by buried under 419s
Fri Sep 14, 2012 11:51 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 14 Sep 2012 05:05:30 -0700
Received: from nm31-vm4.bullet.mail.gq1.yahoo.com ([98.136.216.211]:40187)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TCUeH-0002e2-KO
for ; Fri, 14 Sep 2012 05:05:30 -0700
Received: from [98.137.12.188] by nm31.bullet.mail.gq1.yahoo.com with NNFMP; 14 Sep 2012 12:05:28 -0000
Received: from [208.71.42.201] by tm9.bullet.mail.gq1.yahoo.com with NNFMP; 14 Sep 2012 12:05:28 -0000
Received: from [127.0.0.1] by smtp212.mail.gq1.yahoo.com with NNFMP; 14 Sep 2012 12:05:28 -0000
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: afs32XsVM1nR5fDCCdd58mUOYNlLUS0vY_LBAKYSDgtQIgU
SR3TykBJtEm_4Pd4XH4ZOjiDWwvL18VJfbjxssCTRGDGCiPeS8Pi8zxqPypa
qR_O0w55TYRSVEeaw86faqo3WP.gZw2AUaDaBi9yto4NwNlarGKEE25VOfI2
wwMCUv9PSeQg9hiQTDJceX8U3cgWnEqbi48IQW9dRcZ1polZV3_hmn3OCd1l
Q3U2GRKo.77kJwiaxsEYdnZD38wY_.ggEL9YH8kAWlQwTiFTUAkedlqbY8Xb
7wUsGsly7wqRnXoC2UMcCD800PsXKnQst8NSJ8xBKFLbAdkHJd.wDt1chQyJ
IPA1FapfPRMlRtUam0pRfpgvRrXe6N3gwobTITS3dCbpMPEgYAMmsiOeUxJ0
n6QUyECxOhmif60KtsFtCgnyofEfTzWTZKf4CQp.JMeQOk02CTymbDYHSyyc
qChkOuuBD44CZQkMqDmTqWz7IzA--
X-Yahoo-SMTP: r9V2lOeswBCE.m7NEZAcnbitr8J_4AlMW7PgFinmdwNNG5Q-
Received: from User ([email protected] with login)
by smtp212.mail.gq1.yahoo.com with SMTP; 14 Sep 2012 05:05:26 -0700 PDT
Reply-To: <[email protected]>
From: "Mr. Jibril Aku"<[email protected]>
Date: Fri, 14 Sep 2012 14:05:05 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00EC_01C2A9A6.03B3232C"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: VIEW THE ATTACH FILE FOR YOUR PAYMENT INSTRUCTION [...]
Content analysis details: (16.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.136.216.211 listed in list.dnswl.org]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jibriiaku00[at]hotmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jibriiaku00[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
1.9 FSL_UA FSL_UA
1.8 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** From the desk of: Mr. Jibril Aku
This is a multi-part message in MIME format.
------=_NextPart_000_00EC_01C2A9A6.03B3232C
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
VIEW THE ATTACH FILE FOR YOUR PAYMENT INSTRUCTION
From the desk of:
Mr. Jibril Aku
International Settlement Dept.
Ecobank
Dear,
The management of Ecobank has been instructed by the Federal Government to release your Inheritance fund to you through ATM Master Card, which shall be delivered to your house.
The sum of Ten Million, Five Hundred United States Dollars has been approved for payment to you, and because this new developement you are advice to stop every illegal communication you are having with any office or government officials (as claim), so that we can successfully release your fund to you as we were directed.
Your payment through our swift card payment center, which is the latest instruction from the Federal Government. We shall send you an ATM card which you will use to withdraw your money in any ATM machine in any part of the world, because the above stated sum has been loaded on the card pending the receipt of your response.
In view of that, you are required to provide us with the below details for a swift delivery of your card to you.
1. Full name
2. Phone and fax number
3. Address were you want them to send the ATM card to
(p.o box not acceptable)
4. current occupation
5. Attach copy of your identification
The above details being requested shall aid us make a smoth delivery to you, and note that because of impostors, we are giving you this code as our code of conduct (CARD-211), so you have to indicate this code when contacting us by using it as your subject.
Yours in service,
Mr. Jibril Aku
International Settlement Dept.
Phone number.+234 8137535320
EMAIL [email protected]
From the desk of: Mr. Jibril Aku
[email protected]
Envelope-to:
Delivery-date: Fri, 14 Sep 2012 05:05:30 -0700
Received: from nm31-vm4.bullet.mail.gq1.yahoo.com ([98.136.216.211]:40187)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TCUeH-0002e2-KO
for ; Fri, 14 Sep 2012 05:05:30 -0700
Received: from [98.137.12.188] by nm31.bullet.mail.gq1.yahoo.com with NNFMP; 14 Sep 2012 12:05:28 -0000
Received: from [208.71.42.201] by tm9.bullet.mail.gq1.yahoo.com with NNFMP; 14 Sep 2012 12:05:28 -0000
Received: from [127.0.0.1] by smtp212.mail.gq1.yahoo.com with NNFMP; 14 Sep 2012 12:05:28 -0000
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: afs32XsVM1nR5fDCCdd58mUOYNlLUS0vY_LBAKYSDgtQIgU
SR3TykBJtEm_4Pd4XH4ZOjiDWwvL18VJfbjxssCTRGDGCiPeS8Pi8zxqPypa
qR_O0w55TYRSVEeaw86faqo3WP.gZw2AUaDaBi9yto4NwNlarGKEE25VOfI2
wwMCUv9PSeQg9hiQTDJceX8U3cgWnEqbi48IQW9dRcZ1polZV3_hmn3OCd1l
Q3U2GRKo.77kJwiaxsEYdnZD38wY_.ggEL9YH8kAWlQwTiFTUAkedlqbY8Xb
7wUsGsly7wqRnXoC2UMcCD800PsXKnQst8NSJ8xBKFLbAdkHJd.wDt1chQyJ
IPA1FapfPRMlRtUam0pRfpgvRrXe6N3gwobTITS3dCbpMPEgYAMmsiOeUxJ0
n6QUyECxOhmif60KtsFtCgnyofEfTzWTZKf4CQp.JMeQOk02CTymbDYHSyyc
qChkOuuBD44CZQkMqDmTqWz7IzA--
X-Yahoo-SMTP: r9V2lOeswBCE.m7NEZAcnbitr8J_4AlMW7PgFinmdwNNG5Q-
Received: from User ([email protected] with login)
by smtp212.mail.gq1.yahoo.com with SMTP; 14 Sep 2012 05:05:26 -0700 PDT
Reply-To: <[email protected]>
From: "Mr. Jibril Aku"<[email protected]>
Date: Fri, 14 Sep 2012 14:05:05 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00EC_01C2A9A6.03B3232C"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: VIEW THE ATTACH FILE FOR YOUR PAYMENT INSTRUCTION [...]
Content analysis details: (16.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.136.216.211 listed in list.dnswl.org]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jibriiaku00[at]hotmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jibriiaku00[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
1.9 FSL_UA FSL_UA
1.8 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** From the desk of: Mr. Jibril Aku
This is a multi-part message in MIME format.
------=_NextPart_000_00EC_01C2A9A6.03B3232C
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
VIEW THE ATTACH FILE FOR YOUR PAYMENT INSTRUCTION
From the desk of:
Mr. Jibril Aku
International Settlement Dept.
Ecobank
Dear,
The management of Ecobank has been instructed by the Federal Government to release your Inheritance fund to you through ATM Master Card, which shall be delivered to your house.
The sum of Ten Million, Five Hundred United States Dollars has been approved for payment to you, and because this new developement you are advice to stop every illegal communication you are having with any office or government officials (as claim), so that we can successfully release your fund to you as we were directed.
Your payment through our swift card payment center, which is the latest instruction from the Federal Government. We shall send you an ATM card which you will use to withdraw your money in any ATM machine in any part of the world, because the above stated sum has been loaded on the card pending the receipt of your response.
In view of that, you are required to provide us with the below details for a swift delivery of your card to you.
1. Full name
2. Phone and fax number
3. Address were you want them to send the ATM card to
(p.o box not acceptable)
4. current occupation
5. Attach copy of your identification
The above details being requested shall aid us make a smoth delivery to you, and note that because of impostors, we are giving you this code as our code of conduct (CARD-211), so you have to indicate this code when contacting us by using it as your subject.
Yours in service,
Mr. Jibril Aku
International Settlement Dept.
Phone number.+234 8137535320
EMAIL [email protected]
From the desk of: Mr. Jibril Aku
[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces