by buried under 419s
Mon Feb 09, 2015 4:07 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 08 Feb 2015 21:53:14 -0800
Received: from mail.cybercell.com.ec ([190.12.44.182]:52349)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1YKhHU-0005so-Ch
for ; Sun, 08 Feb 2015 21:53:14 -0800
Received: from User (unknown [95.9.233.238])
by mail.cybercell.com.ec (iRedMail) with ESMTPA id C8EF25FF1CF7;
Mon, 9 Feb 2015 00:10:38 -0500 (ECT)
Reply-To: <[email protected]>
From: "Charlotte Douglas International Airport"<[email protected]>
Date: Mon, 9 Feb 2015 07:15:17 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Airport Storage and Cargo Unit Charlotte Douglas International
Airport 5501 R C Josh Birmingham Pkwy, Charlotte, NC 28208, United States.
[...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[190.12.44.182 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[190.12.44.182 listed in bb.barracudacentral.org]
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_USER From misspaced, from "User"
1.3 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Airport Storage and Cargo Unit
Airport Storage and Cargo Unit
Charlotte Douglas International Airport
5501 R C Josh Birmingham Pkwy, Charlotte, NC 28208, United States.
ATTENTION: Notice On Your Package reg #: JG1N8875BS
In view of your inability to receive your package reg #: JG1N8875BS originally scheduled to be delivered to you by the agency foreign payment service New York. This package in a metal box valued 2,316,000USD (TwoMillion, Three Hundred and Sixteen thousand United States dollars) arrived at Charlotte Douglas International Airport. via American Airlines flight no.3075.
The agency Foreign payment service New York staff came and applied for the release of this package for delivery to your address but has since not shown up.
I am writing to inform you that we have intercepted and investigated the said package and investigations proved the legitimacy and that the package was initially scheduled for delivery to you, you are therefore advised to make contact with Mr. Mark Kelvin, All American Courier, llc Director of Delivery to recover your package and deliver it to you. email is: ( [email protected] )
Note that this notice serves as our last recovery notice to you as the grace day given to you has expired and we shall begin to charge $20.00 for each day the package stays in our custody, you are therefore advised make move to recover your or we will be compelled to list your package as an unclaimed and maybe forfeited and moved to the United States Treasury Department for holding.
Charlotte Douglas International Airport
Envelope-to:
Delivery-date: Sun, 08 Feb 2015 21:53:14 -0800
Received: from mail.cybercell.com.ec ([190.12.44.182]:52349)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1YKhHU-0005so-Ch
for ; Sun, 08 Feb 2015 21:53:14 -0800
Received: from User (unknown [95.9.233.238])
by mail.cybercell.com.ec (iRedMail) with ESMTPA id C8EF25FF1CF7;
Mon, 9 Feb 2015 00:10:38 -0500 (ECT)
Reply-To: <[email protected]>
From: "Charlotte Douglas International Airport"<[email protected]>
Date: Mon, 9 Feb 2015 07:15:17 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Airport Storage and Cargo Unit Charlotte Douglas International
Airport 5501 R C Josh Birmingham Pkwy, Charlotte, NC 28208, United States.
[...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[190.12.44.182 listed in psbl.surriel.com]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[190.12.44.182 listed in bb.barracudacentral.org]
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_USER From misspaced, from "User"
1.3 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Airport Storage and Cargo Unit
Airport Storage and Cargo Unit
Charlotte Douglas International Airport
5501 R C Josh Birmingham Pkwy, Charlotte, NC 28208, United States.
ATTENTION: Notice On Your Package reg #: JG1N8875BS
In view of your inability to receive your package reg #: JG1N8875BS originally scheduled to be delivered to you by the agency foreign payment service New York. This package in a metal box valued 2,316,000USD (TwoMillion, Three Hundred and Sixteen thousand United States dollars) arrived at Charlotte Douglas International Airport. via American Airlines flight no.3075.
The agency Foreign payment service New York staff came and applied for the release of this package for delivery to your address but has since not shown up.
I am writing to inform you that we have intercepted and investigated the said package and investigations proved the legitimacy and that the package was initially scheduled for delivery to you, you are therefore advised to make contact with Mr. Mark Kelvin, All American Courier, llc Director of Delivery to recover your package and deliver it to you. email is: ( [email protected] )
Note that this notice serves as our last recovery notice to you as the grace day given to you has expired and we shall begin to charge $20.00 for each day the package stays in our custody, you are therefore advised make move to recover your or we will be compelled to list your package as an unclaimed and maybe forfeited and moved to the United States Treasury Department for holding.
Charlotte Douglas International Airport
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces