#322891 by buried under 419s
Mon Mar 20, 2017 8:30 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 20 Mar 2017 09:02:52 -0700
Received: from ns501-vm9.bullet.mail.kks.yahoo.co.jp ([183.79.57.49]:36235)
by with smtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1cpzli-0007gF-2O
for ; Mon, 20 Mar 2017 09:02:51 -0700
Received: from [183.79.100.141] by ns501.bullet.mail.kks.yahoo.co.jp with NNFMP; 20 Mar 2017 16:02:08 -0000
Received: from [183.79.100.134] by t504.bullet.mail.kks.yahoo.co.jp with NNFMP; 20 Mar 2017 16:02:08 -0000
Received: from [127.0.0.1] by omp503.mail.kks.yahoo.co.jp with NNFMP; 20 Mar 2017 16:02:08 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 73811 invoked by uid 60001); 20 Mar 2017 16:02:07 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=yj20050223; d=yahoo.co.jp;
h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:X-YMail-JAS:Sender:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=eZI5iUZF43aRkCK3/Kpw+eOn9v97tt/0mDU22j1k0L/2Fmx4jacILooRPEWTCUZROqWAmuJVmZqQRj6RX1XfbksPpUz/I377cjMLgJ/v2dtEIE+1GnuP2JH+v4ZEgJx0 ;
Message-ID: <[email protected]>
X-YMail-OSG: 0JXcB.AVM1k3xTM_ZipoOzojnHijFRvoT5QzOT1XETsrGfelIkmcx7Ee0.OOFNmJs9gd2pKufTs.mwvW5ihUziBYZLB2o7dXoDzPWTKWhawm2xQnzz6P3COAh6M7QF9hOp.1OzbLpOOkXWXehDhsOfOmPtobrm7Cj28WPl7pODPmgWg96To4_sllGbZ6OM10c7P9uPpQ3V6ZBn1Za7piXykHK5KBjkTP8G0AIxsl4soesXz9O6D8hveil2GyewvcZ32AzVWS60F_6iIsl5uEa.5s_i55AamAfp7ihqR2DEP9esC3YIv.TB0EwKJgXxxWGeE0TZhOjjFIe9nB9SOvGTSrvEIfkP7TEyh6A.HgxJWuaepZU2RevsTgQuc.0ZWvAPw6R4g8GyqSqjoWJ2kW3_SWcuRO5mT5Vl2bQbI39RwBdDAFdTSz6Zm.2KKEqflLhaNbc6B8Brc.9UcAC7URzvdghmbJxKteNSolMH_gevVdbgTdy7oy8gHsttnXnUOn3G48cTipiYqSfE.M1qo978PAVk52MxE8Ynbw0.5XPmMB7CcVpa3HnPyMV.cjS02h4y8GdD6SWw2NnJJBc3KLYtkqpk8vAqrm2L6vl58afPS9.36rlX.uGKzHCfwr1GV8bAVh_wTrqUq06vQHvrUcDO6nJuupXNq_7w1TRGROvlz5OnDAwTYkT7kzBA9oJ3nXAHAjr2s4UDD2AKIvFtefy_DgJDrEeozyFlW2iQuwOpw57DybCL.BgEF1D0NwW1Qr9h9MXq5upRSHIwdAIgAO99CHROz6m924eYOJOQlBITKqjr75RlrdORKk5utIiW0TWDU2MVQT2aItmg.Q
Received: from [41.79.219.213] by web102306.mail.kks.yahoo.co.jp via HTTP; Tue, 21 Mar 2017 01:02:07 JST
X-RocketYMMF: hmogawa2008
X-Mailer: YahooMailWebService/0.8.111_70
X-YMail-JAS: s84Y4FIVM1nnX5TUXIQkupkAWZRkv9X_rARXqJQfB2PCcvp6Cu2u_J9jkqsXgcgB4FS1eHDqhmLlsz3B39cTW3ZlL4BglJ4I4T_o2lgiA6IHPFTxN2_0yvG7UbyY85RJq1Aw
Sender: [email protected]
Date: Tue, 21 Mar 2017 01:02:07 +0900 (JST)
From: Secretary of the Treasury <[email protected]>
Reply-To: Secretary of the Treasury <[email protected]>
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="354682609-76565143-1490025727=:65090"
X-Spam-Status: Yes, score=10.4
X-Spam-Score: 104
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Honorable Beneficiary !!! Congratulations You may
be surprise to receive this mail since you don't know me personally, but
Terner Mnuchin, New Secretary of the Treasury under the U.S. Department of
Mr. Donald Trump, An irrevocable payment guarantee has been issued by the
World Bank Group and the International Monetary Fund (IMF),in your Payment.
we are happy to inform you that based on our recommendation/Instructions;
your complete Inheritance funds USD$5.8M. have been credited in your favor
through ATM VISA CARD. [...]
Content analysis details: (10.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[183.79.57.49 listed in list.dnswl.org]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[183.79.57.49 listed in wl.mailspike.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.79.219.213 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sgeneral751[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (sgeneral751[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Honorable Beneficiary !!!
Attention: Honorable Beneficiary !!!
The Card Center DR. DONALD FRANKLIN JOSEPH, to REPUBLIC OF BENIN, will send you an
ATM Debit Card which you will use to withdraw your Payment of $10.000.00Usd Daily in
any ATM Center, Banks and Union Pay Credit outlets here in USA and the whole world,
you are hereby selected as an honor for this payment approval, which you are to
acknowledge the receipt of this mail in returning the required below to the Logistic
Department by email listed below.
PLEASE CONTACT NEW SELECTED BILL AND EXCHANGE MANAGER
HIS FULL NAME: DR. DONALD FRANKLIN JOSEPH,
OFFICE: THE NEW SELECTED BILL AND EXCHANGE MANAGER,
HIS CONTACT TELEPHONE LINE:+22998264173
Once again for the collection of your AVAILABLE ATM Visa card contact our
representative DR. DONALD FRANKLIN JOSEPH, to enable you confirm your payment
without further delay and note that any other contact you made out side his office
is at your own risk.
You are advised to kindly reply this email with the below details enclosed to help
us process your payment;
1. Your Full name:--------------
2. Your country::--------------
3. Your City:----------------
4. Your Address:---------------------
5. Your Cell phone:--------------------
6. Your Mobile Phone:-------------------
7. Your age--------------------
8. Your sex:----------------------
10. Your Current occupation:----------------
11. A copy of your ID:-------------------
Yours faithfully,
Steven Mnuchin
Secretary of the Treasury
Envelope-to:
Delivery-date: Mon, 20 Mar 2017 09:02:52 -0700
Received: from ns501-vm9.bullet.mail.kks.yahoo.co.jp ([183.79.57.49]:36235)
by with smtp (Exim 4.88)
(envelope-from <[email protected]>)
id 1cpzli-0007gF-2O
for ; Mon, 20 Mar 2017 09:02:51 -0700
Received: from [183.79.100.141] by ns501.bullet.mail.kks.yahoo.co.jp with NNFMP; 20 Mar 2017 16:02:08 -0000
Received: from [183.79.100.134] by t504.bullet.mail.kks.yahoo.co.jp with NNFMP; 20 Mar 2017 16:02:08 -0000
Received: from [127.0.0.1] by omp503.mail.kks.yahoo.co.jp with NNFMP; 20 Mar 2017 16:02:08 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 73811 invoked by uid 60001); 20 Mar 2017 16:02:07 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=yj20050223; d=yahoo.co.jp;
h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:X-YMail-JAS:Sender:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=eZI5iUZF43aRkCK3/Kpw+eOn9v97tt/0mDU22j1k0L/2Fmx4jacILooRPEWTCUZROqWAmuJVmZqQRj6RX1XfbksPpUz/I377cjMLgJ/v2dtEIE+1GnuP2JH+v4ZEgJx0 ;
Message-ID: <[email protected]>
X-YMail-OSG: 0JXcB.AVM1k3xTM_ZipoOzojnHijFRvoT5QzOT1XETsrGfelIkmcx7Ee0.OOFNmJs9gd2pKufTs.mwvW5ihUziBYZLB2o7dXoDzPWTKWhawm2xQnzz6P3COAh6M7QF9hOp.1OzbLpOOkXWXehDhsOfOmPtobrm7Cj28WPl7pODPmgWg96To4_sllGbZ6OM10c7P9uPpQ3V6ZBn1Za7piXykHK5KBjkTP8G0AIxsl4soesXz9O6D8hveil2GyewvcZ32AzVWS60F_6iIsl5uEa.5s_i55AamAfp7ihqR2DEP9esC3YIv.TB0EwKJgXxxWGeE0TZhOjjFIe9nB9SOvGTSrvEIfkP7TEyh6A.HgxJWuaepZU2RevsTgQuc.0ZWvAPw6R4g8GyqSqjoWJ2kW3_SWcuRO5mT5Vl2bQbI39RwBdDAFdTSz6Zm.2KKEqflLhaNbc6B8Brc.9UcAC7URzvdghmbJxKteNSolMH_gevVdbgTdy7oy8gHsttnXnUOn3G48cTipiYqSfE.M1qo978PAVk52MxE8Ynbw0.5XPmMB7CcVpa3HnPyMV.cjS02h4y8GdD6SWw2NnJJBc3KLYtkqpk8vAqrm2L6vl58afPS9.36rlX.uGKzHCfwr1GV8bAVh_wTrqUq06vQHvrUcDO6nJuupXNq_7w1TRGROvlz5OnDAwTYkT7kzBA9oJ3nXAHAjr2s4UDD2AKIvFtefy_DgJDrEeozyFlW2iQuwOpw57DybCL.BgEF1D0NwW1Qr9h9MXq5upRSHIwdAIgAO99CHROz6m924eYOJOQlBITKqjr75RlrdORKk5utIiW0TWDU2MVQT2aItmg.Q
Received: from [41.79.219.213] by web102306.mail.kks.yahoo.co.jp via HTTP; Tue, 21 Mar 2017 01:02:07 JST
X-RocketYMMF: hmogawa2008
X-Mailer: YahooMailWebService/0.8.111_70
X-YMail-JAS: s84Y4FIVM1nnX5TUXIQkupkAWZRkv9X_rARXqJQfB2PCcvp6Cu2u_J9jkqsXgcgB4FS1eHDqhmLlsz3B39cTW3ZlL4BglJ4I4T_o2lgiA6IHPFTxN2_0yvG7UbyY85RJq1Aw
Sender: [email protected]
Date: Tue, 21 Mar 2017 01:02:07 +0900 (JST)
From: Secretary of the Treasury <[email protected]>
Reply-To: Secretary of the Treasury <[email protected]>
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="354682609-76565143-1490025727=:65090"
X-Spam-Status: Yes, score=10.4
X-Spam-Score: 104
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Honorable Beneficiary !!! Congratulations You may
be surprise to receive this mail since you don't know me personally, but
Terner Mnuchin, New Secretary of the Treasury under the U.S. Department of
Mr. Donald Trump, An irrevocable payment guarantee has been issued by the
World Bank Group and the International Monetary Fund (IMF),in your Payment.
we are happy to inform you that based on our recommendation/Instructions;
your complete Inheritance funds USD$5.8M. have been credited in your favor
through ATM VISA CARD. [...]
Content analysis details: (10.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[183.79.57.49 listed in list.dnswl.org]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[183.79.57.49 listed in wl.mailspike.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.79.219.213 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sgeneral751[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (sgeneral751[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Honorable Beneficiary !!!
Attention: Honorable Beneficiary !!!
The Card Center DR. DONALD FRANKLIN JOSEPH, to REPUBLIC OF BENIN, will send you an
ATM Debit Card which you will use to withdraw your Payment of $10.000.00Usd Daily in
any ATM Center, Banks and Union Pay Credit outlets here in USA and the whole world,
you are hereby selected as an honor for this payment approval, which you are to
acknowledge the receipt of this mail in returning the required below to the Logistic
Department by email listed below.
PLEASE CONTACT NEW SELECTED BILL AND EXCHANGE MANAGER
HIS FULL NAME: DR. DONALD FRANKLIN JOSEPH,
OFFICE: THE NEW SELECTED BILL AND EXCHANGE MANAGER,
HIS CONTACT TELEPHONE LINE:+22998264173
Once again for the collection of your AVAILABLE ATM Visa card contact our
representative DR. DONALD FRANKLIN JOSEPH, to enable you confirm your payment
without further delay and note that any other contact you made out side his office
is at your own risk.
You are advised to kindly reply this email with the below details enclosed to help
us process your payment;
1. Your Full name:--------------
2. Your country::--------------
3. Your City:----------------
4. Your Address:---------------------
5. Your Cell phone:--------------------
6. Your Mobile Phone:-------------------
7. Your age--------------------
8. Your sex:----------------------
10. Your Current occupation:----------------
11. A copy of your ID:-------------------
Yours faithfully,
Steven Mnuchin
Secretary of the Treasury
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces