by buried under 419s
Mon Aug 13, 2012 8:43 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 13 Aug 2012 13:44:44 -0700
Received: from nm2-vm0.access.bullet.mail.sp2.yahoo.com ([98.139.44.158]:45655)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1T11VD-0007LZ-2V
for ; Mon, 13 Aug 2012 13:44:44 -0700
Received: from [98.139.44.102] by nm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 13 Aug 2012 20:44:43 -0000
Received: from [98.139.44.65] by tm7.access.bullet.mail.sp2.yahoo.com with NNFMP; 13 Aug 2012 20:44:43 -0000
Received: from [127.0.0.1] by omp1002.access.mail.sp2.yahoo.com with NNFMP; 13 Aug 2012 20:44:43 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 34698 invoked by uid 1000); 13 Aug 2012 20:44:41 -0000
Received: from 124.108.96.85 by rel104.mail.aue.yahoo.com with SMTP; Mon, 13 Aug 2012 13:44:40 -0700
Received: (qmail 46822 invoked by uid 60001); 13 Aug 2012 20:44:40 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.nz; s=s1024; t=1344890680; bh=1SGF929a0XRRl8yV0mOUgGLkWKSKN7uD7WOAUUVwiT8=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=WdIsn3wk8yBsyUmhEFdPLxJxsDyqEljt51RoDvsF43DQ9yJBmgOP+hANWNgem/J8z1w38se8a7s7hXwls6DQeoIips7Zi3JQGZZGPwoETE3XxV3fgmROyVVCjbqSiYfAxZSPWK/RhmyLAb1PvcQ41ZGidYVWj+QhwzJfydQtQaU=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.co.nz;
h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=PppZgWuvGceHWPDT10Ns9ZgKrhKsvqwuVhF7X7+QhulBHoPjL0UZANuNvGxOP+UXdGUNi3XtIAswIJ9FFKJKK4jP7bN2MRo52Ked3ua7D52WsBFY8yHTrjHIVJhA3hefziJ2HIduaMxxUilsEkTbpLvm2gMrXdGO4MHd/pa7Pk0=;
X-YMail-OSG: FrR7muUVM1ncueE07GEw2XwGfbffWGpFi3w8YDlum1uPPfM
ScSNj5gEhfwhITkuur5QXVcOKoq_sQ4zvhAUP1jMiTFWQaKI.djJ06gA0O3Y
FyHMOBAQoUiWRRW4gPtkaYvHVEdZgQZH3Xp_OxGnAviPz.fYnnB103FCq915
Nwz7vvyOZxyQWQNMRNEg99pFpEwt6j9oFJ9.2B8O64Woa4s5Rnct8LzLSJMu
MDW_uB.GDvO7teHIhEEZKiqgQ9u99liJwv9Y6Cqp__MTfADabLnBRskR5cIp
IvHaRpCx1TNK21_P6583VloGWXwK.7SxK40yJJekp4p_9snvA8fqk8JfTbBe
ZUt2Xl4mgb1gDcnW0TwfdQXzxD6EGEwf4a3wOuQf.yZ4jBT_Fp7kCkb2E1ik
z6KBwN1LTWpgMRikQDjxzNZv7jJwdBPKDB2JBr5aw3MkyVU0UJTgR2a4D9jY
HXNsHkTjSQkcxQQq3C_mzsElnpj8DMw4Ej1IB_A2IJPbsuXT14OUegW39Bz2
j2Bp658q02huU3sII2qfStTTwdE4WrNeDDviJl_cZdFvW..rcQEiHGPhNnFU
0Wo.UEHuX
Received: from [46.37.13.124] by web96002.mail.aue.yahoo.com via HTTP; Tue, 14 Aug 2012 08:44:40 NZST
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Tue, 14 Aug 2012 08:44:40 +1200 (NZST)
From: "Mr.David Wright" <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-2084810857-1396800270-1344890680=:44636"
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention Beneficiary, This message is from Federal ministry
of finance office, we are to let you know that We have finally concluded
with Financial Bank Benin to release your full compensation payment of $2.5Million
US Dollars to you through Western Union and you will be receiving the sum
of $7,000.00 us dollars daily and First payment has been sent: MTCN: 4130105692,
but your payment file must be renewed before you will be able to pick up
your first payment $7,000.00 us dollars today. The Western Union Office stated
that you will be receiving your funds at the maximum rate of $7,000.00 us
dollars daily until you receive the total sum of $2.5Million US Dollars completely.
You are also required to re-confirm the below information to them to avoid
any wrong transfer. Receiver name: --------- Your full address: ------ Tel:----
Country:----- Text Question:------ Answer:-------- Copy of your id: --------
[...]
Content analysis details: (18.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.158 listed in list.dnswl.org]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(davidwright684[at]yahoo.co.nz)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (davidwright684[at]yahoo.co.nz)
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
2.7 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT NOTIFICATION.
---2084810857-1396800270-1344890680=:44636
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attention Beneficiary,
This message is from Federal ministry of finance office, we are to let you know that We have finally concluded with Financial Bank Benin to release your full compensation payment of $2.5Million US Dollars to you through Western Union and you will be receiving the sum of $7,000.00 us dollars daily and First payment has been sent: MTCN: 4130105692, but your payment file must be renewed before you will be able to pick up your first payment $7,000.00 us dollars today. The Western Union Office stated that you will be receiving your funds at the maximum rate of $7,000.00 us dollars daily until you receive the total sum of $2.5Million US Dollars completely. You are also required to re-confirm the below information to them to avoid any wrong transfer.
Receiver name: ---------
Your full address: ------
Tel:----
Country:-----
Text Question:------
Answer:--------
Copy of your id: --------
Now contact Western Union Manager Financial Bank Benin Republic with this below information, they will start sending your fund to you with out any delaying okay.
Contact Manager:-- Mr. Peter Godwin, Western Union Department Financial Bank Benin,
E-mail :---- ( [email protected] )
Tel: --- +22998422609.
Contact Mr. Peter Godwin immediately through this above email address to pick up your First payment today and let me know when you confirm it call him now Tel: +22998422609.
Best Regard,
Mr. David Wright.
Delete Reply
To Sender
Forward
Entire Message
Body Text Only
Body Text with Attachments
Redirect View Thread Blacklist Whitelist Message Source
Envelope-to:
Delivery-date: Mon, 13 Aug 2012 13:44:44 -0700
Received: from nm2-vm0.access.bullet.mail.sp2.yahoo.com ([98.139.44.158]:45655)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1T11VD-0007LZ-2V
for ; Mon, 13 Aug 2012 13:44:44 -0700
Received: from [98.139.44.102] by nm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 13 Aug 2012 20:44:43 -0000
Received: from [98.139.44.65] by tm7.access.bullet.mail.sp2.yahoo.com with NNFMP; 13 Aug 2012 20:44:43 -0000
Received: from [127.0.0.1] by omp1002.access.mail.sp2.yahoo.com with NNFMP; 13 Aug 2012 20:44:43 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 34698 invoked by uid 1000); 13 Aug 2012 20:44:41 -0000
Received: from 124.108.96.85 by rel104.mail.aue.yahoo.com with SMTP; Mon, 13 Aug 2012 13:44:40 -0700
Received: (qmail 46822 invoked by uid 60001); 13 Aug 2012 20:44:40 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.nz; s=s1024; t=1344890680; bh=1SGF929a0XRRl8yV0mOUgGLkWKSKN7uD7WOAUUVwiT8=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=WdIsn3wk8yBsyUmhEFdPLxJxsDyqEljt51RoDvsF43DQ9yJBmgOP+hANWNgem/J8z1w38se8a7s7hXwls6DQeoIips7Zi3JQGZZGPwoETE3XxV3fgmROyVVCjbqSiYfAxZSPWK/RhmyLAb1PvcQ41ZGidYVWj+QhwzJfydQtQaU=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.co.nz;
h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=PppZgWuvGceHWPDT10Ns9ZgKrhKsvqwuVhF7X7+QhulBHoPjL0UZANuNvGxOP+UXdGUNi3XtIAswIJ9FFKJKK4jP7bN2MRo52Ked3ua7D52WsBFY8yHTrjHIVJhA3hefziJ2HIduaMxxUilsEkTbpLvm2gMrXdGO4MHd/pa7Pk0=;
X-YMail-OSG: FrR7muUVM1ncueE07GEw2XwGfbffWGpFi3w8YDlum1uPPfM
ScSNj5gEhfwhITkuur5QXVcOKoq_sQ4zvhAUP1jMiTFWQaKI.djJ06gA0O3Y
FyHMOBAQoUiWRRW4gPtkaYvHVEdZgQZH3Xp_OxGnAviPz.fYnnB103FCq915
Nwz7vvyOZxyQWQNMRNEg99pFpEwt6j9oFJ9.2B8O64Woa4s5Rnct8LzLSJMu
MDW_uB.GDvO7teHIhEEZKiqgQ9u99liJwv9Y6Cqp__MTfADabLnBRskR5cIp
IvHaRpCx1TNK21_P6583VloGWXwK.7SxK40yJJekp4p_9snvA8fqk8JfTbBe
ZUt2Xl4mgb1gDcnW0TwfdQXzxD6EGEwf4a3wOuQf.yZ4jBT_Fp7kCkb2E1ik
z6KBwN1LTWpgMRikQDjxzNZv7jJwdBPKDB2JBr5aw3MkyVU0UJTgR2a4D9jY
HXNsHkTjSQkcxQQq3C_mzsElnpj8DMw4Ej1IB_A2IJPbsuXT14OUegW39Bz2
j2Bp658q02huU3sII2qfStTTwdE4WrNeDDviJl_cZdFvW..rcQEiHGPhNnFU
0Wo.UEHuX
Received: from [46.37.13.124] by web96002.mail.aue.yahoo.com via HTTP; Tue, 14 Aug 2012 08:44:40 NZST
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Tue, 14 Aug 2012 08:44:40 +1200 (NZST)
From: "Mr.David Wright" <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-2084810857-1396800270-1344890680=:44636"
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention Beneficiary, This message is from Federal ministry
of finance office, we are to let you know that We have finally concluded
with Financial Bank Benin to release your full compensation payment of $2.5Million
US Dollars to you through Western Union and you will be receiving the sum
of $7,000.00 us dollars daily and First payment has been sent: MTCN: 4130105692,
but your payment file must be renewed before you will be able to pick up
your first payment $7,000.00 us dollars today. The Western Union Office stated
that you will be receiving your funds at the maximum rate of $7,000.00 us
dollars daily until you receive the total sum of $2.5Million US Dollars completely.
You are also required to re-confirm the below information to them to avoid
any wrong transfer. Receiver name: --------- Your full address: ------ Tel:----
Country:----- Text Question:------ Answer:-------- Copy of your id: --------
[...]
Content analysis details: (18.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.158 listed in list.dnswl.org]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(davidwright684[at]yahoo.co.nz)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (davidwright684[at]yahoo.co.nz)
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
2.7 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT NOTIFICATION.
---2084810857-1396800270-1344890680=:44636
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attention Beneficiary,
This message is from Federal ministry of finance office, we are to let you know that We have finally concluded with Financial Bank Benin to release your full compensation payment of $2.5Million US Dollars to you through Western Union and you will be receiving the sum of $7,000.00 us dollars daily and First payment has been sent: MTCN: 4130105692, but your payment file must be renewed before you will be able to pick up your first payment $7,000.00 us dollars today. The Western Union Office stated that you will be receiving your funds at the maximum rate of $7,000.00 us dollars daily until you receive the total sum of $2.5Million US Dollars completely. You are also required to re-confirm the below information to them to avoid any wrong transfer.
Receiver name: ---------
Your full address: ------
Tel:----
Country:-----
Text Question:------
Answer:--------
Copy of your id: --------
Now contact Western Union Manager Financial Bank Benin Republic with this below information, they will start sending your fund to you with out any delaying okay.
Contact Manager:-- Mr. Peter Godwin, Western Union Department Financial Bank Benin,
E-mail :---- ( [email protected] )
Tel: --- +22998422609.
Contact Mr. Peter Godwin immediately through this above email address to pick up your First payment today and let me know when you confirm it call him now Tel: +22998422609.
Best Regard,
Mr. David Wright.
Delete Reply
To Sender
Forward
Entire Message
Body Text Only
Body Text with Attachments
Redirect View Thread Blacklist Whitelist Message Source
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces