by buried under 419s
Tue Sep 11, 2012 8:20 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 11 Sep 2012 15:33:36 -0700
Received: from byk210.internetdsl.tpnet.pl ([83.19.14.210]:49909 helo=cku.cku1.waw.pl)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TBZ1T-0004zS-PD
for ; Tue, 11 Sep 2012 15:33:36 -0700
Received: from User ([117.211.91.147]) by cku.cku1.waw.pl with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 12 Sep 2012 00:35:24 +0200
Reply-To: <[email protected]>
From: "FAST TRACK DELIVERY"<[email protected]>
Date: Tue, 11 Sep 2012 18:39:16 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 11 Sep 2012 22:35:26.0343 (UTC) FILETIME=[BD2F2170:01CD906D]
X-Spam-Status: Yes, score=17.0
X-Spam-Score: 170
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, My names is Thomas,I am a delivery man from Fast Track
Delivery and Logistic company UK.I have two boxes here that i need to deliver
to your address. The boxes here have Military tags on them and i am now in
the US and i need you to send me your full address so that i will proceed
with delivery.Please get back to me as soon as possible,to enable me complete
your delivery after confirming you as the rightful owner. [...]
Content analysis details: (17.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(thomwright341[at]yahoo.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?117.211.91.147>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[83.19.14.210 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[117.211.91.147 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<thomaswright341[at]yahoo.com>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (thomwright341[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
1.9 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** I Am A Delivery Man And I Have Two Boxes To Deliver To You
Hello,
My names is Thomas,I am a delivery man from Fast Track Delivery and Logistic company UK.I have two boxes here that i need to deliver to your address.
The boxes here have Military tags on them and i am now in the US and i need you to send me your full address so that i will proceed with delivery.Please get back
to me as soon as possible,to enable me complete your delivery after confirming you as the
rightful owner.
Thomas Wright
Clearance/Delivery
FT&L
Envelope-to:
Delivery-date: Tue, 11 Sep 2012 15:33:36 -0700
Received: from byk210.internetdsl.tpnet.pl ([83.19.14.210]:49909 helo=cku.cku1.waw.pl)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TBZ1T-0004zS-PD
for ; Tue, 11 Sep 2012 15:33:36 -0700
Received: from User ([117.211.91.147]) by cku.cku1.waw.pl with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 12 Sep 2012 00:35:24 +0200
Reply-To: <[email protected]>
From: "FAST TRACK DELIVERY"<[email protected]>
Date: Tue, 11 Sep 2012 18:39:16 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <[email protected]>
X-OriginalArrivalTime: 11 Sep 2012 22:35:26.0343 (UTC) FILETIME=[BD2F2170:01CD906D]
X-Spam-Status: Yes, score=17.0
X-Spam-Score: 170
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, My names is Thomas,I am a delivery man from Fast Track
Delivery and Logistic company UK.I have two boxes here that i need to deliver
to your address. The boxes here have Military tags on them and i am now in
the US and i need you to send me your full address so that i will proceed
with delivery.Please get back to me as soon as possible,to enable me complete
your delivery after confirming you as the rightful owner. [...]
Content analysis details: (17.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(thomwright341[at]yahoo.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?117.211.91.147>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[83.19.14.210 listed in bb.barracudacentral.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[117.211.91.147 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<thomaswright341[at]yahoo.com>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (thomwright341[at]yahoo.com)
1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
1.9 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** I Am A Delivery Man And I Have Two Boxes To Deliver To You
Hello,
My names is Thomas,I am a delivery man from Fast Track Delivery and Logistic company UK.I have two boxes here that i need to deliver to your address.
The boxes here have Military tags on them and i am now in the US and i need you to send me your full address so that i will proceed with delivery.Please get back
to me as soon as possible,to enable me complete your delivery after confirming you as the
rightful owner.
Thomas Wright
Clearance/Delivery
FT&L
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces