by buried under 419s
Fri Sep 21, 2012 1:27 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 21 Sep 2012 07:01:37 -0700
Received: from nm26.bullet.mail.bf1.yahoo.com ([98.139.212.185]:28209)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TF3nS-0002Op-0g
for ; Fri, 21 Sep 2012 07:01:37 -0700
Received: from [98.139.212.150] by nm26.bullet.mail.bf1.yahoo.com with NNFMP; 21 Sep 2012 14:01:31 -0000
Received: from [98.139.213.2] by tm7.bullet.mail.bf1.yahoo.com with NNFMP; 21 Sep 2012 14:01:31 -0000
Received: from [127.0.0.1] by smtp102.mail.bf1.yahoo.com with NNFMP; 21 Sep 2012 14:01:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1348236091; bh=vnujjIigt4NuQzLBYsvgxmr6X9piyBZ4JAmC65SUoBM=; h=X-Yahoo-Newman-Id:Message-ID:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Reply-To:From:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=gVJo9+EvhTDeKG9HyBP/aNFIdvQvuMu26K6TDtShNqvCVZXfqNbq4gJhSFU8Vzkqh/haNVDX4eyKT7gX1xAgLX6wh4DzBjtme8q1UmfyRFZS1uB0XIoKK/HMTMK6cEktozkfBqM3x4Wok6Sd2JlapsVM1LCeApLMXaew8k5e4z0=
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: FHocaYkVM1n8LLWh7J6Di2J0Q7tE.D3V3qgwuzdaoiOHam_
Awh7cVoZCGsbgghT.gom__TiaqBEcjxKNEAyG7Hmb5k7FhS_yIzayiartaR_
92a.SOH0wZofEx8C.aQfbTcZpAXh.jfC_6VFn5zqm9iMKphTtTKk_4HtJZIF
TR1.1T_Ec4fvd1_xUDN6IW.GNlOYkyzhiWSps6AyU38XPGUY_kS2aeJfqQU2
2VXXHHvhXDT.dZqJY6hcXyxOQ6IL4pWURL_nqPN6S3bPQY1OQur5ZwSJUBa.
rS7ZsJbiWoEqlvGvxwM8Hklwg7v.1txbUk2nZascCJk7gRE5N.Kjo6SJ385Z
pOQ3_Kc.XA3IKdsu53Qjkz3zGCnILaI4rRZUvh7j6QjES3ZYo9Y6iMw1PMr7
_BI.qDywOcX.Y4QwAufyyKHur1q3HZ_QWX3yEWNcDeHTe1QRxFplaP4esPwk
HL.ExY4UXiP1yF9S1CZGwWxqg1wM1bt.FfWD.C3_gHQEMoCn75NY65vmr
X-Yahoo-SMTP: aOjuVquswBCv59BoxYacanUUSwUx_.6yywN6RflVpzLYuI2C
Received: from User ([email protected] with login)
by smtp102.mail.bf1.yahoo.com with SMTP; 21 Sep 2012 07:01:30 -0700 PDT
Reply-To: <[email protected]>
From: "SIR ANDERSON GEORGE"<[email protected]>
Date: Sat, 22 Sep 2012 03:00:32 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0027_01C2A9A6.537FE0CE"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.0
X-Spam-Score: 190
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (19.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(andersongeorge1992[at]yahoo.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.212.185 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<nathanspiewak1990[at]yahoo.it>
)
-0.2 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (andersongeorge1992[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
1.9 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** FROM UNITED NATIONS ORGANIZATIONS
This is a multi-part message in MIME format.
------=_NextPart_000_0027_01C2A9A6.537FE0CE
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
THE UNITED NATIONS ORGANIZATION
LOS ANGELES CALIFORNIA
UNITED NATIONS PAYMENT APPROVAL OFFICE
Special Duties/Logistics Department
FOREIGN CONTRACT/WINNING PAYMENT BUREAU
Our Ref: UN/USA/SNT/STB
==============================================================================
Attn:
WORLD BANK GROUP AND UNITED NATION ORGANIZATION do hereby give this
irrevocable approval order with Release Code: GNC/3480/02/00 in your
favor for your contract entitlement/award winning payment with the
UNITED NATION to your nominated bank account. Now your new Payment,
United Nation Approval No: UN5685P, White House Approved No: WH44CV,
Reference No.-35460021, Allocation No: 674632 Password No: 339331, Pin
Code No: 55674 and your Certificate of Merit Payment No: 103,
Released Code No: 0763; Immediate bank Telex confirmation No:
-1114433; Secret Code No: XXTN013, Having received these vital payment
number, therefore you are qualified now to received and confirm Your
payment with the United Nation immediately within the next 72hrs.
As a matter of fact, you are required to Deal and Communicate only
with MR NATHAN SPIEWAK, DIRECTOR INTERNATIONAL REMITTANCE LOS ANGELES FEDERAL CREDIT UNION
CALIFORNIA USA, with the help and monitory team from the LOS ANGELES FEDERAL CREDIT UNION
which is our official remitting bank.The Committee On Foreign
Payment Matters in United Nation, has look up to make sure you receive
your fund valued $5.5m. So contact: MR NATHAN SPIEWAK on his direct line:+1-917-7321469
Email: [email protected] for immediate release of your
contract/inheritance/Award Winning claim Be informed that you are not
allowed to correspond with any person or office anymore, You are
required to send bellow information for your transfer.
(1) YOUR FULL NAME:
(2) ADDRESS, CITY, STATE AND COUNTRY:
(3) PHONE, FAX AND MOBILE:
(4) COMPANY NAME (IF ANY) POSITION AND ADDRESS:
(5) PROFESSION, AGE AND MARITAL STATUS:
NOTE: YOUR PERSONAL CONTACT/COMMUNICATION CODE WITH BANK IS (555),
CONTACT CODE (555)
SIR ANDERSON GEORGE.
(CHAIRMAN COMMITTEE ON FOREIGN CONTRACT/AWARD WINING PAYMENT UNITED
NATION AND USA GOVERNMENT)
Envelope-to:
Delivery-date: Fri, 21 Sep 2012 07:01:37 -0700
Received: from nm26.bullet.mail.bf1.yahoo.com ([98.139.212.185]:28209)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TF3nS-0002Op-0g
for ; Fri, 21 Sep 2012 07:01:37 -0700
Received: from [98.139.212.150] by nm26.bullet.mail.bf1.yahoo.com with NNFMP; 21 Sep 2012 14:01:31 -0000
Received: from [98.139.213.2] by tm7.bullet.mail.bf1.yahoo.com with NNFMP; 21 Sep 2012 14:01:31 -0000
Received: from [127.0.0.1] by smtp102.mail.bf1.yahoo.com with NNFMP; 21 Sep 2012 14:01:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1348236091; bh=vnujjIigt4NuQzLBYsvgxmr6X9piyBZ4JAmC65SUoBM=; h=X-Yahoo-Newman-Id:Message-ID:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Reply-To:From:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=gVJo9+EvhTDeKG9HyBP/aNFIdvQvuMu26K6TDtShNqvCVZXfqNbq4gJhSFU8Vzkqh/haNVDX4eyKT7gX1xAgLX6wh4DzBjtme8q1UmfyRFZS1uB0XIoKK/HMTMK6cEktozkfBqM3x4Wok6Sd2JlapsVM1LCeApLMXaew8k5e4z0=
X-Yahoo-Newman-Id: [email protected]
Message-ID: <[email protected]>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: FHocaYkVM1n8LLWh7J6Di2J0Q7tE.D3V3qgwuzdaoiOHam_
Awh7cVoZCGsbgghT.gom__TiaqBEcjxKNEAyG7Hmb5k7FhS_yIzayiartaR_
92a.SOH0wZofEx8C.aQfbTcZpAXh.jfC_6VFn5zqm9iMKphTtTKk_4HtJZIF
TR1.1T_Ec4fvd1_xUDN6IW.GNlOYkyzhiWSps6AyU38XPGUY_kS2aeJfqQU2
2VXXHHvhXDT.dZqJY6hcXyxOQ6IL4pWURL_nqPN6S3bPQY1OQur5ZwSJUBa.
rS7ZsJbiWoEqlvGvxwM8Hklwg7v.1txbUk2nZascCJk7gRE5N.Kjo6SJ385Z
pOQ3_Kc.XA3IKdsu53Qjkz3zGCnILaI4rRZUvh7j6QjES3ZYo9Y6iMw1PMr7
_BI.qDywOcX.Y4QwAufyyKHur1q3HZ_QWX3yEWNcDeHTe1QRxFplaP4esPwk
HL.ExY4UXiP1yF9S1CZGwWxqg1wM1bt.FfWD.C3_gHQEMoCn75NY65vmr
X-Yahoo-SMTP: aOjuVquswBCv59BoxYacanUUSwUx_.6yywN6RflVpzLYuI2C
Received: from User ([email protected] with login)
by smtp102.mail.bf1.yahoo.com with SMTP; 21 Sep 2012 07:01:30 -0700 PDT
Reply-To: <[email protected]>
From: "SIR ANDERSON GEORGE"<[email protected]>
Date: Sat, 22 Sep 2012 03:00:32 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0027_01C2A9A6.537FE0CE"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.0
X-Spam-Score: 190
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (19.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(andersongeorge1992[at]yahoo.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.212.185 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
3.2 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<nathanspiewak1990[at]yahoo.it>
)
-0.2 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (andersongeorge1992[at]yahoo.com)
1.0 MISSING_HEADERS Missing To: header
0.0 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
1.9 FSL_UA FSL_UA
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** FROM UNITED NATIONS ORGANIZATIONS
This is a multi-part message in MIME format.
------=_NextPart_000_0027_01C2A9A6.537FE0CE
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
THE UNITED NATIONS ORGANIZATION
LOS ANGELES CALIFORNIA
UNITED NATIONS PAYMENT APPROVAL OFFICE
Special Duties/Logistics Department
FOREIGN CONTRACT/WINNING PAYMENT BUREAU
Our Ref: UN/USA/SNT/STB
==============================================================================
Attn:
WORLD BANK GROUP AND UNITED NATION ORGANIZATION do hereby give this
irrevocable approval order with Release Code: GNC/3480/02/00 in your
favor for your contract entitlement/award winning payment with the
UNITED NATION to your nominated bank account. Now your new Payment,
United Nation Approval No: UN5685P, White House Approved No: WH44CV,
Reference No.-35460021, Allocation No: 674632 Password No: 339331, Pin
Code No: 55674 and your Certificate of Merit Payment No: 103,
Released Code No: 0763; Immediate bank Telex confirmation No:
-1114433; Secret Code No: XXTN013, Having received these vital payment
number, therefore you are qualified now to received and confirm Your
payment with the United Nation immediately within the next 72hrs.
As a matter of fact, you are required to Deal and Communicate only
with MR NATHAN SPIEWAK, DIRECTOR INTERNATIONAL REMITTANCE LOS ANGELES FEDERAL CREDIT UNION
CALIFORNIA USA, with the help and monitory team from the LOS ANGELES FEDERAL CREDIT UNION
which is our official remitting bank.The Committee On Foreign
Payment Matters in United Nation, has look up to make sure you receive
your fund valued $5.5m. So contact: MR NATHAN SPIEWAK on his direct line:+1-917-7321469
Email: [email protected] for immediate release of your
contract/inheritance/Award Winning claim Be informed that you are not
allowed to correspond with any person or office anymore, You are
required to send bellow information for your transfer.
(1) YOUR FULL NAME:
(2) ADDRESS, CITY, STATE AND COUNTRY:
(3) PHONE, FAX AND MOBILE:
(4) COMPANY NAME (IF ANY) POSITION AND ADDRESS:
(5) PROFESSION, AGE AND MARITAL STATUS:
NOTE: YOUR PERSONAL CONTACT/COMMUNICATION CODE WITH BANK IS (555),
CONTACT CODE (555)
SIR ANDERSON GEORGE.
(CHAIRMAN COMMITTEE ON FOREIGN CONTRACT/AWARD WINING PAYMENT UNITED
NATION AND USA GOVERNMENT)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces