THAT YOU ARE TO GO AHEAD AND PAY ANY AMOUNT FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM, TIME IS OF THE ESSENCE HERE.
YOU ARE TO PAY ANY AMOUNT FOR ACTIVATION OF YOUR MTCN; WE WILL ACTIVATE YOUR MTCN UPON RECEIPT OF THIS PAYMENT.BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM I WANT YOU TO SEND THE RENEWING AND TRANSFER FEE WITH THE INFORMATION BELLOW.
1.RECEIVER NAME:............. OKOYE STEPHEN AMECHI
2.COUNTRY:............. BENIN REPUBLIC.
3.CITY :............... . PORTNOVO
4.TEST QUESTION:....HONEST
5.TEST ANSWER:......TRUST.
6.AMOUNT ..........?
SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER FEE WE WILL SEND YOU THE FIRST RECEIPT OF YOUR $5000 TODAY AND NOT TOMORROW.
REGARDS MY DIRECT PHONE LINE IS +229-67 25 1380 MR. EDWARD MATTEW
FROM WESTERN UNION OFFICE FEDERAL REPUBLIC OF BENIN.
MR. EDWARD MATTEW
OPERATION MANAGER.
WESTERN UNION DEPARTMENT
NOTE AFTER THE PAYMENT FORWARD THE MTCN NUMBER TO OUR EMAIL ADDRESS( [email protected] ) WITH YOUR FULL INFORMATION'S TO AVOID WRONG TRANSFER.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces