by buried under 419s
Thu Sep 20, 2012 10:11 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Sep 2012 17:51:15 -0700
Received: from nm24-vm1.access.bullet.mail.sp2.yahoo.com ([98.139.44.183]:41837)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TErSd-0001Sv-1p
for ; Thu, 20 Sep 2012 17:51:15 -0700
Received: from [98.139.44.96] by nm24.access.bullet.mail.sp2.yahoo.com with NNFMP; 21 Sep 2012 00:51:16 -0000
Received: from [98.139.44.65] by tm1.access.bullet.mail.sp2.yahoo.com with NNFMP; 21 Sep 2012 00:51:16 -0000
Received: from [127.0.0.1] by omp1002.access.mail.sp2.yahoo.com with NNFMP; 21 Sep 2012 00:51:16 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 48822 invoked by uid 60001); 21 Sep 2012 00:51:16 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1348188676; bh=9QAwh160kIaV79ER07F560z3wNXOQQ4P3I0Kdy0fUvs=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=L+53h5IpzUNND+CVajiKyrYB29dyYoGCPwl9wmMjF3HBgkqll7kMDCO4tI8rFZRFqGrpOSZwDf398t6nO/Udia3VNNY3nYuru+6NIpBef1/RuyRQvFinh6Bgo/kOrMXC4DQjKANwRyMWCH7kv1ILfgyutNYNoP6YqC/a6LjUb6Q=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=D9uCdsoW1PTCmR/1vPq8k2uAjrUBBPhbTA0moHOzqLtmfsZMX/UJ8UyrlriOjNgAVmp0vBfEW6id8faepCWnfTKmH6BiWw0yynmUZsuroX6DacI2hrkaJOBVbBC1AUoT2c7Jzow2TmV7VF296B1sGx2I1pxuVMa5JCCaWceqgd8=;
X-YMail-OSG: 9ZcN.pYVM1nMI6UdNIy5RIJeJF7eoyeuy86vCZCMS1GtHdH
CD4K62sKRhH_8OF5OTLFmcV55_LPRvgN6r3w62P6Y1QxYhZtjokl9yu3.lkD
vEItREUtyoxRWf.C0LMG_e9oUOoPziGNPFszv.tCQxZwAf8TJsEibKjZkVkh
sXQwEL_V43WuM59sSr_Y5mX1LP0YR75Ue54fu56UrLzDERM6cEMN7IkdD4zz
pzk2TVGj2DOBfctnC6F4qevbxQDymOH0bZTeSQBURqQyDZGtEquDqj6RCxLK
OL8hj7irByz.3BE6sZDbM_sYoD_Z04EAuwF1oxe5VDzzuMGvqlOYRtFWMrtN
_osEK7AYUF8Hb_op79yFKTKmGY0OSxA5NaWTCfD0HwpxM8IhfB.9ooOX1IiJ
z1guCpMVpJhD2rApZu8WTMW9_CXZFwAUJGZgRv95b0ga.7UhVu_IEI2Pme6t
G_EdxEpY7sEMKWXjD
Received: from [70.182.97.142] by web185303.mail.gq1.yahoo.com via HTTP; Thu, 20 Sep 2012 17:51:16 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Thu, 20 Sep 2012 17:51:16 -0700 (PDT)
From: Mr George LUis <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="470446061-1098711612-1348188676=:83368"
X-Spam-Status: Yes, score=11.6
X-Spam-Score: 116
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (11.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(0000officedesk7681[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.183 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?70.182.97.142>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(moneygramoffice697[at]yahoo.com
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (0000officedesk7681[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[70.182.97.142 listed in dnsbl.sorbs.net]
1.8 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 HK_SPAMMY_FILENAME HK_SPAMMY_FILENAME
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
X-Spam-Flag: YES
Subject: ***SPAM*** FROM MONEY GRAM OFFICE REPLY URGENT
--470446061-1098711612-1348188676=:83368
Content-Type: multipart/alternative; boundary="470446061-432377218-1348188676=:83368"
--470446061-432377218-1348188676=:83368
Content-Type: text/plain; charset=us-ascii
--470446061-432377218-1348188676=:83368
Content-Type: text/html; charset=us-ascii
ATTENTION BENEFICIARY
WE THE MONEY GRAM REMMITTANCE OFFICE HAVE AUTHORIZED TO BE SENDING YOUR FULL PAYMENT OF $3.400.000.00USD TO YOU THROUGH MONEY GRAM AFTER THE MEETING HELD YESTERDAY WITH THE FINANCIAL MINISTER OF FINANCE BENIN REP.
YOU WILL BE RECEIVING $$5.000USD PER A DAY PER AS TO MEET UP WITH STIPULATED DATE OF THIS TRANSFER, NOW WE HAVE DECEDED TO SEND THE FIRST PAYMENT TO YOU, BUT NEEDS TO RECEIVE YOUR FULL RECEIVING INFORMATIONS TO AVOID MISTAKE IN SENDING.
SO CONTACT DR.OKEKE JAMES WHO IS IN THE POSITION OF SENDING THE $3.400,000.00 YOU AND ASK HIM TO START SENDING YOU THE MONEY GRAM REFRENCE NUMBER OF YOUR DAILY $5.000 PER A DAY SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM.
HIS NAME DR.DOUGLAS HALL.
HIS EMAIL ADRESS IS ( [email protected] )
HIS NO; BELOW IS WHAT YOU WILL SEND TO HIM Your receiver name.......
YOUR FULLY NAME.............
YOUR COUNTRY NAME.............
YOUR AGE...............................
YOUR PHONE NO?........................
YOUR HOME ADDRESS......................
AND AGAIN WITH THIS NENDED INFROMATION FROM YOU TO START RECEIVEING YOUR MONEY GRAM REFRENCE NO IMMEDIATELY?
Your test question.......
Your test answer.........
Your address........
Your phone no..........
REMEBER THAT ALL THE ABOVE INFORMTIONS IS TO AVOID WRONG TRANSFER TO ANOTHER PERSON.
CALL OR EMAIL HIM NOW SO THAT HE CAN PROVIDE THE MONEY GRAM INFORMATION TO YOU AS URGENT AS POSIBLE.
THANKS NAD HAVE A NICE ADY.
Envelope-to:
Delivery-date: Thu, 20 Sep 2012 17:51:15 -0700
Received: from nm24-vm1.access.bullet.mail.sp2.yahoo.com ([98.139.44.183]:41837)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TErSd-0001Sv-1p
for ; Thu, 20 Sep 2012 17:51:15 -0700
Received: from [98.139.44.96] by nm24.access.bullet.mail.sp2.yahoo.com with NNFMP; 21 Sep 2012 00:51:16 -0000
Received: from [98.139.44.65] by tm1.access.bullet.mail.sp2.yahoo.com with NNFMP; 21 Sep 2012 00:51:16 -0000
Received: from [127.0.0.1] by omp1002.access.mail.sp2.yahoo.com with NNFMP; 21 Sep 2012 00:51:16 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 48822 invoked by uid 60001); 21 Sep 2012 00:51:16 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1348188676; bh=9QAwh160kIaV79ER07F560z3wNXOQQ4P3I0Kdy0fUvs=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=L+53h5IpzUNND+CVajiKyrYB29dyYoGCPwl9wmMjF3HBgkqll7kMDCO4tI8rFZRFqGrpOSZwDf398t6nO/Udia3VNNY3nYuru+6NIpBef1/RuyRQvFinh6Bgo/kOrMXC4DQjKANwRyMWCH7kv1ILfgyutNYNoP6YqC/a6LjUb6Q=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=D9uCdsoW1PTCmR/1vPq8k2uAjrUBBPhbTA0moHOzqLtmfsZMX/UJ8UyrlriOjNgAVmp0vBfEW6id8faepCWnfTKmH6BiWw0yynmUZsuroX6DacI2hrkaJOBVbBC1AUoT2c7Jzow2TmV7VF296B1sGx2I1pxuVMa5JCCaWceqgd8=;
X-YMail-OSG: 9ZcN.pYVM1nMI6UdNIy5RIJeJF7eoyeuy86vCZCMS1GtHdH
CD4K62sKRhH_8OF5OTLFmcV55_LPRvgN6r3w62P6Y1QxYhZtjokl9yu3.lkD
vEItREUtyoxRWf.C0LMG_e9oUOoPziGNPFszv.tCQxZwAf8TJsEibKjZkVkh
sXQwEL_V43WuM59sSr_Y5mX1LP0YR75Ue54fu56UrLzDERM6cEMN7IkdD4zz
pzk2TVGj2DOBfctnC6F4qevbxQDymOH0bZTeSQBURqQyDZGtEquDqj6RCxLK
OL8hj7irByz.3BE6sZDbM_sYoD_Z04EAuwF1oxe5VDzzuMGvqlOYRtFWMrtN
_osEK7AYUF8Hb_op79yFKTKmGY0OSxA5NaWTCfD0HwpxM8IhfB.9ooOX1IiJ
z1guCpMVpJhD2rApZu8WTMW9_CXZFwAUJGZgRv95b0ga.7UhVu_IEI2Pme6t
G_EdxEpY7sEMKWXjD
Received: from [70.182.97.142] by web185303.mail.gq1.yahoo.com via HTTP; Thu, 20 Sep 2012 17:51:16 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Thu, 20 Sep 2012 17:51:16 -0700 (PDT)
From: Mr George LUis <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="470446061-1098711612-1348188676=:83368"
X-Spam-Status: Yes, score=11.6
X-Spam-Score: 116
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (11.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(0000officedesk7681[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.183 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?70.182.97.142>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(moneygramoffice697[at]yahoo.com
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (0000officedesk7681[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[70.182.97.142 listed in dnsbl.sorbs.net]
1.8 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 HK_SPAMMY_FILENAME HK_SPAMMY_FILENAME
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
X-Spam-Flag: YES
Subject: ***SPAM*** FROM MONEY GRAM OFFICE REPLY URGENT
--470446061-1098711612-1348188676=:83368
Content-Type: multipart/alternative; boundary="470446061-432377218-1348188676=:83368"
--470446061-432377218-1348188676=:83368
Content-Type: text/plain; charset=us-ascii
--470446061-432377218-1348188676=:83368
Content-Type: text/html; charset=us-ascii
ATTENTION BENEFICIARY
WE THE MONEY GRAM REMMITTANCE OFFICE HAVE AUTHORIZED TO BE SENDING YOUR FULL PAYMENT OF $3.400.000.00USD TO YOU THROUGH MONEY GRAM AFTER THE MEETING HELD YESTERDAY WITH THE FINANCIAL MINISTER OF FINANCE BENIN REP.
YOU WILL BE RECEIVING $$5.000USD PER A DAY PER AS TO MEET UP WITH STIPULATED DATE OF THIS TRANSFER, NOW WE HAVE DECEDED TO SEND THE FIRST PAYMENT TO YOU, BUT NEEDS TO RECEIVE YOUR FULL RECEIVING INFORMATIONS TO AVOID MISTAKE IN SENDING.
SO CONTACT DR.OKEKE JAMES WHO IS IN THE POSITION OF SENDING THE $3.400,000.00 YOU AND ASK HIM TO START SENDING YOU THE MONEY GRAM REFRENCE NUMBER OF YOUR DAILY $5.000 PER A DAY SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM.
HIS NAME DR.DOUGLAS HALL.
HIS EMAIL ADRESS IS ( [email protected] )
HIS NO; BELOW IS WHAT YOU WILL SEND TO HIM Your receiver name.......
YOUR FULLY NAME.............
YOUR COUNTRY NAME.............
YOUR AGE...............................
YOUR PHONE NO?........................
YOUR HOME ADDRESS......................
AND AGAIN WITH THIS NENDED INFROMATION FROM YOU TO START RECEIVEING YOUR MONEY GRAM REFRENCE NO IMMEDIATELY?
Your test question.......
Your test answer.........
Your address........
Your phone no..........
REMEBER THAT ALL THE ABOVE INFORMTIONS IS TO AVOID WRONG TRANSFER TO ANOTHER PERSON.
CALL OR EMAIL HIM NOW SO THAT HE CAN PROVIDE THE MONEY GRAM INFORMATION TO YOU AS URGENT AS POSIBLE.
THANKS NAD HAVE A NICE ADY.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces