by buried under 419s
Sat Nov 12, 2011 2:14 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 12 Nov 2011 03:36:34 -0800
Received: from nm6.access.bullet.mail.mud.yahoo.com ([66.94.237.207])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RPBss-0003eA-Jt
for ; Sat, 12 Nov 2011 03:36:34 -0800
Received: from [66.94.237.195] by nm6.access.bullet.mail.mud.yahoo.com with NNFMP; 12 Nov 2011 11:36:27 -0000
Received: from [66.94.237.121] by tm6.access.bullet.mail.mud.yahoo.com with NNFMP; 12 Nov 2011 11:36:27 -0000
Received: from [127.0.0.1] by omp1026.access.mail.mud.yahoo.com with NNFMP; 12 Nov 2011 11:36:27 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 81606 invoked by uid 60001); 12 Nov 2011 11:36:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1321097787; bh=BjO8+ua6RXmU1yJ/idaN25mK2RPbANQOaMJdYZ5JYRA=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=KodolpQA8FuSF5i/nSr+64ai9rp0iezL7O7G1r+PFBc2Z57igH2HDSkJIGyzedN+QZS4o6pqyUG1cCgydRGmSOxZu5qxrOTrg5HwMdoOKAUD02njGCCjVUxZCDUIzvC3fjfGs9O+4uRnYcaRaJHS8FxDajzxUFigXCEbQN3ZNSM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=PDj6m0ALUCULaY7vy7NLWYzcNkFa1RBDsK9nXaqTA+hDNDoUJMZdVKPZIuvpcdinmZSp+MxDi1wJVLAvqsAi90FdJ9Fn7RJdG4NRk9Uy3OgSMT91xSZ5gFETAf8UU7D4kVu8SfSMtpBUjJeS8snYDkMEC+hxcOOmpJjEWIAslAE=;
X-YMail-OSG: SN270lIVM1kWAQAuFYr3tBnw5M2jWjtagprmB7BsiESC7BB
41LvYT5T7NEKpTQzrSNXLjIfbem5Okg5Q3kI22uzUIDnOKC0uknYCjraApYU
2X_EY1MVH9UP11uz.mXm_YTsLUeJvyayg3ZGVbnXKALhKxJWha1IP24lD11z
75yW44fzhTycIqIZ5QTerDX3UJgSfVRRJudLXSBQbpLz65y2wS9UCiYhc1fY
iyJsxCSVSLI1wgr_IV_cQkwqxnJi4DsLNsABIaiOm0F3k98LMi_D7h_3gC.J
NFra.DLQskL8Mg6HG7LSR4vz2A4hQSEhXI8u4HNeGscooKwcGYjzNeHka3nV
CGvDZU8AIwXIjTBKaIHKtDC5Kk4NtCkx3tZfamt0spOr65RKLFpbKm3dA8a6
wkghG3FVgGA5TrhczYj0Pp_Qt.lSSqEw_26TK4ro.IVLwPUUmSyKUFAc1oL1
hiEgG5Q--
Received: from [67.205.67.139] by web181713.mail.ne1.yahoo.com via HTTP; Sat, 12 Nov 2011 03:36:27 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Sat, 12 Nov 2011 03:36:27 -0800 (PST)
From: Mr Mark Henry <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-586080594-1321097787=:68702"
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=7.8
X-Spam-Score: 78
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: x-mas loan offer contact us with the amount you need x-mas
loan offer contact us with the amount you need [...]
Content analysis details: (7.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9994]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.offce.111.101[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.237.207 listed in list.dnswl.org]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.offce.111.101[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
--0-586080594-1321097787=:68702
Content-Type: text/plain; charset=us-ascii
x-mas loan offer contact us with the amount you need
Envelope-to:
Delivery-date: Sat, 12 Nov 2011 03:36:34 -0800
Received: from nm6.access.bullet.mail.mud.yahoo.com ([66.94.237.207])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RPBss-0003eA-Jt
for ; Sat, 12 Nov 2011 03:36:34 -0800
Received: from [66.94.237.195] by nm6.access.bullet.mail.mud.yahoo.com with NNFMP; 12 Nov 2011 11:36:27 -0000
Received: from [66.94.237.121] by tm6.access.bullet.mail.mud.yahoo.com with NNFMP; 12 Nov 2011 11:36:27 -0000
Received: from [127.0.0.1] by omp1026.access.mail.mud.yahoo.com with NNFMP; 12 Nov 2011 11:36:27 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 81606 invoked by uid 60001); 12 Nov 2011 11:36:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1321097787; bh=BjO8+ua6RXmU1yJ/idaN25mK2RPbANQOaMJdYZ5JYRA=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=KodolpQA8FuSF5i/nSr+64ai9rp0iezL7O7G1r+PFBc2Z57igH2HDSkJIGyzedN+QZS4o6pqyUG1cCgydRGmSOxZu5qxrOTrg5HwMdoOKAUD02njGCCjVUxZCDUIzvC3fjfGs9O+4uRnYcaRaJHS8FxDajzxUFigXCEbQN3ZNSM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=PDj6m0ALUCULaY7vy7NLWYzcNkFa1RBDsK9nXaqTA+hDNDoUJMZdVKPZIuvpcdinmZSp+MxDi1wJVLAvqsAi90FdJ9Fn7RJdG4NRk9Uy3OgSMT91xSZ5gFETAf8UU7D4kVu8SfSMtpBUjJeS8snYDkMEC+hxcOOmpJjEWIAslAE=;
X-YMail-OSG: SN270lIVM1kWAQAuFYr3tBnw5M2jWjtagprmB7BsiESC7BB
41LvYT5T7NEKpTQzrSNXLjIfbem5Okg5Q3kI22uzUIDnOKC0uknYCjraApYU
2X_EY1MVH9UP11uz.mXm_YTsLUeJvyayg3ZGVbnXKALhKxJWha1IP24lD11z
75yW44fzhTycIqIZ5QTerDX3UJgSfVRRJudLXSBQbpLz65y2wS9UCiYhc1fY
iyJsxCSVSLI1wgr_IV_cQkwqxnJi4DsLNsABIaiOm0F3k98LMi_D7h_3gC.J
NFra.DLQskL8Mg6HG7LSR4vz2A4hQSEhXI8u4HNeGscooKwcGYjzNeHka3nV
CGvDZU8AIwXIjTBKaIHKtDC5Kk4NtCkx3tZfamt0spOr65RKLFpbKm3dA8a6
wkghG3FVgGA5TrhczYj0Pp_Qt.lSSqEw_26TK4ro.IVLwPUUmSyKUFAc1oL1
hiEgG5Q--
Received: from [67.205.67.139] by web181713.mail.ne1.yahoo.com via HTTP; Sat, 12 Nov 2011 03:36:27 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Sat, 12 Nov 2011 03:36:27 -0800 (PST)
From: Mr Mark Henry <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-586080594-1321097787=:68702"
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=7.8
X-Spam-Score: 78
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: x-mas loan offer contact us with the amount you need x-mas
loan offer contact us with the amount you need [...]
Content analysis details: (7.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9994]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.offce.111.101[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.237.207 listed in list.dnswl.org]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.offce.111.101[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
--0-586080594-1321097787=:68702
Content-Type: text/plain; charset=us-ascii
x-mas loan offer contact us with the amount you need
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces