by buried under 419s
Thu Jan 31, 2013 1:57 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 31 Jan 2013 08:46:37 -0800
Received: from nm15-vm9.bullet.mail.tp2.yahoo.com ([203.188.200.215]:29882)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1U0xHX-0000yV-KM
for ; Thu, 31 Jan 2013 08:46:37 -0800
Received: from [203.188.200.82] by nm15.bullet.mail.tp2.yahoo.com with NNFMP; 31 Jan 2013 16:46:32 -0000
Received: from [119.42.242.156] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 31 Jan 2013 16:46:32 -0000
Received: from [127.0.0.1] by omp1003.mail.cnh.yahoo.com with NNFMP; 31 Jan 2013 16:46:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 12029 invoked by uid 60001); 31 Jan 2013 16:46:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1359650791; bh=R4Jz3pTEsIW0CySlkqIeIWHhgEDF9sIt93I8oRPQDeA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=yIyp2E1KWFPxF5Ki2CsfCS4mcTno5bpiRH81lOVHyS/wvb6ZH6p2YBg54UjEZEU2htLM0ZdBs9m5d6N8WHwNanI7Hv9RDNA9+wMqYOtDgVbWWFgNofpInoyQ+TihWDHY6W/LmFDiNi+sJCiWkhcm3gU6syBgNXt4r53jlJ3Ota4=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.cn;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=rJ/OnfpliyUa3YUx3RLoTI4/HxO+IqOhPnOM8x16YtK7f3e77B3H9XBTvxu6lfqrtSrcsjVHvHxz9ShP3sHmoG0lKfDgtCTsmgiWeCXPzHVUzHhD8/Dm3Oas8p8rPeXZ5Ubx4It4qZgbRy93kgyvU0feS+6w2jtYaDE0IR07GkU=;
X-YMail-OSG: TAYQsV8VM1kZEcULiGrcU1b93cDrus9TDtTBu8Tso2kaheq
M_HLe23d.AXuhF3RgVbII
Received: from [41.58.20.7] by web92402.mail.cnh.yahoo.com via HTTP; Fri, 01 Feb 2013 00:46:30 CST
X-Rocket-MIMEInfo: 001.001,CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKIAoKCkNhcmdvIFVuaXQNCkNoaWNhZ28gTydIYXJlIEludGVybmF0aW9uYWwgQWlycG9ydA0KQWlycG9ydCBjb2RlOiAKT1JEDQoxMDAwMCBXZXN0IE8nSGFyZQ0KQ2hpY2FnbywgSUwgNjA2NjYNClVTQQ0KKDc3MykgMzc3LTY4MDcNCkVtYWlsOiAKa2VsbHltYXJ0aW5zOTI5QHlhaG9vLmNvbS5oawpBVFRFTlRJT046IEZpbmFsIE5vdGljZSBvZiBZb3VyIFBhY2thZ2UKDQpJbiB2aWV3IG9mIHlvdXIgaW5hYmlsaXR5IHRvIHJlY2UBMAEBAQE-
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <[email protected]>
Date: Fri, 1 Feb 2013 00:46:30 +0800 (CST)
From: Mr Kelly Martins <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="373869220-1572240982-1359650790=:7253"
X-Spam-Status: Yes, score=9.5
X-Spam-Score: 95
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Cargo Unit Chicago O'Hare International Airport Airport code:
ORD 10000 West O'Hare Chicago, IL 60666 USA (773) 377-6807 Email: [email protected]
ATTENTION: Final Notice of Your Package In view of your inability to receive
your package with registration #: CT8100AF from National UK Lottery london
united kingdom,originally scheduled to be delivered to you by an agency,
city express delivery (c.e.d). This package in a golden metal box valued $5,316,000
USD (five million three hundred and sixteen thousand dollars) [...]
Content analysis details: (9.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.188.200.215 listed in list.dnswl.org]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[203.188.200.215 listed in bb.barracudacentral.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sam0456[at]yahoo.cn)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(kellymartins929[at]yahoo.com.hk
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (sam0456[at]yahoo.cn)
0.0 LOTTO_DEPT BODY: Claims Department
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FM_LOTTO_MONEY Talks about lotto and large money!
0.0 T_REMOTE_IMAGE Message contains an external image
4.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** Chicago O'Hare International Airport
--373869220-1572240982-1359650790=:7253
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cargo Unit
Chicago O'Hare International Airport
Airport code:
ORD
10000 West O'Hare
Chicago, IL 60666
USA
(773) 377-6807
Email:
[email protected]
ATTENTION: Final Notice of Your Package
In view of your inability to receive your package with registration #:
CT8100AF from National UK Lottery london united kingdom,originally scheduled to
be delivered to you by an agency, city express delivery (c.e.d). This package in
a golden metal box valued $5,316,000 USD (five million three hundred and sixteen
thousand dollars)
mistakenly arrived at Chicago O'Hare International Airport terminal 5 via
British airways flight no.BA297 from Heathrow airport London sometime ago. The
package with registration no,#: CT8100AF has been cleared by the usa customs and
is 100% legitimate. The agency, attached to the airport, city express delivery
(c.e.d) who delivered your package to your address have just return the package
to our storage facility at the Chicago Airport, due to incomplete address.
Please reconfirm these information's;
1. Your Full Name; ......................
2. Your current address;
............................
3. Your phone number;
....................................
4. Nearest airport to your location
..................................
5. Your Occupation;
.......................................
Therefore, iam writing to inform you that the days of grace has elapsed and
we shall begin to charge the daily storage fee of $25usd. Please call KELLY
MARTINS on (773) 377-6807 Extension 21 terminal 5 or contact Email address: [email protected] to release this
package directly to you.
Note that this notice serves as our last recovery notice to you as our
department will be compelled to shortlist your package as an unclaimed
consignment, and maybe forfeited.
Note: Delivery of your package from the
airport to your residential address is free.
Best regards,
Mr.Kelly Martins
STORAGE OFFICER Terminal 5 Extension 11
Phone:
773- 377-6807
Email: [email protected]
Envelope-to:
Delivery-date: Thu, 31 Jan 2013 08:46:37 -0800
Received: from nm15-vm9.bullet.mail.tp2.yahoo.com ([203.188.200.215]:29882)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1U0xHX-0000yV-KM
for ; Thu, 31 Jan 2013 08:46:37 -0800
Received: from [203.188.200.82] by nm15.bullet.mail.tp2.yahoo.com with NNFMP; 31 Jan 2013 16:46:32 -0000
Received: from [119.42.242.156] by tm3.bullet.mail.tp2.yahoo.com with NNFMP; 31 Jan 2013 16:46:32 -0000
Received: from [127.0.0.1] by omp1003.mail.cnh.yahoo.com with NNFMP; 31 Jan 2013 16:46:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 12029 invoked by uid 60001); 31 Jan 2013 16:46:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1359650791; bh=R4Jz3pTEsIW0CySlkqIeIWHhgEDF9sIt93I8oRPQDeA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=yIyp2E1KWFPxF5Ki2CsfCS4mcTno5bpiRH81lOVHyS/wvb6ZH6p2YBg54UjEZEU2htLM0ZdBs9m5d6N8WHwNanI7Hv9RDNA9+wMqYOtDgVbWWFgNofpInoyQ+TihWDHY6W/LmFDiNi+sJCiWkhcm3gU6syBgNXt4r53jlJ3Ota4=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.cn;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=rJ/OnfpliyUa3YUx3RLoTI4/HxO+IqOhPnOM8x16YtK7f3e77B3H9XBTvxu6lfqrtSrcsjVHvHxz9ShP3sHmoG0lKfDgtCTsmgiWeCXPzHVUzHhD8/Dm3Oas8p8rPeXZ5Ubx4It4qZgbRy93kgyvU0feS+6w2jtYaDE0IR07GkU=;
X-YMail-OSG: TAYQsV8VM1kZEcULiGrcU1b93cDrus9TDtTBu8Tso2kaheq
M_HLe23d.AXuhF3RgVbII
Received: from [41.58.20.7] by web92402.mail.cnh.yahoo.com via HTTP; Fri, 01 Feb 2013 00:46:30 CST
X-Rocket-MIMEInfo: 001.001,CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKIAoKCkNhcmdvIFVuaXQNCkNoaWNhZ28gTydIYXJlIEludGVybmF0aW9uYWwgQWlycG9ydA0KQWlycG9ydCBjb2RlOiAKT1JEDQoxMDAwMCBXZXN0IE8nSGFyZQ0KQ2hpY2FnbywgSUwgNjA2NjYNClVTQQ0KKDc3MykgMzc3LTY4MDcNCkVtYWlsOiAKa2VsbHltYXJ0aW5zOTI5QHlhaG9vLmNvbS5oawpBVFRFTlRJT046IEZpbmFsIE5vdGljZSBvZiBZb3VyIFBhY2thZ2UKDQpJbiB2aWV3IG9mIHlvdXIgaW5hYmlsaXR5IHRvIHJlY2UBMAEBAQE-
X-Mailer: YahooMailClassic/15.1.2 YahooMailWebService/0.8.131.499
Message-ID: <[email protected]>
Date: Fri, 1 Feb 2013 00:46:30 +0800 (CST)
From: Mr Kelly Martins <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="373869220-1572240982-1359650790=:7253"
X-Spam-Status: Yes, score=9.5
X-Spam-Score: 95
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Cargo Unit Chicago O'Hare International Airport Airport code:
ORD 10000 West O'Hare Chicago, IL 60666 USA (773) 377-6807 Email: [email protected]
ATTENTION: Final Notice of Your Package In view of your inability to receive
your package with registration #: CT8100AF from National UK Lottery london
united kingdom,originally scheduled to be delivered to you by an agency,
city express delivery (c.e.d). This package in a golden metal box valued $5,316,000
USD (five million three hundred and sixteen thousand dollars) [...]
Content analysis details: (9.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.188.200.215 listed in list.dnswl.org]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[203.188.200.215 listed in bb.barracudacentral.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(sam0456[at]yahoo.cn)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(kellymartins929[at]yahoo.com.hk
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (sam0456[at]yahoo.cn)
0.0 LOTTO_DEPT BODY: Claims Department
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FM_LOTTO_MONEY Talks about lotto and large money!
0.0 T_REMOTE_IMAGE Message contains an external image
4.0 MONEY_FROM_41 Lots of money from Africa
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** Chicago O'Hare International Airport
--373869220-1572240982-1359650790=:7253
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cargo Unit
Chicago O'Hare International Airport
Airport code:
ORD
10000 West O'Hare
Chicago, IL 60666
USA
(773) 377-6807
Email:
[email protected]
ATTENTION: Final Notice of Your Package
In view of your inability to receive your package with registration #:
CT8100AF from National UK Lottery london united kingdom,originally scheduled to
be delivered to you by an agency, city express delivery (c.e.d). This package in
a golden metal box valued $5,316,000 USD (five million three hundred and sixteen
thousand dollars)
mistakenly arrived at Chicago O'Hare International Airport terminal 5 via
British airways flight no.BA297 from Heathrow airport London sometime ago. The
package with registration no,#: CT8100AF has been cleared by the usa customs and
is 100% legitimate. The agency, attached to the airport, city express delivery
(c.e.d) who delivered your package to your address have just return the package
to our storage facility at the Chicago Airport, due to incomplete address.
Please reconfirm these information's;
1. Your Full Name; ......................
2. Your current address;
............................
3. Your phone number;
....................................
4. Nearest airport to your location
..................................
5. Your Occupation;
.......................................
Therefore, iam writing to inform you that the days of grace has elapsed and
we shall begin to charge the daily storage fee of $25usd. Please call KELLY
MARTINS on (773) 377-6807 Extension 21 terminal 5 or contact Email address: [email protected] to release this
package directly to you.
Note that this notice serves as our last recovery notice to you as our
department will be compelled to shortlist your package as an unclaimed
consignment, and maybe forfeited.
Note: Delivery of your package from the
airport to your residential address is free.
Best regards,
Mr.Kelly Martins
STORAGE OFFICER Terminal 5 Extension 11
Phone:
773- 377-6807
Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces