by buried under 419s
Sun Oct 13, 2013 9:36 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 13 Oct 2013 18:17:48 -0700
Received: from [65.52.115.168] (port=1056 helo=ns.hilago.com)
by
with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1VVWn6-0000Zf-2R
for ; Sun, 13 Oct 2013 18:17:48 -0700
Received: from localhost ([127.0.0.1]:58297)
by hilago with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VVWlK-000F62-6m; Mon, 14 Oct 2013 01:15:58 +0000
Received: from 41.71.217.130 ([41.71.217.130]) by 65.52.115.168 (Horde
Framework) with HTTP; Mon, 14 Oct 2013 01:15:56 +0000
Message-ID: <[email protected]>
Date: Mon, 14 Oct 2013 01:15:56 +0000
From: "Dr. John Pedro" <[email protected]>
To: undisclosed-recipients:;
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.11)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns.hilago.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com
X-Get-Message-Sender-Via: ns.hilago.com: authenticated_id: [email protected]
X-Spam-Status: Yes, score=12.8
X-Spam-Score: 128
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, We have been mandated to recover the entire outstanding
unpaid fund being owed to Governments, companies and Individuals all over
the world through contracts, Inheritance and Lottery Winning Prize Awards.
However, In a consented agreement with World Bank and the International Monetary
Fund (IMF),the INTERNATIONAL DEBTS RECOVERY AND PAYMENT RECONCILIATION BUREAU,
has been appointed to foresee all pending stalled fund payments and we're
also responsible for investigating all scam reports, the legitimacy of contracts,
inheritance and lotto winning claims by companies and individuals and directs
the paying authorities (Banks) worldwide to make immediate payment of verified
claims to the beneficiaries without further delay or hitch. [...]
Content analysis details: (12.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(dr.johnpedro52[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (dr.johnpedro52[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 TVD_PH_BODY_META TVD_PH_BODY_META
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
3.3 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Hello..From Dr. John
Hello,
We have been mandated to recover the entire outstanding unpaid fund
being owed to Governments, companies and Individuals all over the
world through contracts, Inheritance and Lottery Winning Prize Awards.
However, In a consented agreement with World Bank and the
International Monetary Fund (IMF),the INTERNATIONAL DEBTS RECOVERY AND
PAYMENT RECONCILIATION BUREAU, has been appointed to foresee all
pending stalled fund payments and we're also responsible for
investigating all scam reports, the legitimacy of contracts,
inheritance and lotto winning claims by companies and individuals and
directs the paying authorities (Banks) worldwide to make immediate
payment of verified claims to the beneficiaries without further delay
or hitch.
So, be advised that a special payment arrangement has been made to
pay all the unpaid beneficiaries through our newly established payment
Center in Europe, South Africa and Ghana. As a matter of fact, you
have been selected and your name was short-listed among other
beneficiaries to benefit from this newly invented payment program for
all unpaid beneficiaries all over the world to receive their unpaid
fund payment in this quarter.
We have therefore, forwarded your Payment file to our payment
Center in Africa, to commence the release process of your fund
payment. Therefore, in order to affirm the legitimacy of this payment
release process, you are therefore required to visit our payment
Centers in Africa or Europe to ensure the legality and authenticity of
this payment process. Your presence will surely justify that this very
arrangement is indeed genuine.
Note: that you're not expected to pay any upfront fee before you
visit our payment center in Africa or Europe, for any official process
before your
fund payment will be officially released and paid to you. It has also
been agreed that the INTERNATIONAL DEBTS RECOVERY AND PAYMENT
RECONCILIATION BUREAU, will handle all processes legitimately to
assist beneficiaries to receive their payments.
Be also informed that as soon as you meet with the officials in
our payment center and conclude the endorsement/signing of your
payment release documents, you'll be guided immediately by the
officials on how you will proceed to the bank for immediate release of
your payment.
You're also advised to send urgently your full names, Address and
contact phone number to enable us vet them and prepare your payment
schedule, and send to you immediately because there is no time left.
Finally, you're advised to contact this office immediately and
re-confirm to us your direct telephone number, if you're okay with
this arrangement so that we can direct you on the next line of action.
We look forward to your earliest response.
Yours Sincerely,
Dr. John Pedro
INTL Debts Recovery &
Payment Reconciliation Bureau
[email protected]
Envelope-to:
Delivery-date: Sun, 13 Oct 2013 18:17:48 -0700
Received: from [65.52.115.168] (port=1056 helo=ns.hilago.com)
by
with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1VVWn6-0000Zf-2R
for ; Sun, 13 Oct 2013 18:17:48 -0700
Received: from localhost ([127.0.0.1]:58297)
by hilago with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80.1)
(envelope-from <[email protected]>)
id 1VVWlK-000F62-6m; Mon, 14 Oct 2013 01:15:58 +0000
Received: from 41.71.217.130 ([41.71.217.130]) by 65.52.115.168 (Horde
Framework) with HTTP; Mon, 14 Oct 2013 01:15:56 +0000
Message-ID: <[email protected]>
Date: Mon, 14 Oct 2013 01:15:56 +0000
From: "Dr. John Pedro" <[email protected]>
To: undisclosed-recipients:;
MIME-Version: 1.0
Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.11)
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns.hilago.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com
X-Get-Message-Sender-Via: ns.hilago.com: authenticated_id: [email protected]
X-Spam-Status: Yes, score=12.8
X-Spam-Score: 128
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, We have been mandated to recover the entire outstanding
unpaid fund being owed to Governments, companies and Individuals all over
the world through contracts, Inheritance and Lottery Winning Prize Awards.
However, In a consented agreement with World Bank and the International Monetary
Fund (IMF),the INTERNATIONAL DEBTS RECOVERY AND PAYMENT RECONCILIATION BUREAU,
has been appointed to foresee all pending stalled fund payments and we're
also responsible for investigating all scam reports, the legitimacy of contracts,
inheritance and lotto winning claims by companies and individuals and directs
the paying authorities (Banks) worldwide to make immediate payment of verified
claims to the beneficiaries without further delay or hitch. [...]
Content analysis details: (12.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(dr.johnpedro52[at]yahoo.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (dr.johnpedro52[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 TVD_PH_BODY_META TVD_PH_BODY_META
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
3.3 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Hello..From Dr. John
Hello,
We have been mandated to recover the entire outstanding unpaid fund
being owed to Governments, companies and Individuals all over the
world through contracts, Inheritance and Lottery Winning Prize Awards.
However, In a consented agreement with World Bank and the
International Monetary Fund (IMF),the INTERNATIONAL DEBTS RECOVERY AND
PAYMENT RECONCILIATION BUREAU, has been appointed to foresee all
pending stalled fund payments and we're also responsible for
investigating all scam reports, the legitimacy of contracts,
inheritance and lotto winning claims by companies and individuals and
directs the paying authorities (Banks) worldwide to make immediate
payment of verified claims to the beneficiaries without further delay
or hitch.
So, be advised that a special payment arrangement has been made to
pay all the unpaid beneficiaries through our newly established payment
Center in Europe, South Africa and Ghana. As a matter of fact, you
have been selected and your name was short-listed among other
beneficiaries to benefit from this newly invented payment program for
all unpaid beneficiaries all over the world to receive their unpaid
fund payment in this quarter.
We have therefore, forwarded your Payment file to our payment
Center in Africa, to commence the release process of your fund
payment. Therefore, in order to affirm the legitimacy of this payment
release process, you are therefore required to visit our payment
Centers in Africa or Europe to ensure the legality and authenticity of
this payment process. Your presence will surely justify that this very
arrangement is indeed genuine.
Note: that you're not expected to pay any upfront fee before you
visit our payment center in Africa or Europe, for any official process
before your
fund payment will be officially released and paid to you. It has also
been agreed that the INTERNATIONAL DEBTS RECOVERY AND PAYMENT
RECONCILIATION BUREAU, will handle all processes legitimately to
assist beneficiaries to receive their payments.
Be also informed that as soon as you meet with the officials in
our payment center and conclude the endorsement/signing of your
payment release documents, you'll be guided immediately by the
officials on how you will proceed to the bank for immediate release of
your payment.
You're also advised to send urgently your full names, Address and
contact phone number to enable us vet them and prepare your payment
schedule, and send to you immediately because there is no time left.
Finally, you're advised to contact this office immediately and
re-confirm to us your direct telephone number, if you're okay with
this arrangement so that we can direct you on the next line of action.
We look forward to your earliest response.
Yours Sincerely,
Dr. John Pedro
INTL Debts Recovery &
Payment Reconciliation Bureau
[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces