by buried under 419s
Sun Jul 15, 2012 7:23 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 15 Jul 2012 09:47:56 -0700
Received: from ms.mpm-di.com ([203.140.65.50]:40290)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SqRz8-0007wp-RJ
for ; Sun, 15 Jul 2012 09:47:56 -0700
Received: from User (wsip-70-168-67-186.ok.ok.cox.net [70.168.67.186])
by ms.mpm-di.com (Postfix) with ESMTP id B1E7F5E1E31;
Mon, 16 Jul 2012 01:04:36 +0900 (JST)
Reply-To: <[email protected]>
From: "Orlando International Airport Florida"<[email protected]>
Date: Sun, 15 Jul 2012 09:48:37 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Cargo Unit Greater Orlando Aviation Authority (GOAA) Orlando
International Airport One Jeff Fuqua Blvd Orlando, Florida 3227-4399 ATTENTION:
Final Notice of Your Package With Reg #: SA335493RDK... In view of your inability
to receive your package reg #: SA335493RDK originally scheduled to be delivered
to you by the agency Foreign payment service New York. [...]
Content analysis details: (18.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(rev.denislopez[at]aol.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[203.140.65.50 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.140.65.50 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION: Final Notice of Your Package With Reg #: SA335493RDK...
Cargo Unit
Greater Orlando Aviation Authority (GOAA)
Orlando International Airport
One Jeff Fuqua Blvd
Orlando, Florida 3227-4399
ATTENTION: Final Notice of Your Package With Reg #: SA335493RDK...
In view of your inability to receive your package reg #: SA335493RDK originally scheduled to be delivered to you by the agency Foreign payment service New York.
The package in a golden metal box valued 5,316,000USD (Five Million, Three Hundred and Sixteen thousand United states dollars) arrived at Chicago international airport via British airways flight no.BA592 from London UK sometime ago. The agency Foreign Payment service New York staff came and applied for the release of this package for delivery to your address but has since not shown up again.
I am hereby writing to inform you that the days of grace has expired and we shall begin to charge a storage fee of US$10 daily. Please call Mr ROBERT WILLIAMS for enquirers to release this package and deliver it to you. email: [email protected]
Note that this notice serves as our last recovery notice to you as our department will be compelled to list your package as an unclaimed and maybe forfeited.
Best regards,
REV.DENIS LOPEZ
Terminal 8. ext.15
Envelope-to:
Delivery-date: Sun, 15 Jul 2012 09:47:56 -0700
Received: from ms.mpm-di.com ([203.140.65.50]:40290)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SqRz8-0007wp-RJ
for ; Sun, 15 Jul 2012 09:47:56 -0700
Received: from User (wsip-70-168-67-186.ok.ok.cox.net [70.168.67.186])
by ms.mpm-di.com (Postfix) with ESMTP id B1E7F5E1E31;
Mon, 16 Jul 2012 01:04:36 +0900 (JST)
Reply-To: <[email protected]>
From: "Orlando International Airport Florida"<[email protected]>
Date: Sun, 15 Jul 2012 09:48:37 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Cargo Unit Greater Orlando Aviation Authority (GOAA) Orlando
International Airport One Jeff Fuqua Blvd Orlando, Florida 3227-4399 ATTENTION:
Final Notice of Your Package With Reg #: SA335493RDK... In view of your inability
to receive your package reg #: SA335493RDK originally scheduled to be delivered
to you by the agency Foreign payment service New York. [...]
Content analysis details: (18.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(rev.denislopez[at]aol.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[203.140.65.50 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[203.140.65.50 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
1.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** ATTENTION: Final Notice of Your Package With Reg #: SA335493RDK...
Cargo Unit
Greater Orlando Aviation Authority (GOAA)
Orlando International Airport
One Jeff Fuqua Blvd
Orlando, Florida 3227-4399
ATTENTION: Final Notice of Your Package With Reg #: SA335493RDK...
In view of your inability to receive your package reg #: SA335493RDK originally scheduled to be delivered to you by the agency Foreign payment service New York.
The package in a golden metal box valued 5,316,000USD (Five Million, Three Hundred and Sixteen thousand United states dollars) arrived at Chicago international airport via British airways flight no.BA592 from London UK sometime ago. The agency Foreign Payment service New York staff came and applied for the release of this package for delivery to your address but has since not shown up again.
I am hereby writing to inform you that the days of grace has expired and we shall begin to charge a storage fee of US$10 daily. Please call Mr ROBERT WILLIAMS for enquirers to release this package and deliver it to you. email: [email protected]
Note that this notice serves as our last recovery notice to you as our department will be compelled to list your package as an unclaimed and maybe forfeited.
Best regards,
REV.DENIS LOPEZ
Terminal 8. ext.15
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces