by buried under 419s
Wed May 02, 2012 2:12 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 02 May 2012 10:10:18 -0700
Received: from nm40-vm8.bullet.mail.ne1.yahoo.com ([98.138.229.184]:22194)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SPd4C-0002gk-PR
for ; Wed, 02 May 2012 10:10:18 -0700
Received: from [98.138.90.56] by nm40.bullet.mail.ne1.yahoo.com with NNFMP; 02 May 2012 17:03:01 -0000
Received: from [68.142.194.244] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 02 May 2012 17:03:00 -0000
Received: from [66.94.237.121] by t2.bullet.mud.yahoo.com with NNFMP; 02 May 2012 17:03:00 -0000
Received: from [127.0.0.1] by omp1026.access.mail.mud.yahoo.com with NNFMP; 02 May 2012 17:03:00 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 21736 invoked by uid 60001); 2 May 2012 17:02:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1335978179; bh=ki4ZCCUESM9MoKbItrzbbRDMq3VNO7DfMS9nJ8DApho=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ppokRmwUnza61WfyQ5Z7gzkpJhy6ywyi9ee0EgRCRXQgnsySzYNCMR8bJIKn4P7LPll/io+v1nCptpmpoNbqvmVwb20jek1ISVcZy0pk2iv4eqBGBHocbRLa0taLxWJdF1IpLHUUZ4p91dS2yG1d0AoFkMluoTOCw+HK/PuZpH4=
X-YMail-OSG: jG31huoVM1m.rTeS8Z3ii5FufYKZv19L22_xRnElNRCZx4D
mS2JACb1Ijmg7Qz2JY941qcRXgOoqKKWGWddavxxWokw_dgBBBzFr.rYsMNE
EjMm8SY_Ha8KHZ_olOgo3wTmyGFS5worsjSxHze97Z21TiV38YQ60k1.xZVP
zKA18XUaCmen45FXDUh..F3qr4fkdYK6rZ3LLgI9BuVKSgTxS.2qiHF91k05
K4j3ANNOpUeMwwK9wHUTSOF3jhkQmHIY1lyqAr02oz7XceR0UIU56StOdHu0
RkMcDTzv0hXnjBFCuPKmiHltxFRDigzEmWRWCvD7tU9RrLO3x33qJXUa5KlO
.gllsnLmzczibroFKcpxggRp470nPBX56i2XHxPYdhQm2i3_OmNUytxZwj7Y
zaRK1b_iFRvJ0_IjQbuWVTSwJurt9XQJ9DclR_FzpnrvpKHESIlQ53bV_TLY
7.N8Kx1j5xMyfeWroKMJOQHFh7yY9vwA00EVMKQ--
Received: from [69.22.172.253] by web181715.mail.ne1.yahoo.com via HTTP; Wed, 02 May 2012 10:02:59 PDT
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.6 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Wed, 2 May 2012 10:02:59 -0700 (PDT)
From: NOKIA INTERNATIONAL WORLDWIDE SWEEPSTAKE BONANZA!! <[email protected]>
Reply-To: [email protected]
Subject: NOKIA INTERNATIONAL WORLDWIDE SWEEPSTAKE BONANZA!!
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1613940287-59103325-1335978179=:13037"
X-Spam-Status: No, score=4.6
X-Spam-Score: 46
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Open Your Attachment to Continue the Messages Open Your Attachment
to Continue the Messages [...]
Content analysis details: (4.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(npromo001[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.229.184 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(thabovee001[at]live.com
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (npromo001[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4385]
0.0 T_HK_SPAMMY_FILENAME T_HK_SPAMMY_FILENAME
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
---1613940287-59103325-1335978179=:13037
Content-Type: multipart/alternative; boundary="-1613940287-685187000-1335978179=:13037"
---1613940287-685187000-1335978179=:13037
Content-Type: text/plain; charset=us-ascii
Open Your Attachment to Continue the Messages
FAKE Lottery on jpg attachment
NOKIA INTERNATIONAL PROMOTION
Ref No: EGMIKS255125600112
Batch No:14/0017/IPD
won 1.500,000.00
+27762673566
email [email protected]
Envelope-to:
Delivery-date: Wed, 02 May 2012 10:10:18 -0700
Received: from nm40-vm8.bullet.mail.ne1.yahoo.com ([98.138.229.184]:22194)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SPd4C-0002gk-PR
for ; Wed, 02 May 2012 10:10:18 -0700
Received: from [98.138.90.56] by nm40.bullet.mail.ne1.yahoo.com with NNFMP; 02 May 2012 17:03:01 -0000
Received: from [68.142.194.244] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 02 May 2012 17:03:00 -0000
Received: from [66.94.237.121] by t2.bullet.mud.yahoo.com with NNFMP; 02 May 2012 17:03:00 -0000
Received: from [127.0.0.1] by omp1026.access.mail.mud.yahoo.com with NNFMP; 02 May 2012 17:03:00 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 21736 invoked by uid 60001); 2 May 2012 17:02:59 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1335978179; bh=ki4ZCCUESM9MoKbItrzbbRDMq3VNO7DfMS9nJ8DApho=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ppokRmwUnza61WfyQ5Z7gzkpJhy6ywyi9ee0EgRCRXQgnsySzYNCMR8bJIKn4P7LPll/io+v1nCptpmpoNbqvmVwb20jek1ISVcZy0pk2iv4eqBGBHocbRLa0taLxWJdF1IpLHUUZ4p91dS2yG1d0AoFkMluoTOCw+HK/PuZpH4=
X-YMail-OSG: jG31huoVM1m.rTeS8Z3ii5FufYKZv19L22_xRnElNRCZx4D
mS2JACb1Ijmg7Qz2JY941qcRXgOoqKKWGWddavxxWokw_dgBBBzFr.rYsMNE
EjMm8SY_Ha8KHZ_olOgo3wTmyGFS5worsjSxHze97Z21TiV38YQ60k1.xZVP
zKA18XUaCmen45FXDUh..F3qr4fkdYK6rZ3LLgI9BuVKSgTxS.2qiHF91k05
K4j3ANNOpUeMwwK9wHUTSOF3jhkQmHIY1lyqAr02oz7XceR0UIU56StOdHu0
RkMcDTzv0hXnjBFCuPKmiHltxFRDigzEmWRWCvD7tU9RrLO3x33qJXUa5KlO
.gllsnLmzczibroFKcpxggRp470nPBX56i2XHxPYdhQm2i3_OmNUytxZwj7Y
zaRK1b_iFRvJ0_IjQbuWVTSwJurt9XQJ9DclR_FzpnrvpKHESIlQ53bV_TLY
7.N8Kx1j5xMyfeWroKMJOQHFh7yY9vwA00EVMKQ--
Received: from [69.22.172.253] by web181715.mail.ne1.yahoo.com via HTTP; Wed, 02 May 2012 10:02:59 PDT
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.6 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Wed, 2 May 2012 10:02:59 -0700 (PDT)
From: NOKIA INTERNATIONAL WORLDWIDE SWEEPSTAKE BONANZA!! <[email protected]>
Reply-To: [email protected]
Subject: NOKIA INTERNATIONAL WORLDWIDE SWEEPSTAKE BONANZA!!
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1613940287-59103325-1335978179=:13037"
X-Spam-Status: No, score=4.6
X-Spam-Score: 46
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Open Your Attachment to Continue the Messages Open Your Attachment
to Continue the Messages [...]
Content analysis details: (4.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(npromo001[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.138.229.184 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(thabovee001[at]live.com
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (npromo001[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4385]
0.0 T_HK_SPAMMY_FILENAME T_HK_SPAMMY_FILENAME
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
---1613940287-59103325-1335978179=:13037
Content-Type: multipart/alternative; boundary="-1613940287-685187000-1335978179=:13037"
---1613940287-685187000-1335978179=:13037
Content-Type: text/plain; charset=us-ascii
Open Your Attachment to Continue the Messages
FAKE Lottery on jpg attachment
NOKIA INTERNATIONAL PROMOTION
Ref No: EGMIKS255125600112
Batch No:14/0017/IPD
won 1.500,000.00
+27762673566
email [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces