by buried under 419s
Tue Sep 25, 2012 2:41 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 25 Sep 2012 05:47:38 -0700
Received: from nm37-vm8.bullet.mail.gq1.yahoo.com ([98.136.217.44]:27337)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TGUY4-00036h-Vj
for ; Tue, 25 Sep 2012 05:47:38 -0700
Received: from [98.137.12.60] by nm37.bullet.mail.gq1.yahoo.com with NNFMP; 25 Sep 2012 12:47:35 -0000
Received: from [208.71.42.213] by tm5.bullet.mail.gq1.yahoo.com with NNFMP; 25 Sep 2012 12:47:35 -0000
Received: from [127.0.0.1] by smtp224.mail.gq1.yahoo.com with NNFMP; 25 Sep 2012 12:47:35 -0000
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: DAIuqHQVM1kGsMvtvohNa55kOh0RiUoT6gy9RRAd9hN1wxy
.ThXpjlV4g4JKLHjt.vknFrKIAsHKFAw_PXpzPEd2IEm6NxOph0arNhhFo0S
tBhjALMiJopau2j_kcJBS_vts5JLGYwZht19VUW63WW_v9hvYMB7XktIXA82
mva8jCHAyEv1K4h4Kwj5fA_RTQa9PWObSBj_6W1Ui8R.XKnUUla58NR7lGmk
seCOB0yHTfXJlTRxZCalVooI5uMRP7114It2UJLqe2iljzFDw0G9QEWUUph4
bPfTO3LpNX.vlsAeveCCdRbyl7u2u1P2dUrHYrZCNvvxp8CQXDzXpOp5MKvg
I1iqvMKutVEjbYYD8huw5.jSKzGTuiRN0juIowY4CFnOuHK.y8kMsHIJHMv6
ZmyV0d3qd3u_sdTwgeXMDlGkG6bVyQeld_K.vV8MID5nV0txHEuUx
X-Yahoo-SMTP: GI9A9QOswBAyY6doTfBpyVFr.HXD3IKwGA3Liwzd418eO9yB0Ajz
Received: from User ([email protected] with login)
by smtp224.mail.gq1.yahoo.com with SMTP; 25 Sep 2012 05:47:33 -0700 PDT
Reply-To: <[email protected]>
From: "Dr Kingsley Moghalu"<[email protected]>
Date: Tue, 25 Sep 2012 05:47:33 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0118_01C2A9A6.0DB550DE"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=16.3
X-Spam-Score: 163
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (16.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(kingmoghalu[at]superposta.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.136.217.44 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<pay200223[at]live.com>
)
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=k ... .217.44;r=]
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
1.9 FSL_UA FSL_UA
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.5 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** PAYMENT NOTICIFATION ALERT / OPEN AND READ THE FILE
This is a multi-part message in MIME format.
------=_NextPart_000_0118_01C2A9A6.0DB550DE
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Hello Dear,
I wish to inform you that all matters relating to the release of this payment is now under my control and supervision. This development has become necessary due to the activities of unpatriotic government/CBN officials and impostors who keep on frustrating every effort to settle our clients by making requests for unauthorized fees and levies from them.
We sincerely apologize for any delay you might have encountered in the past, your payment is now 100% Guaranteed.
I am Dr.Kingsley C. Moghaluthe deputy governor CBN.I was mandated by the President Federal Republic in conjunction with the Federal Executive Council (FEC), the Senate Committee on Foreign Debts Reconciliation and Implementation Panel on Contract/inheritance/compensation funds to complete all the unpaid Contract/inheritance/lottery fund. You are required as a matter of urgency to reconfirm your information including your name, phone number and your address for verification and immediate payment within 24 hours.
To this effect, the sum of TEN MILLION, SEVEN HUNDRED THOUSAND UNITED STATE SDOLLARS has approved for you
.
Kindly choose from these three modes of payment (wire transfer, diplomatic cash payment and ATM card).
Kindly get back to me asap.
Best Regards,
Dr.Kingsley Moghalu
Deputy Governor CBN
NB: KINDLY NOTE THAT SOME PEOPLE (FRAUDSTARS) HAVE STARTED MAKING FORGERY OF MY GOOD NAME.
Envelope-to:
Delivery-date: Tue, 25 Sep 2012 05:47:38 -0700
Received: from nm37-vm8.bullet.mail.gq1.yahoo.com ([98.136.217.44]:27337)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TGUY4-00036h-Vj
for ; Tue, 25 Sep 2012 05:47:38 -0700
Received: from [98.137.12.60] by nm37.bullet.mail.gq1.yahoo.com with NNFMP; 25 Sep 2012 12:47:35 -0000
Received: from [208.71.42.213] by tm5.bullet.mail.gq1.yahoo.com with NNFMP; 25 Sep 2012 12:47:35 -0000
Received: from [127.0.0.1] by smtp224.mail.gq1.yahoo.com with NNFMP; 25 Sep 2012 12:47:35 -0000
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: DAIuqHQVM1kGsMvtvohNa55kOh0RiUoT6gy9RRAd9hN1wxy
.ThXpjlV4g4JKLHjt.vknFrKIAsHKFAw_PXpzPEd2IEm6NxOph0arNhhFo0S
tBhjALMiJopau2j_kcJBS_vts5JLGYwZht19VUW63WW_v9hvYMB7XktIXA82
mva8jCHAyEv1K4h4Kwj5fA_RTQa9PWObSBj_6W1Ui8R.XKnUUla58NR7lGmk
seCOB0yHTfXJlTRxZCalVooI5uMRP7114It2UJLqe2iljzFDw0G9QEWUUph4
bPfTO3LpNX.vlsAeveCCdRbyl7u2u1P2dUrHYrZCNvvxp8CQXDzXpOp5MKvg
I1iqvMKutVEjbYYD8huw5.jSKzGTuiRN0juIowY4CFnOuHK.y8kMsHIJHMv6
ZmyV0d3qd3u_sdTwgeXMDlGkG6bVyQeld_K.vV8MID5nV0txHEuUx
X-Yahoo-SMTP: GI9A9QOswBAyY6doTfBpyVFr.HXD3IKwGA3Liwzd418eO9yB0Ajz
Received: from User ([email protected] with login)
by smtp224.mail.gq1.yahoo.com with SMTP; 25 Sep 2012 05:47:33 -0700 PDT
Reply-To: <[email protected]>
From: "Dr Kingsley Moghalu"<[email protected]>
Date: Tue, 25 Sep 2012 05:47:33 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0118_01C2A9A6.0DB550DE"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=16.3
X-Spam-Score: 163
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (16.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(kingmoghalu[at]superposta.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.136.217.44 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<pay200223[at]live.com>
)
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=k ... .217.44;r=]
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
1.9 FSL_UA FSL_UA
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.5 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** PAYMENT NOTICIFATION ALERT / OPEN AND READ THE FILE
This is a multi-part message in MIME format.
------=_NextPart_000_0118_01C2A9A6.0DB550DE
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Hello Dear,
I wish to inform you that all matters relating to the release of this payment is now under my control and supervision. This development has become necessary due to the activities of unpatriotic government/CBN officials and impostors who keep on frustrating every effort to settle our clients by making requests for unauthorized fees and levies from them.
We sincerely apologize for any delay you might have encountered in the past, your payment is now 100% Guaranteed.
I am Dr.Kingsley C. Moghaluthe deputy governor CBN.I was mandated by the President Federal Republic in conjunction with the Federal Executive Council (FEC), the Senate Committee on Foreign Debts Reconciliation and Implementation Panel on Contract/inheritance/compensation funds to complete all the unpaid Contract/inheritance/lottery fund. You are required as a matter of urgency to reconfirm your information including your name, phone number and your address for verification and immediate payment within 24 hours.
To this effect, the sum of TEN MILLION, SEVEN HUNDRED THOUSAND UNITED STATE SDOLLARS has approved for you
.
Kindly choose from these three modes of payment (wire transfer, diplomatic cash payment and ATM card).
Kindly get back to me asap.
Best Regards,
Dr.Kingsley Moghalu
Deputy Governor CBN
NB: KINDLY NOTE THAT SOME PEOPLE (FRAUDSTARS) HAVE STARTED MAKING FORGERY OF MY GOOD NAME.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces