by buried under 419s
Thu Nov 24, 2011 2:26 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 24 Nov 2011 05:53:16 -0800
Received: from nm5-vm1.access.bullet.mail.sp2.yahoo.com ([98.139.44.113])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RTZjn-0003Rk-JF
for ; Thu, 24 Nov 2011 05:53:16 -0800
Received: from [98.139.44.98] by nm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 24 Nov 2011 13:53:13 -0000
Received: from [98.139.44.78] by tm3.access.bullet.mail.sp2.yahoo.com with NNFMP; 24 Nov 2011 13:53:13 -0000
Received: from [127.0.0.1] by omp1015.access.mail.sp2.yahoo.com with NNFMP; 24 Nov 2011 13:53:13 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 23444 invoked by uid 60001); 24 Nov 2011 13:53:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1322142792; bh=svPwYv8MHHxiuxO6I+VJ9vH8GmBp0/jodyoeakQx1YY=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=fs7SCqE44MGuG/4AOfUWJUreXtpD2FLT+AA+8PH3YqBb0YOXZOknEE9Ib5GXBoQU4FLntXljWNLn+I4jJcHNmBwizxd/2ijwEko+Y+M+dwSUbXQ6t2tVVvD4I0URFakH/7PvSYjnLUJrWY+dCF1YMvC5uttIC0UPaaCH4eI98s8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=RjssNE5jRevvaMW905LAN+9oFVbcpNVVFhNC3k4eRrUGiypJoirPibsMrMgXGTcMjvvXO9XjyJUhB2gmaWsHquYkmYmZ1qMvCab/95Z3cThDZ0mUCYQeEdnhgOQ4tvf4VAnfYnN3OgvKnVL2f4+KKPgaPyuZxseWm2Nq/+m5QRA=;
X-YMail-OSG: _wd7auwVM1lkqJvVuxNFrgnMP47Z8Zy7CJajvN8uzyKQV8M
ddCWSmRiGhWNcbK_B9QzETiRt7IIHK2zN5I4uWRD.UrUlYPZEI4dMX72C0a3
YM5EaN.L01gFtoH9Zn_WlIMfM9jD0ENGmMpdt5LResCSWLikzw3zEF4XiC_E
5Q.BQbBg3ijM5Gvb896vh3UcmTWAF7H9.y0cLsvcSS5AChtRHhATsRgeLece
_dCjrLC2Cd7qM0A_IEWxUr3UsnIXKDHhSenI2rvzpqbWI6Vy_OJYsAu6Pwyk
9O8oqYaLriZsyBF4du4H6rsJMPqoo2r9ajwSd8KRWYNIB47Cki_Te9kTkgv1
wPgIHJllmUibokDL6G1DcNW1rb1c1WasLoyKj8iKK.NYC._BxdV0i3IjGUTE
n_i5rMqKZdZrXNTK3WOj4._0xnw6mRu_M3KGqdHKZw3sTUlXL9AOQGq.S2Cj
YUL9K6Mex9A--
Received: from [41.124.181.41] by web181720.mail.ne1.yahoo.com via HTTP; Thu, 24 Nov 2011 05:53:12 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Thu, 24 Nov 2011 05:53:12 -0800 (PST)
From: Spencer Clayton <[email protected]>
Reply-To: [email protected]
Subject: This mail was intended to you only because your surname seems similar to my late client. A client in our Bank died Five Years ago leaving behind Capital amount {US$17.5M}Read the attached copy and get back to me.Thanks Spencer Clayton
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1818388015-1156411158-1322142792=:98473"
X-Spam-Status: No, score=4.8
X-Spam-Score: 48
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (4.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.113 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webms8[at]att.net)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (webms8[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: NO
---1818388015-1156411158-1322142792=:98473
Content-Type: multipart/alternative; boundary="-1818388015-1636635790-1322142792=:98473"
---1818388015-1636635790-1322142792=:98473
Content-Type: text/plain; charset=us-ascii
This mail was intended to you only because your surname seems similar to my late client. A client in our Bank died Five Years ago leaving behind Capital amount {US$17.5M}Read the attached copy and get back to me.Thanks Spencer Clayton
Envelope-to:
Delivery-date: Thu, 24 Nov 2011 05:53:16 -0800
Received: from nm5-vm1.access.bullet.mail.sp2.yahoo.com ([98.139.44.113])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RTZjn-0003Rk-JF
for ; Thu, 24 Nov 2011 05:53:16 -0800
Received: from [98.139.44.98] by nm5.access.bullet.mail.sp2.yahoo.com with NNFMP; 24 Nov 2011 13:53:13 -0000
Received: from [98.139.44.78] by tm3.access.bullet.mail.sp2.yahoo.com with NNFMP; 24 Nov 2011 13:53:13 -0000
Received: from [127.0.0.1] by omp1015.access.mail.sp2.yahoo.com with NNFMP; 24 Nov 2011 13:53:13 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 23444 invoked by uid 60001); 24 Nov 2011 13:53:12 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1322142792; bh=svPwYv8MHHxiuxO6I+VJ9vH8GmBp0/jodyoeakQx1YY=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=fs7SCqE44MGuG/4AOfUWJUreXtpD2FLT+AA+8PH3YqBb0YOXZOknEE9Ib5GXBoQU4FLntXljWNLn+I4jJcHNmBwizxd/2ijwEko+Y+M+dwSUbXQ6t2tVVvD4I0URFakH/7PvSYjnLUJrWY+dCF1YMvC5uttIC0UPaaCH4eI98s8=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=RjssNE5jRevvaMW905LAN+9oFVbcpNVVFhNC3k4eRrUGiypJoirPibsMrMgXGTcMjvvXO9XjyJUhB2gmaWsHquYkmYmZ1qMvCab/95Z3cThDZ0mUCYQeEdnhgOQ4tvf4VAnfYnN3OgvKnVL2f4+KKPgaPyuZxseWm2Nq/+m5QRA=;
X-YMail-OSG: _wd7auwVM1lkqJvVuxNFrgnMP47Z8Zy7CJajvN8uzyKQV8M
ddCWSmRiGhWNcbK_B9QzETiRt7IIHK2zN5I4uWRD.UrUlYPZEI4dMX72C0a3
YM5EaN.L01gFtoH9Zn_WlIMfM9jD0ENGmMpdt5LResCSWLikzw3zEF4XiC_E
5Q.BQbBg3ijM5Gvb896vh3UcmTWAF7H9.y0cLsvcSS5AChtRHhATsRgeLece
_dCjrLC2Cd7qM0A_IEWxUr3UsnIXKDHhSenI2rvzpqbWI6Vy_OJYsAu6Pwyk
9O8oqYaLriZsyBF4du4H6rsJMPqoo2r9ajwSd8KRWYNIB47Cki_Te9kTkgv1
wPgIHJllmUibokDL6G1DcNW1rb1c1WasLoyKj8iKK.NYC._BxdV0i3IjGUTE
n_i5rMqKZdZrXNTK3WOj4._0xnw6mRu_M3KGqdHKZw3sTUlXL9AOQGq.S2Cj
YUL9K6Mex9A--
Received: from [41.124.181.41] by web181720.mail.ne1.yahoo.com via HTTP; Thu, 24 Nov 2011 05:53:12 PST
X-Mailer: YahooMailClassic/14.0.11 YahooMailWebService/0.8.115.325013
Message-ID: <[email protected]>
Date: Thu, 24 Nov 2011 05:53:12 -0800 (PST)
From: Spencer Clayton <[email protected]>
Reply-To: [email protected]
Subject: This mail was intended to you only because your surname seems similar to my late client. A client in our Bank died Five Years ago leaving behind Capital amount {US$17.5M}Read the attached copy and get back to me.Thanks Spencer Clayton
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1818388015-1156411158-1322142792=:98473"
X-Spam-Status: No, score=4.8
X-Spam-Score: 48
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (4.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.113 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webms8[at]att.net)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (webms8[at]att.net)
0.4 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
0.0 LOTS_OF_MONEY Huge... sums of money
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: NO
---1818388015-1156411158-1322142792=:98473
Content-Type: multipart/alternative; boundary="-1818388015-1636635790-1322142792=:98473"
---1818388015-1636635790-1322142792=:98473
Content-Type: text/plain; charset=us-ascii
This mail was intended to you only because your surname seems similar to my late client. A client in our Bank died Five Years ago leaving behind Capital amount {US$17.5M}Read the attached copy and get back to me.Thanks Spencer Clayton
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces