by buried under 419s
Fri Oct 14, 2011 2:49 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 14 Oct 2011 10:37:08 -0700
Received: from nm30-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.239])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RElgy-0002Bb-39
for ; Fri, 14 Oct 2011 10:37:08 -0700
Received: from [98.139.91.67] by nm30.bullet.mail.sp2.yahoo.com with NNFMP; 14 Oct 2011 17:37:06 -0000
Received: from [98.139.91.9] by tm7.bullet.mail.sp2.yahoo.com with NNFMP; 14 Oct 2011 17:37:06 -0000
Received: from [127.0.0.1] by omp1009.mail.sp2.yahoo.com with NNFMP; 14 Oct 2011 17:37:06 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 39949 invoked by uid 60001); 14 Oct 2011 17:37:05 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1318613825; bh=x23oeWNWO6zDyMq+9nuE9hi1sqMy0qmgttcXbZje7Aw=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=jpMroORz2pNAkdk2DX8lJyeQIrjgGxze6v3sIASktDpzKtSKsDphK8WMaFTEC+LkD5ti7O/K/EhTJZ1ZqD8nkso6xuhhfjOYPwavjDgMMM29uqOKOV45vUXCWyBzlsHBTw6vrp6yLqNc7h5uk24J4sFI2ksV9o8mTdQXqAYW1OM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=Dw+EgxpyePT0huI9ezSuZXdLJ/ROKcab1rHUUnVZHzMB1cD0Nq6zUPtDBRB+wAFDNJl94jhhBHbz9QZddE4VxPevdQ1RL8RU+VRlwB1PfOWQ0fvN6luNXM/GakRRDWRFWc/eJpkj1iD3wMqYJocNEWzAIjrnVvZ7BNkkRUjGKy0=;
X-YMail-OSG: FTzIJlsVM1nFvVin3ISp.LrQmzBoGyZp4Gq5Z0Qu13VH1iB
DtnI3D2M_
Received: from [41.85.161.2] by web190318.mail.sg3.yahoo.com via HTTP; Sat, 15 Oct 2011 01:37:01 SGT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Sat, 15 Oct 2011 01:37:01 +0800 (SGT)
From: "DR. DAVID MARK" <[email protected]>
Reply-To: [email protected]
Subject: Hello my dear
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="827172402-1982031455-1318613821=:26319"
X-Spam-Subject: ***SPAM*** Hello my dear
X-Spam-Status: Yes, score=15.5
X-Spam-Score: 155
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello my dear I am very happy to inform you about my success
in getting that fund transferred. Now I want you to contact my secretary
on his email address below and receive your compensation of $800.000.00 us
dollars from him: [...]
Content analysis details: (15.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 HK_SCAM_N8 BODY: HK_SCAM_N8
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(office_mail4419[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.239 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.85.161.2>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.85.161.2 listed in dnsbl.sorbs.net]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (office_mail4419[at]yahoo.com.ph)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5626]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
X-Spam-Flag: YES
--827172402-1982031455-1318613821=:26319
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Hello my dear
I am very happy to inform you about my success in getting that fund transferred. Now I want you to contact my secretary on his email address below and receive your compensation of $800.000.00 us dollars from him:
NAME: Mr.Roy Willams
EMAIL: ( [email protected] )
Kindly reconfirm to him the following below information:
Your full name_________________________
Your address__________________________
Your country___________________________
Your age______________________________
Your occupation________________________
Your Phone number______________________
Note that if you did not send him the above information complete, he will not release the cheque to you because he has to be sure that it is you. Ask him to send you the total sum of ($800.000.00) USD CASHIER'S CHEQUE, which I kept for you. Note also that I will not be reached by email or phone for now because I am currently away in Japan for investment purpose with my share and I will be busy till about six months time or a year.
Best regards,
DR. DAVID MARK,
Envelope-to:
Delivery-date: Fri, 14 Oct 2011 10:37:08 -0700
Received: from nm30-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.239])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RElgy-0002Bb-39
for ; Fri, 14 Oct 2011 10:37:08 -0700
Received: from [98.139.91.67] by nm30.bullet.mail.sp2.yahoo.com with NNFMP; 14 Oct 2011 17:37:06 -0000
Received: from [98.139.91.9] by tm7.bullet.mail.sp2.yahoo.com with NNFMP; 14 Oct 2011 17:37:06 -0000
Received: from [127.0.0.1] by omp1009.mail.sp2.yahoo.com with NNFMP; 14 Oct 2011 17:37:06 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 39949 invoked by uid 60001); 14 Oct 2011 17:37:05 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1318613825; bh=x23oeWNWO6zDyMq+9nuE9hi1sqMy0qmgttcXbZje7Aw=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=jpMroORz2pNAkdk2DX8lJyeQIrjgGxze6v3sIASktDpzKtSKsDphK8WMaFTEC+LkD5ti7O/K/EhTJZ1ZqD8nkso6xuhhfjOYPwavjDgMMM29uqOKOV45vUXCWyBzlsHBTw6vrp6yLqNc7h5uk24J4sFI2ksV9o8mTdQXqAYW1OM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=Dw+EgxpyePT0huI9ezSuZXdLJ/ROKcab1rHUUnVZHzMB1cD0Nq6zUPtDBRB+wAFDNJl94jhhBHbz9QZddE4VxPevdQ1RL8RU+VRlwB1PfOWQ0fvN6luNXM/GakRRDWRFWc/eJpkj1iD3wMqYJocNEWzAIjrnVvZ7BNkkRUjGKy0=;
X-YMail-OSG: FTzIJlsVM1nFvVin3ISp.LrQmzBoGyZp4Gq5Z0Qu13VH1iB
DtnI3D2M_
Received: from [41.85.161.2] by web190318.mail.sg3.yahoo.com via HTTP; Sat, 15 Oct 2011 01:37:01 SGT
X-Mailer: YahooMailClassic/14.0.7 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Sat, 15 Oct 2011 01:37:01 +0800 (SGT)
From: "DR. DAVID MARK" <[email protected]>
Reply-To: [email protected]
Subject: Hello my dear
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="827172402-1982031455-1318613821=:26319"
X-Spam-Subject: ***SPAM*** Hello my dear
X-Spam-Status: Yes, score=15.5
X-Spam-Score: 155
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello my dear I am very happy to inform you about my success
in getting that fund transferred. Now I want you to contact my secretary
on his email address below and receive your compensation of $800.000.00 us
dollars from him: [...]
Content analysis details: (15.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 HK_SCAM_N8 BODY: HK_SCAM_N8
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(office_mail4419[at]yahoo.com.ph)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.239 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.85.161.2>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.85.161.2 listed in dnsbl.sorbs.net]
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (office_mail4419[at]yahoo.com.ph)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5626]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
X-Spam-Flag: YES
--827172402-1982031455-1318613821=:26319
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Hello my dear
I am very happy to inform you about my success in getting that fund transferred. Now I want you to contact my secretary on his email address below and receive your compensation of $800.000.00 us dollars from him:
NAME: Mr.Roy Willams
EMAIL: ( [email protected] )
Kindly reconfirm to him the following below information:
Your full name_________________________
Your address__________________________
Your country___________________________
Your age______________________________
Your occupation________________________
Your Phone number______________________
Note that if you did not send him the above information complete, he will not release the cheque to you because he has to be sure that it is you. Ask him to send you the total sum of ($800.000.00) USD CASHIER'S CHEQUE, which I kept for you. Note also that I will not be reached by email or phone for now because I am currently away in Japan for investment purpose with my share and I will be busy till about six months time or a year.
Best regards,
DR. DAVID MARK,
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces