by buried under 419s
Mon Sep 24, 2012 8:57 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 24 Sep 2012 16:31:18 -0700
Received: from nm7-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.193]:29089)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TGI7R-0002aa-R9
for ; Mon, 24 Sep 2012 16:31:18 -0700
Received: from [98.139.91.63] by nm7.bullet.mail.sp2.yahoo.com with NNFMP; 24 Sep 2012 23:31:17 -0000
Received: from [98.139.44.76] by tm3.bullet.mail.sp2.yahoo.com with NNFMP; 24 Sep 2012 23:31:17 -0000
Received: from [127.0.0.1] by omp1013.access.mail.sp2.yahoo.com with NNFMP; 24 Sep 2012 23:31:17 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 50874 invoked by uid 60001); 24 Sep 2012 23:31:16 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1348529476; bh=gBso1s0dTnDRcrU12Wp1vrjTHeqcpxdDCfWgsTGHJ2Y=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KDjZ8fZQxs3tjdSEuwcQhDXB1rEKj4dNMJM1L8nPUf13rUBlBgTQ3lsm1R5DYCrXI6Jqa9m47R+1oYBBVRGdXYE7b6f3OSrwglKnKg683vOzewlgsDjlRNboYwIMtRWL52LBvq5JiC3XYp4XPEseClQS8EXP41mIIeZVvBruKQw=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=aAaqmiMFRO94YDLYqqG149SPxc+JjiK2WmPgmBGx/2qpCt6qhb3WjTEiUKjCijpEfxr9LKBD3QMurRoejOVrUEqu491XjSaHMMBOWSvtQPfcMsUXQZiHJ3s2wTFXlFrOJGL+05V+9SZarjnmRCBMeqVk6gZeKyhInysoqqPlRHA=;
X-YMail-OSG: 0Bh5v6EVM1lVx1ChtWQtblSN8Na9pbccKgoTnxaWhn.dwd3
wzuZMImcZgtarKj7.QNs__PpFODHQ0HwP7tbfdOTyMfJg9raUbiWXIk.nO7P
dGN_eqdi2Z7U_cJvAmGKfCKgCYMSyruJlDaTt_x0NdbhiPvaoA1E3fNKks7C
HYhkcVUWmmgUXeWNdlGxUEvuhxVZ6uSHGyuUbFLbhDNSLr0yinRClJWdh3yf
cqHxAIa9bcvtJp516wLBHt61la7AHS5cUX7._LqgfIs9J8YBBmqP2S39DzSB
44Toa0lbdb584F2sD3gj4D8OCE8tK3sedt1XUJsmfll3XJrwWLnZIw41mHWQ
akJSB6Tj6KOu8sxubYqcc9tyW5Dod5oA2O7xlAvPM5jdNjZ5_wLf_A.RkomI
eoAc9hWNo6Xj8.3R000PxfAlfTyglRPrBsCofOVIhgiDJGPASTud_Bd.OdAo
JhfPgLAi6MdYAbHw-
Received: from [216.12.221.46] by web184802.mail.gq1.yahoo.com via HTTP; Mon, 24 Sep 2012 16:31:16 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.434
Message-ID: <[email protected]>
Date: Mon, 24 Sep 2012 16:31:16 -0700 (PDT)
From: Dr Ms Nnenna Onuorah <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="220256174-180400978-1348529476=:46487"
X-Spam-Status: Yes, score=7.7
X-Spam-Score: 77
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (7.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(0000officedesk768[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.193 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(moneygramoffice918[at]yahoo.fr
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (0000officedesk768[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
0.0 HK_SPAMMY_FILENAME HK_SPAMMY_FILENAME
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
X-Spam-Flag: YES
Subject: ***SPAM*** FROM MONEY GRAM OFFICE REPLY URGENT
--220256174-180400978-1348529476=:46487
Content-Type: multipart/alternative; boundary="220256174-1482893317-1348529476=:46487"
--220256174-1482893317-1348529476=:46487
Content-Type: text/plain; charset=us-ascii
ATTENTION BENEFICIARY
WE THE MONEY GRAM REMMITTANCE OFFICE HAVE AUTHORIZED TO BE SENDING YOUR FULL PAYMENT OF $3.400.000.00USD TO YOU THROUGH MONEY GRAM AFTER THE MEETING HELD YESTERDAY WITH THE FINANCIAL MINISTER OF FINANCE BENIN REP.
YOU WILL BE RECEIVING $5000.00USD PER DAY AS TO MEET UP WITH STIPULATED DATE OF THIS TRANSFER, NOW WE HAVE DECEDED TO SEND THE FIRST PAYMENT TO YOU, BUT NEEDS TO RECEIVE YOUR FULL RECEIVING INFORMATIONS TO AVOID MISTAKE IN SENDING.
SO CONTACT DR.Douglas Hall WHO IS IN THE POSITION OF SENDING THE $3.400,000.00 YOU AND ASK HIM TO START SENDING YOU THE MONEY GRAM REFRENCE NUMBER OF YOUR DAILY $5000.00 PAYMENT SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM.
HIS NAME DR.Douglas Hall . or Phone Number +229_94808798
HIS EMAIL ADRESS IS ( [email protected] )
HIS NO; BELOW IS WHAT YOU WILL SEND TO HIM Your receiver name.......
YOUR FULLY NAME.............
YOUR COUNTRY NAME.............
YOUR AGE...............................
YOUR PHONE NO?........................
YOUR HOME ADDRESS......................
AND AGAIN WITH THIS NENDED INFROMATION FROM YOU TO START RECEIVEING YOUR MONEY GRAM REFRENCE NO IMMEDIATELY?
Your test question.......
Your test answer.........
Your address........
Your phone no..........
REMEBER THAT ALL THE ABOVE INFORMTIONS IS TO AVOID WRONG TRANSFER TO ANOTHER PERSON.
CALL OR EMAIL HIM NOW SO THAT HE CAN PROVIDE THE MONEY GRAM INFORMATION TO YOU AS URGENT AS POSIBLE.
THANKS NAD HAVE A NICE ADY.
Envelope-to:
Delivery-date: Mon, 24 Sep 2012 16:31:18 -0700
Received: from nm7-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.193]:29089)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TGI7R-0002aa-R9
for ; Mon, 24 Sep 2012 16:31:18 -0700
Received: from [98.139.91.63] by nm7.bullet.mail.sp2.yahoo.com with NNFMP; 24 Sep 2012 23:31:17 -0000
Received: from [98.139.44.76] by tm3.bullet.mail.sp2.yahoo.com with NNFMP; 24 Sep 2012 23:31:17 -0000
Received: from [127.0.0.1] by omp1013.access.mail.sp2.yahoo.com with NNFMP; 24 Sep 2012 23:31:17 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 50874 invoked by uid 60001); 24 Sep 2012 23:31:16 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1348529476; bh=gBso1s0dTnDRcrU12Wp1vrjTHeqcpxdDCfWgsTGHJ2Y=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=KDjZ8fZQxs3tjdSEuwcQhDXB1rEKj4dNMJM1L8nPUf13rUBlBgTQ3lsm1R5DYCrXI6Jqa9m47R+1oYBBVRGdXYE7b6f3OSrwglKnKg683vOzewlgsDjlRNboYwIMtRWL52LBvq5JiC3XYp4XPEseClQS8EXP41mIIeZVvBruKQw=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=aAaqmiMFRO94YDLYqqG149SPxc+JjiK2WmPgmBGx/2qpCt6qhb3WjTEiUKjCijpEfxr9LKBD3QMurRoejOVrUEqu491XjSaHMMBOWSvtQPfcMsUXQZiHJ3s2wTFXlFrOJGL+05V+9SZarjnmRCBMeqVk6gZeKyhInysoqqPlRHA=;
X-YMail-OSG: 0Bh5v6EVM1lVx1ChtWQtblSN8Na9pbccKgoTnxaWhn.dwd3
wzuZMImcZgtarKj7.QNs__PpFODHQ0HwP7tbfdOTyMfJg9raUbiWXIk.nO7P
dGN_eqdi2Z7U_cJvAmGKfCKgCYMSyruJlDaTt_x0NdbhiPvaoA1E3fNKks7C
HYhkcVUWmmgUXeWNdlGxUEvuhxVZ6uSHGyuUbFLbhDNSLr0yinRClJWdh3yf
cqHxAIa9bcvtJp516wLBHt61la7AHS5cUX7._LqgfIs9J8YBBmqP2S39DzSB
44Toa0lbdb584F2sD3gj4D8OCE8tK3sedt1XUJsmfll3XJrwWLnZIw41mHWQ
akJSB6Tj6KOu8sxubYqcc9tyW5Dod5oA2O7xlAvPM5jdNjZ5_wLf_A.RkomI
eoAc9hWNo6Xj8.3R000PxfAlfTyglRPrBsCofOVIhgiDJGPASTud_Bd.OdAo
JhfPgLAi6MdYAbHw-
Received: from [216.12.221.46] by web184802.mail.gq1.yahoo.com via HTTP; Mon, 24 Sep 2012 16:31:16 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.434
Message-ID: <[email protected]>
Date: Mon, 24 Sep 2012 16:31:16 -0700 (PDT)
From: Dr Ms Nnenna Onuorah <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="220256174-180400978-1348529476=:46487"
X-Spam-Status: Yes, score=7.7
X-Spam-Score: 77
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (7.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(0000officedesk768[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.193 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(moneygramoffice918[at]yahoo.fr
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (0000officedesk768[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
0.0 HK_SPAMMY_FILENAME HK_SPAMMY_FILENAME
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
X-Spam-Flag: YES
Subject: ***SPAM*** FROM MONEY GRAM OFFICE REPLY URGENT
--220256174-180400978-1348529476=:46487
Content-Type: multipart/alternative; boundary="220256174-1482893317-1348529476=:46487"
--220256174-1482893317-1348529476=:46487
Content-Type: text/plain; charset=us-ascii
ATTENTION BENEFICIARY
WE THE MONEY GRAM REMMITTANCE OFFICE HAVE AUTHORIZED TO BE SENDING YOUR FULL PAYMENT OF $3.400.000.00USD TO YOU THROUGH MONEY GRAM AFTER THE MEETING HELD YESTERDAY WITH THE FINANCIAL MINISTER OF FINANCE BENIN REP.
YOU WILL BE RECEIVING $5000.00USD PER DAY AS TO MEET UP WITH STIPULATED DATE OF THIS TRANSFER, NOW WE HAVE DECEDED TO SEND THE FIRST PAYMENT TO YOU, BUT NEEDS TO RECEIVE YOUR FULL RECEIVING INFORMATIONS TO AVOID MISTAKE IN SENDING.
SO CONTACT DR.Douglas Hall WHO IS IN THE POSITION OF SENDING THE $3.400,000.00 YOU AND ASK HIM TO START SENDING YOU THE MONEY GRAM REFRENCE NUMBER OF YOUR DAILY $5000.00 PAYMENT SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM.
HIS NAME DR.Douglas Hall . or Phone Number +229_94808798
HIS EMAIL ADRESS IS ( [email protected] )
HIS NO; BELOW IS WHAT YOU WILL SEND TO HIM Your receiver name.......
YOUR FULLY NAME.............
YOUR COUNTRY NAME.............
YOUR AGE...............................
YOUR PHONE NO?........................
YOUR HOME ADDRESS......................
AND AGAIN WITH THIS NENDED INFROMATION FROM YOU TO START RECEIVEING YOUR MONEY GRAM REFRENCE NO IMMEDIATELY?
Your test question.......
Your test answer.........
Your address........
Your phone no..........
REMEBER THAT ALL THE ABOVE INFORMTIONS IS TO AVOID WRONG TRANSFER TO ANOTHER PERSON.
CALL OR EMAIL HIM NOW SO THAT HE CAN PROVIDE THE MONEY GRAM INFORMATION TO YOU AS URGENT AS POSIBLE.
THANKS NAD HAVE A NICE ADY.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces