by buried under 419s
Mon Jul 09, 2012 3:48 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Jul 2012 00:24:44 -0700
Received: from nm29.access.bullet.mail.sp2.yahoo.com ([98.139.44.156]:29434)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1So8Km-000471-9d
For \; Mon, 09 Jul 2012 00:24:44 -0700
Received: from [98.139.44.101] by nm29.access.bullet.mail.sp2.yahoo.com with NNFMP; 09 Jul 2012 07:24:42 -0000
Received: from [98.139.44.71] by tm6.access.bullet.mail.sp2.yahoo.com with NNFMP; 09 Jul 2012 07:24:42 -0000
Received: from [127.0.0.1] by omp1008.access.mail.sp2.yahoo.com with NNFMP; 09 Jul 2012 07:24:42 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 63649 invoked by uid 60001); 9 Jul 2012 07:24:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1341818681; bh=/nI9N8h8B+lluY2/GgOxvnoCEhA4mhlINh1H6tlA+Qo=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=SoelkIWx1iVdwgBlMv+iyBwD7QByGCUcheckhXrhgwlR8XKRpRGybkYaF8DYvsLB2AmdFVi764eDEUOTxcWWG+4dlK98eKfN487i0uuigjolK6T8B5cq8Ph/d/pMDNUjhEdzjMbEsWE9lmAnKFEbCmndAUmskHv4q4ZgFGJcgNw=
X-YMail-OSG: zyGvr9QVM1kQfmwy09chSXXHnDHTwmpi2GTMR7CXSxVdM0Z
LvyFftSOPbxHc5AH.pmbIz2nwfnbSTpzJKZBFkP81edWLt7JXJf0mun26TLO
8HLbX9m.WEbIXxi4xSV.8fQHqEMFUPPeC7akcQokrceAjEuOCq50oAwLObZA
8hmJ5HEJCKuY4mCBK.Zd9BEnfehO4pnhLHpymMLaY9afnDxv_bHGaxXm3DTk
K13fOx5JpDBpI3vHs2U5vCivbglWmgr7RzBuz6kF4TG5mAxHdIPIxmH_h2Pe
437Q3SJmhzfGZMGOsApnKgm2S6bkB2TKJ9TgveshtBzRQLol83VV.MlEMmsk
0VsM1G8yJV5vHNrRQUq2im2Ie5DOYQv4_8tifHs5pYiadCz7ZwO1iRv8WHff
_ya7NUte5kzlH2Iyzjrn9fQnmN8fHtH39wLO8_acEr39hjQNp6Qe.2nT0tel
Me4saQFkdY2lX4g--
Received: from [204.93.60.96] by web184804.mail.gq1.yahoo.com via HTTP; Mon, 09 Jul 2012 00:24:41 PDT
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Mon, 9 Jul 2012 00:24:41 -0700 (PDT)
From: Tobias N <[email protected]>
Reply-To: [email protected]
Subject: re
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1662700043-2093163953-1341818681=:63598"
X-Spam-Status: No, score=2.9
X-Spam-Score: 29
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Contract funds transfer deal. Reply me for details if willing.
T.N. Contract funds transfer deal. Reply me for details if willing. T.N.
[...]
Content analysis details: (2.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tobias.ncube[at]aol.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.156 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6831]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.3 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: NO
---1662700043-2093163953-1341818681=:63598
Content-Type: text/plain; charset=us-ascii
Contract funds transfer deal. Reply me for details if willing. T.N.
Envelope-to:
Delivery-date: Mon, 09 Jul 2012 00:24:44 -0700
Received: from nm29.access.bullet.mail.sp2.yahoo.com ([98.139.44.156]:29434)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1So8Km-000471-9d
For \; Mon, 09 Jul 2012 00:24:44 -0700
Received: from [98.139.44.101] by nm29.access.bullet.mail.sp2.yahoo.com with NNFMP; 09 Jul 2012 07:24:42 -0000
Received: from [98.139.44.71] by tm6.access.bullet.mail.sp2.yahoo.com with NNFMP; 09 Jul 2012 07:24:42 -0000
Received: from [127.0.0.1] by omp1008.access.mail.sp2.yahoo.com with NNFMP; 09 Jul 2012 07:24:42 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 63649 invoked by uid 60001); 9 Jul 2012 07:24:41 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1341818681; bh=/nI9N8h8B+lluY2/GgOxvnoCEhA4mhlINh1H6tlA+Qo=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=SoelkIWx1iVdwgBlMv+iyBwD7QByGCUcheckhXrhgwlR8XKRpRGybkYaF8DYvsLB2AmdFVi764eDEUOTxcWWG+4dlK98eKfN487i0uuigjolK6T8B5cq8Ph/d/pMDNUjhEdzjMbEsWE9lmAnKFEbCmndAUmskHv4q4ZgFGJcgNw=
X-YMail-OSG: zyGvr9QVM1kQfmwy09chSXXHnDHTwmpi2GTMR7CXSxVdM0Z
LvyFftSOPbxHc5AH.pmbIz2nwfnbSTpzJKZBFkP81edWLt7JXJf0mun26TLO
8HLbX9m.WEbIXxi4xSV.8fQHqEMFUPPeC7akcQokrceAjEuOCq50oAwLObZA
8hmJ5HEJCKuY4mCBK.Zd9BEnfehO4pnhLHpymMLaY9afnDxv_bHGaxXm3DTk
K13fOx5JpDBpI3vHs2U5vCivbglWmgr7RzBuz6kF4TG5mAxHdIPIxmH_h2Pe
437Q3SJmhzfGZMGOsApnKgm2S6bkB2TKJ9TgveshtBzRQLol83VV.MlEMmsk
0VsM1G8yJV5vHNrRQUq2im2Ie5DOYQv4_8tifHs5pYiadCz7ZwO1iRv8WHff
_ya7NUte5kzlH2Iyzjrn9fQnmN8fHtH39wLO8_acEr39hjQNp6Qe.2nT0tel
Me4saQFkdY2lX4g--
Received: from [204.93.60.96] by web184804.mail.gq1.yahoo.com via HTTP; Mon, 09 Jul 2012 00:24:41 PDT
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Mon, 9 Jul 2012 00:24:41 -0700 (PDT)
From: Tobias N <[email protected]>
Reply-To: [email protected]
Subject: re
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1662700043-2093163953-1341818681=:63598"
X-Spam-Status: No, score=2.9
X-Spam-Score: 29
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Contract funds transfer deal. Reply me for details if willing.
T.N. Contract funds transfer deal. Reply me for details if willing. T.N.
[...]
Content analysis details: (2.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(tobias.ncube[at]aol.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.156 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6831]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.3 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: NO
---1662700043-2093163953-1341818681=:63598
Content-Type: text/plain; charset=us-ascii
Contract funds transfer deal. Reply me for details if willing. T.N.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces