by buried under 419s
Return-Path: <[email protected]>
Received: from nm28.bullet.mail.sp2.yahoo.com (nm28.bullet.mail.sp2.yahoo.com [98.139.91.98])
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from [email protected])
Received: from [72.30.22.79] by nm28.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2012 14:28:21 -0000
Received: from [66.94.237.102] by tm13.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2012 14:28:18 -0000
Received: from [127.0.0.1] by omp1007.access.mail.mud.yahoo.com with NNFMP; 08 Nov 2012 14:28:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 99110 invoked by uid 60001); 8 Nov 2012 14:28:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352384897; bh=yOoCR8MQoD0AGSCecT+vHD22fV4Y5qeB9dSDJcJ4KUg=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=STlwUjre7eCqJCCewULx2mM2uhm8Eo98zeoU9O44MXQF9euLlJCRF+nam8Geys8mkVp64x3osU3NWuOPHAmy1446HuKZwlIyFtfOCIBWE0ZlOOavbwm8Smw4r/d+vtn+YAIGRM/ld2BzsjsJvr6Avx7JjkC87H0iOEuVxq0GGVw=
X-YMail-OSG: QMWqagAVM1nLyGMmNKmWQzGIIYrRCgyEQoEH2WBnsIXmBY3
BQP0KkbL6Ah88r0TDZEBgwWq0Q88gdcCvDmfpib.OVT9TlDj7MAfAoVpl3N6
fk86SbNZ_wjbvz298NplAGEhlamb_hm3eFJG2YhUNxlQ0b6Z.LyEpkiKXTFR
oBDaRcA3i_VFM4SrNjRJxiwH_2OZq.I9n8vJqY_BowsdoSuhsiQCqj2j_tZl
pcxr.Y04_pmGVdYC.Xc7C5zAsgAnhclvtoVMRPTj7pzIUkiFZq0DAQlTp4b5
gjFwrf8AS_KUoFDvPhditLbvVh_CJo._l1H5.GpLi.djuboRQygMyRrgJkVl
MV6XIzhdSzbng4ufqaVJSYkilVE_W1wi08dJmc6Fd2N7mSJZYS_wCKsIZVlg
A6SnOpfGnRXUXOLrCghJC7uLsPJW7i8SKuNHcsU68JNfND1XA0nOpSeCoGJl
vRIs-
Received: from [41.132.206.181] by web5708.biz.mail.ne1.yahoo.com via HTTP; Thu, 08 Nov 2012 06:28:17 PST
X-RocketYMMF: webokoza15199
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <[email protected]>
Date: Thu, 8 Nov 2012 06:28:17 -0800 (PST)
From: Shell Promotion <[email protected]>
Reply-To: [email protected]
Subject: CONGRATULATIONS KINDLY OPEN THE ATTACHMENT FILE READ THE LETTER AND CONTACT HIM
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1724390852-601030509-1352384897=:87764"
X-Greylist: Default is to whitelist mail, not delayed by milter-greylist-4.2.3
---1724390852-601030509-1352384897=:87764
Content-Type: text/plain; charset=us-ascii
The following is part of a scam email
It only had a graphic file " SHELL_OFFICIAL_WINNING_NOTIFICATION.JPG"
The "winning" information
Shell petroleum development company
American tobacco company united Kingdom
Ref No egs.2251256003/02
batch no 14/0017/1pd
winning number 60/84/27/17/36
lottery award 800,0000 pounds
contact information
James farmer
[email protected]
+44-703-592-2280
Received: from nm28.bullet.mail.sp2.yahoo.com (nm28.bullet.mail.sp2.yahoo.com [98.139.91.98])
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
(envelope-from [email protected])
Received: from [72.30.22.79] by nm28.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2012 14:28:21 -0000
Received: from [66.94.237.102] by tm13.bullet.mail.sp2.yahoo.com with NNFMP; 08 Nov 2012 14:28:18 -0000
Received: from [127.0.0.1] by omp1007.access.mail.mud.yahoo.com with NNFMP; 08 Nov 2012 14:28:18 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 99110 invoked by uid 60001); 8 Nov 2012 14:28:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1352384897; bh=yOoCR8MQoD0AGSCecT+vHD22fV4Y5qeB9dSDJcJ4KUg=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=STlwUjre7eCqJCCewULx2mM2uhm8Eo98zeoU9O44MXQF9euLlJCRF+nam8Geys8mkVp64x3osU3NWuOPHAmy1446HuKZwlIyFtfOCIBWE0ZlOOavbwm8Smw4r/d+vtn+YAIGRM/ld2BzsjsJvr6Avx7JjkC87H0iOEuVxq0GGVw=
X-YMail-OSG: QMWqagAVM1nLyGMmNKmWQzGIIYrRCgyEQoEH2WBnsIXmBY3
BQP0KkbL6Ah88r0TDZEBgwWq0Q88gdcCvDmfpib.OVT9TlDj7MAfAoVpl3N6
fk86SbNZ_wjbvz298NplAGEhlamb_hm3eFJG2YhUNxlQ0b6Z.LyEpkiKXTFR
oBDaRcA3i_VFM4SrNjRJxiwH_2OZq.I9n8vJqY_BowsdoSuhsiQCqj2j_tZl
pcxr.Y04_pmGVdYC.Xc7C5zAsgAnhclvtoVMRPTj7pzIUkiFZq0DAQlTp4b5
gjFwrf8AS_KUoFDvPhditLbvVh_CJo._l1H5.GpLi.djuboRQygMyRrgJkVl
MV6XIzhdSzbng4ufqaVJSYkilVE_W1wi08dJmc6Fd2N7mSJZYS_wCKsIZVlg
A6SnOpfGnRXUXOLrCghJC7uLsPJW7i8SKuNHcsU68JNfND1XA0nOpSeCoGJl
vRIs-
Received: from [41.132.206.181] by web5708.biz.mail.ne1.yahoo.com via HTTP; Thu, 08 Nov 2012 06:28:17 PST
X-RocketYMMF: webokoza15199
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.123.460
Message-ID: <[email protected]>
Date: Thu, 8 Nov 2012 06:28:17 -0800 (PST)
From: Shell Promotion <[email protected]>
Reply-To: [email protected]
Subject: CONGRATULATIONS KINDLY OPEN THE ATTACHMENT FILE READ THE LETTER AND CONTACT HIM
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1724390852-601030509-1352384897=:87764"
X-Greylist: Default is to whitelist mail, not delayed by milter-greylist-4.2.3
---1724390852-601030509-1352384897=:87764
Content-Type: text/plain; charset=us-ascii
The following is part of a scam email
It only had a graphic file " SHELL_OFFICIAL_WINNING_NOTIFICATION.JPG"
The "winning" information
Shell petroleum development company
American tobacco company united Kingdom
Ref No egs.2251256003/02
batch no 14/0017/1pd
winning number 60/84/27/17/36
lottery award 800,0000 pounds
contact information
James farmer
[email protected]
+44-703-592-2280
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
