by buried under 419s
Fri Jul 13, 2012 7:24 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 13 Jul 2012 09:16:22 -0700
Received: from nm16-vm7.bullet.mail.sg3.yahoo.com ([106.10.149.70]:38843)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SpiXW-0005Lj-0P
for ; Fri, 13 Jul 2012 09:16:22 -0700
Received: from [106.10.166.125] by nm16.bullet.mail.sg3.yahoo.com with NNFMP; 13 Jul 2012 16:16:21 -0000
Received: from [106.10.150.26] by tm14.bullet.mail.sg3.yahoo.com with NNFMP; 13 Jul 2012 16:16:21 -0000
Received: from [127.0.0.1] by omp1027.mail.sg3.yahoo.com with NNFMP; 13 Jul 2012 16:16:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 9211 invoked by uid 60001); 13 Jul 2012 16:16:20 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1342196180; bh=f7LZNIudp7pHtX/17ho4YTfGVvvPZ2BV2yzjr90BI0E=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=HzYkCVn/nhPVYLzNhqWbOkzrk/KMQ6AgNTQaySPPO5tpQU6B8kE5uAaKXNg/GYntl4XRrE5Cga1/s0JCj55Lki/z1naGk5twQySoooXYVLD+gI12pbC3ppEGI+YIl5F5Dbg1YV/wr+cpVOHR9InQWmOAtxVKHRdo62nQFPgD6Jg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=pBNayIbNBlA1AI1y8OGNdUDon7sOycU9AIYN2ihnSLGiPeX50FUgYmJ5Fi1ybPXWF4bZJ9OpJAQVkZj0WHC02eYeoXapMTsPUFFW0ITgWClaorbkjr15iExagIogOQF4oI999l7iuLWMqlerFGBZc6+hbuX5K09gQOLqiz1f5Is=;
X-YMail-OSG: 8kvjR58VM1kfmE7Oqj0j3sHslW_ErcinCUv6JSCn8MZNk80
BCoIibh_eKqhOm5whG9ttG9CNjl4MpPThA4Zv84B3_7H_x902tQPGWyo6r0o
qQ4h6ehRCThsY63oHDYfT5oOLlJlq9GxDb4M2Ift2DsAm1qW.B9AV8v26BxY
ND5T_k6j.vdyFefZWo48ThUTHKGBn0Y7_ik0wiVLM6bmQuMDuBhJ7lFIKaw3
skLfVqCnNzuFEraQO9zW52HrLV.HhH_VXG4VIwio4OAF5jPZL_TeTyQnxsJK
jsPyqx9xLc0ZOfCduVKKM4ubpTfBK5cuiSlOIkgsZf4FY.UA8HAt.U_hikny
kbOwTe15b54lQQkkeGYRaCVahR6zoC037DxJx
Received: from [41.138.164.135] by web190501.mail.sg3.yahoo.com via HTTP; Sat, 14 Jul 2012 00:16:20 SGT
X-Mailer: YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Sat, 14 Jul 2012 00:16:20 +0800 (SGT)
From: George Smith <[email protected]>
Reply-To: George Smith <[email protected]>
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1251447850-925689291-1342196180=:4387"
X-Spam-Status: Yes, score=7.8
X-Spam-Score: 78
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Beneficiary, This is to inform you of the latest development
as regards the delivery of your inheritance fund by the diplomat who is presently
at the JFK Int'l airport New York.Confirm your Full Name,Occupation, Residence
Address & Direct Telephone Numbers. [...]
Content analysis details: (7.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsmth20000[at]yahoo.com.ph)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(george smith <gsmth40[at]yahoo.co.uk>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsmth20000[at]yahoo.com.ph)
1.7 HK_SCAM_N3 BODY: HK_SCAM_N3
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5059]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[106.10.149.70 listed in list.dnswl.org]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Beneficiary
--1251447850-925689291-1342196180=:4387
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attn: Beneficiary,
This is to inform you of the latest development as regards the delivery of your inheritance fund by the diplomat who is presently at the JFK Int'l airport New York.Confirm your Full Name,Occupation, Residence Address & Direct Telephone Numbers.
Regards,
George Smith.
Envelope-to:
Delivery-date: Fri, 13 Jul 2012 09:16:22 -0700
Received: from nm16-vm7.bullet.mail.sg3.yahoo.com ([106.10.149.70]:38843)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SpiXW-0005Lj-0P
for ; Fri, 13 Jul 2012 09:16:22 -0700
Received: from [106.10.166.125] by nm16.bullet.mail.sg3.yahoo.com with NNFMP; 13 Jul 2012 16:16:21 -0000
Received: from [106.10.150.26] by tm14.bullet.mail.sg3.yahoo.com with NNFMP; 13 Jul 2012 16:16:21 -0000
Received: from [127.0.0.1] by omp1027.mail.sg3.yahoo.com with NNFMP; 13 Jul 2012 16:16:21 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 9211 invoked by uid 60001); 13 Jul 2012 16:16:20 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1342196180; bh=f7LZNIudp7pHtX/17ho4YTfGVvvPZ2BV2yzjr90BI0E=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=HzYkCVn/nhPVYLzNhqWbOkzrk/KMQ6AgNTQaySPPO5tpQU6B8kE5uAaKXNg/GYntl4XRrE5Cga1/s0JCj55Lki/z1naGk5twQySoooXYVLD+gI12pbC3ppEGI+YIl5F5Dbg1YV/wr+cpVOHR9InQWmOAtxVKHRdo62nQFPgD6Jg=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com.ph;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=pBNayIbNBlA1AI1y8OGNdUDon7sOycU9AIYN2ihnSLGiPeX50FUgYmJ5Fi1ybPXWF4bZJ9OpJAQVkZj0WHC02eYeoXapMTsPUFFW0ITgWClaorbkjr15iExagIogOQF4oI999l7iuLWMqlerFGBZc6+hbuX5K09gQOLqiz1f5Is=;
X-YMail-OSG: 8kvjR58VM1kfmE7Oqj0j3sHslW_ErcinCUv6JSCn8MZNk80
BCoIibh_eKqhOm5whG9ttG9CNjl4MpPThA4Zv84B3_7H_x902tQPGWyo6r0o
qQ4h6ehRCThsY63oHDYfT5oOLlJlq9GxDb4M2Ift2DsAm1qW.B9AV8v26BxY
ND5T_k6j.vdyFefZWo48ThUTHKGBn0Y7_ik0wiVLM6bmQuMDuBhJ7lFIKaw3
skLfVqCnNzuFEraQO9zW52HrLV.HhH_VXG4VIwio4OAF5jPZL_TeTyQnxsJK
jsPyqx9xLc0ZOfCduVKKM4ubpTfBK5cuiSlOIkgsZf4FY.UA8HAt.U_hikny
kbOwTe15b54lQQkkeGYRaCVahR6zoC037DxJx
Received: from [41.138.164.135] by web190501.mail.sg3.yahoo.com via HTTP; Sat, 14 Jul 2012 00:16:20 SGT
X-Mailer: YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Sat, 14 Jul 2012 00:16:20 +0800 (SGT)
From: George Smith <[email protected]>
Reply-To: George Smith <[email protected]>
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1251447850-925689291-1342196180=:4387"
X-Spam-Status: Yes, score=7.8
X-Spam-Score: 78
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: Beneficiary, This is to inform you of the latest development
as regards the delivery of your inheritance fund by the diplomat who is presently
at the JFK Int'l airport New York.Confirm your Full Name,Occupation, Residence
Address & Direct Telephone Numbers. [...]
Content analysis details: (7.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(gsmth20000[at]yahoo.com.ph)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(george smith <gsmth40[at]yahoo.co.uk>
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (gsmth20000[at]yahoo.com.ph)
1.7 HK_SCAM_N3 BODY: HK_SCAM_N3
3.8 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5059]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[106.10.149.70 listed in list.dnswl.org]
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Attn: Beneficiary
--1251447850-925689291-1342196180=:4387
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
Attn: Beneficiary,
This is to inform you of the latest development as regards the delivery of your inheritance fund by the diplomat who is presently at the JFK Int'l airport New York.Confirm your Full Name,Occupation, Residence Address & Direct Telephone Numbers.
Regards,
George Smith.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces