by Gateway
Mon Apr 16, 2012 3:18 pm
Return-Path: <[email protected]>
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])
by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-7854) with LMTPA;
Mon, 16 Apr 2012 07:32:01 -0400
X-Sieve: CMU Sieve 2.4
X-Spam-charsets: plain='us-ascii', html='us-ascii'
X-Mail-from: [email protected]
Received: from mx3.nyi.mail.srv.osa ([10.202.2.202])
by compute1.internal (LMTPProxy); Mon, 16 Apr 2012 07:32:01 -0400
Received: from nm19.bullet.mail.bf1.yahoo.com (nm19.bullet.mail.bf1.yahoo.com [98.139.212.178])
by mx3.messagingengine.com (Postfix) with SMTP id 5EC404C2721
Mon, 16 Apr 2012 07:32:01 -0400 (EDT)
Received: from [98.139.215.140] by nm19.bullet.mail.bf1.yahoo.com with NNFMP; 16 Apr 2012 11:32:00 -0000
Received: from [98.139.215.252] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 16 Apr 2012 11:32:00 -0000
Received: from [127.0.0.1] by omp1065.mail.bf1.yahoo.com with NNFMP; 16 Apr 2012 11:32:00 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 36514 invoked by uid 60001); 16 Apr 2012 11:32:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1334575920; bh=GXVwkE4a2mB+Qx/Z0jj+PlWDoL/mJS5Wf0sCQx32pYY=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=CApjN5Xq4n8ZtWABhFNOEuAekaw9l6ZbR8zoyfcadZWerw8bnsr68nf+E0fw+0iaTmX1oREKjkdjy6oI10m6KeNksKuw8btX/Fgj4O1Ka9uQcvUJmndZ3k8sW3oXruIXcNFPc3lr7MKqYOaVS9vet4SsgJ+sg9BOu+ompMcGHkQ=
X-YMail-OSG: PhJPbkYVM1mnUrCS7DEUubaxS7L3_ZkIvH24pB2C3yKG3rW
Wo2HWhJ7yRXE2cE7Ht016A88.sG9wzRHq4bXCyYoio7UC5T3S1Ce9zfbejj5
c3SFd_8jlCoaPGjNSbi1ZuL0FSHmoKZjqBSi_5pAfPW2v3AjznHORj3p3l4f
UHDqhoIDqlf.LvfZNLKGtEIeharejTJLNDYucDiwx4A0H8S4jsX0BYSnSH8N
hbW2Tmb0MAOnG2TFkBR7f3RMRzuaaf8xFZ7k4wr0NlF7t09Xj60xCfIG0pgt
s8iU.4B4BWjQovQDljsGn3JWrYqW79YrqfSarQ8jV1uGctwa8cqql5RbbhDD
wNLMhs8ljy5NUd0GZGXd0U2aMT60sYPigTPiXdJkW4feu2wgYBO4qaMrf2Au
lCEcy93ynQiBs1RMhVkQSuoHnm57TvAOvmR1TKpzU.0nthxbOjQtmrmC5RaT
j0CHFfQD2BPtYdtXknGhSEnW6WwM2pas1Js7mrVbRzlPDhnIdW_JSumd3o6H
vxtJXLXsaI9ZIrHO4N7LTpRvybpLE1YJMSvLCPPSH5yGmIkbzfks4wz2PWVu
KsMVIF0cQaAS3a.WT
Received: from [41.189.52.148] by web162305.mail.bf1.yahoo.com via HTTP; Mon, 16 Apr 2012 04:31:59 PDT
X-RocketYMMF: frankchinedu334
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Mon, 16 Apr 2012 04:31:59 -0700 (PDT)
From: Shukri Ghanem <[email protected]>
Reply-To: [email protected]
Subject: Urgent reply
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-600603132-1824960347-1334575919=:26171"
X-Truedomain-Domain: yahoo.com
X-Truedomain-SPF: Fail (mx3: transitioning domain of hotmail.com does not designate 98.139.212.178 as permitted sender)
X-Truedomain-DKIM: Pass
X-Truedomain-ID: 5946E581F93A1FF93A896FE0C1A81E2F
X-Truedomain: Neutral
Hi,
Greetings to you and your family, firstly I apologize for sending you this sensitive information via e-mail, instead of a Certified mail/Post-mail. This is due to the urgency and importance of the information.
My name is Shukri Ghanem, the Libyan oil minister and head of the National Oil Co-operation of Libya. I would like to use your relationship with me to pull my wealth out from our African continent. I was high-ranking Libyan official but I defected and fled the country on the May 17th 2011. I have huge amount of fund with Oilibya Petroleum Company in Ivory Coast I need help to divert this fund far from Africa.
Thank you
Shukri Ghanem
Received: from compute1.internal (compute1.nyi.mail.srv.osa [10.202.2.41])
by sloti14d5p3 (Cyrus git2.5+0-git-fastmail-7854) with LMTPA;
Mon, 16 Apr 2012 07:32:01 -0400
X-Sieve: CMU Sieve 2.4
X-Spam-charsets: plain='us-ascii', html='us-ascii'
X-Mail-from: [email protected]
Received: from mx3.nyi.mail.srv.osa ([10.202.2.202])
by compute1.internal (LMTPProxy); Mon, 16 Apr 2012 07:32:01 -0400
Received: from nm19.bullet.mail.bf1.yahoo.com (nm19.bullet.mail.bf1.yahoo.com [98.139.212.178])
by mx3.messagingengine.com (Postfix) with SMTP id 5EC404C2721
Mon, 16 Apr 2012 07:32:01 -0400 (EDT)
Received: from [98.139.215.140] by nm19.bullet.mail.bf1.yahoo.com with NNFMP; 16 Apr 2012 11:32:00 -0000
Received: from [98.139.215.252] by tm11.bullet.mail.bf1.yahoo.com with NNFMP; 16 Apr 2012 11:32:00 -0000
Received: from [127.0.0.1] by omp1065.mail.bf1.yahoo.com with NNFMP; 16 Apr 2012 11:32:00 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 36514 invoked by uid 60001); 16 Apr 2012 11:32:00 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1334575920; bh=GXVwkE4a2mB+Qx/Z0jj+PlWDoL/mJS5Wf0sCQx32pYY=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=CApjN5Xq4n8ZtWABhFNOEuAekaw9l6ZbR8zoyfcadZWerw8bnsr68nf+E0fw+0iaTmX1oREKjkdjy6oI10m6KeNksKuw8btX/Fgj4O1Ka9uQcvUJmndZ3k8sW3oXruIXcNFPc3lr7MKqYOaVS9vet4SsgJ+sg9BOu+ompMcGHkQ=
X-YMail-OSG: PhJPbkYVM1mnUrCS7DEUubaxS7L3_ZkIvH24pB2C3yKG3rW
Wo2HWhJ7yRXE2cE7Ht016A88.sG9wzRHq4bXCyYoio7UC5T3S1Ce9zfbejj5
c3SFd_8jlCoaPGjNSbi1ZuL0FSHmoKZjqBSi_5pAfPW2v3AjznHORj3p3l4f
UHDqhoIDqlf.LvfZNLKGtEIeharejTJLNDYucDiwx4A0H8S4jsX0BYSnSH8N
hbW2Tmb0MAOnG2TFkBR7f3RMRzuaaf8xFZ7k4wr0NlF7t09Xj60xCfIG0pgt
s8iU.4B4BWjQovQDljsGn3JWrYqW79YrqfSarQ8jV1uGctwa8cqql5RbbhDD
wNLMhs8ljy5NUd0GZGXd0U2aMT60sYPigTPiXdJkW4feu2wgYBO4qaMrf2Au
lCEcy93ynQiBs1RMhVkQSuoHnm57TvAOvmR1TKpzU.0nthxbOjQtmrmC5RaT
j0CHFfQD2BPtYdtXknGhSEnW6WwM2pas1Js7mrVbRzlPDhnIdW_JSumd3o6H
vxtJXLXsaI9ZIrHO4N7LTpRvybpLE1YJMSvLCPPSH5yGmIkbzfks4wz2PWVu
KsMVIF0cQaAS3a.WT
Received: from [41.189.52.148] by web162305.mail.bf1.yahoo.com via HTTP; Mon, 16 Apr 2012 04:31:59 PDT
X-RocketYMMF: frankchinedu334
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Mon, 16 Apr 2012 04:31:59 -0700 (PDT)
From: Shukri Ghanem <[email protected]>
Reply-To: [email protected]
Subject: Urgent reply
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-600603132-1824960347-1334575919=:26171"
X-Truedomain-Domain: yahoo.com
X-Truedomain-SPF: Fail (mx3: transitioning domain of hotmail.com does not designate 98.139.212.178 as permitted sender)
X-Truedomain-DKIM: Pass
X-Truedomain-ID: 5946E581F93A1FF93A896FE0C1A81E2F
X-Truedomain: Neutral
Hi,
Greetings to you and your family, firstly I apologize for sending you this sensitive information via e-mail, instead of a Certified mail/Post-mail. This is due to the urgency and importance of the information.
My name is Shukri Ghanem, the Libyan oil minister and head of the National Oil Co-operation of Libya. I would like to use your relationship with me to pull my wealth out from our African continent. I was high-ranking Libyan official but I defected and fled the country on the May 17th 2011. I have huge amount of fund with Oilibya Petroleum Company in Ivory Coast I need help to divert this fund far from Africa.
Thank you
Shukri Ghanem
If you wish you can email me at
[email protected]
How to get E-Mail Headers
http://www.isipp.com/resources/email-headers/
[email protected]
How to get E-Mail Headers
http://www.isipp.com/resources/email-headers/