#375057 by buried under 419s
Fri Oct 19, 2018 8:35 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id gP7rEnpQyluRbgAAjbubUg
for <>; Fri, 19 Oct 2018 14:45:30 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 19 Oct 2018 14:45:30 -0700
Received: from sonic314-14.consmr.mail.bf2.yahoo.com ([74.6.132.124]:38909)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gDcaH-0007Ln-GS
for ; Fri, 19 Oct 2018 14:45:30 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1539985488; bh=zjU6zWTXBBmiD4LI7NsRcSFTtozq4GEsEPxp61umGBU=; h=Date:From:Subject:References:From:Subject; b=ixNIr/eq8c0zNb+i4hBxFa82iOm5Dirtlfr5cFkLgU3R7aft8HiTMcfOv+R+t8LZhKNFd4NUnOzigcI7kmBPxXPu9xKBPesOXRkY7fUuQMK6ia0aHl7kACU68mtGtyy5CiTNJbuDoI336Tuof/BM83KsbTu0HgpyaT/z5x+MmQy1KZ+K6Xe+2cbIKsnMZnuPErzVWjcGKkLBNsP+zkiuXgn/r65d/CJaGiwaeIicjpcElNi6XVgjbxq5H3BZrFJf7x2tp4t+t2VIG9vAS8e/NCD5ITLV0YLSexumYSvb2pLgzXQZU5MSqbwU9PMBS1fRNnU1CWnX50NAWDE4kgmLCg==
X-YMail-OSG: 05IcktcVM1mAGIenBKsASWFykr7iJUpPMBf5WfZ2j7iYjlNv7f26trQSE2W2pyG
MO0By6Y04UMbaNj8XbqJlTwHKBRFevqY8FhUBSJG5BxETqQ_cSG7iuwk9ATfShepW1bVtizxXdMX
2eqddBQCRHIf8fxt31_8gbNSBQEKDjrJcyq1rt9St_A8GjLzmkt3R9zLgNf21evkimuhmfcrG1bx
zvKCwtCNZ15kHEkhQ7pMsridN4wGCXNLGz_0IarWSGQTyzeIn8oPX8qSGTYEOPwT2W8EerPvyRaC
8jHb4zFJ797QSjQdiAwG0T.WEbZzFkIrdHsRMQOqtPccW3Yci_JBtdbz749AP3JzJJILC0WX77PM
fevF6lbqr_wLCcEdACgYc6dmIpNjxMh_L4Bgk7XJ9fX8VFa_QN8lpGNkzaGRK1NhAKUZ_KcLOcML
eONG_jSwKMcrkw7FOTv5rZJT8NzD.4.wKQFeKUhDf9l2Jp21juM1fU52gjuCPSwUv9.BwGn9t.6i
OONxKWL3q53dUDDFNUpVQ2rRVW5pZGbe5LfKkIzh9oXPf6BfbDkB6h5XYdPdHGLlxRJTdNEMDKyA
ZSPRFMdR5rD3dloUQ5mb0nrEPXcM41vCruQJkJ5zgxTAFTcmREVQbOEWktw6ji1dsxJ.4NKfwYnK
9zBIA4bSqEcSzc_BVPq.V5sqjTwIGQrcFyuemdSIU8hsYZTbnMNVto3CmYg0s1dpr4BJ9Yc0ohb5
6TO59Jvio9W8gyqJJhmsO97oVZaQYV8C7IOLisYiipqZiZF7yqwbCgSO39BTjAYKoTRsx8h_edHm
SnVRmrAQiSTaAiyKh9bt87D7y8daBNMWWxZ1.kjUwHUdQUVhStm3M2KH3EMlj9bgfEQ0yvqo8qJi
L0HNEt5ueF7w_QND7Hi7Xnv6nVtFC17o5Y50hOqbSLTrKWUL.LeFC60eedNFmGzi3VURZg7HtmwB
Vt___u8y7jHedTRVWpuBH8IwRPASxuUAgA7K4_L7KZsfMc4iDQ1fgkOlFC0KHYN2jonGVx9V0NHn
hDD4zQalswAo222xUgMfSC98kN07OjtAnUCAnWVIj5cLEYz0LgA--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic314.consmr.mail.bf2.yahoo.com with HTTP; Fri, 19 Oct 2018 21:44:48 +0000
Date: Fri, 19 Oct 2018 21:44:45 +0000 (UTC)
From: Kemi Adeosun <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_6936994_1717633383.1539985485062"
References: <[email protected]>
X-Mailer: WebService/1.1.12579 YMailNorrin Mozilla/5.0 (Windows NT 6.1; rv:62.0) Gecko/20100101 Firefox/62.0
Content-Length: 1816
X-Spam-Status: Yes, score=11.7
X-Spam-Score: 117
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir, President Buhari has ordered that all delayed payment
should be release to the various beneficiaries based in United States of
America with immediate effect via ATM payment in the United States. [...]
Content analysis details: (11.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (kemipay123[at]yahoo.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(kemipay123[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.6.132.124 listed in list.dnswl.org]
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** FINAL PRESIDENTIAL PAYMENT ORDER
Dear Sir,
President Buhari has ordered that all delayed payment should be release to the
various beneficiaries based in United States of America with immediate effect via
ATM payment in the United States.
Here is the contact details of the Financier in United States of America in Charge
of ATM CARD PAYMENT below.
REV, HARRISON.
TEL:+15712957690.
EMAIL:[email protected]
Please don't be left out in this life time opportunity as soon as you contact the
REV keep me posted and copy all your emails and conversion with REV.HARRISON on my
private email [email protected] for your file update.
Regards,
Kemi Adeosun.
Delivered-To:
Received: from
by with LMTP id gP7rEnpQyluRbgAAjbubUg
for <>; Fri, 19 Oct 2018 14:45:30 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 19 Oct 2018 14:45:30 -0700
Received: from sonic314-14.consmr.mail.bf2.yahoo.com ([74.6.132.124]:38909)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gDcaH-0007Ln-GS
for ; Fri, 19 Oct 2018 14:45:30 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1539985488; bh=zjU6zWTXBBmiD4LI7NsRcSFTtozq4GEsEPxp61umGBU=; h=Date:From:Subject:References:From:Subject; b=ixNIr/eq8c0zNb+i4hBxFa82iOm5Dirtlfr5cFkLgU3R7aft8HiTMcfOv+R+t8LZhKNFd4NUnOzigcI7kmBPxXPu9xKBPesOXRkY7fUuQMK6ia0aHl7kACU68mtGtyy5CiTNJbuDoI336Tuof/BM83KsbTu0HgpyaT/z5x+MmQy1KZ+K6Xe+2cbIKsnMZnuPErzVWjcGKkLBNsP+zkiuXgn/r65d/CJaGiwaeIicjpcElNi6XVgjbxq5H3BZrFJf7x2tp4t+t2VIG9vAS8e/NCD5ITLV0YLSexumYSvb2pLgzXQZU5MSqbwU9PMBS1fRNnU1CWnX50NAWDE4kgmLCg==
X-YMail-OSG: 05IcktcVM1mAGIenBKsASWFykr7iJUpPMBf5WfZ2j7iYjlNv7f26trQSE2W2pyG
MO0By6Y04UMbaNj8XbqJlTwHKBRFevqY8FhUBSJG5BxETqQ_cSG7iuwk9ATfShepW1bVtizxXdMX
2eqddBQCRHIf8fxt31_8gbNSBQEKDjrJcyq1rt9St_A8GjLzmkt3R9zLgNf21evkimuhmfcrG1bx
zvKCwtCNZ15kHEkhQ7pMsridN4wGCXNLGz_0IarWSGQTyzeIn8oPX8qSGTYEOPwT2W8EerPvyRaC
8jHb4zFJ797QSjQdiAwG0T.WEbZzFkIrdHsRMQOqtPccW3Yci_JBtdbz749AP3JzJJILC0WX77PM
fevF6lbqr_wLCcEdACgYc6dmIpNjxMh_L4Bgk7XJ9fX8VFa_QN8lpGNkzaGRK1NhAKUZ_KcLOcML
eONG_jSwKMcrkw7FOTv5rZJT8NzD.4.wKQFeKUhDf9l2Jp21juM1fU52gjuCPSwUv9.BwGn9t.6i
OONxKWL3q53dUDDFNUpVQ2rRVW5pZGbe5LfKkIzh9oXPf6BfbDkB6h5XYdPdHGLlxRJTdNEMDKyA
ZSPRFMdR5rD3dloUQ5mb0nrEPXcM41vCruQJkJ5zgxTAFTcmREVQbOEWktw6ji1dsxJ.4NKfwYnK
9zBIA4bSqEcSzc_BVPq.V5sqjTwIGQrcFyuemdSIU8hsYZTbnMNVto3CmYg0s1dpr4BJ9Yc0ohb5
6TO59Jvio9W8gyqJJhmsO97oVZaQYV8C7IOLisYiipqZiZF7yqwbCgSO39BTjAYKoTRsx8h_edHm
SnVRmrAQiSTaAiyKh9bt87D7y8daBNMWWxZ1.kjUwHUdQUVhStm3M2KH3EMlj9bgfEQ0yvqo8qJi
L0HNEt5ueF7w_QND7Hi7Xnv6nVtFC17o5Y50hOqbSLTrKWUL.LeFC60eedNFmGzi3VURZg7HtmwB
Vt___u8y7jHedTRVWpuBH8IwRPASxuUAgA7K4_L7KZsfMc4iDQ1fgkOlFC0KHYN2jonGVx9V0NHn
hDD4zQalswAo222xUgMfSC98kN07OjtAnUCAnWVIj5cLEYz0LgA--
Received: from sonic.gate.mail.ne1.yahoo.com by sonic314.consmr.mail.bf2.yahoo.com with HTTP; Fri, 19 Oct 2018 21:44:48 +0000
Date: Fri, 19 Oct 2018 21:44:45 +0000 (UTC)
From: Kemi Adeosun <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_6936994_1717633383.1539985485062"
References: <[email protected]>
X-Mailer: WebService/1.1.12579 YMailNorrin Mozilla/5.0 (Windows NT 6.1; rv:62.0) Gecko/20100101 Firefox/62.0
Content-Length: 1816
X-Spam-Status: Yes, score=11.7
X-Spam-Score: 117
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir, President Buhari has ordered that all delayed payment
should be release to the various beneficiaries based in United States of
America with immediate effect via ATM payment in the United States. [...]
Content analysis details: (11.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (kemipay123[at]yahoo.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(kemipay123[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.6.132.124 listed in list.dnswl.org]
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** FINAL PRESIDENTIAL PAYMENT ORDER
Dear Sir,
President Buhari has ordered that all delayed payment should be release to the
various beneficiaries based in United States of America with immediate effect via
ATM payment in the United States.
Here is the contact details of the Financier in United States of America in Charge
of ATM CARD PAYMENT below.
REV, HARRISON.
TEL:+15712957690.
EMAIL:[email protected]
Please don't be left out in this life time opportunity as soon as you contact the
REV keep me posted and copy all your emails and conversion with REV.HARRISON on my
private email [email protected] for your file update.
Regards,
Kemi Adeosun.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces