by buried under 419s
Thu Mar 17, 2011 4:06 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 17 Mar 2011 12:47:53 -0700
Received: from nm10.bullet.mail.ne1.yahoo.com ([98.138.90.73])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q0JAk-0007qr-MJ
for ; Thu, 17 Mar 2011 12:47:53 -0700
Received: from [98.138.90.54] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 17 Mar 2011 19:47:49 -0000
Received: from [98.138.89.232] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 17 Mar 2011 19:47:49 -0000
Received: from [127.0.0.1] by omp1047.mail.ne1.yahoo.com with NNFMP; 17 Mar 2011 19:47:49 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 75104 invoked by uid 60001); 17 Mar 2011 19:47:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1300391268; bh=S1lxNUql4/+bn7imRlAjgI3SPQRgZqCrOhx/yxVfxR4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=pG+cHR4R2oPLZRhyoLIhmxgeedO5nEraKteeI9iM7XruznZshzLNaWiJBKL8xoSWfTZsVV/qJJrSqA0SfblNaCs4GpnZd4CLhM8XYxmqzv3hZwcaSUdc3E1al6GSFRkwX2zPxCQPyl7UUrm9R0DWcOFbZwPZ2i+AVVnkWPigSms=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
b=10+d8pkGoNyCyFdWHw98DsMIZ1aFfnBiLhb7QcE6GqlyV7oy0zZHUZ7VvCsdMBx5GPNEUrFq0uxlwdap49me0vwW7oi0injCf2bdA+7FqqqUQ3C+UuXgtLjfnstihX1sl6aPQF5PObxoXNd8T9v7vMVuETR2PTlXFdXnjzmOy00=;
Message-ID: <[email protected]>
X-YMail-OSG: 2fjPLkIVM1mGgbeDO2kz4bqJXKcueE0VrNTRXaF8l.jjM.w
Received: from [180.215.221.58] by web181320.mail.ne1.yahoo.com via HTTP; Thu, 17 Mar 2011 12:47:48 PDT
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.295617
Date: Thu, 17 Mar 2011 12:47:48 -0700 (PDT)
From: office office <[email protected]>
Subject: CONGRATULATIONS
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1867206193-1300391268=:71224"
X-Spam-Subject: ***SPAM*** CONGRATULATIONS
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear E-mail Owner, Your e-mail address has been selected for
£280,000 pounds in on going ICC Cricket World Cup 2011 Promo, To Claim your
prize, You are required to contact Dr. Nicholas for your claim and Provide
to him with the information below: [...]
Content analysis details: (11.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (office--7991[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.90.73 listed in list.dnswl.org]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (office--7991[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5058]
0.0 LOTS_OF_MONEY Huge... sums of money
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
1.9 FREEMAIL_REPLY From and body contain different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
--0-1867206193-1300391268=:71224
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear E-mail Owner,
Your e-mail address has been selected for £280,000 pounds in on going ICC Cricket World Cup 2011 Promo, To Claim your prize, You are required to contact Dr. Nicholas for your claim and Provide to him with the information below:
Serial Number.......ICC-CWCP0198440
Lucky Number.......ICC-CWCP9-15-21-31(ICC-CWC)
Ticket Number.......ICC-CWCP1198812
Name:.........
Address:.........
Country:...........
Age:..................
Gender:................
Occupation:..............
Phone and Fax:...............
Winning E-mail Address:..........
Contact Person: Dr. Nicholas.
Contact Email:( [email protected] )
Regards.
Mrs. Rose Douglas.
Announcer For Int'L Icc Cricket Online Email Promo.
Envelope-to:
Delivery-date: Thu, 17 Mar 2011 12:47:53 -0700
Received: from nm10.bullet.mail.ne1.yahoo.com ([98.138.90.73])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Q0JAk-0007qr-MJ
for ; Thu, 17 Mar 2011 12:47:53 -0700
Received: from [98.138.90.54] by nm10.bullet.mail.ne1.yahoo.com with NNFMP; 17 Mar 2011 19:47:49 -0000
Received: from [98.138.89.232] by tm7.bullet.mail.ne1.yahoo.com with NNFMP; 17 Mar 2011 19:47:49 -0000
Received: from [127.0.0.1] by omp1047.mail.ne1.yahoo.com with NNFMP; 17 Mar 2011 19:47:49 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 75104 invoked by uid 60001); 17 Mar 2011 19:47:48 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1300391268; bh=S1lxNUql4/+bn7imRlAjgI3SPQRgZqCrOhx/yxVfxR4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=pG+cHR4R2oPLZRhyoLIhmxgeedO5nEraKteeI9iM7XruznZshzLNaWiJBKL8xoSWfTZsVV/qJJrSqA0SfblNaCs4GpnZd4CLhM8XYxmqzv3hZwcaSUdc3E1al6GSFRkwX2zPxCQPyl7UUrm9R0DWcOFbZwPZ2i+AVVnkWPigSms=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
b=10+d8pkGoNyCyFdWHw98DsMIZ1aFfnBiLhb7QcE6GqlyV7oy0zZHUZ7VvCsdMBx5GPNEUrFq0uxlwdap49me0vwW7oi0injCf2bdA+7FqqqUQ3C+UuXgtLjfnstihX1sl6aPQF5PObxoXNd8T9v7vMVuETR2PTlXFdXnjzmOy00=;
Message-ID: <[email protected]>
X-YMail-OSG: 2fjPLkIVM1mGgbeDO2kz4bqJXKcueE0VrNTRXaF8l.jjM.w
Received: from [180.215.221.58] by web181320.mail.ne1.yahoo.com via HTTP; Thu, 17 Mar 2011 12:47:48 PDT
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.109.295617
Date: Thu, 17 Mar 2011 12:47:48 -0700 (PDT)
From: office office <[email protected]>
Subject: CONGRATULATIONS
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1867206193-1300391268=:71224"
X-Spam-Subject: ***SPAM*** CONGRATULATIONS
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear E-mail Owner, Your e-mail address has been selected for
£280,000 pounds in on going ICC Cricket World Cup 2011 Promo, To Claim your
prize, You are required to contact Dr. Nicholas for your claim and Provide
to him with the information below: [...]
Content analysis details: (11.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (office--7991[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.138.90.73 listed in list.dnswl.org]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (office--7991[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5058]
0.0 LOTS_OF_MONEY Huge... sums of money
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
1.9 FREEMAIL_REPLY From and body contain different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
0.0 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
--0-1867206193-1300391268=:71224
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Dear E-mail Owner,
Your e-mail address has been selected for £280,000 pounds in on going ICC Cricket World Cup 2011 Promo, To Claim your prize, You are required to contact Dr. Nicholas for your claim and Provide to him with the information below:
Serial Number.......ICC-CWCP0198440
Lucky Number.......ICC-CWCP9-15-21-31(ICC-CWC)
Ticket Number.......ICC-CWCP1198812
Name:.........
Address:.........
Country:...........
Age:..................
Gender:................
Occupation:..............
Phone and Fax:...............
Winning E-mail Address:..........
Contact Person: Dr. Nicholas.
Contact Email:( [email protected] )
Regards.
Mrs. Rose Douglas.
Announcer For Int'L Icc Cricket Online Email Promo.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces