by buried under 419s
Tue Nov 22, 2011 2:35 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 22 Nov 2011 09:02:26 -0800
Received: from nm21-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.220])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RStjh-0007ls-DS
for ; Tue, 22 Nov 2011 09:02:26 -0800
Received: from [98.139.91.69] by nm21.bullet.mail.sp2.yahoo.com with NNFMP; 22 Nov 2011 17:02:18 -0000
Received: from [98.139.91.11] by tm9.bullet.mail.sp2.yahoo.com with NNFMP; 22 Nov 2011 17:02:18 -0000
Received: from [127.0.0.1] by omp1011.mail.sp2.yahoo.com with NNFMP; 22 Nov 2011 17:02:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 50365 invoked by uid 60001); 22 Nov 2011 17:02:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1321981337; bh=Su+H569XuJEKPtpeTbuf7LW1vlkRMGcpfbvSJvVdJ1c=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=yHK0yTqa0axo/TaCxN3SxITQ3X5QJr5icZR/IyPi3gZ+Vp6ZgSykGDSFTYUyOkirkvjDBI64l6IPSZZs462jP9nuROPLw93wSSP0v+KO5E4w0N2mWvj9T9WVbPiu1pz5F3rfvDyZHuSD67FSErtp0MOJ03XP7rzufycfUJ8Rjos=
X-YMail-OSG: 2h8XGSQVM1nfUG617suTm635_TpM3Zq7a3Oi6BluMOhBjag
ETfSmPwv.
Received: from [41.138.176.172] by web190304.mail.sg3.yahoo.com via HTTP; Wed, 23 Nov 2011 01:02:13 SGT
X-RocketYMMF: fileoffice745
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Wed, 23 Nov 2011 01:02:13 +0800 (SGT)
From: WESTERN UNION MONEY TRANSFER <[email protected]>
Reply-To: [email protected]
Subject: WESTERN UNION NOTICE.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2018750207-2098847162-1321981333=:38961"
X-Spam-Subject: ***SPAM*** WESTERN UNION NOTICE.
X-Spam-Status: Yes, score=10.9
X-Spam-Score: 109
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTN: CUSTOMER: FUND TRANSFER OF $5,000:00 USD INFORMATION
REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE
48 HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU
CASH UP YOUR FIRST PAYMENT OF $5,000:00 FROM YOUR TOTAL FUND (ONE MILLION
EIGHT HUNDRED AND FIFTY THOUSAND UNITED STATE OF AMERICA DOLLARS) SINCE YOU
ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT IT HAS BEEN DECIDED BY OUR
HEAD QUARTER THAT YOU ARE TO GO AHEAD AND PAY ANY AMOUNT FOR THE ACTIVATION
FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM, TIME IS OF THE
ESSENCE HERE. YOU ARE TO PAY ANY AMOUNT FOR ACTIVATION OF YOUR MTCN; WE WILL
ACTIVATE YOUR MTCN UPON RECEIPT OF THIS PAYMENT.BE INFORMED THAT YOU WILL
HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST
5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY
THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN
OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM I WANT YOU TO SEND
THE RENEWING AND TRANSFER FEE WITH THE INFORMATION BELLOW. 1.RECEIVER NAME:
OKOYE STEPHEN AMECHI 2.COUNTRY: BENIN REPUBLIC. 3.CITY : . PORTNOVO 4.TEST
QUESTION:....HONEST 5.TEST ANSWER:......TRUST. 6.AMOUNT ? SEND US THE MTCN
NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER
FEE WE WILL SEND YOU THE FIRST RECEIPT OF YOUR $5000 TODAY AND NOT TOMORROW.
REGARDS MY DIRECT PHONE LINE IS +229-67 25 1380 MR. EDWARD MATTEW FROM WESTERN
UNION OFFICE FEDERAL REPUBLIC OF BENIN. MR. EDWARD MATTEW OPERATION MANAGER.
WESTERN UNION DEPARTMENT NOTE AFTER THE PAYMENT FORWARD THE MTCN NUMBER TO
OUR EMAIL ADDRESS([email protected]) WITH YOUR FULL INFORMATION'S TO AVOID
WRONG TRANSFER. [...]
Content analysis details: (10.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(filefile8342[at]live.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.220 listed in list.dnswl.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (filefile8342[at]live.com)
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9728]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--2018750207-2098847162-1321981333=:38961
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
ATTN: CUSTOMER:
FUND TRANSFER OF $5,000:00 USD INFORMATION REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE 48 HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST PAYMENT OF $5,000:00 FROM YOUR TOTAL FUND (ONE MILLION EIGHT HUNDRED AND FIFTY THOUSAND UNITED STATE OF AMERICA DOLLARS) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT IT HAS BEEN DECIDED BY OUR HEAD QUARTER THAT YOU ARE TO GO AHEAD AND PAY ANY AMOUNT FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM, TIME IS OF THE ESSENCE HERE.
YOU ARE TO PAY ANY AMOUNT FOR ACTIVATION OF YOUR MTCN; WE WILL ACTIVATE YOUR MTCN UPON RECEIPT OF THIS PAYMENT.BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM I WANT YOU TO SEND THE RENEWING AND TRANSFER FEE WITH THE INFORMATION BELLOW.
1.RECEIVER NAME:............. OKOYE STEPHEN AMECHI
2.COUNTRY:............. BENIN REPUBLIC.
3.CITY :............... . PORTNOVO
4.TEST QUESTION:....HONEST
5.TEST ANSWER:......TRUST.
6.AMOUNT ..........?
SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER FEE WE WILL SEND YOU THE FIRST RECEIPT OF YOUR $5000 TODAY AND NOT TOMORROW.
REGARDS MY DIRECT PHONE LINE IS +229-67 25 1380 MR. EDWARD MATTEW
FROM WESTERN UNION OFFICE FEDERAL REPUBLIC OF BENIN.
MR. EDWARD MATTEW
OPERATION MANAGER.
WESTERN UNION DEPARTMENT
NOTE AFTER THE PAYMENT FORWARD THE MTCN NUMBER TO OUR EMAIL ADDRESS( [email protected] ) WITH YOUR FULL INFORMATION'S TO AVOID WRONG TRANSFER.
Envelope-to:
Delivery-date: Tue, 22 Nov 2011 09:02:26 -0800
Received: from nm21-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.220])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RStjh-0007ls-DS
for ; Tue, 22 Nov 2011 09:02:26 -0800
Received: from [98.139.91.69] by nm21.bullet.mail.sp2.yahoo.com with NNFMP; 22 Nov 2011 17:02:18 -0000
Received: from [98.139.91.11] by tm9.bullet.mail.sp2.yahoo.com with NNFMP; 22 Nov 2011 17:02:18 -0000
Received: from [127.0.0.1] by omp1011.mail.sp2.yahoo.com with NNFMP; 22 Nov 2011 17:02:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 50365 invoked by uid 60001); 22 Nov 2011 17:02:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1321981337; bh=Su+H569XuJEKPtpeTbuf7LW1vlkRMGcpfbvSJvVdJ1c=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=yHK0yTqa0axo/TaCxN3SxITQ3X5QJr5icZR/IyPi3gZ+Vp6ZgSykGDSFTYUyOkirkvjDBI64l6IPSZZs462jP9nuROPLw93wSSP0v+KO5E4w0N2mWvj9T9WVbPiu1pz5F3rfvDyZHuSD67FSErtp0MOJ03XP7rzufycfUJ8Rjos=
X-YMail-OSG: 2h8XGSQVM1nfUG617suTm635_TpM3Zq7a3Oi6BluMOhBjag
ETfSmPwv.
Received: from [41.138.176.172] by web190304.mail.sg3.yahoo.com via HTTP; Wed, 23 Nov 2011 01:02:13 SGT
X-RocketYMMF: fileoffice745
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Wed, 23 Nov 2011 01:02:13 +0800 (SGT)
From: WESTERN UNION MONEY TRANSFER <[email protected]>
Reply-To: [email protected]
Subject: WESTERN UNION NOTICE.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2018750207-2098847162-1321981333=:38961"
X-Spam-Subject: ***SPAM*** WESTERN UNION NOTICE.
X-Spam-Status: Yes, score=10.9
X-Spam-Score: 109
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTN: CUSTOMER: FUND TRANSFER OF $5,000:00 USD INFORMATION
REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE
48 HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU
CASH UP YOUR FIRST PAYMENT OF $5,000:00 FROM YOUR TOTAL FUND (ONE MILLION
EIGHT HUNDRED AND FIFTY THOUSAND UNITED STATE OF AMERICA DOLLARS) SINCE YOU
ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT IT HAS BEEN DECIDED BY OUR
HEAD QUARTER THAT YOU ARE TO GO AHEAD AND PAY ANY AMOUNT FOR THE ACTIVATION
FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM, TIME IS OF THE
ESSENCE HERE. YOU ARE TO PAY ANY AMOUNT FOR ACTIVATION OF YOUR MTCN; WE WILL
ACTIVATE YOUR MTCN UPON RECEIPT OF THIS PAYMENT.BE INFORMED THAT YOU WILL
HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST
5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY
THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN
OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM I WANT YOU TO SEND
THE RENEWING AND TRANSFER FEE WITH THE INFORMATION BELLOW. 1.RECEIVER NAME:
OKOYE STEPHEN AMECHI 2.COUNTRY: BENIN REPUBLIC. 3.CITY : . PORTNOVO 4.TEST
QUESTION:....HONEST 5.TEST ANSWER:......TRUST. 6.AMOUNT ? SEND US THE MTCN
NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER
FEE WE WILL SEND YOU THE FIRST RECEIPT OF YOUR $5000 TODAY AND NOT TOMORROW.
REGARDS MY DIRECT PHONE LINE IS +229-67 25 1380 MR. EDWARD MATTEW FROM WESTERN
UNION OFFICE FEDERAL REPUBLIC OF BENIN. MR. EDWARD MATTEW OPERATION MANAGER.
WESTERN UNION DEPARTMENT NOTE AFTER THE PAYMENT FORWARD THE MTCN NUMBER TO
OUR EMAIL ADDRESS([email protected]) WITH YOUR FULL INFORMATION'S TO AVOID
WRONG TRANSFER. [...]
Content analysis details: (10.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(filefile8342[at]live.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.220 listed in list.dnswl.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (filefile8342[at]live.com)
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9728]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
--2018750207-2098847162-1321981333=:38961
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
ATTN: CUSTOMER:
FUND TRANSFER OF $5,000:00 USD INFORMATION REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES THAT YOU ONLY HAVE 48 HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST PAYMENT OF $5,000:00 FROM YOUR TOTAL FUND (ONE MILLION EIGHT HUNDRED AND FIFTY THOUSAND UNITED STATE OF AMERICA DOLLARS) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS PAYMENT IT HAS BEEN DECIDED BY OUR HEAD QUARTER THAT YOU ARE TO GO AHEAD AND PAY ANY AMOUNT FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM, TIME IS OF THE ESSENCE HERE.
YOU ARE TO PAY ANY AMOUNT FOR ACTIVATION OF YOUR MTCN; WE WILL ACTIVATE YOUR MTCN UPON RECEIPT OF THIS PAYMENT.BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON CASHING UP OF YOUR FIRST 5,000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE BALANCE SUM I WANT YOU TO SEND THE RENEWING AND TRANSFER FEE WITH THE INFORMATION BELLOW.
1.RECEIVER NAME:............. OKOYE STEPHEN AMECHI
2.COUNTRY:............. BENIN REPUBLIC.
3.CITY :............... . PORTNOVO
4.TEST QUESTION:....HONEST
5.TEST ANSWER:......TRUST.
6.AMOUNT ..........?
SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER FEE WE WILL SEND YOU THE FIRST RECEIPT OF YOUR $5000 TODAY AND NOT TOMORROW.
REGARDS MY DIRECT PHONE LINE IS +229-67 25 1380 MR. EDWARD MATTEW
FROM WESTERN UNION OFFICE FEDERAL REPUBLIC OF BENIN.
MR. EDWARD MATTEW
OPERATION MANAGER.
WESTERN UNION DEPARTMENT
NOTE AFTER THE PAYMENT FORWARD THE MTCN NUMBER TO OUR EMAIL ADDRESS( [email protected] ) WITH YOUR FULL INFORMATION'S TO AVOID WRONG TRANSFER.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces