by buried under 419s
Thu Oct 20, 2011 12:47 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Oct 2011 07:16:56 -0700
Received: from nm27-vm1.access.bullet.mail.mud.yahoo.com ([66.94.236.228])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RGtQV-0004h2-Oz
for ; Thu, 20 Oct 2011 07:16:56 -0700
Received: from [66.94.237.195] by nm27.access.bullet.mail.mud.yahoo.com with NNFMP; 20 Oct 2011 14:16:54 -0000
Received: from [66.94.237.124] by tm6.access.bullet.mail.mud.yahoo.com with NNFMP; 20 Oct 2011 14:16:53 -0000
Received: from [127.0.0.1] by omp1029.access.mail.mud.yahoo.com with NNFMP; 20 Oct 2011 14:16:53 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 39735 invoked by uid 60001); 20 Oct 2011 14:16:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1319120213; bh=hh6Je5NwIUX1cPB8q2CWHGjHsHrgWIBdMPKy/SNL7pg=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LMgMtJcXNShk0CEBArm5x89/F606BR67ngOczioYTl58kTbDF+xcz5NhlJwawsaP0byEAgMVh14v08pYPGple4umD+QYsvns7v/8xQagDRoPZkqakTM7glzm6fwT5TcBTMaLQ5fvaBZ8Mk1i06I0d57Rp2TIGzbmr4mY7jjV/vY=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=6gJ5dt66HA9fWwYS6ZlCkM7HkVBGKfJp6Phg3gDn/3o6U5Lt/AXjqnkARy9kvZSCMuC7LlvyErxs25TZbOxIW1OY6FPDr8G5Z/wv57ZQU9Tk6OKiQOE3xg/iNu3qCq/2QrApJc9UnFHqD1avgczT84lrdZx2i2GtlIjc5tlhq2I=;
X-YMail-OSG: 0mCN0XMVM1kZXnVFrDtEEV.4A3BVyAz88ZzQTPU_CCHSD2n
1y_JBMilBq.Gcaoc5ncfEGKxI0r3V.d3Wi3BXUZD83R3ejUP.fvytpFgB01_
9T0PSKmmsJHXacb8_h2AWtmtqULYaL16Egl.BTszfvwNQVTWpUwzMwWo5gc_
NzUoUUhuWnDMfPolYQsydK.l859pRmuNGxETNha1PlrDRv2rsje0wwlbWWe6
bewgCWcHx2nQ2nAQ_L8kzJUlOx2NfFhATVJMoP1LmpZR4qWLrNtopxjArj4s
xNgJ8SkzEbWuh.LqA_vlpMhBolh8947mEET2pcgHGDa2ARc9ZnGucfqs1pih
7ORbmtG2zbqDWZIZJWvZoPNJOeUsukO1F63YUMoV3q5s9OY2JgHhZKXWZaAq
po3gnywL6R9OuORFg.DcOlpPKn6SsIM_gee2gVL8qxEJuv_yEWZhRGrjFQUf
A9caA
Received: from [196.2.126.174] by web181509.mail.ne1.yahoo.com via HTTP; Thu, 20 Oct 2011 07:16:53 PDT
X-Mailer: YahooMailRC/574 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Thu, 20 Oct 2011 07:16:53 -0700 (PDT)
From: "Mrs. Anita Kerry" <[email protected]>
Reply-To: "Mrs. Anita Kerry" <[email protected]>
Subject: CALLING YOU FOR ADVICE
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-887602424-1319120213=:94540"
X-Spam-Subject: ***SPAM*** CALLING YOU FOR ADVICE
X-Spam-Status: Yes, score=8.8
X-Spam-Score: 88
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (8.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FROM_LOCAL_DIGITS From: localpart has long digit sequence
0.0 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web45366577899765[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.236.228 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?196.2.126.174>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web45366577899765[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9757]
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
--0-887602424-1319120213=:94540
Content-Type: multipart/alternative; boundary="0-1886299172-1319120213=:94540"
Dear Beloved,
I am sending you this email in good faith I am Anita Kerry now undergoing medical treatment for cancer.
I was married to Mr. Peter Kerry who worked with British embassy in Malaysia for many years before his
death in 2007,we both made a deposit of some amount of money worth $18.2M in a safe deposit box
with a finance institution in
London.
Recently, my Doctor told me that I have few months to live due to my illness. Having known my
condition have decided to donate this fund to you so that you can use it to build an orphanage home in
your Country to help the less privilege. With the help of my lawyer my doctor will issue you a Letter of
Authority from the Court making
you the Beneficiary of the deposit. Kindly indicate your interest in your response so that I can forward
you more
details on what to do.
In His Arms. Peace Been With You
Mrs.Anita Kerry
Envelope-to:
Delivery-date: Thu, 20 Oct 2011 07:16:56 -0700
Received: from nm27-vm1.access.bullet.mail.mud.yahoo.com ([66.94.236.228])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RGtQV-0004h2-Oz
for ; Thu, 20 Oct 2011 07:16:56 -0700
Received: from [66.94.237.195] by nm27.access.bullet.mail.mud.yahoo.com with NNFMP; 20 Oct 2011 14:16:54 -0000
Received: from [66.94.237.124] by tm6.access.bullet.mail.mud.yahoo.com with NNFMP; 20 Oct 2011 14:16:53 -0000
Received: from [127.0.0.1] by omp1029.access.mail.mud.yahoo.com with NNFMP; 20 Oct 2011 14:16:53 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 39735 invoked by uid 60001); 20 Oct 2011 14:16:53 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1319120213; bh=hh6Je5NwIUX1cPB8q2CWHGjHsHrgWIBdMPKy/SNL7pg=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LMgMtJcXNShk0CEBArm5x89/F606BR67ngOczioYTl58kTbDF+xcz5NhlJwawsaP0byEAgMVh14v08pYPGple4umD+QYsvns7v/8xQagDRoPZkqakTM7glzm6fwT5TcBTMaLQ5fvaBZ8Mk1i06I0d57Rp2TIGzbmr4mY7jjV/vY=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=6gJ5dt66HA9fWwYS6ZlCkM7HkVBGKfJp6Phg3gDn/3o6U5Lt/AXjqnkARy9kvZSCMuC7LlvyErxs25TZbOxIW1OY6FPDr8G5Z/wv57ZQU9Tk6OKiQOE3xg/iNu3qCq/2QrApJc9UnFHqD1avgczT84lrdZx2i2GtlIjc5tlhq2I=;
X-YMail-OSG: 0mCN0XMVM1kZXnVFrDtEEV.4A3BVyAz88ZzQTPU_CCHSD2n
1y_JBMilBq.Gcaoc5ncfEGKxI0r3V.d3Wi3BXUZD83R3ejUP.fvytpFgB01_
9T0PSKmmsJHXacb8_h2AWtmtqULYaL16Egl.BTszfvwNQVTWpUwzMwWo5gc_
NzUoUUhuWnDMfPolYQsydK.l859pRmuNGxETNha1PlrDRv2rsje0wwlbWWe6
bewgCWcHx2nQ2nAQ_L8kzJUlOx2NfFhATVJMoP1LmpZR4qWLrNtopxjArj4s
xNgJ8SkzEbWuh.LqA_vlpMhBolh8947mEET2pcgHGDa2ARc9ZnGucfqs1pih
7ORbmtG2zbqDWZIZJWvZoPNJOeUsukO1F63YUMoV3q5s9OY2JgHhZKXWZaAq
po3gnywL6R9OuORFg.DcOlpPKn6SsIM_gee2gVL8qxEJuv_yEWZhRGrjFQUf
A9caA
Received: from [196.2.126.174] by web181509.mail.ne1.yahoo.com via HTTP; Thu, 20 Oct 2011 07:16:53 PDT
X-Mailer: YahooMailRC/574 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Thu, 20 Oct 2011 07:16:53 -0700 (PDT)
From: "Mrs. Anita Kerry" <[email protected]>
Reply-To: "Mrs. Anita Kerry" <[email protected]>
Subject: CALLING YOU FOR ADVICE
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-887602424-1319120213=:94540"
X-Spam-Subject: ***SPAM*** CALLING YOU FOR ADVICE
X-Spam-Status: Yes, score=8.8
X-Spam-Score: 88
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (8.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FROM_LOCAL_DIGITS From: localpart has long digit sequence
0.0 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web45366577899765[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.236.228 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?196.2.126.174>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web45366577899765[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9757]
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
--0-887602424-1319120213=:94540
Content-Type: multipart/alternative; boundary="0-1886299172-1319120213=:94540"
Dear Beloved,
I am sending you this email in good faith I am Anita Kerry now undergoing medical treatment for cancer.
I was married to Mr. Peter Kerry who worked with British embassy in Malaysia for many years before his
death in 2007,we both made a deposit of some amount of money worth $18.2M in a safe deposit box
with a finance institution in
London.
Recently, my Doctor told me that I have few months to live due to my illness. Having known my
condition have decided to donate this fund to you so that you can use it to build an orphanage home in
your Country to help the less privilege. With the help of my lawyer my doctor will issue you a Letter of
Authority from the Court making
you the Beneficiary of the deposit. Kindly indicate your interest in your response so that I can forward
you more
details on what to do.
In His Arms. Peace Been With You
Mrs.Anita Kerry
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces