by buried under 419s
Tue Aug 14, 2012 11:30 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 14 Aug 2012 04:12:09 -0700
Received: from nm11.access.bullet.mail.sp2.yahoo.com ([98.139.44.138]:21354)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1T1F2c-0000d9-Lo
for ; Tue, 14 Aug 2012 04:12:09 -0700
Received: from [98.139.44.99] by nm11.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Aug 2012 11:12:05 -0000
Received: from [98.139.44.84] by tm4.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Aug 2012 11:12:05 -0000
Received: from [127.0.0.1] by omp1021.access.mail.sp2.yahoo.com with NNFMP; 14 Aug 2012 11:12:05 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 45761 invoked by uid 1000); 14 Aug 2012 11:03:43 -0000
Received: from 124.108.96.89 by rel103.mail.aue.yahoo.com with SMTP; Tue, 14 Aug 2012 04:03:43 -0700
Received: (qmail 61281 invoked by uid 60001); 14 Aug 2012 11:03:43 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1344942222; bh=pt5KCgDrqWNOH6KmuASb+LYAhCI/RlnGx+1d2Up4V8o=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=GDdDlJbNWUjnqgkEGtouBdz8iQdQ5UnpJDEWvdHyM++XiGS9OM1wqHb7Le1YbUSzp9Umm9GM+Sh5cBUOppgJrv5FN9DFo9BHho7fRPdHbeW8TAH6D9xS9wPgwQ/H4vewtcinONBaXviCaPJQtBGD2wauRycBY7pczNqUBenzT9E=
X-YMail-OSG: Bx92LLQVM1kTbWcU9FrjZGozBvptQqXFRiX1.f64_sBOjoe
ug5YZMHLKFPzQqJEG4cSF2DeQlxmExUjgBMM4E5VOVBZU3nYdc7V2IzIVDBg
4RTNNotEyXRjS6eQd1I9.X20xhRaamlgVGmh8hnu6mrHNuFeBhqNoe1y.xTg
XKuEqi.3mDXekpWkvCZrmGK.Tx8T0uY_.L1LrqnxrVmJNpxWfScSWlAZVJjX
i2rbBy3uyvraM2o0Ctf.rSxMceG4NJ4G.UcKcgA8v.zKmUeyL2h4wvzbJmd1
1Ns3eUQNu0yZghHKWSFd8.0ow2PHHSYz1nLGwP5bL8PYG5KEuZUUWWtSLjik
.9DHMMCs1QFsDc4kzU2WOJ_f8k9nLRQWb7DnbR1rZcH0iWLsn_wqrznGivv8
jlhdGxmt9Gm3KX5gxX.hHqrfppSIo9jugskYalGeXNUWofaG6xpd1AEe3WSj
pTdHgFusQYYubhmi3a_uvpKraNkpJdVZJIOTf64J866chHboIvJFCbWHf2t4
WrayPt89oHQk0zO2YNpU5bl.PJ7ubGsZ1aNUF7_4wFJCPyZ4YEhSg16uxLfn
gad.oV24-
Received: from [23.20.197.252] by web96006.mail.aue.yahoo.com via HTTP; Tue, 14 Aug 2012 23:03:42 NZST
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Tue, 14 Aug 2012 23:03:42 +1200 (NZST)
From: ECO/WORLD BANK <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1114010754-1371272523-1344942222=:56372"
X-Spam-Status: Yes, score=8.6
X-Spam-Score: 86
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Please you should contact Money gram. office for your fund
$950.000.00,USD from ECO/WORLD BANK. fund had already being programmed for
immediate payment.Email:([email protected]) Money gram now with this
info, Rev.Frank Williams,phone number,+229 68 44 17 64 Regards,send all you
recievers information. ECO/WORLD BANK [...]
Content analysis details: (8.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ecustom22[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.138 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?23.20.197.252>]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(western2011[at]hotmail.co.uk
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (ecustom22[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** ECO/WORLD BANK
--1114010754-1371272523-1344942222=:56372
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Please you should contact Money gram. office for your
fund $950.000.00,USD from ECO/WORLD BANK. fund had already
being programmed for immediate
payment.Email:( [email protected] ) Money gram now
with this info, Rev.Frank Williams,phone number,+229 68 44 17 64
Regards,send all you recievers information.
ECO/WORLD BANK
Envelope-to:
Delivery-date: Tue, 14 Aug 2012 04:12:09 -0700
Received: from nm11.access.bullet.mail.sp2.yahoo.com ([98.139.44.138]:21354)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.77)
(envelope-from <[email protected]>)
id 1T1F2c-0000d9-Lo
for ; Tue, 14 Aug 2012 04:12:09 -0700
Received: from [98.139.44.99] by nm11.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Aug 2012 11:12:05 -0000
Received: from [98.139.44.84] by tm4.access.bullet.mail.sp2.yahoo.com with NNFMP; 14 Aug 2012 11:12:05 -0000
Received: from [127.0.0.1] by omp1021.access.mail.sp2.yahoo.com with NNFMP; 14 Aug 2012 11:12:05 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 45761 invoked by uid 1000); 14 Aug 2012 11:03:43 -0000
Received: from 124.108.96.89 by rel103.mail.aue.yahoo.com with SMTP; Tue, 14 Aug 2012 04:03:43 -0700
Received: (qmail 61281 invoked by uid 60001); 14 Aug 2012 11:03:43 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1344942222; bh=pt5KCgDrqWNOH6KmuASb+LYAhCI/RlnGx+1d2Up4V8o=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=GDdDlJbNWUjnqgkEGtouBdz8iQdQ5UnpJDEWvdHyM++XiGS9OM1wqHb7Le1YbUSzp9Umm9GM+Sh5cBUOppgJrv5FN9DFo9BHho7fRPdHbeW8TAH6D9xS9wPgwQ/H4vewtcinONBaXviCaPJQtBGD2wauRycBY7pczNqUBenzT9E=
X-YMail-OSG: Bx92LLQVM1kTbWcU9FrjZGozBvptQqXFRiX1.f64_sBOjoe
ug5YZMHLKFPzQqJEG4cSF2DeQlxmExUjgBMM4E5VOVBZU3nYdc7V2IzIVDBg
4RTNNotEyXRjS6eQd1I9.X20xhRaamlgVGmh8hnu6mrHNuFeBhqNoe1y.xTg
XKuEqi.3mDXekpWkvCZrmGK.Tx8T0uY_.L1LrqnxrVmJNpxWfScSWlAZVJjX
i2rbBy3uyvraM2o0Ctf.rSxMceG4NJ4G.UcKcgA8v.zKmUeyL2h4wvzbJmd1
1Ns3eUQNu0yZghHKWSFd8.0ow2PHHSYz1nLGwP5bL8PYG5KEuZUUWWtSLjik
.9DHMMCs1QFsDc4kzU2WOJ_f8k9nLRQWb7DnbR1rZcH0iWLsn_wqrznGivv8
jlhdGxmt9Gm3KX5gxX.hHqrfppSIo9jugskYalGeXNUWofaG6xpd1AEe3WSj
pTdHgFusQYYubhmi3a_uvpKraNkpJdVZJIOTf64J866chHboIvJFCbWHf2t4
WrayPt89oHQk0zO2YNpU5bl.PJ7ubGsZ1aNUF7_4wFJCPyZ4YEhSg16uxLfn
gad.oV24-
Received: from [23.20.197.252] by web96006.mail.aue.yahoo.com via HTTP; Tue, 14 Aug 2012 23:03:42 NZST
X-RocketYMMF: [email protected]
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
Message-ID: <[email protected]>
Date: Tue, 14 Aug 2012 23:03:42 +1200 (NZST)
From: ECO/WORLD BANK <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1114010754-1371272523-1344942222=:56372"
X-Spam-Status: Yes, score=8.6
X-Spam-Score: 86
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Please you should contact Money gram. office for your fund
$950.000.00,USD from ECO/WORLD BANK. fund had already being programmed for
immediate payment.Email:([email protected]) Money gram now with this
info, Rev.Frank Williams,phone number,+229 68 44 17 64 Regards,send all you
recievers information. ECO/WORLD BANK [...]
Content analysis details: (8.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ecustom22[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.44.138 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?23.20.197.252>]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(western2011[at]hotmail.co.uk
)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (ecustom22[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FSL_FREEMAIL_2 FSL_FREEMAIL_2
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_FREEMAIL_1 FSL_FREEMAIL_1
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** ECO/WORLD BANK
--1114010754-1371272523-1344942222=:56372
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Please you should contact Money gram. office for your
fund $950.000.00,USD from ECO/WORLD BANK. fund had already
being programmed for immediate
payment.Email:( [email protected] ) Money gram now
with this info, Rev.Frank Williams,phone number,+229 68 44 17 64
Regards,send all you recievers information.
ECO/WORLD BANK
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces