by buried under 419s
Mon May 07, 2012 1:19 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 07 May 2012 09:34:27 -0700
Received: from nm2-vm1.access.bullet.mail.sp2.yahoo.com ([98.139.44.159]:24100)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SRQsx-0003AQ-6e
for ; Mon, 07 May 2012 09:34:27 -0700
Received: from [98.139.44.100] by nm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 07 May 2012 16:34:07 -0000
Received: from [98.139.44.82] by tm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 07 May 2012 16:34:07 -0000
Received: from [127.0.0.1] by omp1019.access.mail.sp2.yahoo.com with NNFMP; 07 May 2012 16:34:07 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 74826 invoked by uid 60001); 7 May 2012 16:34:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1336408446; bh=yLoXQlS6hBuF7Jh2iCObWpUNGs/L7oFK1vDf5QVYckM=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Qsh3yEIdR/PsYiiPfExHd6tu5GN8YvuuvTe4hm9cFcM1GeIoSsOYX7Chf+kZATdyN6deCPRTZaMnT7T1R14hU3gMkixC2Y/OWAuWsLTtQTIB1eH8lAqCFpdu5vQCW+D1Cg5izJLMu84C0WdRfI9YKQ6KGTJwU/yvtjp067hpKzg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=R5o1T6Zv0EKwhcQMIiATU58qySGTcTnyalyEkAI6shmTZijGlJmaK/rimSXYi3al8aqkSR7klYULnQGvHPlUsmfCcIcY3vxShtbvVRNZozHN0hi7AKgsmsQTDchTXEKFMOAhXvDdVXTzBcQr3BHTPjsnJbGsS3ToFr0/HT2RCgQ=;
X-YMail-OSG: fMOcNIwVM1kBk_W8Mzq7_WTyBtJ1Jf4P8XvwHhYcM.g_Sf_
lvSmOj_o38Ru4QUrHv0tWDyL3agKciv6m1juVVLSG.TRy1ctNgl6RIdofbFb
yOFET90HoB.tu1b9GkD58UUkwYX6rrC.C6yapH8IEhI_m3OMo90UZE41QZiC
FgHit2yawc9bDe9XBCU4.AojvJdmJt_I.jKRAZwcrAP652.mpR1DfZffILjn
mluJuAJbbqabFZlf9c27uKCxryeceLjSOERPA3smOYvBQSiL3zZklSAZvA_u
iySX3SLgIMj1_Xxo3oXuqTpg7rrHgctRKz.WjKDcY5EvKLP8GuT_bJqkMbTy
Jaez_.cE_T0AKynNPqdnzhHt.EkBkQYoy0UC32iLJbjLlvZcRnSEOC_hVcE5
nHCH6wD9Hld4Q64uT4XueXC0NLPpyjLlNf5Uv7DsFzmGn30Lq3gnlh27nuDh
zO1K5hBa9U6G65A--
Received: from [173.245.64.172] by web181714.mail.ne1.yahoo.com via HTTP; Mon, 07 May 2012 09:34:06 PDT
X-Mailer: YahooMailRC/708 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Mon, 7 May 2012 09:34:06 -0700 (PDT)
From: Western Union United Kingdom <[email protected]>
Reply-To: Western Union United Kingdom <[email protected]>
Subject: YOU ARE ONE OF OUR SELECTED WINNERS, OPEN THE ATTACHMENT FOR MORE DETAILS.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="990145094-2048955856-1336408446=:68183"
X-Spam-Status: No, score=3.6
X-Spam-Score: 36
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: OPEN THE ATTACHMENT AND GET BACK TO OUR OFFICE IMMEDIATELY.
OPEN THE ATTACHMENT AND GET BACK TO OUR OFFICE IMMEDIATELY. [...]
Content analysis details: (3.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webhuy3[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.159 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (webhuy3[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5948]
0.0 T_HK_SPAMMY_FILENAME T_HK_SPAMMY_FILENAME
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
X-Spam-Flag: NO
--990145094-2048955856-1336408446=:68183
Content-Type: multipart/alternative; boundary="990145094-747820522-1336408446=:68183"
--990145094-747820522-1336408446=:68183
Content-Type: text/plain; charset=us-ascii
OPEN THE ATTACHMENT AND GET BACK TO OUR OFFICE IMMEDIATELY.
Dear Sir / Madam,
For 156 years, Western Union has been connecting people. At Western Union, there's so much more than money you're sending. Every sender and receiver is important to us. To celebrate our 156th anniversary, we're rewarding some of our customers and other lucky e-mail owners which you are one of them with prizes of USD260, 000.00 (Two Hundred And Sixty thousand United States Dollars).
Because you sent money on-line, from an agent location or received money through Western Union, you've been selected.
However, you are required to forward the following information for immediate payment of your USD260, 000.00
1.) Bank Name:
2.) Beneficiary:
3.) Account Number:
4.) Bank Address:
5.) Swift Code or Routing Number:
6.) Your Mobile Telephone Number:
7) Country
Occupation
9) Age
You will be contacted by a Western Union in the next 24 hours as soon as you forward your required information and you will receive the USD260, 000.00 prizes immediately from us.
Save time, send money, earn rewards! Western Union is a service people trust.
ANNIVERSARY DAY
Mrs. Caroline Walls
Customer service representative
Western Union money Transfer
E-mail address: [email protected]
Office address: Stewart House 34
Russell Square London
WC1B 5DN.United Kingdom
Thank you for using Western Union!
-----------------------------------------------------
We endeavor to maintain physical, electronic and procedural safeguards to guard your Information. We also endeavor to restrict Information access to our employees, agents and representatives that need to know it. Western Union will never disclose your personal or billing information to a third party.
Envelope-to:
Delivery-date: Mon, 07 May 2012 09:34:27 -0700
Received: from nm2-vm1.access.bullet.mail.sp2.yahoo.com ([98.139.44.159]:24100)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SRQsx-0003AQ-6e
for ; Mon, 07 May 2012 09:34:27 -0700
Received: from [98.139.44.100] by nm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 07 May 2012 16:34:07 -0000
Received: from [98.139.44.82] by tm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 07 May 2012 16:34:07 -0000
Received: from [127.0.0.1] by omp1019.access.mail.sp2.yahoo.com with NNFMP; 07 May 2012 16:34:07 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 74826 invoked by uid 60001); 7 May 2012 16:34:06 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1336408446; bh=yLoXQlS6hBuF7Jh2iCObWpUNGs/L7oFK1vDf5QVYckM=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Qsh3yEIdR/PsYiiPfExHd6tu5GN8YvuuvTe4hm9cFcM1GeIoSsOYX7Chf+kZATdyN6deCPRTZaMnT7T1R14hU3gMkixC2Y/OWAuWsLTtQTIB1eH8lAqCFpdu5vQCW+D1Cg5izJLMu84C0WdRfI9YKQ6KGTJwU/yvtjp067hpKzg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=R5o1T6Zv0EKwhcQMIiATU58qySGTcTnyalyEkAI6shmTZijGlJmaK/rimSXYi3al8aqkSR7klYULnQGvHPlUsmfCcIcY3vxShtbvVRNZozHN0hi7AKgsmsQTDchTXEKFMOAhXvDdVXTzBcQr3BHTPjsnJbGsS3ToFr0/HT2RCgQ=;
X-YMail-OSG: fMOcNIwVM1kBk_W8Mzq7_WTyBtJ1Jf4P8XvwHhYcM.g_Sf_
lvSmOj_o38Ru4QUrHv0tWDyL3agKciv6m1juVVLSG.TRy1ctNgl6RIdofbFb
yOFET90HoB.tu1b9GkD58UUkwYX6rrC.C6yapH8IEhI_m3OMo90UZE41QZiC
FgHit2yawc9bDe9XBCU4.AojvJdmJt_I.jKRAZwcrAP652.mpR1DfZffILjn
mluJuAJbbqabFZlf9c27uKCxryeceLjSOERPA3smOYvBQSiL3zZklSAZvA_u
iySX3SLgIMj1_Xxo3oXuqTpg7rrHgctRKz.WjKDcY5EvKLP8GuT_bJqkMbTy
Jaez_.cE_T0AKynNPqdnzhHt.EkBkQYoy0UC32iLJbjLlvZcRnSEOC_hVcE5
nHCH6wD9Hld4Q64uT4XueXC0NLPpyjLlNf5Uv7DsFzmGn30Lq3gnlh27nuDh
zO1K5hBa9U6G65A--
Received: from [173.245.64.172] by web181714.mail.ne1.yahoo.com via HTTP; Mon, 07 May 2012 09:34:06 PDT
X-Mailer: YahooMailRC/708 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Mon, 7 May 2012 09:34:06 -0700 (PDT)
From: Western Union United Kingdom <[email protected]>
Reply-To: Western Union United Kingdom <[email protected]>
Subject: YOU ARE ONE OF OUR SELECTED WINNERS, OPEN THE ATTACHMENT FOR MORE DETAILS.
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="990145094-2048955856-1336408446=:68183"
X-Spam-Status: No, score=3.6
X-Spam-Score: 36
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: OPEN THE ATTACHMENT AND GET BACK TO OUR OFFICE IMMEDIATELY.
OPEN THE ATTACHMENT AND GET BACK TO OUR OFFICE IMMEDIATELY. [...]
Content analysis details: (3.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webhuy3[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.159 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (webhuy3[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5948]
0.0 T_HK_SPAMMY_FILENAME T_HK_SPAMMY_FILENAME
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
X-Spam-Flag: NO
--990145094-2048955856-1336408446=:68183
Content-Type: multipart/alternative; boundary="990145094-747820522-1336408446=:68183"
--990145094-747820522-1336408446=:68183
Content-Type: text/plain; charset=us-ascii
OPEN THE ATTACHMENT AND GET BACK TO OUR OFFICE IMMEDIATELY.
Dear Sir / Madam,
For 156 years, Western Union has been connecting people. At Western Union, there's so much more than money you're sending. Every sender and receiver is important to us. To celebrate our 156th anniversary, we're rewarding some of our customers and other lucky e-mail owners which you are one of them with prizes of USD260, 000.00 (Two Hundred And Sixty thousand United States Dollars).
Because you sent money on-line, from an agent location or received money through Western Union, you've been selected.
However, you are required to forward the following information for immediate payment of your USD260, 000.00
1.) Bank Name:
2.) Beneficiary:
3.) Account Number:
4.) Bank Address:
5.) Swift Code or Routing Number:
6.) Your Mobile Telephone Number:
7) Country
Occupation9) Age
You will be contacted by a Western Union in the next 24 hours as soon as you forward your required information and you will receive the USD260, 000.00 prizes immediately from us.
Save time, send money, earn rewards! Western Union is a service people trust.
ANNIVERSARY DAY
Mrs. Caroline Walls
Customer service representative
Western Union money Transfer
E-mail address: [email protected]
Office address: Stewart House 34
Russell Square London
WC1B 5DN.United Kingdom
Thank you for using Western Union!
-----------------------------------------------------
We endeavor to maintain physical, electronic and procedural safeguards to guard your Information. We also endeavor to restrict Information access to our employees, agents and representatives that need to know it. Western Union will never disclose your personal or billing information to a third party.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces