by buried under 419s
Wed Aug 08, 2012 5:07 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 08 Aug 2012 01:43:31 -0700
Received: from nm8.access.bullet.mail.sp2.yahoo.com ([98.139.44.135]:32939)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1Sz1rW-0003DN-Nz
for Wed, 08 Aug 2012 01:43:31 -0700
Received: from [98.139.44.103] by nm8.access.bullet.mail.sp2.yahoo.com with NNFMP; 08 Aug 2012 08:43:28 -0000
Received: from [98.139.44.74] by tm8.access.bullet.mail.sp2.yahoo.com with NNFMP; 08 Aug 2012 08:43:28 -0000
Received: from [127.0.0.1] by omp1011.access.mail.sp2.yahoo.com with NNFMP; 08 Aug 2012 08:43:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 9836 invoked by uid 60001); 8 Aug 2012 08:43:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1344415408; bh=3sjqMGCaD+XWVI6WFRYZtfdAt9oPgUJXhIZvoc0E5+Y=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=tOWXqnvbx8Jxsodqf/jxdXjoYANAKm1aiidNsLBpxEfmbPq2h4n1q/oO3Q9WVoIN2edeS9WIqS28gky+Au9w5PQgElRmcWaLuvPupICZU1EQokIERkPXFPoj8RptaZcLUIxLR++SkE53oTW71H0LLgL79gMbjltnaFatDfMGXso=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=sDmG4ZyY5WfkGOT7Mx9+px4MHVCMO6/D3355RwyLlHbD5I2iLE4W1kRVbdWxB55Uzfk8aZlu2ObGxiQT6S+6OWkpGlramVoUmc/FlLmrfHjhnajwhkKos9uJ/4ueKNHcl0+z8B1rjM3Co8Ojejh/j2JTqYpkMs8IeIPd+QFb7JI=;
X-YMail-OSG: M7XkPBQVM1ldUUz0W_I2916j.ocqqNousWYcGoJtXBOI2BB
RDtHwmWHhly2S3VjwVDSvIYsVaXUBMsf6itTFl29x_2hI.EKl.Xe6qHUaf2h
h1a2PAbEKc7gcJlfdyGI_5d8qkfQTVq_SWbfi6aJyPi8mAJH2c4uM5GE5jv6
wSx89i9YfgPLLjAWJ0EqcyWMab4LNcxR0bCgZSa5cv1bWdVFSR.tQvzBXYSd
uia8LRAMAxVhAqv.dhmLF1xBTKGp8LGB5GPpL78w3bi4Kvp1VYnZDauVU60k
z3pt0NzdXiquKHwi84TSTubTFkjBuOPCyu6nbr3zMUZ2D6r04sP8Y1axQ8se
dcfo_LH109ao1DZEJ36WYBpUuYZmCGo0A6RUh2ZZLE4b1z_2DloSkzrB2btB
ITS8loFfv57UJOCQzuLoDfvz2LRDg8g2p4oUBnTG7366NVdFlOAp2A3v5UWH
YW5Aq_C9uz.KMoirlwmTJkXfO32t064AdkEGNLnERz1A-
Received: from [67.18.231.154] by web184806.mail.gq1.yahoo.com via HTTP; Wed, 08 Aug 2012 01:43:28 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Wed, 8 Aug 2012 01:43:28 -0700 (PDT)
From: Mr Zindo Lisa <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="623363293-1743564154-1344415408=:95338"
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Do you need a loan at 3% if yes email us with Name,Amount,Country,Duration,Number
Do you need a loan at 3% if yes email us with Name,Amount,Country,Duration,Number
[...]
Content analysis details: (9.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.office10084444[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.135 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.office10084444[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9617]
2.7 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
1.8 MISSING_SUBJECT Missing Subject: header
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.3 TO_NO_BRKTS_PCNT To: misformatted + percentage
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM***
--623363293-1743564154-1344415408=:95338
Content-Type: text/plain; charset=us-ascii
Do you need a loan at 3% if yes email us with Name,Amount,Country,Duration,Number
Envelope-to:
Delivery-date: Wed, 08 Aug 2012 01:43:31 -0700
Received: from nm8.access.bullet.mail.sp2.yahoo.com ([98.139.44.135]:32939)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1Sz1rW-0003DN-Nz
for Wed, 08 Aug 2012 01:43:31 -0700
Received: from [98.139.44.103] by nm8.access.bullet.mail.sp2.yahoo.com with NNFMP; 08 Aug 2012 08:43:28 -0000
Received: from [98.139.44.74] by tm8.access.bullet.mail.sp2.yahoo.com with NNFMP; 08 Aug 2012 08:43:28 -0000
Received: from [127.0.0.1] by omp1011.access.mail.sp2.yahoo.com with NNFMP; 08 Aug 2012 08:43:28 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 9836 invoked by uid 60001); 8 Aug 2012 08:43:28 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1344415408; bh=3sjqMGCaD+XWVI6WFRYZtfdAt9oPgUJXhIZvoc0E5+Y=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=tOWXqnvbx8Jxsodqf/jxdXjoYANAKm1aiidNsLBpxEfmbPq2h4n1q/oO3Q9WVoIN2edeS9WIqS28gky+Au9w5PQgElRmcWaLuvPupICZU1EQokIERkPXFPoj8RptaZcLUIxLR++SkE53oTW71H0LLgL79gMbjltnaFatDfMGXso=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=sDmG4ZyY5WfkGOT7Mx9+px4MHVCMO6/D3355RwyLlHbD5I2iLE4W1kRVbdWxB55Uzfk8aZlu2ObGxiQT6S+6OWkpGlramVoUmc/FlLmrfHjhnajwhkKos9uJ/4ueKNHcl0+z8B1rjM3Co8Ojejh/j2JTqYpkMs8IeIPd+QFb7JI=;
X-YMail-OSG: M7XkPBQVM1ldUUz0W_I2916j.ocqqNousWYcGoJtXBOI2BB
RDtHwmWHhly2S3VjwVDSvIYsVaXUBMsf6itTFl29x_2hI.EKl.Xe6qHUaf2h
h1a2PAbEKc7gcJlfdyGI_5d8qkfQTVq_SWbfi6aJyPi8mAJH2c4uM5GE5jv6
wSx89i9YfgPLLjAWJ0EqcyWMab4LNcxR0bCgZSa5cv1bWdVFSR.tQvzBXYSd
uia8LRAMAxVhAqv.dhmLF1xBTKGp8LGB5GPpL78w3bi4Kvp1VYnZDauVU60k
z3pt0NzdXiquKHwi84TSTubTFkjBuOPCyu6nbr3zMUZ2D6r04sP8Y1axQ8se
dcfo_LH109ao1DZEJ36WYBpUuYZmCGo0A6RUh2ZZLE4b1z_2DloSkzrB2btB
ITS8loFfv57UJOCQzuLoDfvz2LRDg8g2p4oUBnTG7366NVdFlOAp2A3v5UWH
YW5Aq_C9uz.KMoirlwmTJkXfO32t064AdkEGNLnERz1A-
Received: from [67.18.231.154] by web184806.mail.gq1.yahoo.com via HTTP; Wed, 08 Aug 2012 01:43:28 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Wed, 8 Aug 2012 01:43:28 -0700 (PDT)
From: Mr Zindo Lisa <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="623363293-1743564154-1344415408=:95338"
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Do you need a loan at 3% if yes email us with Name,Amount,Country,Duration,Number
Do you need a loan at 3% if yes email us with Name,Amount,Country,Duration,Number
[...]
Content analysis details: (9.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.office10084444[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.135 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.office10084444[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9617]
2.7 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
1.8 MISSING_SUBJECT Missing Subject: header
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.3 TO_NO_BRKTS_PCNT To: misformatted + percentage
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM***
--623363293-1743564154-1344415408=:95338
Content-Type: text/plain; charset=us-ascii
Do you need a loan at 3% if yes email us with Name,Amount,Country,Duration,Number
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces