by buried under 419s
Fri Oct 07, 2011 1:27 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 07 Oct 2011 09:55:34 -0700
Received: from [222.200.128.35] (helo=Ex-Front2.scnu.edu.cn)
by with esmtps (TLSv1:RC4-MD5:128)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1RCDhs-0006wy-Ff
for ; Fri, 07 Oct 2011 09:55:34 -0700
Received: from User (113.161.68.11) by Ex-front2.scnu.edu.cn (222.200.128.35)
with Microsoft SMTP Server id 8.1.340.0; Sat, 8 Oct 2011 00:18:36 +0800
Reply-To: <[email protected]>
From: United Parcel Service <[email protected]>
Subject: Update from UPS
Date: Sat, 8 Oct 2011 01:20:50 +0900
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
X-Spam-Subject: ***SPAM*** Update from UPS
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Date: 6th of October 2011. Customer Service! This mail is
to remind you of your registered package. CONTENT: Bank Draft of $900,000.00
USD officially registered by an Official of the United Nation Lottery Board.
[...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.6 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[222.200.128.35 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[222.200.128.35 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[222.200.128.35 listed in bb.barracudacentral.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<unitedparcelservice113[at]yahoo.cn>
)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.2 FSL_UA FSL_UA
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_NORDNS To: misformatted and no rDNS
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Date: 6th of October 2011.
Customer Service!
This mail is to remind you of your registered package. CONTENT: Bank Draft of $900,000.00 USD officially registered by an Official of the United Nation Lottery Board.
For your information the VAT and COD have Date: 30TH of September 2011. This parcel has been in our custody for too long and we are about returning it to the sender if you do not come up and claim your parcel immediately.
For your information the VAT and COD have been paid. Please Contact UPS Delivery Department Mr. James Smith for shipment details and requirements.
Name: Mr. James Smith
Email: [email protected]
Tel: +234-7038-9299-50
It is mandatory to reconfirm your Postal address and telephone number:
Full Name:
Address:
City:
Postal Address:
Phone:
Country:
Yours Faithfully,
Mrs. Gloria Lambert
Copyright UPS 1994-2011 United Parcel Service of America, Inc. All rights reserved..
******************************************************************
This E-mail is only for the above addressees. It may contain confidential or privileged information. If you are not an addressee you must not copy, distribute, disclose or use any of the information in it or any attachments.
Envelope-to:
Delivery-date: Fri, 07 Oct 2011 09:55:34 -0700
Received: from [222.200.128.35] (helo=Ex-Front2.scnu.edu.cn)
by with esmtps (TLSv1:RC4-MD5:128)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1RCDhs-0006wy-Ff
for ; Fri, 07 Oct 2011 09:55:34 -0700
Received: from User (113.161.68.11) by Ex-front2.scnu.edu.cn (222.200.128.35)
with Microsoft SMTP Server id 8.1.340.0; Sat, 8 Oct 2011 00:18:36 +0800
Reply-To: <[email protected]>
From: United Parcel Service <[email protected]>
Subject: Update from UPS
Date: Sat, 8 Oct 2011 01:20:50 +0900
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
X-Spam-Subject: ***SPAM*** Update from UPS
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Date: 6th of October 2011. Customer Service! This mail is
to remind you of your registered package. CONTENT: Bank Draft of $900,000.00
USD officially registered by an Official of the United Nation Lottery Board.
[...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.6 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[222.200.128.35 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[222.200.128.35 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[222.200.128.35 listed in bb.barracudacentral.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<unitedparcelservice113[at]yahoo.cn>
)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.2 FSL_UA FSL_UA
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_NORDNS To: misformatted and no rDNS
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Date: 6th of October 2011.
Customer Service!
This mail is to remind you of your registered package. CONTENT: Bank Draft of $900,000.00 USD officially registered by an Official of the United Nation Lottery Board.
For your information the VAT and COD have Date: 30TH of September 2011. This parcel has been in our custody for too long and we are about returning it to the sender if you do not come up and claim your parcel immediately.
For your information the VAT and COD have been paid. Please Contact UPS Delivery Department Mr. James Smith for shipment details and requirements.
Name: Mr. James Smith
Email: [email protected]
Tel: +234-7038-9299-50
It is mandatory to reconfirm your Postal address and telephone number:
Full Name:
Address:
City:
Postal Address:
Phone:
Country:
Yours Faithfully,
Mrs. Gloria Lambert
Copyright UPS 1994-2011 United Parcel Service of America, Inc. All rights reserved..
******************************************************************
This E-mail is only for the above addressees. It may contain confidential or privileged information. If you are not an addressee you must not copy, distribute, disclose or use any of the information in it or any attachments.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces