by buried under 419s
Sat Sep 08, 2012 2:07 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 08 Sep 2012 09:40:40 -0700
Received: from nm30.bullet.mail.sp2.yahoo.com ([98.139.91.100]:33225)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TAO59-0004P6-H0
for ; Sat, 08 Sep 2012 09:40:40 -0700
Received: from [72.30.22.93] by nm30.bullet.mail.sp2.yahoo.com with NNFMP; 08 Sep 2012 16:40:32 -0000
Received: from [98.139.44.89] by tm15.bullet.mail.sp2.yahoo.com with NNFMP; 08 Sep 2012 16:40:32 -0000
Received: from [127.0.0.1] by omp1026.access.mail.sp2.yahoo.com with NNFMP; 08 Sep 2012 16:40:32 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 22493 invoked by uid 60001); 8 Sep 2012 16:40:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1347122431; bh=UaHQaiVUsLpCBZnb7TV+MkqsaZjOT9WP9QPl8JPBR1o=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2Uvp70QMJ9LUa7HSF8x0zCKPQLcTCqGyYl0bhonoUtzuRsdKh82dgbJRjVy9cS99z0diz+v5k/euQQVgduQ9WdvDlla8Nc724N9S9+FopHAJxUQfOLrHDz5XT7rrM2V/UznQOKNU88AJ4d6CnOeNuTtSbInf+BL3CzIFih0IkiI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=ffs1E0kVOspjVFVJQIVHOxNdRxg6n/7X7oCH9fMqH8vpf6sjzolKH3O9QBtYxWtmyZEHx80NarEn+fCT2ls8N67gnRJgUHNI48y9s5LbknqumCjnnJG1/Bu9IaEMuMj7e0lc0v8IKHkP+uJVbReBbQnPVT1JgFJPYhEZS0xnMY0=;
X-YMail-OSG: qMDwhTAVM1kCZ7T4YrM.Kc3uLa0iwTGS652o8jSubRynu.v
Wxi51i5ytfAXXu85iYWV5WrvZ_Tt7fLDjPwJmVtGE16AXMks312sVP..2U2Y
NNvivpXvuPKVwUNNrbMZR_SaX0Ir93y2CLVVmyhMKycSsn4Rx0H3czDUbRvG
LMMe9MZbDfv7sdVUXc.nUu41vt7iQwBRy_o8RPblS.JyqufWQywn4_ff6AoP
8lKqURXQazwV580emOlGdxF2baJ5p22dRKNQSODIWOeaGvbezCUoUSVi.AnN
pdREGZuc8dzU2rKox6tEwILMJkjEfyhSn3_M_opbJ1oQgT089QgxkaZ5uGb6
YKdJYoVxIIyS34YhmY1fDt37i5.2IGiUXsqPJSPs8FQVzu88qy3kIYwE67td
DGQd6qvT1ncQkiR1.InE0gAhKUdYAuKF4.cFhVepkk3IAN.cSSmetz4TbF2a
AC.Nu945d6F2Wqd0tuozbxc2MQHc-
Received: from [69.31.101.168] by web185304.mail.gq1.yahoo.com via HTTP; Sat, 08 Sep 2012 09:40:31 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Sat, 8 Sep 2012 09:40:31 -0700 (PDT)
From: RON DAVE <[email protected]>
Reply-To: [email protected]
Subject: RE:
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1381649169-1129480736-1347122431=:81304"
X-Spam-Status: No, score=2.1
X-Spam-Score: 21
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: We are pleased to inform you that your long awaited
payment has been released through the help of our office. We therefore advised
that you re-confirm Full Name, Receiving Address, Telephone Numbers with
a scan copy of your ID for fund release. [...]
Content analysis details: (2.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web01xxoffice01xxx[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.100 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(rondave19[at]yahoo.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5374]
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
--1381649169-1129480736-1347122431=:81304
Content-Type: text/plain; charset=us-ascii
Attn:
We are pleased to inform you that your long awaited payment has been released through the help of our office. We therefore advised that you re-confirm Full Name, Receiving Address, Telephone Numbers with a scan copy of your ID for fund release.
Regards,
Dr Ron Dave
Envelope-to:
Delivery-date: Sat, 08 Sep 2012 09:40:40 -0700
Received: from nm30.bullet.mail.sp2.yahoo.com ([98.139.91.100]:33225)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TAO59-0004P6-H0
for ; Sat, 08 Sep 2012 09:40:40 -0700
Received: from [72.30.22.93] by nm30.bullet.mail.sp2.yahoo.com with NNFMP; 08 Sep 2012 16:40:32 -0000
Received: from [98.139.44.89] by tm15.bullet.mail.sp2.yahoo.com with NNFMP; 08 Sep 2012 16:40:32 -0000
Received: from [127.0.0.1] by omp1026.access.mail.sp2.yahoo.com with NNFMP; 08 Sep 2012 16:40:32 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 22493 invoked by uid 60001); 8 Sep 2012 16:40:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1347122431; bh=UaHQaiVUsLpCBZnb7TV+MkqsaZjOT9WP9QPl8JPBR1o=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=2Uvp70QMJ9LUa7HSF8x0zCKPQLcTCqGyYl0bhonoUtzuRsdKh82dgbJRjVy9cS99z0diz+v5k/euQQVgduQ9WdvDlla8Nc724N9S9+FopHAJxUQfOLrHDz5XT7rrM2V/UznQOKNU88AJ4d6CnOeNuTtSbInf+BL3CzIFih0IkiI=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=ffs1E0kVOspjVFVJQIVHOxNdRxg6n/7X7oCH9fMqH8vpf6sjzolKH3O9QBtYxWtmyZEHx80NarEn+fCT2ls8N67gnRJgUHNI48y9s5LbknqumCjnnJG1/Bu9IaEMuMj7e0lc0v8IKHkP+uJVbReBbQnPVT1JgFJPYhEZS0xnMY0=;
X-YMail-OSG: qMDwhTAVM1kCZ7T4YrM.Kc3uLa0iwTGS652o8jSubRynu.v
Wxi51i5ytfAXXu85iYWV5WrvZ_Tt7fLDjPwJmVtGE16AXMks312sVP..2U2Y
NNvivpXvuPKVwUNNrbMZR_SaX0Ir93y2CLVVmyhMKycSsn4Rx0H3czDUbRvG
LMMe9MZbDfv7sdVUXc.nUu41vt7iQwBRy_o8RPblS.JyqufWQywn4_ff6AoP
8lKqURXQazwV580emOlGdxF2baJ5p22dRKNQSODIWOeaGvbezCUoUSVi.AnN
pdREGZuc8dzU2rKox6tEwILMJkjEfyhSn3_M_opbJ1oQgT089QgxkaZ5uGb6
YKdJYoVxIIyS34YhmY1fDt37i5.2IGiUXsqPJSPs8FQVzu88qy3kIYwE67td
DGQd6qvT1ncQkiR1.InE0gAhKUdYAuKF4.cFhVepkk3IAN.cSSmetz4TbF2a
AC.Nu945d6F2Wqd0tuozbxc2MQHc-
Received: from [69.31.101.168] by web185304.mail.gq1.yahoo.com via HTTP; Sat, 08 Sep 2012 09:40:31 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Sat, 8 Sep 2012 09:40:31 -0700 (PDT)
From: RON DAVE <[email protected]>
Reply-To: [email protected]
Subject: RE:
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1381649169-1129480736-1347122431=:81304"
X-Spam-Status: No, score=2.1
X-Spam-Score: 21
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attn: We are pleased to inform you that your long awaited
payment has been released through the help of our office. We therefore advised
that you re-confirm Full Name, Receiving Address, Telephone Numbers with
a scan copy of your ID for fund release. [...]
Content analysis details: (2.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web01xxoffice01xxx[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.100 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(rondave19[at]yahoo.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5374]
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
--1381649169-1129480736-1347122431=:81304
Content-Type: text/plain; charset=us-ascii
Attn:
We are pleased to inform you that your long awaited payment has been released through the help of our office. We therefore advised that you re-confirm Full Name, Receiving Address, Telephone Numbers with a scan copy of your ID for fund release.
Regards,
Dr Ron Dave
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces