[email protected] Mr Lawrence James

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 29 Jul 2013 01:07:38 -0700
Received: from nm10.bullet.mail.tp2.yahoo.com ([203.188.200.211]:24372)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1V3iUM-0006Fv-DN
for; Mon, 29 Jul 2013 01:07:37 -0700
Received: from [203.188.200.81] by nm10.bullet.mail.tp2.yahoo.com with NNFMP; 29 Jul 2013 08:07:24 -0000
Received: from [119.42.242.53] by tm2.bullet.mail.tp2.yahoo.com with NNFMP; 29 Jul 2013 08:07:24 -0000
Received: from [127.0.0.1] by omp1002.mail.cnh.yahoo.com with NNFMP; 29 Jul 2013 08:07:24 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 80265 invoked by uid 60001); 29 Jul 2013 08:07:24 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1375085243; bh=z+1tuFVwkbgg7/cuDvn2uVIJbKAWPmg93uQzqHuWD0c=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=j8KjqBhgNz6kv0epqmrXSFfp8EWPnA4bogxHibXWINnIz5kk8+sxdibt2SrrcPxHz/5fwamfG/sp9LQAJ+LM+ec5rRFPf57L1N99a9j57Ajw8faybUBTWy4v3wgZYLlsnJuIY3Vuqn1qi5/e7a7CdJ4iviW90nZGcWDkCMnGZ78=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.cn;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=xv4x9fpuxInLXKS270WnckjmpfKkjFJoIZaGrZsHTkfWaQNvE87/Ad9JBWcfkD3XwZxiTwcB30O5Pg2lt2zQtDLzq1ZYw9vbKEAZbYuFfYYRpH2oUx512pJqbk3b0GcX3WI+cugYYUQX/gPuEUDI6yDhgyoKn9efJj7HcbLRIZ8= ;
X-YMail-OSG: O3LSvm0VM1mFmIRUvlxlEH0blzDZQ4yKl4zYbT1qf7Oj2cW
5C6KQnq.h.d_9wv_cOyH8
Received: from [41.216.40.128] by web92414.mail.cnh.yahoo.com via HTTP; Mon, 29 Jul 2013 16:07:23 CST
X-Rocket-MIMEInfo: 002.001,SGVsbG8gbXkgZnJpZW5kLAoKQXJlCiB5b3UgcmVhZHkgdG8gcGljayB1cCB0aGlzICQ1MDAwLjAwIHNlbnQgdG9kYXkuIFdlIGhhdmUgY29uY2x1ZGVkIGFsbCAKYXJyYW5nZW1lbnRzIHRvIGVmZmVjdCB5b3VyIHBheW1lbnQgdGhyb3VnaCBXZXN0ZXJuIFVuaW9uIG9uIGEgbWF4aW11bSAKYW1vdW50IG9mICQ1LDAwMC4wMCBkYWlseSB1bnRpbCB0aGUgJDk1MCwwMDAuMDAgaXMgY29tcGxldGVseSAKdHJhbnNmZXJyZWQuIFNvIHlvdSBhcmUgYWR2aWNlIHRvIGNvbnRhY3QgdGhlIFdlc3Rlcm4gVW5pb24gb2YBMAEBAQE-
X-Mailer: YahooMailWebService/0.8.148.557
Message-ID: <[email protected]>
Date: Mon, 29 Jul 2013 16:07:23 +0800 (CST)
From: Lawrence James <[email protected]>
Reply-To: Lawrence James <[email protected]>
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1138787684-632112920-1375085243=:73684"
X-Spam-Status: Yes, score=8.5
X-Spam-Score: 85
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hello my friend, Are you ready to pick up this $5000.00 sent
today. We have concluded all arrangements to effect your payment through
Western Union on a maximum amount of $5,000.00 daily until the $950,000.00
is completely transferred. So you are advice to contact the Western Union
office Cotonou Benin republic with below information; [...]

Content analysis details: (8.5 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.188.200.211 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.216.40.128 listed in zen.spamhaus.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: socgenyu.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(officemail78[at]yahoo.cn)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(lawrence james <western.union81[at]live.com>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (officemail78[at]yahoo.cn)
1.1 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.3959]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_REMOTE_IMAGE Message contains an external image
4.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Contact The Western Union Agent Now For Your Fund

--1138787684-632112920-1375085243=:73684
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Hello my friend,

Are
you ready to pick up this $5000.00 sent today. We have concluded all
arrangements to effect your payment through Western Union on a maximum
amount of $5,000.00 daily until the $950,000.00 is completely
transferred. So you are advice to contact the Western Union office
Cotonou Benin republic with below information;

Western union Agent: Dr Thomas Mark
Phone number: +229-68771678

E-mail: [email protected]

Though,
Dr Thomas Mark sent you $5,000.00 in your name today in my present, so
contact him and ask him to give you the MTCN, Sender name with the
question and answer to pick up the $5,000.00 sent and then start
transferring your total money to you as I directed them. Call or Email
them now with your information as stated below.

Your full name........
Your full address......
Your Phone number......

Let me know as soon as you received all your funds.

Thanks,
Mr Lawrence James. For Honorable Minister of Finance.