by buried under 419s
Thu Nov 17, 2011 2:46 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 17 Nov 2011 09:54:15 -0800
Received: from nm30-vm0.access.bullet.mail.mud.yahoo.com ([66.94.237.86])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RR6AA-0005Ai-Vn
for ; Thu, 17 Nov 2011 09:54:15 -0800
Received: from [66.94.237.196] by nm30.access.bullet.mail.mud.yahoo.com with NNFMP; 17 Nov 2011 17:54:12 -0000
Received: from [66.94.237.117] by tm7.access.bullet.mail.mud.yahoo.com with NNFMP; 17 Nov 2011 17:54:12 -0000
Received: from [127.0.0.1] by omp1022.access.mail.mud.yahoo.com with NNFMP; 17 Nov 2011 17:54:12 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 58152 invoked by uid 60001); 17 Nov 2011 17:54:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1321552452; bh=HIKAu2QXM94d6NoFLlX99+1wP0Bo4KUkELxOEwo6/sY=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=mqmFL5sDDceoNIid78nPa4W4LkoWEjVwMHZx6JAQSh7LF+XfZeWwpbQ9zNdsbBeP2cyIyQitJ1vGgaqcbBgMIOafL27pFW4mx2Qww0nQrp0G+8sNu1Saw2jUUzu8iGlc0Lf/hZ5i1kvfQALwU+pntQlZ1rt0v1/x0jk9vbeO+CQ=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=4VGANn9lCz68kko/T4u3W5YrHphNtcjaivuQrgpgaFvo1C1b/XsD05spV7Uv8I8gHgSbVEAta8xgQaYSN/XSV/WOQdMi2PhXSvIbB1FwnSuDAI+1yOh50uIkn323Uth53UOGL0QqnddYnNHVmIYb3WE/T3i7h21wFwGbUyfECdA=;
X-YMail-OSG: Th0BrHMVM1k2iATqstjIH6amV37w1x.77IntMeYLWJZxsWO
US2cOkyUL4laF5zMHCpL64WQwwsM5hw1hf8V6vUp1r.x3aV5vV_djRGpO7hu
nuxdlxgyzC8r6Doj6cJrcl5LkjWgQRaw4dYR2nOk7hFGmv_CHsdX0aRj4J1z
R8eCWssk1lg1jyKu1nP6wKhqjeiuWYcDVk4Z6rc50Jsu9J68xEtAfkcQSavz
DYfTaU0_ldlh.63LcwAVvvnqThva4AZf9pcXEQfnUJzoKjGpTKdKXjZL1Jus
fqUNH66Y22tmiKI5oOKGBSZhKOt1JmN78VGXu8z_dCdgWia3G.P3kcevpOJ7
WD71FxBT2Tphd.hnrxIOHLUoPz18wvvQBS.LR17ZK5z0EQx7Krq6B3j9JvCO
fGZP9cYRm9A9Jc6SXa9PY.nvR9DBcKjfGkK7ZI5eZNX.qOjAJ0e9cF7xWGeu
Bc3o-
Received: from [78.129.197.209] by web181201.mail.ne1.yahoo.com via HTTP; Thu, 17 Nov 2011 09:54:12 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Thu, 17 Nov 2011 09:54:12 -0800 (PST)
From: Mr Danny White <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-106228746-726369795-1321552452=:38965"
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: x-mas loan offer contact us with the amount you need x-mas
loan offer contact us with the amount you need [...]
Content analysis details: (10.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9988]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.abort.loan[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.237.86 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?78.129.197.209>]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(danny.white2010[at]yahoo.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
---106228746-726369795-1321552452=:38965
Content-Type: text/plain; charset=us-ascii
x-mas loan offer contact us with the amount you need
Envelope-to:
Delivery-date: Thu, 17 Nov 2011 09:54:15 -0800
Received: from nm30-vm0.access.bullet.mail.mud.yahoo.com ([66.94.237.86])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RR6AA-0005Ai-Vn
for ; Thu, 17 Nov 2011 09:54:15 -0800
Received: from [66.94.237.196] by nm30.access.bullet.mail.mud.yahoo.com with NNFMP; 17 Nov 2011 17:54:12 -0000
Received: from [66.94.237.117] by tm7.access.bullet.mail.mud.yahoo.com with NNFMP; 17 Nov 2011 17:54:12 -0000
Received: from [127.0.0.1] by omp1022.access.mail.mud.yahoo.com with NNFMP; 17 Nov 2011 17:54:12 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 58152 invoked by uid 60001); 17 Nov 2011 17:54:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1321552452; bh=HIKAu2QXM94d6NoFLlX99+1wP0Bo4KUkELxOEwo6/sY=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=mqmFL5sDDceoNIid78nPa4W4LkoWEjVwMHZx6JAQSh7LF+XfZeWwpbQ9zNdsbBeP2cyIyQitJ1vGgaqcbBgMIOafL27pFW4mx2Qww0nQrp0G+8sNu1Saw2jUUzu8iGlc0Lf/hZ5i1kvfQALwU+pntQlZ1rt0v1/x0jk9vbeO+CQ=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=4VGANn9lCz68kko/T4u3W5YrHphNtcjaivuQrgpgaFvo1C1b/XsD05spV7Uv8I8gHgSbVEAta8xgQaYSN/XSV/WOQdMi2PhXSvIbB1FwnSuDAI+1yOh50uIkn323Uth53UOGL0QqnddYnNHVmIYb3WE/T3i7h21wFwGbUyfECdA=;
X-YMail-OSG: Th0BrHMVM1k2iATqstjIH6amV37w1x.77IntMeYLWJZxsWO
US2cOkyUL4laF5zMHCpL64WQwwsM5hw1hf8V6vUp1r.x3aV5vV_djRGpO7hu
nuxdlxgyzC8r6Doj6cJrcl5LkjWgQRaw4dYR2nOk7hFGmv_CHsdX0aRj4J1z
R8eCWssk1lg1jyKu1nP6wKhqjeiuWYcDVk4Z6rc50Jsu9J68xEtAfkcQSavz
DYfTaU0_ldlh.63LcwAVvvnqThva4AZf9pcXEQfnUJzoKjGpTKdKXjZL1Jus
fqUNH66Y22tmiKI5oOKGBSZhKOt1JmN78VGXu8z_dCdgWia3G.P3kcevpOJ7
WD71FxBT2Tphd.hnrxIOHLUoPz18wvvQBS.LR17ZK5z0EQx7Krq6B3j9JvCO
fGZP9cYRm9A9Jc6SXa9PY.nvR9DBcKjfGkK7ZI5eZNX.qOjAJ0e9cF7xWGeu
Bc3o-
Received: from [78.129.197.209] by web181201.mail.ne1.yahoo.com via HTTP; Thu, 17 Nov 2011 09:54:12 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Thu, 17 Nov 2011 09:54:12 -0800 (PST)
From: Mr Danny White <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-106228746-726369795-1321552452=:38965"
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: x-mas loan offer contact us with the amount you need x-mas
loan offer contact us with the amount you need [...]
Content analysis details: (10.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9988]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.abort.loan[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.237.86 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?78.129.197.209>]
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(danny.white2010[at]yahoo.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
---106228746-726369795-1321552452=:38965
Content-Type: text/plain; charset=us-ascii
x-mas loan offer contact us with the amount you need
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces