by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id EjBHEOV5Ol7PYgAAibB4EA
(envelope-from <[email protected]>)
for <>; Wed, 05 Feb 2020 03:16:37 -0500
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 05 Feb 2020 03:16:37 -0500
Received: from sonic301-2.consmr.mail.bf2.yahoo.com ([74.6.129.41]:43197)
by m with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1izFrP-0006Yx-Sp
for ; Wed, 05 Feb 2020 03:16:37 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1580890553; bh=tykLa0Pb2nbPoa1cZq/42XySfuTXJy/Qb+cUOcj3CH0=; h=Date:From:Reply-To:Subject:References:From:Subject; b=N5fCfoN57JmzIzQCP3PKxI9tJ7XV5PVGnuXyjbjWaE6uZTPeuXZ/VeXX7YtIVt0oF6SV2ZbiH+gMRRG2ly+EJRQk5RwFJFLziKUZD0Pu/yO2lFdouSUq2UjhK3SE6FcZDQmYqgYv/hmDOey1iVongBoOGWakq2kqASPmt5J6gXWfHe4PCmR4NR+KEAS4kZci7LStLciQ5DChwHw2Y/ibvH2oS/j4TSC/G/J/mWLU8a+1F2Z7karRYjBL5pdJSf1YbTtmrWZppW0nZHN6ZMfv1l2FzUrmhNfRpUoG2DiCIetiF8JcqB0Onc2pDNATiTY7NQgbPEsth0KYD9rBEZfNMg==
X-YMail-OSG: Rw6KoVIVM1mAwdh.2QlfBhn2vr.yN4cpmf2nEHqXEwq.E_p8PFE94tW6Urj.HSc
R_lktVTr6bbvIMfAp0d.vPCOrobo6EW2AhmVQsUWMRSnixmHPzoIvXdqYqiKvk3nUiMyCKZZG9CA
2dg8qSCHOhNPxEwFnD7poZ1NX4pG.UNVLmxYVbJtFbnomcRMZcqtfLwA5jWuIsvw5kKe92oSx0o8
lzZ8hA6uJW60mYndjiBO15E4UrH.SX0DF1gzH7iNsszdae9ojGOatll9hGHWXmy7JKOHqWiT70qJ
IWdRaCsw6LJ7phR24AqoY2vnA6Ef51_7WTT5.hnyoD3pRvhdk1Em.tM0MVfANeHGQXL2k7K.rWJ2
PO3GIb.zD1JuPPb1qHd.cXAe6_O3ijcIOi7PpSV9boOey37SDRIbQABS8vWbLW_QaXnNBdWjw.IF
8FKqbNNsXHzT_bu8LuEDBw_PjBPsxspVJTrvt1w5GySVbjDaCie0ytFYSUd3sMnjUE.Bs_vzePrN
guYVAivU2r5xqw1eqZ4PvM8yDHp53zKIwHtWmwzlgbWsqploxeWnTyyZq1XQCP6sP1j0396mLFqx
xFLTC2J83SwWjZlupUevFh5Nm0Ld6xjpBSPPl6pFSnTWSr0TUAx1PDK4DdLJMf0RRr6TpmRBJM1S
0RlX51vQd86g9CiKgDV0Slqx0jtpoaVCc3YE0P7TtH0BkgPrNjNvrXJPPkHldftMcUCz2SCS3gzF
jE2Oj1MhW.6iVJbQOem8WKahvpJLcd8gQlI.xmI1IWbxZ7Q3RgzZrq6Pyeb9WfGCjDGREVpcM_CO
5BloFd7CQceYZVQgYty6u6WmiUaxXGXJBr02AbLrm1gODIiUwn0qGVgWQr2RBGaFHpJgwia0PeOq
QOPNCyVlGwTr0gHyE3eLoYFgcO3j649tMRU.9A47i7m8CaBWl.DOViUCBCOnDaDDosoTKVoBJxyw
ZgFiU9Ovk_DlfF3jLJsqd2QSebg.4Y.xPQrJO63rIpte7uvVcTR9GxMRmeCvd_ecDKLM_lOr025D
14q_yuV_g_KgCjIq45epGxF_iV3neixWqNW_YhrlXWtdqd4.rBCkwfc.wu2Wsbm8pXaKYtBJz0Xu
E2fR4pIVnol8UBsGzW62Bi6G4pZQSVkfIDR.KL_sG3NwBmnxMRvsEWbuKEyoY08LhzknbuglVTn0
0B4i1aweUbRkay_4BkAGy1zqduS.s9EN_y5NN9dPl2jtE2oJ7mQSkaRoBocDcgzVMRaZ6oB0y2vM
gv9mDC7Kiu3np6codNgaqsoHSQAdKHTFc60fVpdWhoV_CipOgzSZwxtjn6yvZpK7ZeUaulad2TR8
qJJ4-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic301.consmr.mail.bf2.yahoo.com with HTTP; Wed, 5 Feb 2020 08:15:53 +0000
Date: Wed, 5 Feb 2020 08:15:52 +0000 (UTC)
From: JOHN Obi <[email protected]>
Reply-To: [email protected]
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
References: <[email protected]>
X-Mailer: WebService/1.1.15158 YMailNodin Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
Content-Length: 1783
X-Spam-Status: Yes, score=11.7
X-Spam-Score: 117
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Customer We have reviewed all obstacles and issues regarding
your uncompleted transaction and your inability to meet the charged transfer
costs against you, in connection with past transfer options, see our co [...]
Content analysis details: (11.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[john.obi48[at]yahoo.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[lawenforcementagency11[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[john.obi48[at]yahoo.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[74.6.129.41 listed in list.dnswl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 MALFORMED_FREEMAIL Bad headers on message from free email
service
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Customer
Dear Customer
We have reviewed all obstacles and issues regarding your uncompleted transaction and your inability to meet the charged transfer costs against you, in connection with past transfer options, see our confirmation site for confirmation 38 ° 53'56 ″ N 77 ° 2′39 ”W
We are the Board of Directors, the World Bank and the International Monetary Fund (IMF) Washington, D.C., in collaboration with the US Treasury and some other relevant investigative agencies here in the United States. has ordered our Foreign Payment Remittance Unit, United Bank of Africa Lome Togo, to issue you a VISA card, where your fund ($ 1.5 million) will be loaded, to further withdraw your fund.
During a disapproval investigation, we discovered that your payment was unnecessarily delayed by corrupt Bank employees attempting to transfer funds to their private accounts.
Today we would like to inform you that UBA Bank paid your fund on a VISA card and deposited it with our Security company here for security of delivery.
You are now advised to reply to us via this email address here ( [email protected] ) to claim your fund. be sure to send us the following information for delivery of your accredited ATM VISA card to your address.
Your full name ==========================
Your country of origin =====================
Your home address =======================
Email ===========================
Your Phone Number =======================
Hello,
Mrs. Jenifer Ben
Delivered-To:
Received: from
by with LMTP
id EjBHEOV5Ol7PYgAAibB4EA
(envelope-from <[email protected]>)
for <>; Wed, 05 Feb 2020 03:16:37 -0500
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 05 Feb 2020 03:16:37 -0500
Received: from sonic301-2.consmr.mail.bf2.yahoo.com ([74.6.129.41]:43197)
by m with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.92)
(envelope-from <[email protected]>)
id 1izFrP-0006Yx-Sp
for ; Wed, 05 Feb 2020 03:16:37 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1580890553; bh=tykLa0Pb2nbPoa1cZq/42XySfuTXJy/Qb+cUOcj3CH0=; h=Date:From:Reply-To:Subject:References:From:Subject; b=N5fCfoN57JmzIzQCP3PKxI9tJ7XV5PVGnuXyjbjWaE6uZTPeuXZ/VeXX7YtIVt0oF6SV2ZbiH+gMRRG2ly+EJRQk5RwFJFLziKUZD0Pu/yO2lFdouSUq2UjhK3SE6FcZDQmYqgYv/hmDOey1iVongBoOGWakq2kqASPmt5J6gXWfHe4PCmR4NR+KEAS4kZci7LStLciQ5DChwHw2Y/ibvH2oS/j4TSC/G/J/mWLU8a+1F2Z7karRYjBL5pdJSf1YbTtmrWZppW0nZHN6ZMfv1l2FzUrmhNfRpUoG2DiCIetiF8JcqB0Onc2pDNATiTY7NQgbPEsth0KYD9rBEZfNMg==
X-YMail-OSG: Rw6KoVIVM1mAwdh.2QlfBhn2vr.yN4cpmf2nEHqXEwq.E_p8PFE94tW6Urj.HSc
R_lktVTr6bbvIMfAp0d.vPCOrobo6EW2AhmVQsUWMRSnixmHPzoIvXdqYqiKvk3nUiMyCKZZG9CA
2dg8qSCHOhNPxEwFnD7poZ1NX4pG.UNVLmxYVbJtFbnomcRMZcqtfLwA5jWuIsvw5kKe92oSx0o8
lzZ8hA6uJW60mYndjiBO15E4UrH.SX0DF1gzH7iNsszdae9ojGOatll9hGHWXmy7JKOHqWiT70qJ
IWdRaCsw6LJ7phR24AqoY2vnA6Ef51_7WTT5.hnyoD3pRvhdk1Em.tM0MVfANeHGQXL2k7K.rWJ2
PO3GIb.zD1JuPPb1qHd.cXAe6_O3ijcIOi7PpSV9boOey37SDRIbQABS8vWbLW_QaXnNBdWjw.IF
8FKqbNNsXHzT_bu8LuEDBw_PjBPsxspVJTrvt1w5GySVbjDaCie0ytFYSUd3sMnjUE.Bs_vzePrN
guYVAivU2r5xqw1eqZ4PvM8yDHp53zKIwHtWmwzlgbWsqploxeWnTyyZq1XQCP6sP1j0396mLFqx
xFLTC2J83SwWjZlupUevFh5Nm0Ld6xjpBSPPl6pFSnTWSr0TUAx1PDK4DdLJMf0RRr6TpmRBJM1S
0RlX51vQd86g9CiKgDV0Slqx0jtpoaVCc3YE0P7TtH0BkgPrNjNvrXJPPkHldftMcUCz2SCS3gzF
jE2Oj1MhW.6iVJbQOem8WKahvpJLcd8gQlI.xmI1IWbxZ7Q3RgzZrq6Pyeb9WfGCjDGREVpcM_CO
5BloFd7CQceYZVQgYty6u6WmiUaxXGXJBr02AbLrm1gODIiUwn0qGVgWQr2RBGaFHpJgwia0PeOq
QOPNCyVlGwTr0gHyE3eLoYFgcO3j649tMRU.9A47i7m8CaBWl.DOViUCBCOnDaDDosoTKVoBJxyw
ZgFiU9Ovk_DlfF3jLJsqd2QSebg.4Y.xPQrJO63rIpte7uvVcTR9GxMRmeCvd_ecDKLM_lOr025D
14q_yuV_g_KgCjIq45epGxF_iV3neixWqNW_YhrlXWtdqd4.rBCkwfc.wu2Wsbm8pXaKYtBJz0Xu
E2fR4pIVnol8UBsGzW62Bi6G4pZQSVkfIDR.KL_sG3NwBmnxMRvsEWbuKEyoY08LhzknbuglVTn0
0B4i1aweUbRkay_4BkAGy1zqduS.s9EN_y5NN9dPl2jtE2oJ7mQSkaRoBocDcgzVMRaZ6oB0y2vM
gv9mDC7Kiu3np6codNgaqsoHSQAdKHTFc60fVpdWhoV_CipOgzSZwxtjn6yvZpK7ZeUaulad2TR8
qJJ4-
Received: from sonic.gate.mail.ne1.yahoo.com by sonic301.consmr.mail.bf2.yahoo.com with HTTP; Wed, 5 Feb 2020 08:15:53 +0000
Date: Wed, 5 Feb 2020 08:15:52 +0000 (UTC)
From: JOHN Obi <[email protected]>
Reply-To: [email protected]
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
References: <[email protected]>
X-Mailer: WebService/1.1.15158 YMailNodin Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
Content-Length: 1783
X-Spam-Status: Yes, score=11.7
X-Spam-Score: 117
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Customer We have reviewed all obstacles and issues regarding
your uncompleted transaction and your inability to meet the charged transfer
costs against you, in connection with past transfer options, see our co [...]
Content analysis details: (11.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[john.obi48[at]yahoo.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[lawenforcementagency11[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[john.obi48[at]yahoo.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[74.6.129.41 listed in list.dnswl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.8 KAM_ASCII_DIVIDERS Spam that uses ascii formatting tricks
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 MALFORMED_FREEMAIL Bad headers on message from free email
service
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Customer
Dear Customer
We have reviewed all obstacles and issues regarding your uncompleted transaction and your inability to meet the charged transfer costs against you, in connection with past transfer options, see our confirmation site for confirmation 38 ° 53'56 ″ N 77 ° 2′39 ”W
We are the Board of Directors, the World Bank and the International Monetary Fund (IMF) Washington, D.C., in collaboration with the US Treasury and some other relevant investigative agencies here in the United States. has ordered our Foreign Payment Remittance Unit, United Bank of Africa Lome Togo, to issue you a VISA card, where your fund ($ 1.5 million) will be loaded, to further withdraw your fund.
During a disapproval investigation, we discovered that your payment was unnecessarily delayed by corrupt Bank employees attempting to transfer funds to their private accounts.
Today we would like to inform you that UBA Bank paid your fund on a VISA card and deposited it with our Security company here for security of delivery.
You are now advised to reply to us via this email address here ( [email protected] ) to claim your fund. be sure to send us the following information for delivery of your accredited ATM VISA card to your address.
Your full name ==========================
Your country of origin =====================
Your home address =======================
Email ===========================
Your Phone Number =======================
Hello,
Mrs. Jenifer Ben
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
