by buried under 419s
Sat Aug 18, 2012 5:44 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 18 Aug 2012 02:28:23 -0700
Received: from mv-osn-hcb006.ocn.ad.jp ([60.37.51.254]:46304)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T2fKO-0000ih-R3
for ; Sat, 18 Aug 2012 02:28:23 -0700
Received: from vcpoppy.ocn.ne.jp (mv-osn-hcb006 [60.37.51.254])
by mv-osn-hcb006.ocn.ad.jp (Postfix) with ESMTP id C24F71602E3;
Sat, 18 Aug 2012 18:27:42 +0900 (JST)
Received: from User (d137-186-141-38.abhsia.telus.net [137.186.141.38])
by vcpoppy.ocn.ne.jp (Postfix) with ESMTP;
Sat, 18 Aug 2012 18:27:42 +0900 (JST)
Reply-To: <[email protected]>
From: "Mr. Tarver Benny Ray"<[email protected]>
Date: Sat, 18 Aug 2012 04:28:16 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hartsfield-Jackson Atlanta International Airport 6000 N Terminal
Pkwy Atlanta, GA 30320 [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[60.37.51.254 listed in psbl.surriel.com]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
3.6 HK_NAME_MR_MRS HK_NAME_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Subject: ***SPAM*** FOR YOUR INFORMATION
Hartsfield-Jackson Atlanta International Airport
6000 N Terminal Pkwy
Atlanta, GA 30320
Attn: Consignee,
This is to inform you that we Intercepted your Consignment Box Tagged house Hold Personal effect on Transit from London
City Airport (LCY). When scanned it revealed 450Bundles of $100 Dollars Bills which is estimated to be $4.5Million Dollar.
The consignment was intercepted because it was not properly declared by the private delivery company as money rather personal effect.
The details on the consignment tagged.
Type: SUITCASE
Wheels: 4 wheels
Handles: Trolley handle with top & side handles
Dimensions: Height: 2.30 ft, Width: 1.64 ft, Depth: 0.98 ft
Weight: 177lbs.
We need a reconfirmation;
1. Your Name.
2. Home phone & Cell Phone
3. Home delivery address
4. Occupation.
5. Any form of Identification either Drivers license or International Passport.
6. Email address.
So you are expected to come for the normalization of your shipping Documents and pick up of your Consignment here
in Hartsfield-Jackson Atlanta International Airport.
Get back so that l will advice you on what you have to come with.
Best Regard.
Mr. Tarver Benny Ray
Envelope-to:
Delivery-date: Sat, 18 Aug 2012 02:28:23 -0700
Received: from mv-osn-hcb006.ocn.ad.jp ([60.37.51.254]:46304)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T2fKO-0000ih-R3
for ; Sat, 18 Aug 2012 02:28:23 -0700
Received: from vcpoppy.ocn.ne.jp (mv-osn-hcb006 [60.37.51.254])
by mv-osn-hcb006.ocn.ad.jp (Postfix) with ESMTP id C24F71602E3;
Sat, 18 Aug 2012 18:27:42 +0900 (JST)
Received: from User (d137-186-141-38.abhsia.telus.net [137.186.141.38])
by vcpoppy.ocn.ne.jp (Postfix) with ESMTP;
Sat, 18 Aug 2012 18:27:42 +0900 (JST)
Reply-To: <[email protected]>
From: "Mr. Tarver Benny Ray"<[email protected]>
Date: Sat, 18 Aug 2012 04:28:16 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=17.9
X-Spam-Score: 179
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hartsfield-Jackson Atlanta International Airport 6000 N Terminal
Pkwy Atlanta, GA 30320 [...]
Content analysis details: (17.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[60.37.51.254 listed in psbl.surriel.com]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.5 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FSL_UA FSL_UA
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
3.6 HK_NAME_MR_MRS HK_NAME_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.7 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form
X-Spam-Flag: YES
Subject: ***SPAM*** FOR YOUR INFORMATION
Hartsfield-Jackson Atlanta International Airport
6000 N Terminal Pkwy
Atlanta, GA 30320
Attn: Consignee,
This is to inform you that we Intercepted your Consignment Box Tagged house Hold Personal effect on Transit from London
City Airport (LCY). When scanned it revealed 450Bundles of $100 Dollars Bills which is estimated to be $4.5Million Dollar.
The consignment was intercepted because it was not properly declared by the private delivery company as money rather personal effect.
The details on the consignment tagged.
Type: SUITCASE
Wheels: 4 wheels
Handles: Trolley handle with top & side handles
Dimensions: Height: 2.30 ft, Width: 1.64 ft, Depth: 0.98 ft
Weight: 177lbs.
We need a reconfirmation;
1. Your Name.
2. Home phone & Cell Phone
3. Home delivery address
4. Occupation.
5. Any form of Identification either Drivers license or International Passport.
6. Email address.
So you are expected to come for the normalization of your shipping Documents and pick up of your Consignment here
in Hartsfield-Jackson Atlanta International Airport.
Get back so that l will advice you on what you have to come with.
Best Regard.
Mr. Tarver Benny Ray
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces