by buried under 419s
Tue Sep 11, 2012 9:31 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 11 Sep 2012 17:44:53 -0700
Received: from nm28.bullet.mail.sp2.yahoo.com ([98.139.91.98]:45608)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TBb4W-0000V4-RY
for ; Tue, 11 Sep 2012 17:44:53 -0700
Received: from [98.139.91.68] by nm28.bullet.mail.sp2.yahoo.com with NNFMP; 12 Sep 2012 00:44:54 -0000
Received: from [98.139.44.84] by tm8.bullet.mail.sp2.yahoo.com with NNFMP; 12 Sep 2012 00:44:54 -0000
Received: from [127.0.0.1] by omp1021.access.mail.sp2.yahoo.com with NNFMP; 12 Sep 2012 00:44:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 42247 invoked by uid 60001); 12 Sep 2012 00:44:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1347410694; bh=Tly9EaS9t8+1yun4jX5eTGuw/gzwfwX2NKL4vDUiteo=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=nwg4OhASonsVb5Q1Y63G1uJZ0Ji68X1CyMuojbfXPXGCKB6SHjfB21OumjGryFcz1qgLzvXZQaNEXMq3pvH53HlVlxhqxh9jh7iJc79o9jKyzNdo42gVI4aqZaawiZDtMwKOpIPqlWR7bGWbhnyGLTccKVhlW6FQ4dQlm6ZibSM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=rZH5Lj4LFrY3uvgcvXIZBf9o4nBBcM8MaKlAlnMEFkuQqLXUs/6p9IFaM1D03IwtboNZamgHmsVck2e5IF9dIgvnPjmAegT9BaBLcxtkUMilRh5hmIM2jkd6QLbo27ZqgVJOvnuJnU9bqh4MqbEQu0appT1PlMB5jjYUa6jUyTE=;
X-YMail-OSG: 2ktCEQ0VM1lto23bGGqoFgXXaJ.gmq.qb0i0T6VuZJ0EBZm
_1boluzv8uVm41kIaWHtT.xxoJkxtzr3xa2KHwt8lxY0vdxh0mFv4PI6.UEk
RW8eogFcMvMakbmX8Q.61H.ohcimYuosJ6tHvzsNlSDrUc0LCrlxVfxAuN0p
rsuByh07HFsGT3dNojKRt9ITe1nol7Wkn2taqhzbPUs54_YQRlusQGPQKD3M
U9FKFQnOygG_ogbkWfwH2F0dTcWKsBBUC6sY9u6_23Ut04AUsrI.5t1ZlowA
kZB1kP7cVi.fEsdqDnpJcEvZgwp1JpjlHw5OUduJCegaNQ8OOMAu39R3t3C7
ibN8UQBL.3k1nQ0TEHG99WX6OxJHNrSy4YA8e2vvQ_w7HzZIaXWjpg44Lnn.
dYKhJqxyfSwZmLmc5utGN7Jh.3cUMqyVjtxMj5BtA5bewhb6jCLPO0uwiSUP
mG54pKRT3ohoK8uTC9pg1yWIPJLaoEtnT8WaR3hgp
Received: from [69.163.96.25] by web184805.mail.gq1.yahoo.com via HTTP; Tue, 11 Sep 2012 17:44:54 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Tue, 11 Sep 2012 17:44:54 -0700 (PDT)
From: "WILLIAMS FINANCIAL SERVICE INC." <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1973766884-789382259-1347410694=:41544"
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Do You Need A Loan?Apply With Name:..Country:..Amount:..Duration:
Tel;... Do You Need A Loan?Apply With Name:..Country:..Amount:..Duration:
Tel;... [...]
Content analysis details: (8.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(000034ty5455576667[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.98 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (000034ty5455576667[at]att.net)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9289]
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.9 FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM***
--1973766884-789382259-1347410694=:41544
Content-Type: text/plain; charset=us-ascii
Do You Need A Loan?Apply With Name:..Country:..Amount:..Duration: Tel;...
Envelope-to:
Delivery-date: Tue, 11 Sep 2012 17:44:53 -0700
Received: from nm28.bullet.mail.sp2.yahoo.com ([98.139.91.98]:45608)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TBb4W-0000V4-RY
for ; Tue, 11 Sep 2012 17:44:53 -0700
Received: from [98.139.91.68] by nm28.bullet.mail.sp2.yahoo.com with NNFMP; 12 Sep 2012 00:44:54 -0000
Received: from [98.139.44.84] by tm8.bullet.mail.sp2.yahoo.com with NNFMP; 12 Sep 2012 00:44:54 -0000
Received: from [127.0.0.1] by omp1021.access.mail.sp2.yahoo.com with NNFMP; 12 Sep 2012 00:44:54 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 42247 invoked by uid 60001); 12 Sep 2012 00:44:54 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1347410694; bh=Tly9EaS9t8+1yun4jX5eTGuw/gzwfwX2NKL4vDUiteo=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=nwg4OhASonsVb5Q1Y63G1uJZ0Ji68X1CyMuojbfXPXGCKB6SHjfB21OumjGryFcz1qgLzvXZQaNEXMq3pvH53HlVlxhqxh9jh7iJc79o9jKyzNdo42gVI4aqZaawiZDtMwKOpIPqlWR7bGWbhnyGLTccKVhlW6FQ4dQlm6ZibSM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=rZH5Lj4LFrY3uvgcvXIZBf9o4nBBcM8MaKlAlnMEFkuQqLXUs/6p9IFaM1D03IwtboNZamgHmsVck2e5IF9dIgvnPjmAegT9BaBLcxtkUMilRh5hmIM2jkd6QLbo27ZqgVJOvnuJnU9bqh4MqbEQu0appT1PlMB5jjYUa6jUyTE=;
X-YMail-OSG: 2ktCEQ0VM1lto23bGGqoFgXXaJ.gmq.qb0i0T6VuZJ0EBZm
_1boluzv8uVm41kIaWHtT.xxoJkxtzr3xa2KHwt8lxY0vdxh0mFv4PI6.UEk
RW8eogFcMvMakbmX8Q.61H.ohcimYuosJ6tHvzsNlSDrUc0LCrlxVfxAuN0p
rsuByh07HFsGT3dNojKRt9ITe1nol7Wkn2taqhzbPUs54_YQRlusQGPQKD3M
U9FKFQnOygG_ogbkWfwH2F0dTcWKsBBUC6sY9u6_23Ut04AUsrI.5t1ZlowA
kZB1kP7cVi.fEsdqDnpJcEvZgwp1JpjlHw5OUduJCegaNQ8OOMAu39R3t3C7
ibN8UQBL.3k1nQ0TEHG99WX6OxJHNrSy4YA8e2vvQ_w7HzZIaXWjpg44Lnn.
dYKhJqxyfSwZmLmc5utGN7Jh.3cUMqyVjtxMj5BtA5bewhb6jCLPO0uwiSUP
mG54pKRT3ohoK8uTC9pg1yWIPJLaoEtnT8WaR3hgp
Received: from [69.163.96.25] by web184805.mail.gq1.yahoo.com via HTTP; Tue, 11 Sep 2012 17:44:54 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Tue, 11 Sep 2012 17:44:54 -0700 (PDT)
From: "WILLIAMS FINANCIAL SERVICE INC." <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1973766884-789382259-1347410694=:41544"
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Do You Need A Loan?Apply With Name:..Country:..Amount:..Duration:
Tel;... Do You Need A Loan?Apply With Name:..Country:..Amount:..Duration:
Tel;... [...]
Content analysis details: (8.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(000034ty5455576667[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.98 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (000034ty5455576667[at]att.net)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9289]
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 MISSING_SUBJECT Missing Subject: header
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.9 FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM***
--1973766884-789382259-1347410694=:41544
Content-Type: text/plain; charset=us-ascii
Do You Need A Loan?Apply With Name:..Country:..Amount:..Duration: Tel;...
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces