by buried under 419s
Tue Nov 29, 2011 7:02 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 29 Nov 2011 02:56:38 -0800
Received: from nm26-vm0.access.bullet.mail.mud.yahoo.com ([66.94.236.225])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RVLMV-0001ed-Kt
for ; Tue, 29 Nov 2011 02:56:38 -0800
Received: from [66.94.237.201] by nm26.access.bullet.mail.mud.yahoo.com with NNFMP; 29 Nov 2011 10:56:28 -0000
Received: from [66.94.237.116] by tm12.access.bullet.mail.mud.yahoo.com with NNFMP; 29 Nov 2011 10:56:28 -0000
Received: from [127.0.0.1] by omp1021.access.mail.mud.yahoo.com with NNFMP; 29 Nov 2011 10:56:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 63476 invoked by uid 60001); 29 Nov 2011 10:56:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1322564187; bh=oH3gUzgmxx9E8rHYkemrnnjwx2P7+WYPEtjqruvmPPg=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=FBTF9n06kl/Dt+cPre0H/KFgpWeSEPUzwe6Fnxc7GUun9h5CUDASxvjwczOym0krFKhSWjG0gCFvm/5VMzyPr0KflQNz+Ew9KjQZEVlofg08z8APObJfGQZbEPVITIV3rn/XirEoiD5VriTZc2m947UYZxbCPeQd9+3sCV7XJG4=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=0bfXOt7yNE9ST/JiunRsl9RYxiXa6knZjXNDwihQrY90OjMaahWMd0pKUSY2HeWtvlNiOjthyAPj/5njldVDeWzBM3aRe2Sz6K3VpC3yBmW5pxWKdKg81kWgZUGJDEZgjHWzTQtk+/gk9wdBpBkgFcLa1+eGeK+lHnpPvzOEVIA=;
X-YMail-OSG: x5puy.wVM1kf50GpmluNLV_xkZzKK7ttcdZkIxegTY5KjFl
OKRAkbmzrvbuoisloePlFeY8ERsNxJ3WS2sDPEvzvf0cqjttKHZ0uu.FjhTX
9VRJYFxgsZP5bk2ZpjLsBtQ1q48MECvmGWHzq10n4g_6FprkpovvOqgsDl7o
4DqKQEGM1BSfk7WpTZT5ut7pYrnKLUh1WHpNa3rw.CfPaF0Pyx4kpHsPInH8
hMY12Upt7QuKEdZ7jSBnPGgZBpYHgo.W5pUHaP2UCeyI4OyRIE89IdZfiWLs
5UlABNfUUEq84xpEoVSmF7Z6J6asi8S1FcAy4gleQ5fh.T9rzoNJ7QCXyWnu
jzIguFnzAPzm1lCdRodBy_e4PKO13qGoOB2t1hAcqXQ01rb2EUA_HZXPdXd1
179cS0JwQhusOq2VUQXeRkkKFHhXYqilIAVDcS_hY6bfQ6ibHrjlOrB8xGKd
5AuUG
Received: from [67.18.231.154] by web181520.mail.ne1.yahoo.com via HTTP; Tue, 29 Nov 2011 02:56:27 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Tue, 29 Nov 2011 02:56:27 -0800 (PST)
From: ECO BANK LOAN OFFER <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1470880231-717549969-1322564187=:62492"
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=9.2
X-Spam-Score: 92
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: DO YOU NEED A GUARANTEED AND CERTIFIED BANK LOAN???? DO YOU
NEED A GUARANTEED AND CERTIFIED BANK LOAN???? [...]
Content analysis details: (9.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9996]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.dept.r1t.102[at]att.net)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?67.18.231.154>]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.236.225 listed in list.dnswl.org]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.dept.r1t.102[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
--1470880231-717549969-1322564187=:62492
Content-Type: text/plain; charset=us-ascii
DO YOU NEED A GUARANTEED AND CERTIFIED BANK LOAN????
Envelope-to:
Delivery-date: Tue, 29 Nov 2011 02:56:38 -0800
Received: from nm26-vm0.access.bullet.mail.mud.yahoo.com ([66.94.236.225])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RVLMV-0001ed-Kt
for ; Tue, 29 Nov 2011 02:56:38 -0800
Received: from [66.94.237.201] by nm26.access.bullet.mail.mud.yahoo.com with NNFMP; 29 Nov 2011 10:56:28 -0000
Received: from [66.94.237.116] by tm12.access.bullet.mail.mud.yahoo.com with NNFMP; 29 Nov 2011 10:56:28 -0000
Received: from [127.0.0.1] by omp1021.access.mail.mud.yahoo.com with NNFMP; 29 Nov 2011 10:56:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 63476 invoked by uid 60001); 29 Nov 2011 10:56:27 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1322564187; bh=oH3gUzgmxx9E8rHYkemrnnjwx2P7+WYPEtjqruvmPPg=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=FBTF9n06kl/Dt+cPre0H/KFgpWeSEPUzwe6Fnxc7GUun9h5CUDASxvjwczOym0krFKhSWjG0gCFvm/5VMzyPr0KflQNz+Ew9KjQZEVlofg08z8APObJfGQZbEPVITIV3rn/XirEoiD5VriTZc2m947UYZxbCPeQd9+3sCV7XJG4=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=0bfXOt7yNE9ST/JiunRsl9RYxiXa6knZjXNDwihQrY90OjMaahWMd0pKUSY2HeWtvlNiOjthyAPj/5njldVDeWzBM3aRe2Sz6K3VpC3yBmW5pxWKdKg81kWgZUGJDEZgjHWzTQtk+/gk9wdBpBkgFcLa1+eGeK+lHnpPvzOEVIA=;
X-YMail-OSG: x5puy.wVM1kf50GpmluNLV_xkZzKK7ttcdZkIxegTY5KjFl
OKRAkbmzrvbuoisloePlFeY8ERsNxJ3WS2sDPEvzvf0cqjttKHZ0uu.FjhTX
9VRJYFxgsZP5bk2ZpjLsBtQ1q48MECvmGWHzq10n4g_6FprkpovvOqgsDl7o
4DqKQEGM1BSfk7WpTZT5ut7pYrnKLUh1WHpNa3rw.CfPaF0Pyx4kpHsPInH8
hMY12Upt7QuKEdZ7jSBnPGgZBpYHgo.W5pUHaP2UCeyI4OyRIE89IdZfiWLs
5UlABNfUUEq84xpEoVSmF7Z6J6asi8S1FcAy4gleQ5fh.T9rzoNJ7QCXyWnu
jzIguFnzAPzm1lCdRodBy_e4PKO13qGoOB2t1hAcqXQ01rb2EUA_HZXPdXd1
179cS0JwQhusOq2VUQXeRkkKFHhXYqilIAVDcS_hY6bfQ6ibHrjlOrB8xGKd
5AuUG
Received: from [67.18.231.154] by web181520.mail.ne1.yahoo.com via HTTP; Tue, 29 Nov 2011 02:56:27 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Tue, 29 Nov 2011 02:56:27 -0800 (PST)
From: ECO BANK LOAN OFFER <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1470880231-717549969-1322564187=:62492"
X-Spam-Subject: ***SPAM***
X-Spam-Status: Yes, score=9.2
X-Spam-Score: 92
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: DO YOU NEED A GUARANTEED AND CERTIFIED BANK LOAN???? DO YOU
NEED A GUARANTEED AND CERTIFIED BANK LOAN???? [...]
Content analysis details: (9.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9996]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.dept.r1t.102[at]att.net)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?67.18.231.154>]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.236.225 listed in list.dnswl.org]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.dept.r1t.102[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
--1470880231-717549969-1322564187=:62492
Content-Type: text/plain; charset=us-ascii
DO YOU NEED A GUARANTEED AND CERTIFIED BANK LOAN????
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces