by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id qNL0KxSEL1ytQQAAjbubUg
for <>; Fri, 04 Jan 2019 08:04:36 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 04 Jan 2019 08:04:36 -0800
Received: from sonic309-47.consmr.mail.sg3.yahoo.com ([106.10.244.110]:43982)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gfRxX-0004Mp-Fs
for ; Fri, 04 Jan 2019 08:04:36 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1546617829; bh=iogUcIYBZwBM2o/EL01iXypDCF8BsNkt9j6M3xpH/go=; h=Date:From:Reply-To:Subject:References:From:Subject; b=a1Ub2uXshK1DRaieEjEDXRzw3dl0sklO/Vm5psg1wMF6Vmn7ZIUHHxSltly1mvxeOBT9NQrzOiw06XJBviv24DHpc55/yN9Cml5xIyxyZSrlJr0nWo0wIeZFvu4N7aH3vnXnOcxCx2SXaJgM36Mx2lKb+7wsmKTgEPD3SQtUIosGJJyv1kV0sQ5UTDY/wbHCZjPWGop4AjeMNSCsPFIarXPLvcqgQA6lub0GmbBF9hLOxJlQWsqnBR9+zuAmdUK5sIWkbFHVWf5OVZLFNlMtSlKwvi8+g6EXdeeTYYSOG658JYB9v6h0lSM1U4NudqVZy7Ktq1ZglGIFnfF7sA4CXg==
X-YMail-OSG: pJyN0R0VM1lHU74Hd4AIG3SS.ueFXaJmo.eQkjVGRzs3ZCn5aNlcN5sf3.QKPNx
ZJOXkCh.Al.BYAaPfKMfPxfsoWH31ydaQeGUaQs3lBocB4i73_vWVKvscI9mkBBDF53nyuAFMX28
y6DLxk4sPG2SLXXSanzbzKznusQ81rmVSL6cfc_nljQe24_UusnO1KhaDhoUkp8Fv6xgZp3RCCDP
eHmJj0I6wqvJB7EEne1cXWHrA4xpijNBiatw4SrodgeulMhzVZ58Dy6Yo7IfzvvAyHUAwAtBjhR7
jYWBkE4MYrCpFvFr5TsQrdFwcnSm9bamZZReYP5KsoVU_gaUh2Munb2AtwzDruJJ_oodtraVJbob
sYlP2AbfQv6xzmtNy.sEhMlZqBVD4GThvwfAno4nwl2yCH0B.gEFMVEDOdXhVDGsV6i8DVHJPkCc
dcK1AXv0_wMDJNqOi4NqmpxZ7ItVr9dyApFKDzAtKLaQ3DHCnwd3jho7IsOWQrqdSPEItUVU1zI0
pXq6ScjCcGXl3Zl63RJgTTlBdqWuJ8d4ssjyO5gDhhvP84RMCPxL6tSOfyNVO8GmIt.KvorFtgl4
nfd4m6aT2je5lhuNQbs5rx5U_CqEeH1XxBAmQLXajcQcfKAuJ9vjZ8LBx07vcSr.HbbDAtdFwh1H
VYRUgcT72waFk6Ztn7XISJKmESSih0lAIUyqDhkZgI6Dh8MTs6d.lS7lX83AVWfSmgRe1d2mWAEi
ZSvg1ZCUFv23XTNBBofHUC7OTH7olJyL.VT5zy1u2zTUzRbXa2IFqcRR49v_uWco96bze.a8bI1a
mlsK8XO9mfe9jhDZIPxCAlv1gYQ.I.Z3y6.3bQUcI.a0oMLqlJ8LL7SEjgg.o4rLMSmHa9HBEpHo
sAjeS6fWTS_lO6PuhtY8FUj_Nt.LQjtAn5X4LE9FonQp2VkxqPFoEphnl.xCOtE0AWoIJmV9RtCh
Lu0zKzc5KAeMTJN2JAPBxYo_XV5IBfsa0ph1CyCo7DMveXwvF50aVJ89B10lE9XfoL2N.SdVIHlU
6Wn9EX5vbUtRJESUULBwzJ3dzazTl.Wqm8Azo4OvV7mpSuG.dHGENJXUXbtfQ.r1emluGEsG8DpC
n4kYnv_v.IJ._gvYn5aoSfuVCAxGn7PQ-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.sg3.yahoo.com with HTTP; Fri, 4 Jan 2019 16:03:49 +0000
Date: Fri, 4 Jan 2019 16:01:48 +0000 (UTC)
From: "Mr.PhiliP ALEXA SAFI" <[email protected]>
Reply-To: "Mr.PhiliP ALEXA SAFI" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.12857 YahooMailBasic Mozilla/5.0 (Windows NT 5.1; rv:43.0) Gecko/20100101 Firefox/43.0
Content-Length: 1258
X-Spam-Status: Yes, score=14.6
X-Spam-Score: 146
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention:Sir/Madam, This is to inform you that we have recovered
your foreign inheritance US$10,700.000.00 (Ten million Seven hundred thousand
dollars),from the corrupt foreign bank through the assistant of United Nations
Foreign Debt recovery Committee and it is now deposited with Security Company
in Turkey. [...]
Content analysis details: (14.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (frankwoodjr72[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[106.10.244.110 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(philipalex810[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(frankwoodjr72[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 HK_NAME_FM_MR_MRS No description available.
0.0 YOU_INHERIT Discussing your inheritance
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.6 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
2.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR ONLY OPPORTUNITY TO RECEIVE YOUR FUND
Attention:Sir/Madam,
This is to inform you that we have recovered your foreign inheritance
US$10,700.000.00 (Ten million Seven hundred thousand dollars),from the corrupt
foreign bank through the assistant of United Nations Foreign Debt recovery Committee
and it is now deposited with Security Company in Turkey.
This is to official inform you that you are to travel to Turkey to receive your
payment by cash. It is very important you reply this mail so that you will be able
to inform us when you will be traveling to Turkey to receive your payment without
any delay.AS the year is start in running to I will like us to conclude this
transaction very fast.
However, you shall required to re-confirm the following details as specified below:
Your Full Name:
Your Complete Address:
Zip Code:
P.O.BOX):
Name of City of Residence:
Country:
Direct Telephone Number:
Mobile Number:
Nearest airport:
Working Identity Card/:
AGE:
OCCUPATION:
As soon as I hear from you,I will forward the Security Company in Turkey contact
information for you to contact them.I await your urgent confirmation and
co-operation.
Yours in Service,
Mr.PhiliP ALEXA SAFI
[email protected]
Director of Foreign Payments
Debt Management Office,
Direct Phone:+234-8037124346
Delivered-To:
Received: from
by with LMTP id qNL0KxSEL1ytQQAAjbubUg
for <>; Fri, 04 Jan 2019 08:04:36 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 04 Jan 2019 08:04:36 -0800
Received: from sonic309-47.consmr.mail.sg3.yahoo.com ([106.10.244.110]:43982)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gfRxX-0004Mp-Fs
for ; Fri, 04 Jan 2019 08:04:36 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1546617829; bh=iogUcIYBZwBM2o/EL01iXypDCF8BsNkt9j6M3xpH/go=; h=Date:From:Reply-To:Subject:References:From:Subject; b=a1Ub2uXshK1DRaieEjEDXRzw3dl0sklO/Vm5psg1wMF6Vmn7ZIUHHxSltly1mvxeOBT9NQrzOiw06XJBviv24DHpc55/yN9Cml5xIyxyZSrlJr0nWo0wIeZFvu4N7aH3vnXnOcxCx2SXaJgM36Mx2lKb+7wsmKTgEPD3SQtUIosGJJyv1kV0sQ5UTDY/wbHCZjPWGop4AjeMNSCsPFIarXPLvcqgQA6lub0GmbBF9hLOxJlQWsqnBR9+zuAmdUK5sIWkbFHVWf5OVZLFNlMtSlKwvi8+g6EXdeeTYYSOG658JYB9v6h0lSM1U4NudqVZy7Ktq1ZglGIFnfF7sA4CXg==
X-YMail-OSG: pJyN0R0VM1lHU74Hd4AIG3SS.ueFXaJmo.eQkjVGRzs3ZCn5aNlcN5sf3.QKPNx
ZJOXkCh.Al.BYAaPfKMfPxfsoWH31ydaQeGUaQs3lBocB4i73_vWVKvscI9mkBBDF53nyuAFMX28
y6DLxk4sPG2SLXXSanzbzKznusQ81rmVSL6cfc_nljQe24_UusnO1KhaDhoUkp8Fv6xgZp3RCCDP
eHmJj0I6wqvJB7EEne1cXWHrA4xpijNBiatw4SrodgeulMhzVZ58Dy6Yo7IfzvvAyHUAwAtBjhR7
jYWBkE4MYrCpFvFr5TsQrdFwcnSm9bamZZReYP5KsoVU_gaUh2Munb2AtwzDruJJ_oodtraVJbob
sYlP2AbfQv6xzmtNy.sEhMlZqBVD4GThvwfAno4nwl2yCH0B.gEFMVEDOdXhVDGsV6i8DVHJPkCc
dcK1AXv0_wMDJNqOi4NqmpxZ7ItVr9dyApFKDzAtKLaQ3DHCnwd3jho7IsOWQrqdSPEItUVU1zI0
pXq6ScjCcGXl3Zl63RJgTTlBdqWuJ8d4ssjyO5gDhhvP84RMCPxL6tSOfyNVO8GmIt.KvorFtgl4
nfd4m6aT2je5lhuNQbs5rx5U_CqEeH1XxBAmQLXajcQcfKAuJ9vjZ8LBx07vcSr.HbbDAtdFwh1H
VYRUgcT72waFk6Ztn7XISJKmESSih0lAIUyqDhkZgI6Dh8MTs6d.lS7lX83AVWfSmgRe1d2mWAEi
ZSvg1ZCUFv23XTNBBofHUC7OTH7olJyL.VT5zy1u2zTUzRbXa2IFqcRR49v_uWco96bze.a8bI1a
mlsK8XO9mfe9jhDZIPxCAlv1gYQ.I.Z3y6.3bQUcI.a0oMLqlJ8LL7SEjgg.o4rLMSmHa9HBEpHo
sAjeS6fWTS_lO6PuhtY8FUj_Nt.LQjtAn5X4LE9FonQp2VkxqPFoEphnl.xCOtE0AWoIJmV9RtCh
Lu0zKzc5KAeMTJN2JAPBxYo_XV5IBfsa0ph1CyCo7DMveXwvF50aVJ89B10lE9XfoL2N.SdVIHlU
6Wn9EX5vbUtRJESUULBwzJ3dzazTl.Wqm8Azo4OvV7mpSuG.dHGENJXUXbtfQ.r1emluGEsG8DpC
n4kYnv_v.IJ._gvYn5aoSfuVCAxGn7PQ-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.sg3.yahoo.com with HTTP; Fri, 4 Jan 2019 16:03:49 +0000
Date: Fri, 4 Jan 2019 16:01:48 +0000 (UTC)
From: "Mr.PhiliP ALEXA SAFI" <[email protected]>
Reply-To: "Mr.PhiliP ALEXA SAFI" <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.12857 YahooMailBasic Mozilla/5.0 (Windows NT 5.1; rv:43.0) Gecko/20100101 Firefox/43.0
Content-Length: 1258
X-Spam-Status: Yes, score=14.6
X-Spam-Score: 146
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention:Sir/Madam, This is to inform you that we have recovered
your foreign inheritance US$10,700.000.00 (Ten million Seven hundred thousand
dollars),from the corrupt foreign bank through the assistant of United Nations
Foreign Debt recovery Committee and it is now deposited with Security Company
in Turkey. [...]
Content analysis details: (14.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (frankwoodjr72[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[106.10.244.110 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(philipalex810[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(frankwoodjr72[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 HK_NAME_FM_MR_MRS No description available.
0.0 YOU_INHERIT Discussing your inheritance
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.6 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
2.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR ONLY OPPORTUNITY TO RECEIVE YOUR FUND
Attention:Sir/Madam,
This is to inform you that we have recovered your foreign inheritance
US$10,700.000.00 (Ten million Seven hundred thousand dollars),from the corrupt
foreign bank through the assistant of United Nations Foreign Debt recovery Committee
and it is now deposited with Security Company in Turkey.
This is to official inform you that you are to travel to Turkey to receive your
payment by cash. It is very important you reply this mail so that you will be able
to inform us when you will be traveling to Turkey to receive your payment without
any delay.AS the year is start in running to I will like us to conclude this
transaction very fast.
However, you shall required to re-confirm the following details as specified below:
Your Full Name:
Your Complete Address:
Zip Code:
P.O.BOX):
Name of City of Residence:
Country:
Direct Telephone Number:
Mobile Number:
Nearest airport:
Working Identity Card/:
AGE:
OCCUPATION:
As soon as I hear from you,I will forward the Security Company in Turkey contact
information for you to contact them.I await your urgent confirmation and
co-operation.
Yours in Service,
Mr.PhiliP ALEXA SAFI
[email protected]
Director of Foreign Payments
Debt Management Office,
Direct Phone:+234-8037124346
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
