by Gateway
Tue Feb 28, 2012 3:44 pm
Return-Path: <[email protected]>
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])
by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-7704) with LMTPA;
Tue, 28 Feb 2012 05:52:41 -0500
X-Sieve: CMU Sieve 2.4
X-Spam-charsets: plain='us-ascii', html='us-ascii'
X-Mail-from: [email protected]
Received: from mx2.nyi.mail.srv.osa ([10.202.2.201])
by compute1.internal (LMTPProxy); Tue, 28 Feb 2012 05:52:41 -0500
Received: from nm16-vm0.bullet.mail.bf1.yahoo.com (nm16-vm0.bullet.mail.bf1.yahoo.com [98.139.212.253])
by mx2.nyi.mail.srv.osa (Postfix) with SMTP id 2657F76010B
Tue, 28 Feb 2012 05:52:41 -0500 (EST)
Received: from [98.139.212.146] by nm16.bullet.mail.bf1.yahoo.com with NNFMP; 28 Feb 2012 10:52:40 -0000
Received: from [98.139.212.226] by tm3.bullet.mail.bf1.yahoo.com with NNFMP; 28 Feb 2012 10:52:40 -0000
Received: from [127.0.0.1] by omp1035.mail.bf1.yahoo.com with NNFMP; 28 Feb 2012 10:52:40 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 57481 invoked by uid 60001); 28 Feb 2012 10:52:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1330426359; bh=cMDPJSAydzxWZsBtfpf8SV+9R1K5r1p2Vgxvc/9DMi0=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=haqWRF3gkA6dUAutDQMihV9e6u+5XNQIwzjJnmT5uD+DcDMcketClm1tDTiOOKf8DuoZscCLhdnv523iKFZbiP6ZrAfTqHt6ksRuBBBTQN1RWZsDQoN9u0mdPXMPjDa6mJuxn8t1GBh11qv2e5pnL0gM7QDM+XmEj0MwDzZcAiw=
X-YMail-OSG: rKpt_1UVM1lk7wnwvLl0lSabYnEk0Ae1wMwJoVXnmVIeWpO
ybujiNU2ZPza1ZfXhkaNHBhbdR7PCSpHRXJkPNvKz..YzpcT9ce2ouEqG53w
4Fl622vfcyFDQvVsd.HpUUhv.UI3S4JL.hNjfQROdmjcCxsNOwMKCD_KRL.0
dPCt26l0RzqxC1rycmmoyQN83xIYqe0jFcWa3PzNUEiJ8p5kb1l0QCj07C0m
gpetkd4m9q3_Mker9DHXOvvETGu7NHzLIRbZE15wjbvn_OIF3SZVzQSrOKTy
usBFyYCvEHawCR4k7m9dRWMAwtt_QOfkQ5qwDX3ux7PnvTnrumC24jYp.MiG
zhURGrGCd56cALe_LlZoO_dqe.ryn6ekO30ORRaetX1_Zwp3YTW.ORWBz8cN
cXcK4nfQHGc2oWjDO9Qm2BSLyZugq3TgV_.IrnJR4HDoWUo8ue2eBeRkXjkA
TuYjtP4iDQHYFv.p7D44wzf6KwczVPW3xlifvOFZUVXbYmesfBRK6FPVIYgR
ZQhYdVRDKpckdLpIBo5Mu9hpr
Received: from [196.201.80.119] by web162306.mail.bf1.yahoo.com via HTTP; Tue, 28 Feb 2012 02:52:39 PST
X-RocketYMMF: frankchinedu334
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.116.338427
Message-ID: <[email protected]>
Date: Tue, 28 Feb 2012 02:52:39 -0800 (PST)
From: Shukri Ghanem <[email protected]>
Reply-To: [email protected]
Subject: Urgent reply
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1844268657-1303035641-1330426359=:54554"
X-Truedomain-Domain: yahoo.com
X-Truedomain-SPF: Fail (mx2: transitioning domain of hotmail.com does not designate 98.139.212.253 as permitted sender)
X-Truedomain-DKIM: Pass
X-Truedomain-ID: F942F36D98389CF661BE089AC6502D60
X-Truedomain: Neutral
Hi,
Greetings to you and your family, firstly I apologize for sending you this sensitive information via e-mail, instead of a Certified mail/Post-mail. This is due to the urgency and importance of the information.
My name is Shukri Ghanem, the Libyan oil minister and head of the National Oil Co-operation of Libya. I would like to use your relationship with me to pull my wealth out from our African continent. I was high-ranking Libyan official but I defected and fled the country on the May 17th 2011. I have huge amount of fund with Oilibya Petroleum Company in Ivory Coast I need help to divert this fund far from Africa.
Thank you
Shukri Ghanem
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])
by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-7704) with LMTPA;
Tue, 28 Feb 2012 05:52:41 -0500
X-Sieve: CMU Sieve 2.4
X-Spam-charsets: plain='us-ascii', html='us-ascii'
X-Mail-from: [email protected]
Received: from mx2.nyi.mail.srv.osa ([10.202.2.201])
by compute1.internal (LMTPProxy); Tue, 28 Feb 2012 05:52:41 -0500
Received: from nm16-vm0.bullet.mail.bf1.yahoo.com (nm16-vm0.bullet.mail.bf1.yahoo.com [98.139.212.253])
by mx2.nyi.mail.srv.osa (Postfix) with SMTP id 2657F76010B
Tue, 28 Feb 2012 05:52:41 -0500 (EST)
Received: from [98.139.212.146] by nm16.bullet.mail.bf1.yahoo.com with NNFMP; 28 Feb 2012 10:52:40 -0000
Received: from [98.139.212.226] by tm3.bullet.mail.bf1.yahoo.com with NNFMP; 28 Feb 2012 10:52:40 -0000
Received: from [127.0.0.1] by omp1035.mail.bf1.yahoo.com with NNFMP; 28 Feb 2012 10:52:40 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 57481 invoked by uid 60001); 28 Feb 2012 10:52:39 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1330426359; bh=cMDPJSAydzxWZsBtfpf8SV+9R1K5r1p2Vgxvc/9DMi0=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=haqWRF3gkA6dUAutDQMihV9e6u+5XNQIwzjJnmT5uD+DcDMcketClm1tDTiOOKf8DuoZscCLhdnv523iKFZbiP6ZrAfTqHt6ksRuBBBTQN1RWZsDQoN9u0mdPXMPjDa6mJuxn8t1GBh11qv2e5pnL0gM7QDM+XmEj0MwDzZcAiw=
X-YMail-OSG: rKpt_1UVM1lk7wnwvLl0lSabYnEk0Ae1wMwJoVXnmVIeWpO
ybujiNU2ZPza1ZfXhkaNHBhbdR7PCSpHRXJkPNvKz..YzpcT9ce2ouEqG53w
4Fl622vfcyFDQvVsd.HpUUhv.UI3S4JL.hNjfQROdmjcCxsNOwMKCD_KRL.0
dPCt26l0RzqxC1rycmmoyQN83xIYqe0jFcWa3PzNUEiJ8p5kb1l0QCj07C0m
gpetkd4m9q3_Mker9DHXOvvETGu7NHzLIRbZE15wjbvn_OIF3SZVzQSrOKTy
usBFyYCvEHawCR4k7m9dRWMAwtt_QOfkQ5qwDX3ux7PnvTnrumC24jYp.MiG
zhURGrGCd56cALe_LlZoO_dqe.ryn6ekO30ORRaetX1_Zwp3YTW.ORWBz8cN
cXcK4nfQHGc2oWjDO9Qm2BSLyZugq3TgV_.IrnJR4HDoWUo8ue2eBeRkXjkA
TuYjtP4iDQHYFv.p7D44wzf6KwczVPW3xlifvOFZUVXbYmesfBRK6FPVIYgR
ZQhYdVRDKpckdLpIBo5Mu9hpr
Received: from [196.201.80.119] by web162306.mail.bf1.yahoo.com via HTTP; Tue, 28 Feb 2012 02:52:39 PST
X-RocketYMMF: frankchinedu334
X-Mailer: YahooMailClassic/15.0.4 YahooMailWebService/0.8.116.338427
Message-ID: <[email protected]>
Date: Tue, 28 Feb 2012 02:52:39 -0800 (PST)
From: Shukri Ghanem <[email protected]>
Reply-To: [email protected]
Subject: Urgent reply
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1844268657-1303035641-1330426359=:54554"
X-Truedomain-Domain: yahoo.com
X-Truedomain-SPF: Fail (mx2: transitioning domain of hotmail.com does not designate 98.139.212.253 as permitted sender)
X-Truedomain-DKIM: Pass
X-Truedomain-ID: F942F36D98389CF661BE089AC6502D60
X-Truedomain: Neutral
Hi,
Greetings to you and your family, firstly I apologize for sending you this sensitive information via e-mail, instead of a Certified mail/Post-mail. This is due to the urgency and importance of the information.
My name is Shukri Ghanem, the Libyan oil minister and head of the National Oil Co-operation of Libya. I would like to use your relationship with me to pull my wealth out from our African continent. I was high-ranking Libyan official but I defected and fled the country on the May 17th 2011. I have huge amount of fund with Oilibya Petroleum Company in Ivory Coast I need help to divert this fund far from Africa.
Thank you
Shukri Ghanem
If you wish you can email me at
[email protected]
How to get E-Mail Headers
http://www.isipp.com/resources/email-headers/
[email protected]
How to get E-Mail Headers
http://www.isipp.com/resources/email-headers/