by buried under 419s
Fri Sep 07, 2012 1:32 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 07 Sep 2012 10:21:46 -0700
Received: from nm24-vm5.bullet.mail.ird.yahoo.com ([212.82.109.196]:48837)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TA2FV-0005rE-5c
for ; Fri, 07 Sep 2012 10:21:46 -0700
Received: from [77.238.189.50] by nm24.bullet.mail.ird.yahoo.com with NNFMP; 07 Sep 2012 17:21:43 -0000
Received: from [217.146.188.163] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 07 Sep 2012 17:21:43 -0000
Received: from [127.0.0.1] by smtp131.mail.ird.yahoo.com with NNFMP; 07 Sep 2012 17:21:43 -0000
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: c4efrQkVM1lbiSdGcW2C3rEJqVr6o7NejdPtLslXENv5.Sz
Mmd9G.muMzRDEZDYcbj6tWEJR.m3NkySO13ST7T0NgMk1GbPeDza4st65Wjr
vFDyuQEfF1lFGo3S9oDHt5lcj3SBkHk_gakN260ztJENi8tyYpVwWFVQCqep
8FuD4DXo1rvE4eIYkskf3ExwKrEfK2cBOCkfgqFm2hRUVJojwtcRSq8Uofyu
zyeVREjWU0IBJDVEqc2JPPUAqnv_yJ5zUmD58KMmufvqTj2277.e80pQMVxK
LY8A23JTyEzZS.1CejeqUlLgK_JPGmboEn.nam_8cu7XbuvVxtfQR.F_9qCk
7toG_LDFYQqfDCBUgxzsBz63SA_HgR5YkGwCcTEJbixOInqOsSieS.7ttV8w
VmHgwtOphO2rsebgM8w34c1EgJQcL1O70ZaU37UZOXv4IZPz5eqf4dmG7q09
W4PNkQUbq6eQF
X-Yahoo-SMTP: e5gm9w2swBAbeGSWnRDmsECWr2j7jUJ4n6.d00Bh27o-
Received: from User ([email protected] with login)
by smtp131.mail.ird.yahoo.com with SMTP; 07 Sep 2012 10:21:41 -0700 PDT
Reply-To: <[email protected]>
From: "Ahlenius"<[email protected]>
Date: Fri, 7 Sep 2012 10:21:46 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0117_01C2A9A6.57EF8330"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=14.9
X-Spam-Score: 149
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Customer, [...]
Content analysis details: (14.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[212.82.109.196 listed in list.dnswl.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sszzaxxc[at]hotmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<mrs.ingabrittahlenius449[at]yahoo.es>
)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
1.9 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Customer,
This is a multi-part message in MIME format.
------=_NextPart_000_0117_01C2A9A6.57EF8330
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Dear Customer,
Dear Customer,
This email is coming to you as a reminder concerning your pending package that has been with us for a long time. As you already know that thispackage is containing an ATM CARD in your name and in the amount of $10.5 million usd.
This email is to let you know that our delivery team has finally carried out delivery of your package. The package left Lagos Nigeria on 02/07/2012and since on the 21st of February, 2012 it has been in Louisville,Kentucky, United States awaiting custom clearance.
To track your package, go to www.ups.com and insert the tracking number below to view delivery status.
www.ups.com
Tracking Number: H8640250193
On the tracking page you will see that this package is going to a wrong address. This is because you have refused to give us your cooperation. You are hereby advice to provide us with the below details so we can immediately have it sent out to our deliverymen in Kentucky.
Your Name(In Full):
Your Delivery Address:
Your Direct telephone Number:
Please note that you are required to provide a redirection fee of $120USD which you are to make available to this office via WESTERN UNION or MONEYGRAM INTERNATIONAL TRANSFER in the name of our accounting officer stated below.
RECEIVER'S NAME: .................UZOU WILLIAMS.
RECEIVER'S ADDRESS: ..............LAGOS-NIGERIA
QUESTION: ..................... COLOUR
ANSWER:.......................GOLD
M.T.C.N:.................To be Made Available After Payment
Upon receiving your correct details and the redirection payment MTCN from you, we will immediately notify our regional depot and the Airport Authorities in USA so that the package will be redirected to your correct address immediately.
Give me a call on +234-7082-036-265. This is important and as such your immediate response will do you Good.
You can also email our dispatch office at : [email protected]
Management,
Mr. Michael Usifoh
©UPS Online Management Team.
All rights reserved.
© 1995-2012
Envelope-to:
Delivery-date: Fri, 07 Sep 2012 10:21:46 -0700
Received: from nm24-vm5.bullet.mail.ird.yahoo.com ([212.82.109.196]:48837)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TA2FV-0005rE-5c
for ; Fri, 07 Sep 2012 10:21:46 -0700
Received: from [77.238.189.50] by nm24.bullet.mail.ird.yahoo.com with NNFMP; 07 Sep 2012 17:21:43 -0000
Received: from [217.146.188.163] by tm3.bullet.mail.ird.yahoo.com with NNFMP; 07 Sep 2012 17:21:43 -0000
Received: from [127.0.0.1] by smtp131.mail.ird.yahoo.com with NNFMP; 07 Sep 2012 17:21:43 -0000
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: c4efrQkVM1lbiSdGcW2C3rEJqVr6o7NejdPtLslXENv5.Sz
Mmd9G.muMzRDEZDYcbj6tWEJR.m3NkySO13ST7T0NgMk1GbPeDza4st65Wjr
vFDyuQEfF1lFGo3S9oDHt5lcj3SBkHk_gakN260ztJENi8tyYpVwWFVQCqep
8FuD4DXo1rvE4eIYkskf3ExwKrEfK2cBOCkfgqFm2hRUVJojwtcRSq8Uofyu
zyeVREjWU0IBJDVEqc2JPPUAqnv_yJ5zUmD58KMmufvqTj2277.e80pQMVxK
LY8A23JTyEzZS.1CejeqUlLgK_JPGmboEn.nam_8cu7XbuvVxtfQR.F_9qCk
7toG_LDFYQqfDCBUgxzsBz63SA_HgR5YkGwCcTEJbixOInqOsSieS.7ttV8w
VmHgwtOphO2rsebgM8w34c1EgJQcL1O70ZaU37UZOXv4IZPz5eqf4dmG7q09
W4PNkQUbq6eQF
X-Yahoo-SMTP: e5gm9w2swBAbeGSWnRDmsECWr2j7jUJ4n6.d00Bh27o-
Received: from User ([email protected] with login)
by smtp131.mail.ird.yahoo.com with SMTP; 07 Sep 2012 10:21:41 -0700 PDT
Reply-To: <[email protected]>
From: "Ahlenius"<[email protected]>
Date: Fri, 7 Sep 2012 10:21:46 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0117_01C2A9A6.57EF8330"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=14.9
X-Spam-Score: 149
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Customer, [...]
Content analysis details: (14.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[212.82.109.196 listed in list.dnswl.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sszzaxxc[at]hotmail.com)
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<mrs.ingabrittahlenius449[at]yahoo.es>
)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
1.9 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Dear Customer,
This is a multi-part message in MIME format.
------=_NextPart_000_0117_01C2A9A6.57EF8330
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Dear Customer,
Dear Customer,
This email is coming to you as a reminder concerning your pending package that has been with us for a long time. As you already know that thispackage is containing an ATM CARD in your name and in the amount of $10.5 million usd.
This email is to let you know that our delivery team has finally carried out delivery of your package. The package left Lagos Nigeria on 02/07/2012and since on the 21st of February, 2012 it has been in Louisville,Kentucky, United States awaiting custom clearance.
To track your package, go to www.ups.com and insert the tracking number below to view delivery status.
www.ups.com
Tracking Number: H8640250193
On the tracking page you will see that this package is going to a wrong address. This is because you have refused to give us your cooperation. You are hereby advice to provide us with the below details so we can immediately have it sent out to our deliverymen in Kentucky.
Your Name(In Full):
Your Delivery Address:
Your Direct telephone Number:
Please note that you are required to provide a redirection fee of $120USD which you are to make available to this office via WESTERN UNION or MONEYGRAM INTERNATIONAL TRANSFER in the name of our accounting officer stated below.
RECEIVER'S NAME: .................UZOU WILLIAMS.
RECEIVER'S ADDRESS: ..............LAGOS-NIGERIA
QUESTION: ..................... COLOUR
ANSWER:.......................GOLD
M.T.C.N:.................To be Made Available After Payment
Upon receiving your correct details and the redirection payment MTCN from you, we will immediately notify our regional depot and the Airport Authorities in USA so that the package will be redirected to your correct address immediately.
Give me a call on +234-7082-036-265. This is important and as such your immediate response will do you Good.
You can also email our dispatch office at : [email protected]
Management,
Mr. Michael Usifoh
©UPS Online Management Team.
All rights reserved.
© 1995-2012
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces