by buried under 419s
Tue Oct 04, 2011 12:18 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 04 Oct 2011 02:21:31 -0700
Received: from nm7.access.bullet.mail.sp2.yahoo.com ([98.139.44.134])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RB1Bq-0000Qk-Ek
for ; Tue, 04 Oct 2011 02:21:31 -0700
Received: from [98.139.44.97] by nm7.access.bullet.mail.sp2.yahoo.com with NNFMP; 04 Oct 2011 09:21:28 -0000
Received: from [98.139.44.92] by tm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 04 Oct 2011 09:21:28 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 04 Oct 2011 09:21:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 45110 invoked by uid 60001); 4 Oct 2011 09:21:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1317720087; bh=yPfsyM2GRiddp64+DoMhZNM17Ot6RKJtQ1200Q2P5Pw=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=VZuxEaNKL1N72Mrx+dDHFeckV+9myagCOcXcbXgpja4OLQH5skXdcM+a8epbakM03USyvZGD0Q9E3Ih7EzQuODVOCG45WW05NN6UTgK9A/QgftDgOMSB3q860C1UstDGFN5oTIrY9gAoUUWRpODz3CVx05tOkmMsslEPhkc2fog=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=oNEFqU1krHI+2pTLOoQJDw3qwisca59U6wTFb8E8YnZQa+hWN0aEZ39KbzJfuvfi/EhHJyCfhdUf00Ks7+uIkDSt3GswIdhzdTiro+SMRoOHUBDQJC5MluAnTSjG2ds48c5A9e09HqxCM+8Cf4NgZBA/cCnrImpdCWs5549BhWY=;
X-YMail-OSG: qKvlXOAVM1mTZiXnAymg7sFGOs.GprAgCwH0Z7gw.cCgBoy
OZEnSu9ZyQFGPnTMsEVGDVY_bQwH0_7cxyS9k_wgONQV41BbBjeJmQQTM.jL
na3nvPXj.Rdd6bvmhTlMMEWfXgnkP3VWOa1tcjZsYFuPDX_ZhPCrh3TtIOnm
UChDLXzQu6xLpKUL_IYN0kaxze0kBJlOgJEhkW2Ky6gn1nAhAzZZ_DXtPEN7
Zd_7hVUZAmiiGhAj2NfhjImni_9XCYFqXrrure9w7T_j71C_uOYdeNaDZGEe
Jax4r.s7UcoM1XiCr4EPzeoc5p.P4g4gc_xdcQKUAYxgLNmeTbjxMUp_Cjct
Ez.YZV4z04tgh5_c7SSAySHtkE9hoxzfEk3.4rqVQ5xpNAZ309NzotejBOL1
A7HXmyK.gJoo8lJUF3E80jzI_.IE6AW4CC3Kaj6vFrpO9XnqnPK_KQfUNklx
yFEZO
Received: from [41.138.179.2] by web180912.mail.ne1.yahoo.com via HTTP; Tue, 04 Oct 2011 02:21:27 PDT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Tue, 4 Oct 2011 02:21:27 -0700 (PDT)
From: Harrieta Loan Investment <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1025991226-1317720087=:85185"
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=7.0
X-Spam-Score: 70
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: APPLY FOR URGENT LOAN AT LOW INTEREST RATE. APPLY FOR URGENT
LOAN AT LOW INTEREST RATE. [...]
Content analysis details: (6.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.ffice.0.3.0226[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.134 listed in list.dnswl.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(harrieta_loaninvestment1[at]hotmail.com
)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.ffice.0.3.0226[at]att.net)
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7965]
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
--0-1025991226-1317720087=:85185
Content-Type: text/plain; charset=us-ascii
APPLY FOR URGENT LOAN AT LOW INTEREST RATE.
Envelope-to:
Delivery-date: Tue, 04 Oct 2011 02:21:31 -0700
Received: from nm7.access.bullet.mail.sp2.yahoo.com ([98.139.44.134])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RB1Bq-0000Qk-Ek
for ; Tue, 04 Oct 2011 02:21:31 -0700
Received: from [98.139.44.97] by nm7.access.bullet.mail.sp2.yahoo.com with NNFMP; 04 Oct 2011 09:21:28 -0000
Received: from [98.139.44.92] by tm2.access.bullet.mail.sp2.yahoo.com with NNFMP; 04 Oct 2011 09:21:28 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 04 Oct 2011 09:21:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 45110 invoked by uid 60001); 4 Oct 2011 09:21:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1317720087; bh=yPfsyM2GRiddp64+DoMhZNM17Ot6RKJtQ1200Q2P5Pw=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=VZuxEaNKL1N72Mrx+dDHFeckV+9myagCOcXcbXgpja4OLQH5skXdcM+a8epbakM03USyvZGD0Q9E3Ih7EzQuODVOCG45WW05NN6UTgK9A/QgftDgOMSB3q860C1UstDGFN5oTIrY9gAoUUWRpODz3CVx05tOkmMsslEPhkc2fog=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=oNEFqU1krHI+2pTLOoQJDw3qwisca59U6wTFb8E8YnZQa+hWN0aEZ39KbzJfuvfi/EhHJyCfhdUf00Ks7+uIkDSt3GswIdhzdTiro+SMRoOHUBDQJC5MluAnTSjG2ds48c5A9e09HqxCM+8Cf4NgZBA/cCnrImpdCWs5549BhWY=;
X-YMail-OSG: qKvlXOAVM1mTZiXnAymg7sFGOs.GprAgCwH0Z7gw.cCgBoy
OZEnSu9ZyQFGPnTMsEVGDVY_bQwH0_7cxyS9k_wgONQV41BbBjeJmQQTM.jL
na3nvPXj.Rdd6bvmhTlMMEWfXgnkP3VWOa1tcjZsYFuPDX_ZhPCrh3TtIOnm
UChDLXzQu6xLpKUL_IYN0kaxze0kBJlOgJEhkW2Ky6gn1nAhAzZZ_DXtPEN7
Zd_7hVUZAmiiGhAj2NfhjImni_9XCYFqXrrure9w7T_j71C_uOYdeNaDZGEe
Jax4r.s7UcoM1XiCr4EPzeoc5p.P4g4gc_xdcQKUAYxgLNmeTbjxMUp_Cjct
Ez.YZV4z04tgh5_c7SSAySHtkE9hoxzfEk3.4rqVQ5xpNAZ309NzotejBOL1
A7HXmyK.gJoo8lJUF3E80jzI_.IE6AW4CC3Kaj6vFrpO9XnqnPK_KQfUNklx
yFEZO
Received: from [41.138.179.2] by web180912.mail.ne1.yahoo.com via HTTP; Tue, 04 Oct 2011 02:21:27 PDT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Tue, 4 Oct 2011 02:21:27 -0700 (PDT)
From: Harrieta Loan Investment <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1025991226-1317720087=:85185"
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=7.0
X-Spam-Score: 70
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: APPLY FOR URGENT LOAN AT LOW INTEREST RATE. APPLY FOR URGENT
LOAN AT LOW INTEREST RATE. [...]
Content analysis details: (6.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.ffice.0.3.0226[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.134 listed in list.dnswl.org]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(harrieta_loaninvestment1[at]hotmail.com
)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.ffice.0.3.0226[at]att.net)
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7965]
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
--0-1025991226-1317720087=:85185
Content-Type: text/plain; charset=us-ascii
APPLY FOR URGENT LOAN AT LOW INTEREST RATE.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces