by buried under 419s
Thu Aug 16, 2012 7:51 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 16 Aug 2012 12:44:17 -0700
Received: from nm15-vm0.access.bullet.mail.sp2.yahoo.com ([98.139.44.164]:39792)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T25zK-0004I8-5e
for ; Thu, 16 Aug 2012 12:44:17 -0700
Received: from [98.139.44.96] by nm15.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Aug 2012 19:44:15 -0000
Received: from [98.139.44.77] by tm1.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Aug 2012 19:44:15 -0000
Received: from [127.0.0.1] by omp1014.access.mail.sp2.yahoo.com with NNFMP; 16 Aug 2012 19:44:15 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 48426 invoked by uid 1000); 16 Aug 2012 19:44:13 -0000
Received: from 124.108.96.90 by rel107.mail.aue.yahoo.com with SMTP; Thu, 16 Aug 2012 12:44:13 -0700
Received: (qmail 54516 invoked by uid 60001); 16 Aug 2012 19:44:13 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1345146253; bh=KtDgUfwd5w10pnBXVNGEbrwQUXmu2a6Ml1nytkLVe9E=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=uOLJyyDDDQh6vCmd/YtW6jBkMjU3gfo0RCUWcMf0MAWFcGHhZcYmOpxg9A7MUufMuDMy0JiZFPz0x7omQ7dtBwCiOs4f2y1kJOC3vKP8obIvDKEQ7uFqlznzvzaqzkwveeXWc/WlOE0M9y5S6FSVpMLVZ7tKvSw+l3P5tzM1f/o=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=mY+8JhOmiG8lQppe7c8zhl9Y3dY5XJhAiF+gjDPN/Cx5qFv05GeIj5oPT+uYbEkgsZWvsvs5c5LJgVPOTKjtXZNyrjc8zU46Z+2H7DDTz2t7CsDpOc0b6RHa6MKIsJvP4D5bVm///pPoD2KYp7P0JZuyMiFnbmI2Hnstsypd0e8=;
X-YMail-OSG: bCVu3LYVM1l5Vpln_JyWcl6dJ5cwcIA1rKDOSZ0UA5XtJhh
ADE78zdDAPORVDx7auFD.Bvqrj1.ZssFWu.rrYbaTe02mdDaFZQKSoli0YY.
On2rOK4mjxFzdbQsgy4Y0nO68wmhf2IDDnh9THsMcsAvqsfwPUgV8maY6wZr
Op0vYS0rCjHDOwpCfn8WXrgo7pW4Uw1bQ3vQmMhhPuQcS3bjJyaSNoUl.42V
r0.WqI2vdr6fNHpPhjT8rEco5q0nOS0WJpZ9BroKdIBGpi1fPhfCVgtFnA2m
WMNT6WUxaBCEqIic96gImQS5XXpgI2HaqnVmmOGtiW01vsMSPDiBX2RLLA_j
xC54kjj19whmojBJU2DcOSwwd0Sg6M_rpcSX..8vDjALCkyiCV1nwsdo.qBy
J0LfTHH7V1LFmZZA88ht9xaQM4bIDy1XNgTC2MmtdkLfcjrOEUpB7COLwgSD
fE0RRFYu1J4BjxhYaDBJLHXRJ._R_ZmgYJLF8CGpDF89cMRS6_WS3ynIvk3Q
snGAmzGoSqEzm0UPefB2gnsTPdeQaHUfxmPD.zeG29yNUo60IL6rlvi9bLXU
4uIFR8vLo0czGEZBi
Received: from [23.20.197.252] by web96007.mail.aue.yahoo.com via HTTP; Fri, 17 Aug 2012 07:44:12 NZST
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Fri, 17 Aug 2012 07:44:12 +1200 (NZST)
From: MONEYGRAM OFFICE <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="944398825-1451037638-1345146252=:63314"
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "m", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: Beneficiary, [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.164 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?23.20.197.252>]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(transfermoneygram33[at]yahoo.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (transfermoneygram33[at]yahoo.com)
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_LOTTERY Lots of money from a lottery
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** USD$10,000 REFERENCE NUMBER WAITING TO BE PICKED UP BY YOU
--944398825-1451037638-1345146252=:63314
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attention: Beneficiary,
We are happy to in form you officially that we received
approval letter today from Federal Ministry of Finance Office, authorizing our
Bank's Moneygram to program a total sum of USD$1.5M (ONE MILLION FIVE HUNDRED
THOUSAND UNITED STATES DOLLARS) and pay you through our Money Gram Money
Transfer system for your easy pickup and warned against any unforeseen delay
that could make your fund not to get to you in a timely manner.
The Federal Ministry of Finance chairman (Prince Isaiah Joe
) have submitted your payment file to the Benin Consulate for screening and all
data have being confirmed correct to pay you a total sum of USD$1.5M (ONE
MILLION FIVE HUNDRED THOUSAND UNITED STATES DOLLARS) as a result overdue
contract/Inheritance Funds/Compensation Funds and your Lottery Winning funds so
far. We have been advised to send you $10,000 USD every day because MONEY GRAM
laws here in Benin
Republic can only
transfer a maximum of $10,000 USD every day to you.
We have today transferred your first $10,000 available for
your pickup at any MONEY GRAM office in your City, but still on hold due to the
unpaid activation fee of $105 which you supposed to pay before your transfer
will be posted to your country for pickup.
NOTE: THE REASON WHY WE NEED YOU TO SEND US THE $105 USD IS
THAT WE TRIED TO DEDUCT THE ACTIVATION FEE OUT FROM YOUR FUND BUT THE MINISTER
ADMINISTRATOR TRUST FUND OF BENIN TOLD US THAT NO ONE HAS ACCESS OVER YOUR FUND
AS IT HAVE BEEN SIGNED AND STAMPED THAT NO MONEY SHOULD BE DEDUCTED UNTIL IT
GETS TO YOU TO AVOID ANY MISUNDERSTANDING,CRIMINAL ACT AND FOR SECURITY
REASONS.
Sender First Name:Samson
Sender Last Name: Nwamu
REFRENCE#:.... 582-055-45
TEST QUESTION:24?
TEST ANSWER:HOURS
AMOUNT:....$5000.00
You will pickup the $10,000 USD at any MONEY GRAM office in
your country after 30 mins you send the $105 activation fee of your daily
installment account. You are to send the activation fee today on our bellow
information through MONEY GRAM store close to you:-
Receive by: ......MARK JOSEPH
City : ...........Cotonou,
Country: .........Benin
Zip Code: ........+229
Text Question: ...Faith?
Answer: ...........In God
Amount: ..........US$105
Sender name......
Sender Address.....
As soon as you transfer the activation fee, send us the
transfer Reference number (Exactly 8 digit) on our bellow contact information (
[email protected] )to enable us receive and proceed with immediate
transfer release of your $10,000 USD today. Thanks for using our service while
we wait your kind response,You are also advised to furnish us with your details
for more clarifications:
MR. AHMED ZONGO
call me now +229-67177484
Director Remit Dept
Diamond Bank Western Union Department
E-Mail; [email protected]
Envelope-to:
Delivery-date: Thu, 16 Aug 2012 12:44:17 -0700
Received: from nm15-vm0.access.bullet.mail.sp2.yahoo.com ([98.139.44.164]:39792)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T25zK-0004I8-5e
for ; Thu, 16 Aug 2012 12:44:17 -0700
Received: from [98.139.44.96] by nm15.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Aug 2012 19:44:15 -0000
Received: from [98.139.44.77] by tm1.access.bullet.mail.sp2.yahoo.com with NNFMP; 16 Aug 2012 19:44:15 -0000
Received: from [127.0.0.1] by omp1014.access.mail.sp2.yahoo.com with NNFMP; 16 Aug 2012 19:44:15 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 48426 invoked by uid 1000); 16 Aug 2012 19:44:13 -0000
Received: from 124.108.96.90 by rel107.mail.aue.yahoo.com with SMTP; Thu, 16 Aug 2012 12:44:13 -0700
Received: (qmail 54516 invoked by uid 60001); 16 Aug 2012 19:44:13 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1345146253; bh=KtDgUfwd5w10pnBXVNGEbrwQUXmu2a6Ml1nytkLVe9E=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=uOLJyyDDDQh6vCmd/YtW6jBkMjU3gfo0RCUWcMf0MAWFcGHhZcYmOpxg9A7MUufMuDMy0JiZFPz0x7omQ7dtBwCiOs4f2y1kJOC3vKP8obIvDKEQ7uFqlznzvzaqzkwveeXWc/WlOE0M9y5S6FSVpMLVZ7tKvSw+l3P5tzM1f/o=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=mY+8JhOmiG8lQppe7c8zhl9Y3dY5XJhAiF+gjDPN/Cx5qFv05GeIj5oPT+uYbEkgsZWvsvs5c5LJgVPOTKjtXZNyrjc8zU46Z+2H7DDTz2t7CsDpOc0b6RHa6MKIsJvP4D5bVm///pPoD2KYp7P0JZuyMiFnbmI2Hnstsypd0e8=;
X-YMail-OSG: bCVu3LYVM1l5Vpln_JyWcl6dJ5cwcIA1rKDOSZ0UA5XtJhh
ADE78zdDAPORVDx7auFD.Bvqrj1.ZssFWu.rrYbaTe02mdDaFZQKSoli0YY.
On2rOK4mjxFzdbQsgy4Y0nO68wmhf2IDDnh9THsMcsAvqsfwPUgV8maY6wZr
Op0vYS0rCjHDOwpCfn8WXrgo7pW4Uw1bQ3vQmMhhPuQcS3bjJyaSNoUl.42V
r0.WqI2vdr6fNHpPhjT8rEco5q0nOS0WJpZ9BroKdIBGpi1fPhfCVgtFnA2m
WMNT6WUxaBCEqIic96gImQS5XXpgI2HaqnVmmOGtiW01vsMSPDiBX2RLLA_j
xC54kjj19whmojBJU2DcOSwwd0Sg6M_rpcSX..8vDjALCkyiCV1nwsdo.qBy
J0LfTHH7V1LFmZZA88ht9xaQM4bIDy1XNgTC2MmtdkLfcjrOEUpB7COLwgSD
fE0RRFYu1J4BjxhYaDBJLHXRJ._R_ZmgYJLF8CGpDF89cMRS6_WS3ynIvk3Q
snGAmzGoSqEzm0UPefB2gnsTPdeQaHUfxmPD.zeG29yNUo60IL6rlvi9bLXU
4uIFR8vLo0czGEZBi
Received: from [23.20.197.252] by web96007.mail.aue.yahoo.com via HTTP; Fri, 17 Aug 2012 07:44:12 NZST
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Fri, 17 Aug 2012 07:44:12 +1200 (NZST)
From: MONEYGRAM OFFICE <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="944398825-1451037638-1345146252=:63314"
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "m", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: Beneficiary, [...]
Content analysis details: (13.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.164 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?23.20.197.252>]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(transfermoneygram33[at]yahoo.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (transfermoneygram33[at]yahoo.com)
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_LOTTERY Lots of money from a lottery
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_FORM Advance Fee fraud and a form
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** USD$10,000 REFERENCE NUMBER WAITING TO BE PICKED UP BY YOU
--944398825-1451037638-1345146252=:63314
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attention: Beneficiary,
We are happy to in form you officially that we received
approval letter today from Federal Ministry of Finance Office, authorizing our
Bank's Moneygram to program a total sum of USD$1.5M (ONE MILLION FIVE HUNDRED
THOUSAND UNITED STATES DOLLARS) and pay you through our Money Gram Money
Transfer system for your easy pickup and warned against any unforeseen delay
that could make your fund not to get to you in a timely manner.
The Federal Ministry of Finance chairman (Prince Isaiah Joe
) have submitted your payment file to the Benin Consulate for screening and all
data have being confirmed correct to pay you a total sum of USD$1.5M (ONE
MILLION FIVE HUNDRED THOUSAND UNITED STATES DOLLARS) as a result overdue
contract/Inheritance Funds/Compensation Funds and your Lottery Winning funds so
far. We have been advised to send you $10,000 USD every day because MONEY GRAM
laws here in Benin
Republic can only
transfer a maximum of $10,000 USD every day to you.
We have today transferred your first $10,000 available for
your pickup at any MONEY GRAM office in your City, but still on hold due to the
unpaid activation fee of $105 which you supposed to pay before your transfer
will be posted to your country for pickup.
NOTE: THE REASON WHY WE NEED YOU TO SEND US THE $105 USD IS
THAT WE TRIED TO DEDUCT THE ACTIVATION FEE OUT FROM YOUR FUND BUT THE MINISTER
ADMINISTRATOR TRUST FUND OF BENIN TOLD US THAT NO ONE HAS ACCESS OVER YOUR FUND
AS IT HAVE BEEN SIGNED AND STAMPED THAT NO MONEY SHOULD BE DEDUCTED UNTIL IT
GETS TO YOU TO AVOID ANY MISUNDERSTANDING,CRIMINAL ACT AND FOR SECURITY
REASONS.
Sender First Name:Samson
Sender Last Name: Nwamu
REFRENCE#:.... 582-055-45
TEST QUESTION:24?
TEST ANSWER:HOURS
AMOUNT:....$5000.00
You will pickup the $10,000 USD at any MONEY GRAM office in
your country after 30 mins you send the $105 activation fee of your daily
installment account. You are to send the activation fee today on our bellow
information through MONEY GRAM store close to you:-
Receive by: ......MARK JOSEPH
City : ...........Cotonou,
Country: .........Benin
Zip Code: ........+229
Text Question: ...Faith?
Answer: ...........In God
Amount: ..........US$105
Sender name......
Sender Address.....
As soon as you transfer the activation fee, send us the
transfer Reference number (Exactly 8 digit) on our bellow contact information (
[email protected] )to enable us receive and proceed with immediate
transfer release of your $10,000 USD today. Thanks for using our service while
we wait your kind response,You are also advised to furnish us with your details
for more clarifications:
MR. AHMED ZONGO
call me now +229-67177484
Director Remit Dept
Diamond Bank Western Union Department
E-Mail; [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces