by buried under 419s
Thu Sep 13, 2012 2:59 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 13 Sep 2012 11:52:34 -0700
Received: from nm1-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.202]:30072)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TCEWg-0005CK-1K
for ; Thu, 13 Sep 2012 11:52:34 -0700
Received: from [98.139.91.62] by nm1.bullet.mail.sp2.yahoo.com with NNFMP; 13 Sep 2012 18:52:35 -0000
Received: from [98.139.44.88] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 13 Sep 2012 18:52:35 -0000
Received: from [127.0.0.1] by omp1025.access.mail.sp2.yahoo.com with NNFMP; 13 Sep 2012 18:52:35 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 54777 invoked by uid 60001); 13 Sep 2012 18:52:33 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1347562353; bh=zfluG5Qni51ca9aoSZ9MMADWJn7mbdeFONfrl0Q5pAs=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=X51gHw1P43SVTAd7S5I9dKs1l0pA2yF9ysmwS5Ip9ic/2+tAPAYsxhdYdDC9+eJvv6ZijAEQ5Y+lOdfNIKChT7kIY00GKpZ8gNiH+9Auz+qQMKJv68Kvpm4p+Th/NNSRbzvVCXjvDinPnTRDi91e7l1q2/BHGifbSgXev+zryO4=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=chFp/oHag3YZLhxqjS+UV3yL0/iliukOrB8XOsf7l1u6KveJYelg1CJtDW3QEonURHkdMyhc7iuLUK1mF59MVI99ctOX5/DLOvjzlmKqRuMsP6WYE99Gep+Q2jYvkRPSLeA0Zm+RYwE6Ct2PSnu9w4P4bHSDWrAM1wa4LGmy+Sg=;
X-YMail-OSG: 9b9VACUVM1lU1It5Vm7sCOh99xufpWcl2yIUnRkNmKLe5Ws
F6JEo9zpJGpX5fJpUJAbEJZcnG6lehWL_bANjpbIZ3wYFkhm7tJVmnSiW86r
S2_4QxxmpWY.9Gqee.GQeqq13jMEwEluunkSFAC1wWaYsPZIYlEG._rW31le
fUIGGAD.fbqddvHAiqrGDuEbVeGicVpady.vtTiIqTmXn8SAFn7ApM0QnIiH
uIokekR3Ue5t4dv9Vd._Mt3ccyiWQ6M1p0VBXwWxXKGoWvBjFEqGv0DOtHH1
6SQ49h1ClVMkjn9IOvg_0KdQ72XMWpUiEY.4MuKmr4XUa.kYoypADnXvKrNv
gLs7ys_E3dc5wonoWUGS8KCmLfLH7MvS0BLiOTCrE15q8D2vKLTLVieQLeoY
Redl8iQ3zDSZtuH4nSXj1z_BEdV7pQKCOnFgANImWy8X9Hum51HjtovBTU4O
GZ7EkfpyRsTdON1r9NKl7JmO8P_Kbupia8Kpezw--
Received: from [50.16.172.95] by web181005.mail.ne1.yahoo.com via HTTP; Thu, 13 Sep 2012 11:52:33 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Thu, 13 Sep 2012 11:52:33 -0700 (PDT)
From: SMITH PETER <[email protected]>
Reply-To: [email protected]
Subject: Reconfirm your Address,mobile for delivery of your ATM card $10.M
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2044483418-865027367-1347562353=:25740"
X-Spam-Status: No, score=3.6
X-Spam-Score: 36
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Reconfirm your Address,mobile for delivery of your ATM card
$10.M Reconfirm your Address,mobile for delivery of your ATM card $10.M [...]
Content analysis details: (3.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webxxxx0006845362[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.202 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?50.16.172.95>]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (webxxxx0006845362[at]att.net)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9292]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_ATM_CARD Lots of money on an ATM card
X-Spam-Flag: NO
--2044483418-865027367-1347562353=:25740
Content-Type: text/plain; charset=us-ascii
Reconfirm your Address,mobile for delivery of your ATM card $10.M
Envelope-to:
Delivery-date: Thu, 13 Sep 2012 11:52:34 -0700
Received: from nm1-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.202]:30072)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TCEWg-0005CK-1K
for ; Thu, 13 Sep 2012 11:52:34 -0700
Received: from [98.139.91.62] by nm1.bullet.mail.sp2.yahoo.com with NNFMP; 13 Sep 2012 18:52:35 -0000
Received: from [98.139.44.88] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 13 Sep 2012 18:52:35 -0000
Received: from [127.0.0.1] by omp1025.access.mail.sp2.yahoo.com with NNFMP; 13 Sep 2012 18:52:35 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 54777 invoked by uid 60001); 13 Sep 2012 18:52:33 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1347562353; bh=zfluG5Qni51ca9aoSZ9MMADWJn7mbdeFONfrl0Q5pAs=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=X51gHw1P43SVTAd7S5I9dKs1l0pA2yF9ysmwS5Ip9ic/2+tAPAYsxhdYdDC9+eJvv6ZijAEQ5Y+lOdfNIKChT7kIY00GKpZ8gNiH+9Auz+qQMKJv68Kvpm4p+Th/NNSRbzvVCXjvDinPnTRDi91e7l1q2/BHGifbSgXev+zryO4=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=chFp/oHag3YZLhxqjS+UV3yL0/iliukOrB8XOsf7l1u6KveJYelg1CJtDW3QEonURHkdMyhc7iuLUK1mF59MVI99ctOX5/DLOvjzlmKqRuMsP6WYE99Gep+Q2jYvkRPSLeA0Zm+RYwE6Ct2PSnu9w4P4bHSDWrAM1wa4LGmy+Sg=;
X-YMail-OSG: 9b9VACUVM1lU1It5Vm7sCOh99xufpWcl2yIUnRkNmKLe5Ws
F6JEo9zpJGpX5fJpUJAbEJZcnG6lehWL_bANjpbIZ3wYFkhm7tJVmnSiW86r
S2_4QxxmpWY.9Gqee.GQeqq13jMEwEluunkSFAC1wWaYsPZIYlEG._rW31le
fUIGGAD.fbqddvHAiqrGDuEbVeGicVpady.vtTiIqTmXn8SAFn7ApM0QnIiH
uIokekR3Ue5t4dv9Vd._Mt3ccyiWQ6M1p0VBXwWxXKGoWvBjFEqGv0DOtHH1
6SQ49h1ClVMkjn9IOvg_0KdQ72XMWpUiEY.4MuKmr4XUa.kYoypADnXvKrNv
gLs7ys_E3dc5wonoWUGS8KCmLfLH7MvS0BLiOTCrE15q8D2vKLTLVieQLeoY
Redl8iQ3zDSZtuH4nSXj1z_BEdV7pQKCOnFgANImWy8X9Hum51HjtovBTU4O
GZ7EkfpyRsTdON1r9NKl7JmO8P_Kbupia8Kpezw--
Received: from [50.16.172.95] by web181005.mail.ne1.yahoo.com via HTTP; Thu, 13 Sep 2012 11:52:33 PDT
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Thu, 13 Sep 2012 11:52:33 -0700 (PDT)
From: SMITH PETER <[email protected]>
Reply-To: [email protected]
Subject: Reconfirm your Address,mobile for delivery of your ATM card $10.M
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2044483418-865027367-1347562353=:25740"
X-Spam-Status: No, score=3.6
X-Spam-Score: 36
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Reconfirm your Address,mobile for delivery of your ATM card
$10.M Reconfirm your Address,mobile for delivery of your ATM card $10.M [...]
Content analysis details: (3.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(webxxxx0006845362[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.202 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?50.16.172.95>]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (webxxxx0006845362[at]att.net)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9292]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_ATM_CARD Lots of money on an ATM card
X-Spam-Flag: NO
--2044483418-865027367-1347562353=:25740
Content-Type: text/plain; charset=us-ascii
Reconfirm your Address,mobile for delivery of your ATM card $10.M
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces