by buried under 419s
Sat Aug 18, 2012 3:01 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 17 Aug 2012 21:42:00 -0700
Received: from nm40-vm5.bullet.mail.ne1.yahoo.com ([98.138.229.181]:46878)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T2arF-0002V5-Nu
for ; Fri, 17 Aug 2012 21:42:00 -0700
Received: from [98.138.90.53] by nm40.bullet.mail.ne1.yahoo.com with NNFMP; 18 Aug 2012 04:41:59 -0000
Received: from [68.142.200.227] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 18 Aug 2012 04:41:59 -0000
Received: from [66.94.237.116] by t8.bullet.mud.yahoo.com with NNFMP; 18 Aug 2012 04:41:59 -0000
Received: from [127.0.0.1] by omp1021.access.mail.mud.yahoo.com with NNFMP; 18 Aug 2012 04:41:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 88867 invoked by uid 60001); 18 Aug 2012 04:41:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1345264918; bh=EmfA4nemjmV4t0/EosxMgOoCgae75ghY67X7YWwpjPs=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Ha6Kt7It0pvwSOUQIseOQrvUnEufuwtrYz3zEyxJiF3ptIirWG5mEiQPICFVVcjucTzsY7arq1KNZfDBFHZcqguV27fg0lj6p8kJY61zMmJjAQlucHlKufNmHCDi0lzhOCfkr2IXSTozk9iG7hTlNqeCxlUmWRteuRJdSgi2BU0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=uaSK0PmwQaBe2gHD9Faf4SBiuDQK3alfAgsFS/sBoYIa6poH6/bTYJOyPdiixhx99t1xnR/nXS38CgPA89TULHx6tGyJ8a7mG6NtXpKBs2zfSRjV8tqdKb30U1LHx0JJSMlMUG342AcvpNyf5UAPdCpenYnM3m5nfFKSqlyegPo=;
X-YMail-OSG: 5FqnTl4VM1lmeU3tc323jKVNbEzfedBB3o.vDFrFi_INWv6
Q8FpstHp7txPjhHrw_uRrJl.HsMhh72bt.oh8ibOsKG.QCRuQzkPIZvNvGQs
2GNgl8znm.oR67kmZ3LLMGMPUsai0lqENUXPs9v5z2dayyT0EtXpFf4Ghfj1
PXW06gfLvbMphn.TN25j6.0CoCFft2OmZb5nFMRAPFX_XYBJH0CWDFvBNXMx
iqjdJ2WtunurUDOetenSW7auCUWV5i0UqXutA2t8FXw3zf2WY6atu1TZaoba
2LDnqFlkQasYz1iR5soOu9csa2Mu0P3iD.u8EW4sIz2gFT_EvlgJkXLM_u8J
WJEPBSkw65H_WqwKJ_UdB.3457o3anU.ffoTL88It4dZlr3YgvGvNPAxmNtu
sLteKwlHTFg2FzXvP_tz10JYXsiEng1elU1XsyH0GJJ7AIUHe0WuVsopj3wc
HY3cpimWfZo.zXhy9_VBvvG2B5qsuEkuNQZc-
Received: from [107.20.64.7] by web181302.mail.ne1.yahoo.com via HTTP; Fri, 17 Aug 2012 21:41:58 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Fri, 17 Aug 2012 21:41:58 -0700 (PDT)
From: DIPLOMATIC MARK WILLIAMS <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1304071051-488426793-1345264918=:70491"
X-Spam-Status: Yes, score=7.9
X-Spam-Score: 79
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (7.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web_officefile_891[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.229.181 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?107.20.64.7>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(williamsmark669[at]yahoo.fr
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web_officefile_891[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
X-Spam-Flag: YES
Subject: ***SPAM*** CALL ME HERE TO LET ME KNOW THAT YOU HAVE SENT THE FEE, (770 666 63 57)
---1304071051-488426793-1345264918=:70491
Content-Type: multipart/alternative; boundary="-1304071051-259510701-1345264918=:70491"
---1304071051-259510701-1345264918=:70491
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
GOOD MORNING I AM DIPLOMAT MARK WILLIAMS,,
REMEMBER TO CHANGE YOUR EMAIL PASSWORD BECAUSE IT HAS BEEN LONG I AM SENDING YOU AN EMAIL BUT NO RESPOND SO I HOPE SOME ONE HOLDS YOUR PASSWORD ID EMAIL, TRY CHANGE IT IMMEDIATELY BEFORE RESPONDING FOR THIS MESSAGE,
HOW IS EVERYTHING AND YOUR FAMILY IS NOW OVER TWO DAYS THAT I HAVE BEEN WITH U.S.A CUSTOMS WHERE I WAS ARRESTED THAT I DO NOT HAVE A DELIVERY CLEARANCE PAPER AT MELBOURNE INTERNATIONAL AIR PORT (MLB) FLORIDA U.S.A BUT I THANK GOD THAT THEY HAVE RELEASED ME TODAY WITH YOUR PACKAGE WORTH THE SUM OF $4.8MILLION U.S.A DORLLARS BUT THEY NEVER KNOW THAT IT CONTENTS LARGE AMOUNT OF MONEY.
SO IT IS THIS MORNING THAT THEY RELEASED ME WITH YOUR FUNDS. YOU ADVICE TO RECONFIRM YOUR INFORMATION AND AGAIN YOU HAVE TO PAY THE SUM OF $99.00 FOR BILL OF LANDING PAPERS THEY SAID THAT IF I DO NOT HAVE IT THAT I WILL NOT ENTER FLIGHT TO YOUR HOME OR TAXI SO SEND THE FEES TO BENIN REPUBLIC WHERE I CAME FROM THEY WILL GET THE BILL OF LANDING PAPERS ASAP AND FORWARD TO ME HERE AND IT WILL NOT TAKE MORE THAN 4 HRS I WILL GET TO YOUR HOME ONCE YOU SEND THE FEES.
CALL ME HERE TO LET ME KNOW THAT YOU HAVE SENT THE FEE, (770 666 63 57)
HERE IS THE INFORMATION TO SEND IT.
RECEIVERS NAME.........HYCIENT OBALIM
COUNTRY...........BENIN REPUBLIC.
CITY.........COTONOU.
AMOUNT........$99.00
QUESTION TEXT ..HOW LONG.
TEXT ANSWER ANSWER.......FEW HRS ARRIVAL.
SENDERS NAME.....
MTCN........
PLEASE IT IS THIS MORNING THAT THEY HAVE RELEASED ME AND I DO NOT WANT TO TAKE ANY MORE LONG HERE AND I WILL DELIVER YOUR FUNDS IN 2 HRS TIME ONCE YOU SEND THE FEES TO THE MAN IN CHARGE. DO THAT FAST SO THAT THEY CAN NOT LOOK OVER THIS PACKAGE TO KNOW THE CONTENTS.
THANKS DIPLOMATIC MARK WILLIAMS,
Envelope-to:
Delivery-date: Fri, 17 Aug 2012 21:42:00 -0700
Received: from nm40-vm5.bullet.mail.ne1.yahoo.com ([98.138.229.181]:46878)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T2arF-0002V5-Nu
for ; Fri, 17 Aug 2012 21:42:00 -0700
Received: from [98.138.90.53] by nm40.bullet.mail.ne1.yahoo.com with NNFMP; 18 Aug 2012 04:41:59 -0000
Received: from [68.142.200.227] by tm6.bullet.mail.ne1.yahoo.com with NNFMP; 18 Aug 2012 04:41:59 -0000
Received: from [66.94.237.116] by t8.bullet.mud.yahoo.com with NNFMP; 18 Aug 2012 04:41:59 -0000
Received: from [127.0.0.1] by omp1021.access.mail.mud.yahoo.com with NNFMP; 18 Aug 2012 04:41:59 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 88867 invoked by uid 60001); 18 Aug 2012 04:41:58 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1345264918; bh=EmfA4nemjmV4t0/EosxMgOoCgae75ghY67X7YWwpjPs=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Ha6Kt7It0pvwSOUQIseOQrvUnEufuwtrYz3zEyxJiF3ptIirWG5mEiQPICFVVcjucTzsY7arq1KNZfDBFHZcqguV27fg0lj6p8kJY61zMmJjAQlucHlKufNmHCDi0lzhOCfkr2IXSTozk9iG7hTlNqeCxlUmWRteuRJdSgi2BU0=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=uaSK0PmwQaBe2gHD9Faf4SBiuDQK3alfAgsFS/sBoYIa6poH6/bTYJOyPdiixhx99t1xnR/nXS38CgPA89TULHx6tGyJ8a7mG6NtXpKBs2zfSRjV8tqdKb30U1LHx0JJSMlMUG342AcvpNyf5UAPdCpenYnM3m5nfFKSqlyegPo=;
X-YMail-OSG: 5FqnTl4VM1lmeU3tc323jKVNbEzfedBB3o.vDFrFi_INWv6
Q8FpstHp7txPjhHrw_uRrJl.HsMhh72bt.oh8ibOsKG.QCRuQzkPIZvNvGQs
2GNgl8znm.oR67kmZ3LLMGMPUsai0lqENUXPs9v5z2dayyT0EtXpFf4Ghfj1
PXW06gfLvbMphn.TN25j6.0CoCFft2OmZb5nFMRAPFX_XYBJH0CWDFvBNXMx
iqjdJ2WtunurUDOetenSW7auCUWV5i0UqXutA2t8FXw3zf2WY6atu1TZaoba
2LDnqFlkQasYz1iR5soOu9csa2Mu0P3iD.u8EW4sIz2gFT_EvlgJkXLM_u8J
WJEPBSkw65H_WqwKJ_UdB.3457o3anU.ffoTL88It4dZlr3YgvGvNPAxmNtu
sLteKwlHTFg2FzXvP_tz10JYXsiEng1elU1XsyH0GJJ7AIUHe0WuVsopj3wc
HY3cpimWfZo.zXhy9_VBvvG2B5qsuEkuNQZc-
Received: from [107.20.64.7] by web181302.mail.ne1.yahoo.com via HTTP; Fri, 17 Aug 2012 21:41:58 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Fri, 17 Aug 2012 21:41:58 -0700 (PDT)
From: DIPLOMATIC MARK WILLIAMS <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1304071051-488426793-1345264918=:70491"
X-Spam-Status: Yes, score=7.9
X-Spam-Score: 79
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (7.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web_officefile_891[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.229.181 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?107.20.64.7>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(williamsmark669[at]yahoo.fr
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web_officefile_891[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
X-Spam-Flag: YES
Subject: ***SPAM*** CALL ME HERE TO LET ME KNOW THAT YOU HAVE SENT THE FEE, (770 666 63 57)
---1304071051-488426793-1345264918=:70491
Content-Type: multipart/alternative; boundary="-1304071051-259510701-1345264918=:70491"
---1304071051-259510701-1345264918=:70491
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
GOOD MORNING I AM DIPLOMAT MARK WILLIAMS,,
REMEMBER TO CHANGE YOUR EMAIL PASSWORD BECAUSE IT HAS BEEN LONG I AM SENDING YOU AN EMAIL BUT NO RESPOND SO I HOPE SOME ONE HOLDS YOUR PASSWORD ID EMAIL, TRY CHANGE IT IMMEDIATELY BEFORE RESPONDING FOR THIS MESSAGE,
HOW IS EVERYTHING AND YOUR FAMILY IS NOW OVER TWO DAYS THAT I HAVE BEEN WITH U.S.A CUSTOMS WHERE I WAS ARRESTED THAT I DO NOT HAVE A DELIVERY CLEARANCE PAPER AT MELBOURNE INTERNATIONAL AIR PORT (MLB) FLORIDA U.S.A BUT I THANK GOD THAT THEY HAVE RELEASED ME TODAY WITH YOUR PACKAGE WORTH THE SUM OF $4.8MILLION U.S.A DORLLARS BUT THEY NEVER KNOW THAT IT CONTENTS LARGE AMOUNT OF MONEY.
SO IT IS THIS MORNING THAT THEY RELEASED ME WITH YOUR FUNDS. YOU ADVICE TO RECONFIRM YOUR INFORMATION AND AGAIN YOU HAVE TO PAY THE SUM OF $99.00 FOR BILL OF LANDING PAPERS THEY SAID THAT IF I DO NOT HAVE IT THAT I WILL NOT ENTER FLIGHT TO YOUR HOME OR TAXI SO SEND THE FEES TO BENIN REPUBLIC WHERE I CAME FROM THEY WILL GET THE BILL OF LANDING PAPERS ASAP AND FORWARD TO ME HERE AND IT WILL NOT TAKE MORE THAN 4 HRS I WILL GET TO YOUR HOME ONCE YOU SEND THE FEES.
CALL ME HERE TO LET ME KNOW THAT YOU HAVE SENT THE FEE, (770 666 63 57)
HERE IS THE INFORMATION TO SEND IT.
RECEIVERS NAME.........HYCIENT OBALIM
COUNTRY...........BENIN REPUBLIC.
CITY.........COTONOU.
AMOUNT........$99.00
QUESTION TEXT ..HOW LONG.
TEXT ANSWER ANSWER.......FEW HRS ARRIVAL.
SENDERS NAME.....
MTCN........
PLEASE IT IS THIS MORNING THAT THEY HAVE RELEASED ME AND I DO NOT WANT TO TAKE ANY MORE LONG HERE AND I WILL DELIVER YOUR FUNDS IN 2 HRS TIME ONCE YOU SEND THE FEES TO THE MAN IN CHARGE. DO THAT FAST SO THAT THEY CAN NOT LOOK OVER THIS PACKAGE TO KNOW THE CONTENTS.
THANKS DIPLOMATIC MARK WILLIAMS,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces