by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 14 Jul 2012 09:07:58 -0700
Received: from nm7-vm0.bullet.mail.ird.yahoo.com ([77.238.189.222]:41251)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1Sq4su-0000ym-SY
for ; Sat, 14 Jul 2012 09:07:58 -0700
Received: from [77.238.189.231] by nm7.bullet.mail.ird.yahoo.com with NNFMP; 14 Jul 2012 16:07:56 -0000
Received: from [212.82.108.120] by tm12.bullet.mail.ird.yahoo.com with NNFMP; 14 Jul 2012 16:07:56 -0000
Received: from [127.0.0.1] by omp1029.mail.ird.yahoo.com with NNFMP; 14 Jul 2012 16:07:56 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 82625 invoked by uid 60001); 14 Jul 2012 16:07:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1342282076; bh=r6trh6MUvXk3NwD5A8TQepMSHvifukXgrZS4oCK+Jo8=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=HV7Us6z5038K10JC8pgsokQaPxE1Y3ZwYJtwrfcm6Uyl4I3022oerQkfPDLT9viR3Ll4ujUK15vxukfLRu+Gz/P6f+DAiLvVQJ102Bgeq9oRubSBO/Tpz/iJIfZ/aetfhLBq2d8D+EKlDFn4kwLyug0vcEmoQcQiDHQeCYPwnPk=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.fr;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=m5CmTK/nVhiwSd5FKkDdvybB1znEtJgcmNGfAyMZFaR4wvJ/7RSG5RX+E3xXEhLcns02hk87c3hpmklDrPZ8dAe/GS1S8+gwjvoTxBbmtfQJeL1iz42Ulgney8j5gekD7CQjj29SwsykHwvm0rw1sCiruooGpqxuvVnN3xxOMaI=;
X-YMail-OSG: DqGYO9MVM1l7tZ_iAX5CXLvIvaP7NvbfLxYrsh9H5vSJAsC
3N2jgf0LW8rQBtVD0Z1QnsOQEtb.5A56GlDwKdws9hvo6i608G0iCVdD0I1W
Goib.UJXjiqGDKGZYnzge6cAoGRMXL2NhfiDNfuqCGvgL1SOfReVfc4G.csL
9bALKENytFnOAMD8IO4KdgyRIVFqSJImvltufmuHir.q.5UPOFSZHvwPk0tW
gY_ox7oiEkE7bCerYD.D9FjpnVpP5S_y_4xkDiDpDOXqjsV44nd4CMpoWPQ4
.PRlPdv3AVu6DW9GwmevRJ4kp8iuG7IBMgUFv.0kIdZhoxFSi.YVue34eLAG
2U4Qz7iMoDA.inXsrKQSpR2wUjP8Eqb3.MIH0fTudaM.6y.5WUL5qiOi3avq
Z7_HMSZ93hHz_CRCWrPQlep7rOpM9xL5ic2tKcJF6uNytqxadqGZwbPG.RTf
B1BlWvyHFS2rA0K1norZyvX1.DpOv2kl2_2BPhDWElkwZXXFrmrKZ1cdiFQX
DIok_NbhQZZp4GCGYtPBYPz3sWzxjuaRbb7pmhC.FDBJ29Nrd3Jmi6j54I6C
FcGTgthZLFsQznzaY5bgXOH2t3RUrf8Nw0wp42brbCqXEw8XCST.7
Received: from [41.216.50.144] by web29601.mail.ird.yahoo.com via HTTP; Sat, 14 Jul 2012 17:07:56 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Sat, 14 Jul 2012 17:07:56 +0100 (BST)
From: Dr Ben Wilson <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1178430600-1102591028-1342282076=:82052"
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn Please, We have last month of Sept 2011 received a payment
credit instruction from the federal Government of Royal Kingdom of Benin
Republic to credit your account with your contract payment which is in the
custody of our reserve Bank account here in Benin Republic. This is to notify
you that your funds $USD 15.500.000.00 Dollars has been programmed for immediate
release into your nominated account but we can not transfer this funds directly
to your nominated bank account Because we are having a little problem with
International Monetary Fund (IMF) so our method of payment is by Diplomatic
Courier Service Via United Parcel Security Shipping Company. [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jameibe2007[at]yahoo.fr)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[77.238.189.222 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(ups_benin_2011[at]hotmail.fr
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jameibe2007[at]yahoo.fr)
2.7 LOTTO_AGENT BODY: Claims Agent
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 TVD_PH_BODY_META TVD_PH_BODY_META
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
2.0 HK_NAME_FM_DR HK_NAME_FM_DR
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_LOTTERY Lots of money from a lottery
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RE; URGENT FROM UPS COURIER COMPANY,
--1178430600-1102591028-1342282076=:82052
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attn Please,
We have last month of Sept 2011 received a payment credit instruction from the federal Government of Royal Kingdom of Benin Republic to credit your account with your contract payment which is in the custody of our reserve Bank account here in Benin Republic. This is to notify you that your funds $USD 15.500.000.00 Dollars has been programmed for immediate release into your nominated account but we can not transfer this funds directly to your nominated bank account Because we are having a little problem with International Monetary Fund (IMF) so our method of payment is by Diplomatic Courier Service Via United Parcel Security Shipping Company.
Be inform that your funds have been package like a consignment box and deposited in the custody of UPS United Parcel Services head office here in Benin Republic for immediate delivery to your house,The reason while UPS is chosen for the delivery is that they are the best shipping company in the world and our government has issued and signed all the necessary document needed to make the delivery safe.
Note: That the UPS United Parcel Services do not know the content of your box it is been registered as a box of Family Valuables Belonging to avoid delaying in delivery of your consignment,The Government of Benin Republic has already paid the official delivery cost and (yellow Tag Paper,insurance) fee it was deducted from the interest your money accumulated in the custody of our Reserve Bank here in Benin Republic before the total sum of $15.500.000.00 USD was packaged as a consignment and sealed as metallic showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country.
(UNITED PARCEL SERVICES UPS COOPERATE)
Contact Person: Dr. Nelison White
E-mail : [email protected]
Tel: +229-98510649
Here is the information needed to deliver your consignment box to you.
Your Full Name:
Your Complete Address :
Name of Country /City of Residence:____
Direct Home Telephone
copy of your id for identifications if any; _________
Waiting for your immediate respond once you received your parcel.
Best Regards
Dr Ben Wilson
Payment Director.
Envelope-to:
Delivery-date: Sat, 14 Jul 2012 09:07:58 -0700
Received: from nm7-vm0.bullet.mail.ird.yahoo.com ([77.238.189.222]:41251)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1Sq4su-0000ym-SY
for ; Sat, 14 Jul 2012 09:07:58 -0700
Received: from [77.238.189.231] by nm7.bullet.mail.ird.yahoo.com with NNFMP; 14 Jul 2012 16:07:56 -0000
Received: from [212.82.108.120] by tm12.bullet.mail.ird.yahoo.com with NNFMP; 14 Jul 2012 16:07:56 -0000
Received: from [127.0.0.1] by omp1029.mail.ird.yahoo.com with NNFMP; 14 Jul 2012 16:07:56 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 82625 invoked by uid 60001); 14 Jul 2012 16:07:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1342282076; bh=r6trh6MUvXk3NwD5A8TQepMSHvifukXgrZS4oCK+Jo8=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=HV7Us6z5038K10JC8pgsokQaPxE1Y3ZwYJtwrfcm6Uyl4I3022oerQkfPDLT9viR3Ll4ujUK15vxukfLRu+Gz/P6f+DAiLvVQJ102Bgeq9oRubSBO/Tpz/iJIfZ/aetfhLBq2d8D+EKlDFn4kwLyug0vcEmoQcQiDHQeCYPwnPk=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.fr;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=m5CmTK/nVhiwSd5FKkDdvybB1znEtJgcmNGfAyMZFaR4wvJ/7RSG5RX+E3xXEhLcns02hk87c3hpmklDrPZ8dAe/GS1S8+gwjvoTxBbmtfQJeL1iz42Ulgney8j5gekD7CQjj29SwsykHwvm0rw1sCiruooGpqxuvVnN3xxOMaI=;
X-YMail-OSG: DqGYO9MVM1l7tZ_iAX5CXLvIvaP7NvbfLxYrsh9H5vSJAsC
3N2jgf0LW8rQBtVD0Z1QnsOQEtb.5A56GlDwKdws9hvo6i608G0iCVdD0I1W
Goib.UJXjiqGDKGZYnzge6cAoGRMXL2NhfiDNfuqCGvgL1SOfReVfc4G.csL
9bALKENytFnOAMD8IO4KdgyRIVFqSJImvltufmuHir.q.5UPOFSZHvwPk0tW
gY_ox7oiEkE7bCerYD.D9FjpnVpP5S_y_4xkDiDpDOXqjsV44nd4CMpoWPQ4
.PRlPdv3AVu6DW9GwmevRJ4kp8iuG7IBMgUFv.0kIdZhoxFSi.YVue34eLAG
2U4Qz7iMoDA.inXsrKQSpR2wUjP8Eqb3.MIH0fTudaM.6y.5WUL5qiOi3avq
Z7_HMSZ93hHz_CRCWrPQlep7rOpM9xL5ic2tKcJF6uNytqxadqGZwbPG.RTf
B1BlWvyHFS2rA0K1norZyvX1.DpOv2kl2_2BPhDWElkwZXXFrmrKZ1cdiFQX
DIok_NbhQZZp4GCGYtPBYPz3sWzxjuaRbb7pmhC.FDBJ29Nrd3Jmi6j54I6C
FcGTgthZLFsQznzaY5bgXOH2t3RUrf8Nw0wp42brbCqXEw8XCST.7
Received: from [41.216.50.144] by web29601.mail.ird.yahoo.com via HTTP; Sat, 14 Jul 2012 17:07:56 BST
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Sat, 14 Jul 2012 17:07:56 +0100 (BST)
From: Dr Ben Wilson <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1178430600-1102591028-1342282076=:82052"
X-Spam-Status: Yes, score=19.3
X-Spam-Score: 193
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn Please, We have last month of Sept 2011 received a payment
credit instruction from the federal Government of Royal Kingdom of Benin
Republic to credit your account with your contract payment which is in the
custody of our reserve Bank account here in Benin Republic. This is to notify
you that your funds $USD 15.500.000.00 Dollars has been programmed for immediate
release into your nominated account but we can not transfer this funds directly
to your nominated bank account Because we are having a little problem with
International Monetary Fund (IMF) so our method of payment is by Diplomatic
Courier Service Via United Parcel Security Shipping Company. [...]
Content analysis details: (19.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(jameibe2007[at]yahoo.fr)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[77.238.189.222 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(ups_benin_2011[at]hotmail.fr
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (jameibe2007[at]yahoo.fr)
2.7 LOTTO_AGENT BODY: Claims Agent
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 TVD_PH_BODY_META TVD_PH_BODY_META
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
2.0 HK_NAME_FM_DR HK_NAME_FM_DR
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_LOTTERY Lots of money from a lottery
0.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.2 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.2 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** RE; URGENT FROM UPS COURIER COMPANY,
--1178430600-1102591028-1342282076=:82052
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attn Please,
We have last month of Sept 2011 received a payment credit instruction from the federal Government of Royal Kingdom of Benin Republic to credit your account with your contract payment which is in the custody of our reserve Bank account here in Benin Republic. This is to notify you that your funds $USD 15.500.000.00 Dollars has been programmed for immediate release into your nominated account but we can not transfer this funds directly to your nominated bank account Because we are having a little problem with International Monetary Fund (IMF) so our method of payment is by Diplomatic Courier Service Via United Parcel Security Shipping Company.
Be inform that your funds have been package like a consignment box and deposited in the custody of UPS United Parcel Services head office here in Benin Republic for immediate delivery to your house,The reason while UPS is chosen for the delivery is that they are the best shipping company in the world and our government has issued and signed all the necessary document needed to make the delivery safe.
Note: That the UPS United Parcel Services do not know the content of your box it is been registered as a box of Family Valuables Belonging to avoid delaying in delivery of your consignment,The Government of Benin Republic has already paid the official delivery cost and (yellow Tag Paper,insurance) fee it was deducted from the interest your money accumulated in the custody of our Reserve Bank here in Benin Republic before the total sum of $15.500.000.00 USD was packaged as a consignment and sealed as metallic showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country.
(UNITED PARCEL SERVICES UPS COOPERATE)
Contact Person: Dr. Nelison White
E-mail : [email protected]
Tel: +229-98510649
Here is the information needed to deliver your consignment box to you.
Your Full Name:
Your Complete Address :
Name of Country /City of Residence:____
Direct Home Telephone
copy of your id for identifications if any; _________
Waiting for your immediate respond once you received your parcel.
Best Regards
Dr Ben Wilson
Payment Director.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

