by buried under 419s
Tue Jan 29, 2013 6:14 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 29 Jan 2013 00:24:36 -0800
Received: from nm4-vm0.bullet.mail.tp2.yahoo.com ([203.188.200.202]:47839)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1U06Ua-0006Hv-By
for ; Tue, 29 Jan 2013 00:24:36 -0800
Received: from [203.188.200.142] by nm4.bullet.mail.tp2.yahoo.com with NNFMP; 29 Jan 2013 08:24:31 -0000
Received: from [119.42.242.53] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 29 Jan 2013 08:24:31 -0000
Received: from [127.0.0.1] by omp1002.mail.cnh.yahoo.com with NNFMP; 29 Jan 2013 08:24:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 33204 invoked by uid 60001); 29 Jan 2013 08:24:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359447870; bh=rOSAbkwfgrUKPBknrP4ETRPZbWS2AK14DJQMvnMzDoQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=WnSRzOyJqFxPzZlj3yiVpcTjcHq56f6yQko9I0Leb8iFhAsf5S5OQj0zE/Gh9ejzm1KpY5TDE12/dccdWOAfKMfu9UPmGGasJ+TP//uCqoR7NFC6UJYajqr19etLG3FX56KPsNhz2UYJXW0P/3Kgpgjrf5bJFzDSx3/OfHqClJ0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.cn;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=ZoetGAuGAjKQPVdKx9T3/ChGvWq6MJQdmLMsi2EacUCxI4FIZis5wA3jsvJB2WUalxgbzah9oR3Nn1CRKubCPdn0bbfaeLGQCrhxSP/4QLgPWvmBEdTvofhnw6sJjex/vHlp6lY91AOM5vTLe82tEQOZ7vKeqnhn/U+2Jssf3m4= ;
X-YMail-OSG: FLpmF2UVM1kFk1iw.6IfBUCShfQlXiqh714t5PwO5rm0tHh
k9y61B2EyRZhupU5hL2QG
Received: from [81.91.229.189] by web92411.mail.cnh.yahoo.com via HTTP; Tue, 29 Jan 2013 16:24:30 CST
X-Rocket-MIMEInfo: 001.001,CgoKCgogCiAKCsKgIMKgIMKgIMKgIArCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCBaRU5JVEggQkFOSyBJTlRFUk5BVElPTkFMIArCoCDCoCDCoCDCoCAKwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgWmVuaXRoIEhlaWdodHMgUGxvdCA4NyAKQWpvc2UgCsKgIMKgIMKgIMKgIArCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoEFkZW9ndW4gU3RyZWV0ICwgQ290b25vdSBCZW5pbi5SZXAswqABMAEBAQE-
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <[email protected]>
Date: Tue, 29 Jan 2013 16:24:30 +0800 (CST)
From: "MR. SMITH DAYE" <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1615855314-1513947308-1359447870=:25403"
X-Spam-Status: Yes, score=11.3
X-Spam-Score: 113
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ZENITH BANK INTERNATIONAL Zenith Heights Plot 87 Ajose Adeogun
Street , Cotonou Benin.Rep, Attn:Payment Notification, This is to bring to
your notice that, I have paid the re-activation fee and the delivery of your
ATM MASTER CARD. I paid it because the ATM Card Code is 8119$4.5million,
has less three days to expire and when it expires, the money will go into
Government purse With that I decided to help you pay the money so that the
ATM Card will not expire, because I know that when you get your ATM Card
definitely you must pay me back my money and even compensate me for helping
you. Now i want you to contact UPS DELIVERY SERVICE with your Full Contact
information's so that they can deliver your Card to your designated address
without any delay. Like i stated earlier, The delivery charges has been paid
but i did not pay their official keeping fees since they refused. They refused
and the reason is that they do not know when you are going to contact them
and demurrage might have increase. They told me that their keeping fee is
$85 dollars per day and i deposited it yesterday been 25th of Jan 2013. Call
him as soon as you receive this mail. Or email them with your information.
[...]
Content analysis details: (11.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officeoffice281[at]yahoo.cn)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?81.91.229.189>]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.188.200.202 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[81.91.229.189 listed in zen.spamhaus.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officeoffice281[at]yahoo.cn)
2.9 POSTCARD_09 BODY: You got a postcard!
0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL
1.1 URI_HEX URI: URI hostname has long hexadecimal sequence
1.1 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.1 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** ATM OFFICE ZENITH BANK INTERNATIONAL
--1615855314-1513947308-1359447870=:25403
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
ZENITH BANK INTERNATIONAL
Zenith Heights Plot 87
Ajose
Adeogun Street , Cotonou Benin.Rep,
Attn:Payment
Notification,
This
is to bring to your notice that, I have paid the re-activation fee and the
delivery of your ATM MASTER CARD. I paid it because the ATM Card Code is
8119$4.5million, has less three days to expire and when it expires, the money
will go into Government purse
With
that I decided to help you pay the money so that the ATM Card will not expire,
because I know that when you get your ATM Card definitely you must pay me back
my money and even compensate me for helping you.
Now
i want you to contact UPS DELIVERY SERVICE with your Full Contact information's
so that they can deliver your Card to your designated address without any
delay.
Like
i stated earlier, The delivery charges has been paid but i did not pay their
official keeping fees since they refused.
They
refused and the reason is that they do not know when you are going to contact
them and demurrage might have increase. They told me that their keeping fee is
$85 dollars per day and i deposited it yesterday been 25th of Jan 2013. Call
him as soon as you receive this mail. Or email them with your
information.
Below is their Contact Information's,
Contact Person: Hon Jerry Leo,
UPS COURIER COMPANY BENIN REP.
Email: ( [email protected] )
Tel: +229 67309067
Contact
them Today to avoid increase of their keeping fees and let me know once you
receive your Card.
Yours
MR.
SMITH DAYE
ATM
OFFICE ZENITH BANK INTERNATIONAL
Envelope-to:
Delivery-date: Tue, 29 Jan 2013 00:24:36 -0800
Received: from nm4-vm0.bullet.mail.tp2.yahoo.com ([203.188.200.202]:47839)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1U06Ua-0006Hv-By
for ; Tue, 29 Jan 2013 00:24:36 -0800
Received: from [203.188.200.142] by nm4.bullet.mail.tp2.yahoo.com with NNFMP; 29 Jan 2013 08:24:31 -0000
Received: from [119.42.242.53] by tm4.bullet.mail.tp2.yahoo.com with NNFMP; 29 Jan 2013 08:24:31 -0000
Received: from [127.0.0.1] by omp1002.mail.cnh.yahoo.com with NNFMP; 29 Jan 2013 08:24:30 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 33204 invoked by uid 60001); 29 Jan 2013 08:24:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1359447870; bh=rOSAbkwfgrUKPBknrP4ETRPZbWS2AK14DJQMvnMzDoQ=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=WnSRzOyJqFxPzZlj3yiVpcTjcHq56f6yQko9I0Leb8iFhAsf5S5OQj0zE/Gh9ejzm1KpY5TDE12/dccdWOAfKMfu9UPmGGasJ+TP//uCqoR7NFC6UJYajqr19etLG3FX56KPsNhz2UYJXW0P/3Kgpgjrf5bJFzDSx3/OfHqClJ0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.cn;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=ZoetGAuGAjKQPVdKx9T3/ChGvWq6MJQdmLMsi2EacUCxI4FIZis5wA3jsvJB2WUalxgbzah9oR3Nn1CRKubCPdn0bbfaeLGQCrhxSP/4QLgPWvmBEdTvofhnw6sJjex/vHlp6lY91AOM5vTLe82tEQOZ7vKeqnhn/U+2Jssf3m4= ;
X-YMail-OSG: FLpmF2UVM1kFk1iw.6IfBUCShfQlXiqh714t5PwO5rm0tHh
k9y61B2EyRZhupU5hL2QG
Received: from [81.91.229.189] by web92411.mail.cnh.yahoo.com via HTTP; Tue, 29 Jan 2013 16:24:30 CST
X-Rocket-MIMEInfo: 001.001,CgoKCgogCiAKCsKgIMKgIMKgIMKgIArCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCBaRU5JVEggQkFOSyBJTlRFUk5BVElPTkFMIArCoCDCoCDCoCDCoCAKwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgwqAgWmVuaXRoIEhlaWdodHMgUGxvdCA4NyAKQWpvc2UgCsKgIMKgIMKgIMKgIArCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoCDCoEFkZW9ndW4gU3RyZWV0ICwgQ290b25vdSBCZW5pbi5SZXAswqABMAEBAQE-
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <[email protected]>
Date: Tue, 29 Jan 2013 16:24:30 +0800 (CST)
From: "MR. SMITH DAYE" <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1615855314-1513947308-1359447870=:25403"
X-Spam-Status: Yes, score=11.3
X-Spam-Score: 113
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ZENITH BANK INTERNATIONAL Zenith Heights Plot 87 Ajose Adeogun
Street , Cotonou Benin.Rep, Attn:Payment Notification, This is to bring to
your notice that, I have paid the re-activation fee and the delivery of your
ATM MASTER CARD. I paid it because the ATM Card Code is 8119$4.5million,
has less three days to expire and when it expires, the money will go into
Government purse With that I decided to help you pay the money so that the
ATM Card will not expire, because I know that when you get your ATM Card
definitely you must pay me back my money and even compensate me for helping
you. Now i want you to contact UPS DELIVERY SERVICE with your Full Contact
information's so that they can deliver your Card to your designated address
without any delay. Like i stated earlier, The delivery charges has been paid
but i did not pay their official keeping fees since they refused. They refused
and the reason is that they do not know when you are going to contact them
and demurrage might have increase. They told me that their keeping fee is
$85 dollars per day and i deposited it yesterday been 25th of Jan 2013. Call
him as soon as you receive this mail. Or email them with your information.
[...]
Content analysis details: (11.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officeoffice281[at]yahoo.cn)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?81.91.229.189>]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.188.200.202 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[81.91.229.189 listed in zen.spamhaus.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officeoffice281[at]yahoo.cn)
2.9 POSTCARD_09 BODY: You got a postcard!
0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL
1.1 URI_HEX URI: URI hostname has long hexadecimal sequence
1.1 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.1 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** ATM OFFICE ZENITH BANK INTERNATIONAL
--1615855314-1513947308-1359447870=:25403
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
ZENITH BANK INTERNATIONAL
Zenith Heights Plot 87
Ajose
Adeogun Street , Cotonou Benin.Rep,
Attn:Payment
Notification,
This
is to bring to your notice that, I have paid the re-activation fee and the
delivery of your ATM MASTER CARD. I paid it because the ATM Card Code is
8119$4.5million, has less three days to expire and when it expires, the money
will go into Government purse
With
that I decided to help you pay the money so that the ATM Card will not expire,
because I know that when you get your ATM Card definitely you must pay me back
my money and even compensate me for helping you.
Now
i want you to contact UPS DELIVERY SERVICE with your Full Contact information's
so that they can deliver your Card to your designated address without any
delay.
Like
i stated earlier, The delivery charges has been paid but i did not pay their
official keeping fees since they refused.
They
refused and the reason is that they do not know when you are going to contact
them and demurrage might have increase. They told me that their keeping fee is
$85 dollars per day and i deposited it yesterday been 25th of Jan 2013. Call
him as soon as you receive this mail. Or email them with your
information.
Below is their Contact Information's,
Contact Person: Hon Jerry Leo,
UPS COURIER COMPANY BENIN REP.
Email: ( [email protected] )
Tel: +229 67309067
Contact
them Today to avoid increase of their keeping fees and let me know once you
receive your Card.
Yours
MR.
SMITH DAYE
ATM
OFFICE ZENITH BANK INTERNATIONAL
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces