by buried under 419s
Thu Sep 06, 2012 11:38 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 06 Sep 2012 06:12:53 -0700
Received: from nm39-vm6.bullet.mail.bf1.yahoo.com ([72.30.239.150]:25902)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T9bt2-00059r-E0
for ; Thu, 06 Sep 2012 06:12:53 -0700
Received: from [98.139.212.146] by nm39.bullet.mail.bf1.yahoo.com with NNFMP; 06 Sep 2012 13:12:46 -0000
Received: from [98.139.213.15] by tm3.bullet.mail.bf1.yahoo.com with NNFMP; 06 Sep 2012 13:12:46 -0000
Received: from [127.0.0.1] by smtp115.mail.bf1.yahoo.com with NNFMP; 06 Sep 2012 13:12:46 -0000
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: m57ZByMVM1lGjxss47_.Hkvew32oACkcy2CumySvrwuD47B
f2lJQ2_sdX6ZNtv6oiqKJbybSOIo_XZtYSI38VpKfqOYsV6zsA0r9Fdw4Mi7
UBabvou5.BWlusInkVO0ZKRgSg1.TmJ.u5wRyPMRM.9KMzusMym9qi8vkCzB
mHd64FM06Wx3zy2MX95klYechRULgmzdKePKhzBRkIU5U5jDzIP_SHWLTf3r
KYJF8LHqmPT50k_0pHwLG.2494.TMAU5fJ1eqV_qwrF3ZqNVPb8TBO8XC8oy
FzXIwB1AktQ1hnACHcJUP98mbr9EUGN7D1psAdu2hzhLUkDTLYy9knIxE0GB
HdfF3JAmxOjPnGfhzfUfRPQWCdY0j8AAS9BgSBe4BDvW9S0iL61Ov5mpiZhm
vA0CFCOU3r5pM.gemmRtIhXuCkqYgULJklRKAX3GbduE31R.NhQK3uNoXJL8
yOCTxx1JtJDaeS7HgdtYmtA4RfzHEavIW05YRbKj.UKXFtBWW
X-Yahoo-SMTP: FpVYMQyswBC8wv3Z2qIkKNF1yuGh.Od3Mijd
Received: from User ([email protected] with login)
by smtp115.mail.bf1.yahoo.com with SMTP; 06 Sep 2012 06:12:44 -0700 PDT
Reply-To: <[email protected]>
From: "Federal Bureau Of Investigation"<[email protected]>
Date: Thu, 6 Sep 2012 06:12:44 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0027_01C2A9A6.2D749D82"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=15.8
X-Spam-Score: 158
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: You are required to PLEASE check the ATTACHMENT.. [...]
Content analysis details: (15.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(fbus020[at]hotmail.com)
0.0 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (fbus020[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[72.30.239.150 listed in list.dnswl.org]
1.9 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
1.5 FAKE_REPLY_C FAKE_REPLY_C
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Re: 2012- Notice Report...
This is a multi-part message in MIME format.
------=_NextPart_000_0027_01C2A9A6.2D749D82
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
From: Federal Bureau of Investigation
Dept: Anti-Terrorist & Monetary Crimes Division
Office: Washington, D.C. Headquarters
Address: J. Edgar Hoover Building 93 Pennsylvania Avenue, NW Washington, D.C. 20535-0001
Attention: BENEFICIARY,
This is to bring to your notice that my office has taking over all the money transfer originated from any part of Africa and European countries as contract payment, fund inheritance or lottery winning due to unauthorized/incapability of financial institutions/security companies in releasing such huge sum of money result of fraud, terrorist and money laundry activities going on World Wide.
We have been having series of meetings for the passed 7 months which ended 2 days ago with the then secretary general to the United Nations, Central Bank of Nigeria and World Bank Officials. This email is to all the people that have been scammed in any part of the world, the United Nations, Central Bank of Nigeria and World Bank officials have agreed to compensate them with the sum of Ten Millions US Dollars each victim. This includes every foreign contractor that may have not received his or her contract sum and people that have had an unfinished transaction, people who have inheritance to claim or international businesses that failed due to instability of government in some part of Africa etc.
We found your name in our list as one of the beneficiaries and that is why we are contacting you, this has been agreed upon and has been signed. These also indicate that the Diplomatic Immunity Seal of Transfer (DIST) often referred to as a criminal history record or rap sheet, is a listing of certain information taken from fingerprint submissions retained by the FBI in connection with arrests and, in some instances, federal employment, naturalization, or military service. This condition is valid until 3 days after which the funds shall be confiscated and legal action will be taken against you.
Guarantee: funds will be released upon confirmation of the DIST document. Final instruction given below;
1. Credit payment instruction: irrevocable credit guarantee.
2. Beneficiary has full power when validation is cleared.
3. Beneficiaries Bank in can only release funds.
4. upon confirmation from the World Bank / United Nations.
5. Bearers must clear Bank protocol and validation request.
We have confirmed that the amount required to procure your document which is called the Diplomatic Immunity Seal of Transfer (DIST) will cost you a total of $750USD only and the fee should be paid directly to the payment office in Nigeria via Western Union Money Transfer. Below, are the contact details of the payment office in Nigeria who will process your transaction in Economic and Financial Crime Commission (EFCC).
Contact Information;
Economic and Financial Crime Commission (EFCC)
Payment centre.
Name: Mr.Ibrahim Lamorde
E-mail: [email protected]
Contact Mr.Ibrahim Lamorde of the
Envelope-to:
Delivery-date: Thu, 06 Sep 2012 06:12:53 -0700
Received: from nm39-vm6.bullet.mail.bf1.yahoo.com ([72.30.239.150]:25902)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T9bt2-00059r-E0
for ; Thu, 06 Sep 2012 06:12:53 -0700
Received: from [98.139.212.146] by nm39.bullet.mail.bf1.yahoo.com with NNFMP; 06 Sep 2012 13:12:46 -0000
Received: from [98.139.213.15] by tm3.bullet.mail.bf1.yahoo.com with NNFMP; 06 Sep 2012 13:12:46 -0000
Received: from [127.0.0.1] by smtp115.mail.bf1.yahoo.com with NNFMP; 06 Sep 2012 13:12:46 -0000
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: m57ZByMVM1lGjxss47_.Hkvew32oACkcy2CumySvrwuD47B
f2lJQ2_sdX6ZNtv6oiqKJbybSOIo_XZtYSI38VpKfqOYsV6zsA0r9Fdw4Mi7
UBabvou5.BWlusInkVO0ZKRgSg1.TmJ.u5wRyPMRM.9KMzusMym9qi8vkCzB
mHd64FM06Wx3zy2MX95klYechRULgmzdKePKhzBRkIU5U5jDzIP_SHWLTf3r
KYJF8LHqmPT50k_0pHwLG.2494.TMAU5fJ1eqV_qwrF3ZqNVPb8TBO8XC8oy
FzXIwB1AktQ1hnACHcJUP98mbr9EUGN7D1psAdu2hzhLUkDTLYy9knIxE0GB
HdfF3JAmxOjPnGfhzfUfRPQWCdY0j8AAS9BgSBe4BDvW9S0iL61Ov5mpiZhm
vA0CFCOU3r5pM.gemmRtIhXuCkqYgULJklRKAX3GbduE31R.NhQK3uNoXJL8
yOCTxx1JtJDaeS7HgdtYmtA4RfzHEavIW05YRbKj.UKXFtBWW
X-Yahoo-SMTP: FpVYMQyswBC8wv3Z2qIkKNF1yuGh.Od3Mijd
Received: from User ([email protected] with login)
by smtp115.mail.bf1.yahoo.com with SMTP; 06 Sep 2012 06:12:44 -0700 PDT
Reply-To: <[email protected]>
From: "Federal Bureau Of Investigation"<[email protected]>
Date: Thu, 6 Sep 2012 06:12:44 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0027_01C2A9A6.2D749D82"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=15.8
X-Spam-Score: 158
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: You are required to PLEASE check the ATTACHMENT.. [...]
Content analysis details: (15.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(fbus020[at]hotmail.com)
0.0 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (fbus020[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[72.30.239.150 listed in list.dnswl.org]
1.9 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
1.5 FAKE_REPLY_C FAKE_REPLY_C
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Re: 2012- Notice Report...
This is a multi-part message in MIME format.
------=_NextPart_000_0027_01C2A9A6.2D749D82
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
From: Federal Bureau of Investigation
Dept: Anti-Terrorist & Monetary Crimes Division
Office: Washington, D.C. Headquarters
Address: J. Edgar Hoover Building 93 Pennsylvania Avenue, NW Washington, D.C. 20535-0001
Attention: BENEFICIARY,
This is to bring to your notice that my office has taking over all the money transfer originated from any part of Africa and European countries as contract payment, fund inheritance or lottery winning due to unauthorized/incapability of financial institutions/security companies in releasing such huge sum of money result of fraud, terrorist and money laundry activities going on World Wide.
We have been having series of meetings for the passed 7 months which ended 2 days ago with the then secretary general to the United Nations, Central Bank of Nigeria and World Bank Officials. This email is to all the people that have been scammed in any part of the world, the United Nations, Central Bank of Nigeria and World Bank officials have agreed to compensate them with the sum of Ten Millions US Dollars each victim. This includes every foreign contractor that may have not received his or her contract sum and people that have had an unfinished transaction, people who have inheritance to claim or international businesses that failed due to instability of government in some part of Africa etc.
We found your name in our list as one of the beneficiaries and that is why we are contacting you, this has been agreed upon and has been signed. These also indicate that the Diplomatic Immunity Seal of Transfer (DIST) often referred to as a criminal history record or rap sheet, is a listing of certain information taken from fingerprint submissions retained by the FBI in connection with arrests and, in some instances, federal employment, naturalization, or military service. This condition is valid until 3 days after which the funds shall be confiscated and legal action will be taken against you.
Guarantee: funds will be released upon confirmation of the DIST document. Final instruction given below;
1. Credit payment instruction: irrevocable credit guarantee.
2. Beneficiary has full power when validation is cleared.
3. Beneficiaries Bank in can only release funds.
4. upon confirmation from the World Bank / United Nations.
5. Bearers must clear Bank protocol and validation request.
We have confirmed that the amount required to procure your document which is called the Diplomatic Immunity Seal of Transfer (DIST) will cost you a total of $750USD only and the fee should be paid directly to the payment office in Nigeria via Western Union Money Transfer. Below, are the contact details of the payment office in Nigeria who will process your transaction in Economic and Financial Crime Commission (EFCC).
Contact Information;
Economic and Financial Crime Commission (EFCC)
Payment centre.
Name: Mr.Ibrahim Lamorde
E-mail: [email protected]
Contact Mr.Ibrahim Lamorde of the
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces