by buried under 419s
Fri May 24, 2013 7:33 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 24 May 2013 12:49:30 -0700
Received: from nm35-vm6.bullet.mail.sg3.yahoo.com ([106.10.151.61]:45965)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1UfxzU-0003uE-RA
for ; Fri, 24 May 2013 12:49:30 -0700
Received: from [106.10.166.63] by nm35.bullet.mail.sg3.yahoo.com with NNFMP; 24 May 2013 19:49:27 -0000
Received: from [106.10.151.123] by tm20.bullet.mail.sg3.yahoo.com with NNFMP; 24 May 2013 19:49:27 -0000
Received: from [127.0.0.1] by omp1005.mail.sg3.yahoo.com with NNFMP; 24 May 2013 19:49:27 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 32178 invoked by uid 60001); 24 May 2013 19:49:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1369424967; bh=lj8vbtyLVTLuyunLaQpH0zydtX6/9ojY6BAfYI7S+7A=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=syLmjkHq+gKAv4pNiTPWKagKmAoAmE1bwVbNbBvdleSLnfjRno1xxXpafiRBg3YgSz5Ad1WuZAZ+1G51WhMLjx+Nxal9X8z88DmYBmocwN04aM09jn4hm8/pmg7fK1AEiQ9fGXT90Aj3LWDhP2d31/61jAqKhua4AInBL03ck4o=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=OXjwN8gxsBMTNMdXVFj2i7qIII85dtFraQEUEYcAvJM347F3IsApuiqn6j5n+fiVEdUseeE8WIWkaYd+Sb4dQZODBZKw5SD61UG4PC++TGFHIqZqz7Aa1nP+mVcAGPEOa0bFkMsD5OSb8r0/mkx2bluTVK7rm7Y9qHSMrVIWQo8=;
X-YMail-OSG: Y1eAM0IVM1nqtl86rR3sS1mW0H466Q2qqa5LwRwl92ZT6Zv
Oi1v_JbGqG0Fr4zMDe61lCAmnB31EmrCBGgSse1XfvN_jbgR5iGk49EvSHb1
DePSO882s_1sBKm5kL1tDPwLlbyU_bAQk5QBssUh627Y_JHATUwfVRABMP97
I5TGWu0FnFCpWzy.3fZq2eABmfyTZUl4vVasBflFc3AECWbGR0newpkF1YYt
SGO9mz.VX2FU1Jnh5TOJUm1xj5B1QXRocmKOExKfh.WiSmdtYlXYUpPCjfQK
vgRqscLjlpV790QjsgDLPuX1oey_thZoELibL3FfMpGkKAhBpB4wmkKr7TNy
OQvxiwcOLn082k9XM22.ju.bU.HbNPrlG1rXIyU__cEDJF69iqSNyKwh2cEF
chYShnQWuHiTtj_MNRvgpqWHkUGmdcYXaLB.5H4TYjegBDftRAG.Fww.0dIy
iQe8YRQ--
Received: from [41.150.164.224] by web194003.mail.sg3.yahoo.com via HTTP; Sat, 25 May 2013 03:49:27 SGT
X-Rocket-MIMEInfo: 002.001,CgpBdHRuOg0KCg0KClRha2Ugbm90ZSB0aGF0IHRoZSBOaWdlcmlhbiBHb3Zlcm5tZW50IGVudGVyZWQgaW50byBhIG11dHVhbCBhZ3JlZW1lbnQgd2l0aCB0aGUKU291dGggQWZyaWNhbiBHb3Zlcm5tZW50IHRoYXQgeW91ciBmdW5kIHZhbHVlZCBhdCAkMTAgTWlsbGlvbiBiZSB0cmFuc2ZlcnJlZCB0bwp5b3UgZGlyZWN0bHkgZnJvbSBTb3V0aCBBZnJpY2EgaGVyZSBkdWUgdG8gdGhlIGxhcHNlcyBpbiB0aGUgTmlnZXJpYSBHb3Zlcm5tZW50CmFuZCBpdHMgZmFpbGVkIHN0YXRlIHNvIHdlIGFkdmlzZSB5b3UBMAEBAQE-
X-RocketYMMF: webmazaber
X-Mailer: YahooMailClassic/15.1.8 YahooMailWebService/0.8.144.546
Message-ID: <[email protected]>
Date: Sat, 25 May 2013 03:49:27 +0800 (SGT)
From: Reserve Bank <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-792724595-1274101253-1369424967=:32126"
X-Spam-Status: Yes, score=7.6
X-Spam-Score: 76
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Take note that the Nigerian Government entered into
a mutual agreement with the South African Government that your fund valued
at $10 Million be transferred to you directly from South Africa here due
to the lapses in the Nigeria Government and its failed state so we advise
you to state your banking details for the transfer to be carried out in your
behalf this morning from here in South Africa. [...]
Content analysis details: (7.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webmazaber[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[106.10.151.61 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(federalreservepayingcentre1[at]hotmail.com
)
0.9 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1731]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
4.0 MONEY_FROM_41 Lots of money from Africa
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT DETAILS
---792724595-1274101253-1369424967=:32126
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Attn:
Take note that the Nigerian Government entered into a mutual agreement with the
South African Government that your fund valued at $10 Million be transferred to
you directly from South Africa here due to the lapses in the Nigeria Government
and its failed state so we advise you to state your banking details for the
transfer to be carried out in your behalf this morning from here in South
Africa.
Thank you
Mr E L Kganyago
Deputy Governor???
South African Reserve Bank, Paying Canter
Envelope-to:
Delivery-date: Fri, 24 May 2013 12:49:30 -0700
Received: from nm35-vm6.bullet.mail.sg3.yahoo.com ([106.10.151.61]:45965)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1UfxzU-0003uE-RA
for ; Fri, 24 May 2013 12:49:30 -0700
Received: from [106.10.166.63] by nm35.bullet.mail.sg3.yahoo.com with NNFMP; 24 May 2013 19:49:27 -0000
Received: from [106.10.151.123] by tm20.bullet.mail.sg3.yahoo.com with NNFMP; 24 May 2013 19:49:27 -0000
Received: from [127.0.0.1] by omp1005.mail.sg3.yahoo.com with NNFMP; 24 May 2013 19:49:27 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 32178 invoked by uid 60001); 24 May 2013 19:49:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1369424967; bh=lj8vbtyLVTLuyunLaQpH0zydtX6/9ojY6BAfYI7S+7A=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=syLmjkHq+gKAv4pNiTPWKagKmAoAmE1bwVbNbBvdleSLnfjRno1xxXpafiRBg3YgSz5Ad1WuZAZ+1G51WhMLjx+Nxal9X8z88DmYBmocwN04aM09jn4hm8/pmg7fK1AEiQ9fGXT90Aj3LWDhP2d31/61jAqKhua4AInBL03ck4o=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=OXjwN8gxsBMTNMdXVFj2i7qIII85dtFraQEUEYcAvJM347F3IsApuiqn6j5n+fiVEdUseeE8WIWkaYd+Sb4dQZODBZKw5SD61UG4PC++TGFHIqZqz7Aa1nP+mVcAGPEOa0bFkMsD5OSb8r0/mkx2bluTVK7rm7Y9qHSMrVIWQo8=;
X-YMail-OSG: Y1eAM0IVM1nqtl86rR3sS1mW0H466Q2qqa5LwRwl92ZT6Zv
Oi1v_JbGqG0Fr4zMDe61lCAmnB31EmrCBGgSse1XfvN_jbgR5iGk49EvSHb1
DePSO882s_1sBKm5kL1tDPwLlbyU_bAQk5QBssUh627Y_JHATUwfVRABMP97
I5TGWu0FnFCpWzy.3fZq2eABmfyTZUl4vVasBflFc3AECWbGR0newpkF1YYt
SGO9mz.VX2FU1Jnh5TOJUm1xj5B1QXRocmKOExKfh.WiSmdtYlXYUpPCjfQK
vgRqscLjlpV790QjsgDLPuX1oey_thZoELibL3FfMpGkKAhBpB4wmkKr7TNy
OQvxiwcOLn082k9XM22.ju.bU.HbNPrlG1rXIyU__cEDJF69iqSNyKwh2cEF
chYShnQWuHiTtj_MNRvgpqWHkUGmdcYXaLB.5H4TYjegBDftRAG.Fww.0dIy
iQe8YRQ--
Received: from [41.150.164.224] by web194003.mail.sg3.yahoo.com via HTTP; Sat, 25 May 2013 03:49:27 SGT
X-Rocket-MIMEInfo: 002.001,CgpBdHRuOg0KCg0KClRha2Ugbm90ZSB0aGF0IHRoZSBOaWdlcmlhbiBHb3Zlcm5tZW50IGVudGVyZWQgaW50byBhIG11dHVhbCBhZ3JlZW1lbnQgd2l0aCB0aGUKU291dGggQWZyaWNhbiBHb3Zlcm5tZW50IHRoYXQgeW91ciBmdW5kIHZhbHVlZCBhdCAkMTAgTWlsbGlvbiBiZSB0cmFuc2ZlcnJlZCB0bwp5b3UgZGlyZWN0bHkgZnJvbSBTb3V0aCBBZnJpY2EgaGVyZSBkdWUgdG8gdGhlIGxhcHNlcyBpbiB0aGUgTmlnZXJpYSBHb3Zlcm5tZW50CmFuZCBpdHMgZmFpbGVkIHN0YXRlIHNvIHdlIGFkdmlzZSB5b3UBMAEBAQE-
X-RocketYMMF: webmazaber
X-Mailer: YahooMailClassic/15.1.8 YahooMailWebService/0.8.144.546
Message-ID: <[email protected]>
Date: Sat, 25 May 2013 03:49:27 +0800 (SGT)
From: Reserve Bank <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-792724595-1274101253-1369424967=:32126"
X-Spam-Status: Yes, score=7.6
X-Spam-Score: 76
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Take note that the Nigerian Government entered into
a mutual agreement with the South African Government that your fund valued
at $10 Million be transferred to you directly from South Africa here due
to the lapses in the Nigeria Government and its failed state so we advise
you to state your banking details for the transfer to be carried out in your
behalf this morning from here in South Africa. [...]
Content analysis details: (7.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webmazaber[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[106.10.151.61 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(federalreservepayingcentre1[at]hotmail.com
)
0.9 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1731]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
4.0 MONEY_FROM_41 Lots of money from Africa
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT DETAILS
---792724595-1274101253-1369424967=:32126
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Attn:
Take note that the Nigerian Government entered into a mutual agreement with the
South African Government that your fund valued at $10 Million be transferred to
you directly from South Africa here due to the lapses in the Nigeria Government
and its failed state so we advise you to state your banking details for the
transfer to be carried out in your behalf this morning from here in South
Africa.
Thank you
Mr E L Kganyago
Deputy Governor???
South African Reserve Bank, Paying Canter
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces