by buried under 419s
Wed Feb 02, 2011 1:22 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 02 Feb 2011 06:36:57 -0800
Received: from nm3-vm1.bullet.mail.sp2.yahoo.com ([98.139.90.231])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PkdpI-0006uN-Py
for ; Wed, 02 Feb 2011 06:36:57 -0800
Received: from [98.139.91.64] by nm3.bullet.mail.sp2.yahoo.com with NNFMP; 02 Feb 2011 14:36:55 -0000
Received: from [98.139.91.18] by tm4.bullet.mail.sp2.yahoo.com with NNFMP; 02 Feb 2011 14:36:55 -0000
Received: from [127.0.0.1] by omp1018.mail.sp2.yahoo.com with NNFMP; 02 Feb 2011 14:36:55 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 37432 invoked by uid 60001); 2 Feb 2011 14:36:55 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1296657414; bh=RzQCcujrGg1DGFcbil/gzd6cliruANZEVfTLBon1YOU=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gfqXAfDwZAsLsjiLxqfPd5mIA4HG2GSWHNWhf5s1EXfF5tYktmgODanRy1QaBvOmtAcg4bPNser4gRkfn8XCDx7GJCsPUzbAdQzsDWCf4eCR/JmWPlpgOJolZjPOcydVkqj9tmjzv7fL2gAIM0ZI6lcp25cRlV6AmdukmmI9m8g=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=yWV39VY/n58fGaTN33XdMZjXCVblhtnLkTNsWwqQTjRhdovBmxLFj5BNEe7qtwyyv6ripOGaSJf1ShuwjzNXzMDVIxY5W8/9ZbbbPgSZAb7bkmIDqc1zyyUXuS0eauwbPSRwMqBTfPuZJzS50REsfwOXEJX+ui6liujuhHKm1Ms=;
Message-ID: <[email protected]>
X-YMail-OSG: DFgY7AoVM1lUkw1YAmT65PMO9ILmNPo9orDKBcW361QGh31
Received: from [41.217.65.10] by web180307.mail.gq1.yahoo.com via HTTP; Wed, 02 Feb 2011 06:36:54 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
Date: Wed, 2 Feb 2011 06:36:54 -0800 (PST)
From: Wand Smith <[email protected]>
Reply-To: [email protected]
Subject: Dear Beloved,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-83666657-1296657414=:36461"
X-Spam-Subject: ***SPAM*** Dear Beloved,
X-Spam-Status: Yes, score=15.1
X-Spam-Score: 151
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beloved, I am Mrs. Wand Smith an aging widow suffering
from long time illness. I have some funds I inherited from my late husband,
the sum of US$12,400,000.00 and I needed a very honest and God fearing person
who can use the fund for charity work in any part of the world, I found your
email address from the internet and decided to contact you. Please if you
would be able to use the funds for the charity work, kindly reply back immediately
for further details. Yours in the Lord, Mrs. Wand Smith. [...]
Content analysis details: (15.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.90.231 listed in list.dnswl.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FREEMAIL_FROM Sender email is freemail (edjj------eed0020[at]att.net)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.217.65.10>]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (edjj------eed0020[at]att.net)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 DECEASED_NO_ML Dead not via mailing list
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-83666657-1296657414=:36461
Content-Type: text/plain; charset=us-ascii
Dear Beloved,
I am Mrs. Wand Smith an aging widow suffering from long time illness. I have some funds I inherited from my late husband, the sum of US$12,400,000.00 and I needed a very honest and God fearing person who can use the fund for charity work in any part of the world, I found your email address from the internet and decided to contact you. Please if you would be able to use the funds for the charity work, kindly reply back immediately for further details.
Yours in the Lord,
Mrs. Wand Smith.
Envelope-to:
Delivery-date: Wed, 02 Feb 2011 06:36:57 -0800
Received: from nm3-vm1.bullet.mail.sp2.yahoo.com ([98.139.90.231])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PkdpI-0006uN-Py
for ; Wed, 02 Feb 2011 06:36:57 -0800
Received: from [98.139.91.64] by nm3.bullet.mail.sp2.yahoo.com with NNFMP; 02 Feb 2011 14:36:55 -0000
Received: from [98.139.91.18] by tm4.bullet.mail.sp2.yahoo.com with NNFMP; 02 Feb 2011 14:36:55 -0000
Received: from [127.0.0.1] by omp1018.mail.sp2.yahoo.com with NNFMP; 02 Feb 2011 14:36:55 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 37432 invoked by uid 60001); 2 Feb 2011 14:36:55 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1296657414; bh=RzQCcujrGg1DGFcbil/gzd6cliruANZEVfTLBon1YOU=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gfqXAfDwZAsLsjiLxqfPd5mIA4HG2GSWHNWhf5s1EXfF5tYktmgODanRy1QaBvOmtAcg4bPNser4gRkfn8XCDx7GJCsPUzbAdQzsDWCf4eCR/JmWPlpgOJolZjPOcydVkqj9tmjzv7fL2gAIM0ZI6lcp25cRlV6AmdukmmI9m8g=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=yWV39VY/n58fGaTN33XdMZjXCVblhtnLkTNsWwqQTjRhdovBmxLFj5BNEe7qtwyyv6ripOGaSJf1ShuwjzNXzMDVIxY5W8/9ZbbbPgSZAb7bkmIDqc1zyyUXuS0eauwbPSRwMqBTfPuZJzS50REsfwOXEJX+ui6liujuhHKm1Ms=;
Message-ID: <[email protected]>
X-YMail-OSG: DFgY7AoVM1lUkw1YAmT65PMO9ILmNPo9orDKBcW361QGh31
Received: from [41.217.65.10] by web180307.mail.gq1.yahoo.com via HTTP; Wed, 02 Feb 2011 06:36:54 PST
X-Mailer: YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
Date: Wed, 2 Feb 2011 06:36:54 -0800 (PST)
From: Wand Smith <[email protected]>
Reply-To: [email protected]
Subject: Dear Beloved,
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-83666657-1296657414=:36461"
X-Spam-Subject: ***SPAM*** Dear Beloved,
X-Spam-Status: Yes, score=15.1
X-Spam-Score: 151
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Beloved, I am Mrs. Wand Smith an aging widow suffering
from long time illness. I have some funds I inherited from my late husband,
the sum of US$12,400,000.00 and I needed a very honest and God fearing person
who can use the fund for charity work in any part of the world, I found your
email address from the internet and decided to contact you. Please if you
would be able to use the funds for the charity work, kindly reply back immediately
for further details. Yours in the Lord, Mrs. Wand Smith. [...]
Content analysis details: (15.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[98.139.90.231 listed in list.dnswl.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FREEMAIL_FROM Sender email is freemail (edjj------eed0020[at]att.net)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.217.65.10>]
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (edjj------eed0020[at]att.net)
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 DECEASED_NO_ML Dead not via mailing list
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
--0-83666657-1296657414=:36461
Content-Type: text/plain; charset=us-ascii
Dear Beloved,
I am Mrs. Wand Smith an aging widow suffering from long time illness. I have some funds I inherited from my late husband, the sum of US$12,400,000.00 and I needed a very honest and God fearing person who can use the fund for charity work in any part of the world, I found your email address from the internet and decided to contact you. Please if you would be able to use the funds for the charity work, kindly reply back immediately for further details.
Yours in the Lord,
Mrs. Wand Smith.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces