by buried under 419s
Fri Jun 08, 2012 12:15 pm
Return-path: <tmm051670@aol.com>
Envelope-to:
Delivery-date: Fri, 08 Jun 2012 07:10:40 -0700
Received: from oms-db04.r1000.mx.aol.com ([205.188.58.4]:33244)
by with esmtp (Exim 4.77)
(envelope-from <tmm051670@aol.com>)
id 1Scztf-0001Hf-2z
for ; Fri, 08 Jun 2012 07:10:40 -0700
Received: from mtaout-mb06.r1000.mx.aol.com (mtaout-mb06.r1000.mx.aol.com [172.29.41.70])
by oms-db04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 04FA41C000048;
Fri, 8 Jun 2012 10:10:39 -0400 (EDT)
Received: from User (unknown [174.128.249.227])
by mtaout-mb06.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id CF9B9E000083;
Fri, 8 Jun 2012 10:10:35 -0400 (EDT)
Reply-To: <diplomatic118@yahoo.es>
From: "Sanusi L"<tmm051670@aol.com>
Date: Fri, 8 Jun 2012 08:10:38 -0600
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_01C2A9A6.035D68E6"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: S
X-SPAM-FLAG: YES
X-AOL-VSS-INFO: 5400.1158/81357
X-AOL-VSS-CODE: clean
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20110426; t=1339164638;
bh=C/TARVBpzRgYCnbOfiIjPE9hkVvq46nxw4XKFXkAQdY=;
h=From:Subject:Date:MIME-Version:Content-Type;
b=e8YVnRkr9phobIAyyRTPtS+ayoSermYoyxiX2fJtGsnYVvzSqCyPu/2ALs3BRShVC
Pi2w4QHM2Z2X2P9pd10AG4e/XSKs/rHjK1ZtF2opsi3v7xyu923CCwwDL/tNFNrQ3o
DRH6HLKuYnaiLstjXdZh14XjYL788BnV05JQhQ7E=
X-AOL-SCOLL-SCORE: 0:2:236235040:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d29464fd207db51b8
X-AOL-IP: 174.128.249.227
X-Spam-Status: Yes, score=18.3
X-Spam-Score: 183
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: We have received today payment credit instruction. Kindly
review the attachment fot full details. Thanks [...]
Content analysis details: (18.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.7 AXB_X_AOL_SEZ_S AOL said this is S
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.2 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tmm051670[at]aol.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[205.188.58.4 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<diplomatic118[at]yahoo.es>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (tmm051670[at]aol.com)
1.0 MISSING_HEADERS Missing To: header
0.0 T_OBFU_DOC_ATTACH BODY: MS Document attachment with generic MIME type
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?174.128.249.227>]
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.3 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
0.0 OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
1.3 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.7 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
0.0 T_FREEMAIL_RVW_ATTCH Please review attached document, from freemail
0.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Call Him Now
This is a multi-part message in MIME format.
------=_NextPart_000_0012_01C2A9A6.035D68E6
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
FROM THE DESK ALHAJI SANUSI LAMIDO SANUSI
EXECUTIVE GOVERNOR, CENTRAL BANK OF NIGERIA
CONTRACT #: MAV/NNPC/FGN/MIN/010,
Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678
CENTRAL BANK NIGERIA.
Our Ref: CBN/IRD/CBX/021/10
We have received today payment credit instruction from the new President of Federal Government of Nigeria (DR JONATHAN GOODLUCK)to credit your account with your full inheritance funds from the Nigerian reserve account with our bank.
This is to notify you that your funds ($5.3 MILLION) has been programmed for immediate release into your nominated account but we can not transfer this funds direct to your nominated bank account, because we are having a little problem with International Monetary Fund (IMF) so our method of payment is by Diplomatic Courier Service.
Please, watch the video links below as some of these fraud-stars were arrested here in Nigeria:
http://www.youtube.com/watch?v=ISMgGdaGOJM
YOUR DIPLOMAT HAS ARRIVED WITH YOUR CONSIGNENT BOX AT THE BIRMINGHAM. INTERNATIONAL AIRPORT ALABAMA UNITED STATES OF AMERICA BIRMINGHAM. INTERNATIONAL AIRPORT ALABAMA USA CONTACT HIM NOW:( 205-660-7109 ) ( enquirydepartment190@gmail.com ) or ( 205-660-7109
I want you to know that you have 24 hours to call the airport (205-660-7109) then ask to speak to the diplomatic in person of Mr Kevin Okoro in the United States, let us know if you are still interested to get your consignment delivery to you today? as they have been waiting to hear from you to help them complete this delivery to you right now the diplomatic have arrival to united state with your consignment box,call them for clearance.
You are to call the airport with the number above and ask to speak with the diplomatic in person Mr Kevin Okoro and send him email at ( enquirydepartment190@gmail.com ) call them and get back to me.
Note; that you must reconfirm your full address and valid phone# to him through thes (email:enquirydepartment190@gmail.com) immediately you receive these email to enable him deliver your cash consignment to you without any mistake.
You must call me on my direct line# +234-8074.729.020 for serious discution.
I appreciate your good sympathetic and collaboration, Hope hearing from you swiftly.
CONGRATULATIONS.
ALHAJI SANUSI LAMIDO SANUSI
EXECUCTIVE GOVERNOR CENTRAL
BANK OF NIGERIA (CBN)
Tel: +234-8074729020
Envelope-to:
Delivery-date: Fri, 08 Jun 2012 07:10:40 -0700
Received: from oms-db04.r1000.mx.aol.com ([205.188.58.4]:33244)
by with esmtp (Exim 4.77)
(envelope-from <tmm051670@aol.com>)
id 1Scztf-0001Hf-2z
for ; Fri, 08 Jun 2012 07:10:40 -0700
Received: from mtaout-mb06.r1000.mx.aol.com (mtaout-mb06.r1000.mx.aol.com [172.29.41.70])
by oms-db04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 04FA41C000048;
Fri, 8 Jun 2012 10:10:39 -0400 (EDT)
Received: from User (unknown [174.128.249.227])
by mtaout-mb06.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id CF9B9E000083;
Fri, 8 Jun 2012 10:10:35 -0400 (EDT)
Reply-To: <diplomatic118@yahoo.es>
From: "Sanusi L"<tmm051670@aol.com>
Date: Fri, 8 Jun 2012 08:10:38 -0600
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_01C2A9A6.035D68E6"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: S
X-SPAM-FLAG: YES
X-AOL-VSS-INFO: 5400.1158/81357
X-AOL-VSS-CODE: clean
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20110426; t=1339164638;
bh=C/TARVBpzRgYCnbOfiIjPE9hkVvq46nxw4XKFXkAQdY=;
h=From:Subject:Date:MIME-Version:Content-Type;
b=e8YVnRkr9phobIAyyRTPtS+ayoSermYoyxiX2fJtGsnYVvzSqCyPu/2ALs3BRShVC
Pi2w4QHM2Z2X2P9pd10AG4e/XSKs/rHjK1ZtF2opsi3v7xyu923CCwwDL/tNFNrQ3o
DRH6HLKuYnaiLstjXdZh14XjYL788BnV05JQhQ7E=
X-AOL-SCOLL-SCORE: 0:2:236235040:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d29464fd207db51b8
X-AOL-IP: 174.128.249.227
X-Spam-Status: Yes, score=18.3
X-Spam-Score: 183
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: We have received today payment credit instruction. Kindly
review the attachment fot full details. Thanks [...]
Content analysis details: (18.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.7 AXB_X_AOL_SEZ_S AOL said this is S
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.2 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tmm051670[at]aol.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[205.188.58.4 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<diplomatic118[at]yahoo.es>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (tmm051670[at]aol.com)
1.0 MISSING_HEADERS Missing To: header
0.0 T_OBFU_DOC_ATTACH BODY: MS Document attachment with generic MIME type
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?174.128.249.227>]
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.3 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_NO_TO From misspaced, To missing
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
0.0 OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
1.3 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.7 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
0.0 T_FREEMAIL_RVW_ATTCH Please review attached document, from freemail
0.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Call Him Now
This is a multi-part message in MIME format.
------=_NextPart_000_0012_01C2A9A6.035D68E6
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
FROM THE DESK ALHAJI SANUSI LAMIDO SANUSI
EXECUTIVE GOVERNOR, CENTRAL BANK OF NIGERIA
CONTRACT #: MAV/NNPC/FGN/MIN/010,
Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678
CENTRAL BANK NIGERIA.
Our Ref: CBN/IRD/CBX/021/10
We have received today payment credit instruction from the new President of Federal Government of Nigeria (DR JONATHAN GOODLUCK)to credit your account with your full inheritance funds from the Nigerian reserve account with our bank.
This is to notify you that your funds ($5.3 MILLION) has been programmed for immediate release into your nominated account but we can not transfer this funds direct to your nominated bank account, because we are having a little problem with International Monetary Fund (IMF) so our method of payment is by Diplomatic Courier Service.
Please, watch the video links below as some of these fraud-stars were arrested here in Nigeria:
http://www.youtube.com/watch?v=ISMgGdaGOJM
YOUR DIPLOMAT HAS ARRIVED WITH YOUR CONSIGNENT BOX AT THE BIRMINGHAM. INTERNATIONAL AIRPORT ALABAMA UNITED STATES OF AMERICA BIRMINGHAM. INTERNATIONAL AIRPORT ALABAMA USA CONTACT HIM NOW:( 205-660-7109 ) ( enquirydepartment190@gmail.com ) or ( 205-660-7109
I want you to know that you have 24 hours to call the airport (205-660-7109) then ask to speak to the diplomatic in person of Mr Kevin Okoro in the United States, let us know if you are still interested to get your consignment delivery to you today? as they have been waiting to hear from you to help them complete this delivery to you right now the diplomatic have arrival to united state with your consignment box,call them for clearance.
You are to call the airport with the number above and ask to speak with the diplomatic in person Mr Kevin Okoro and send him email at ( enquirydepartment190@gmail.com ) call them and get back to me.
Note; that you must reconfirm your full address and valid phone# to him through thes (email:enquirydepartment190@gmail.com) immediately you receive these email to enable him deliver your cash consignment to you without any mistake.
You must call me on my direct line# +234-8074.729.020 for serious discution.
I appreciate your good sympathetic and collaboration, Hope hearing from you swiftly.
CONGRATULATIONS.
ALHAJI SANUSI LAMIDO SANUSI
EXECUCTIVE GOVERNOR CENTRAL
BANK OF NIGERIA (CBN)
Tel: +234-8074729020
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces