by buried under 419s
Mon Jun 06, 2011 9:23 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 06 Jun 2011 14:12:05 -0700
Received: from nm6.access.bullet.mail.sp2.yahoo.com ([98.139.44.133])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QTh5g-0008Bj-9S
for ; Mon, 06 Jun 2011 14:12:04 -0700
Received: from [98.139.44.100] by nm6.access.bullet.mail.sp2.yahoo.com with NNFMP; 06 Jun 2011 21:12:03 -0000
Received: from [98.139.44.78] by tm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 06 Jun 2011 21:12:03 -0000
Received: from [127.0.0.1] by omp1015.access.mail.sp2.yahoo.com with NNFMP; 06 Jun 2011 21:12:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 74230 invoked by uid 60001); 6 Jun 2011 21:12:02 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1307394722; bh=YENdnMA39ugVzLCJCH/8gDBe53KjpRcN+On3LBF+Ulw=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=V1WL/HiGasieykhPJrQE9ayJjgUNHpA8Usp0QoWsisfMIJTcP6MUg+GI5WhbZeZq8QK1NxRvsySdC2r0M9JcDM4OkTohgrBi54gOa9x+baV6NgQeEOnkk02Jk7tuDeEbUHUOb65VFqQ2kXT1K+UipzZL/z+qIyTiIDlx/wDcuyA=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=MUCxAeIu1tLUzTqixfXf1YVEkPUotNXNmMLMinFPQ4szMWsfFKDrI/Qha0YkimgTtYjrmm2IlgC5I7cVRMitBuahZ0gdGFecVcuFkq7TnkGui5XBPYEU65cLBEZwEbIyEr1g8V6koZxg6+EPycbCz1S375Qy48FY6O3/euGkoGw=;
Message-ID: <[email protected]>
X-YMail-OSG: Kdq.hFUVM1mVCOOgfxrArniS6J3X8DVptFFoWWgGT8Lkes1
Received: from [180.215.207.35] by web181709.mail.ne1.yahoo.com via HTTP; Mon, 06 Jun 2011 14:12:02 PDT
X-Mailer: YahooMailClassic/12.0.2 YahooMailWebService/0.8.111.303096
Date: Mon, 6 Jun 2011 14:12:02 -0700 (PDT)
From: STANDARD LOAN FUNDS <[email protected]>
Reply-To: [email protected]
Subject: Apply for a loan at 3% interest rate. Contact us with amount needed by you and the duration to pay back loan
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1868051171-1307394722=:66241"
X-Spam-Subject: ***SPAM*** Apply for a loan at 3% interest rate. Contact us with amount needed by you and the duration to pay back loan
X-Spam-Status: Yes, score=7.4
X-Spam-Score: 74
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (7.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail
(web.0ffi.9.0.0.0.4[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.44.133 listed in list.dnswl.org]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.0ffi.9.0.0.0.4[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9740]
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES
--0-1868051171-1307394722=:66241
Content-Type: text/plain; charset=us-ascii
--0-1868051171-1307394722=:66241
Content-Type: text/html; charset=us-ascii
<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"></td></tr></table>
--0-1868051171-1307394722=:66241--
Envelope-to:
Delivery-date: Mon, 06 Jun 2011 14:12:05 -0700
Received: from nm6.access.bullet.mail.sp2.yahoo.com ([98.139.44.133])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QTh5g-0008Bj-9S
for ; Mon, 06 Jun 2011 14:12:04 -0700
Received: from [98.139.44.100] by nm6.access.bullet.mail.sp2.yahoo.com with NNFMP; 06 Jun 2011 21:12:03 -0000
Received: from [98.139.44.78] by tm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 06 Jun 2011 21:12:03 -0000
Received: from [127.0.0.1] by omp1015.access.mail.sp2.yahoo.com with NNFMP; 06 Jun 2011 21:12:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 74230 invoked by uid 60001); 6 Jun 2011 21:12:02 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1307394722; bh=YENdnMA39ugVzLCJCH/8gDBe53KjpRcN+On3LBF+Ulw=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=V1WL/HiGasieykhPJrQE9ayJjgUNHpA8Usp0QoWsisfMIJTcP6MUg+GI5WhbZeZq8QK1NxRvsySdC2r0M9JcDM4OkTohgrBi54gOa9x+baV6NgQeEOnkk02Jk7tuDeEbUHUOb65VFqQ2kXT1K+UipzZL/z+qIyTiIDlx/wDcuyA=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=MUCxAeIu1tLUzTqixfXf1YVEkPUotNXNmMLMinFPQ4szMWsfFKDrI/Qha0YkimgTtYjrmm2IlgC5I7cVRMitBuahZ0gdGFecVcuFkq7TnkGui5XBPYEU65cLBEZwEbIyEr1g8V6koZxg6+EPycbCz1S375Qy48FY6O3/euGkoGw=;
Message-ID: <[email protected]>
X-YMail-OSG: Kdq.hFUVM1mVCOOgfxrArniS6J3X8DVptFFoWWgGT8Lkes1
Received: from [180.215.207.35] by web181709.mail.ne1.yahoo.com via HTTP; Mon, 06 Jun 2011 14:12:02 PDT
X-Mailer: YahooMailClassic/12.0.2 YahooMailWebService/0.8.111.303096
Date: Mon, 6 Jun 2011 14:12:02 -0700 (PDT)
From: STANDARD LOAN FUNDS <[email protected]>
Reply-To: [email protected]
Subject: Apply for a loan at 3% interest rate. Contact us with amount needed by you and the duration to pay back loan
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1868051171-1307394722=:66241"
X-Spam-Subject: ***SPAM*** Apply for a loan at 3% interest rate. Contact us with amount needed by you and the duration to pay back loan
X-Spam-Status: Yes, score=7.4
X-Spam-Score: 74
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (7.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail
(web.0ffi.9.0.0.0.4[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.44.133 listed in list.dnswl.org]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.0ffi.9.0.0.0.4[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9740]
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES
--0-1868051171-1307394722=:66241
Content-Type: text/plain; charset=us-ascii
--0-1868051171-1307394722=:66241
Content-Type: text/html; charset=us-ascii
<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"></td></tr></table>
--0-1868051171-1307394722=:66241--
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces