by buried under 419s
Fri Jul 06, 2012 7:26 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 06 Jul 2012 10:52:09 -0700
Received: from nm19-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.216]:31082)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SnChJ-0003iS-6q
for ; Fri, 06 Jul 2012 10:52:09 -0700
Received: from [98.139.91.62] by nm19.bullet.mail.sp2.yahoo.com with NNFMP; 06 Jul 2012 17:52:03 -0000
Received: from [68.142.200.221] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 06 Jul 2012 17:51:03 -0000
Received: from [66.94.237.99] by t9.bullet.mud.yahoo.com with NNFMP; 06 Jul 2012 17:51:03 -0000
Received: from [127.0.0.1] by omp1004.access.mail.mud.yahoo.com with NNFMP; 06 Jul 2012 17:51:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 21983 invoked by uid 60001); 6 Jul 2012 17:51:02 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1341597062; bh=WOdlfGq29Ug8b3wFb4IAARbkc0COYyFS8TNlFgz9Xxk=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LuFLIO3hzkkjJdhV1HTkBpdvE4h2h+/f7Mrod5PaJYpxXay+13PwwRm+OkAEKY3p5TKdWwyc4iBKeUr1VZIEQyou3Tlu+DFGQGifttpLcThN8rnfbk8qsq5zmS/UmDKqSou/7QH0adOO5M/52P7cF4cV+X7pr+urgdkQdQKEDOw=
X-YMail-OSG: 9eygUpAVM1kjtCXuaftJN5bol7IBWUMw3VjSeO2cb0j2dhw
u47qsauvVo2EOb.8UeHUzIc0koK9MZf9u.gO54MXeFApx2nOLD4RmWjLU7ss
hvot8v1HCeum1YCh9FO4E54dUUrJeZ3qXXNBBHRvcPrAnyFx9Nx8bJTE2npZ
DJhkt0XgUGljLF9Tf1WyNciN1Cr0HuPpWNOyPmD11vYvrkCGDVR_jzQ5Jyxo
0kWF5HsHbfHyVjqqM0A6NNzjcAZh6QHiCX4sHlV8SSTQuEz8k4mUWVgfbWQm
_tTkTjFbbWcR4V.tYD3fi94O4F_HTe5MRkZb.G17d1A_69Tddd4_MqyfP2pm
MkjO4YOlwPzWZgZlfMsSzmcxTiIB1Tgut6FasdYltd2p1NuBzNz4WafMYyCU
W5bz05YVYeW_LKTF7kJRlqYePGdehsC0mvRLSTNyhD9egLTa6BvLks7gbS0a
ysfWzxtRnxZaKn4U-
Received: from [204.93.60.216] by web181404.mail.ne1.yahoo.com via HTTP; Fri, 06 Jul 2012 10:51:02 PDT
X-RocketYMMF: [email protected]
X-Mailer: YahooMailRC/708 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Fri, 6 Jul 2012 10:51:02 -0700 (PDT)
From: Tobias N <[email protected]>
Reply-To: Tobias N <[email protected]>
Subject: re
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1964014314-983760614-1341597062=:13291"
X-Spam-Status: No, score=2.6
X-Spam-Score: 26
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Contract funds transfer deal. Reply me for details if willing.
T.N. Contract funds transfer deal. Reply me for details if willing. T.N.
[...]
Content analysis details: (2.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tobias.ncube[at]aol.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5213]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.216 listed in list.dnswl.org]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
---1964014314-983760614-1341597062=:13291
Content-Type: text/plain; charset=us-ascii
Contract funds transfer deal. Reply me for details if willing. T.N.
Envelope-to:
Delivery-date: Fri, 06 Jul 2012 10:52:09 -0700
Received: from nm19-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.216]:31082)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SnChJ-0003iS-6q
for ; Fri, 06 Jul 2012 10:52:09 -0700
Received: from [98.139.91.62] by nm19.bullet.mail.sp2.yahoo.com with NNFMP; 06 Jul 2012 17:52:03 -0000
Received: from [68.142.200.221] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 06 Jul 2012 17:51:03 -0000
Received: from [66.94.237.99] by t9.bullet.mud.yahoo.com with NNFMP; 06 Jul 2012 17:51:03 -0000
Received: from [127.0.0.1] by omp1004.access.mail.mud.yahoo.com with NNFMP; 06 Jul 2012 17:51:03 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 21983 invoked by uid 60001); 6 Jul 2012 17:51:02 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1341597062; bh=WOdlfGq29Ug8b3wFb4IAARbkc0COYyFS8TNlFgz9Xxk=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LuFLIO3hzkkjJdhV1HTkBpdvE4h2h+/f7Mrod5PaJYpxXay+13PwwRm+OkAEKY3p5TKdWwyc4iBKeUr1VZIEQyou3Tlu+DFGQGifttpLcThN8rnfbk8qsq5zmS/UmDKqSou/7QH0adOO5M/52P7cF4cV+X7pr+urgdkQdQKEDOw=
X-YMail-OSG: 9eygUpAVM1kjtCXuaftJN5bol7IBWUMw3VjSeO2cb0j2dhw
u47qsauvVo2EOb.8UeHUzIc0koK9MZf9u.gO54MXeFApx2nOLD4RmWjLU7ss
hvot8v1HCeum1YCh9FO4E54dUUrJeZ3qXXNBBHRvcPrAnyFx9Nx8bJTE2npZ
DJhkt0XgUGljLF9Tf1WyNciN1Cr0HuPpWNOyPmD11vYvrkCGDVR_jzQ5Jyxo
0kWF5HsHbfHyVjqqM0A6NNzjcAZh6QHiCX4sHlV8SSTQuEz8k4mUWVgfbWQm
_tTkTjFbbWcR4V.tYD3fi94O4F_HTe5MRkZb.G17d1A_69Tddd4_MqyfP2pm
MkjO4YOlwPzWZgZlfMsSzmcxTiIB1Tgut6FasdYltd2p1NuBzNz4WafMYyCU
W5bz05YVYeW_LKTF7kJRlqYePGdehsC0mvRLSTNyhD9egLTa6BvLks7gbS0a
ysfWzxtRnxZaKn4U-
Received: from [204.93.60.216] by web181404.mail.ne1.yahoo.com via HTTP; Fri, 06 Jul 2012 10:51:02 PDT
X-RocketYMMF: [email protected]
X-Mailer: YahooMailRC/708 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Fri, 6 Jul 2012 10:51:02 -0700 (PDT)
From: Tobias N <[email protected]>
Reply-To: Tobias N <[email protected]>
Subject: re
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1964014314-983760614-1341597062=:13291"
X-Spam-Status: No, score=2.6
X-Spam-Score: 26
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Contract funds transfer deal. Reply me for details if willing.
T.N. Contract funds transfer deal. Reply me for details if willing. T.N.
[...]
Content analysis details: (2.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tobias.ncube[at]aol.com)
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5213]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.216 listed in list.dnswl.org]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
---1964014314-983760614-1341597062=:13291
Content-Type: text/plain; charset=us-ascii
Contract funds transfer deal. Reply me for details if willing. T.N.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces