by buried under 419s
Thu Sep 20, 2012 7:16 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 20 Sep 2012 15:46:31 -0700
Received: from nm20-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.219]:39993)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TEpVu-0007Uh-MR
for ; Thu, 20 Sep 2012 15:46:31 -0700
Received: from [98.139.91.70] by nm20.bullet.mail.sp2.yahoo.com with NNFMP; 20 Sep 2012 22:46:32 -0000
Received: from [98.139.44.92] by tm10.bullet.mail.sp2.yahoo.com with NNFMP; 20 Sep 2012 22:46:32 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 20 Sep 2012 22:46:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 24021 invoked by uid 60001); 20 Sep 2012 22:46:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1348181191; bh=wAM6EyDn4idkikn1LiwuADfe6iH0Eve84nNmSvKSaa8=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=aWedXdRGkLa22hoMj2cTYn8z1+/a23iEAvaTgk+Tm0wQFhl1vuH/1BRRp/bgpn+sQZJOKd+dkJyTsgpAPfyhlOnvTBXihnHnTKgbmhvs/pj5OmQPIQzx1NJziUaWo9cpQKE0uo3X+EVBS6jP2Pr+PCMLU+MSsHjkSkuP5vMQgOg=
X-YMail-OSG: VbbmWAwVM1lcdenskzCI4lwlg3LTgWDTnQ5a2pCTIN5fOfz
eAd5gbGX_gZcUBE3WR.XPz760JUi5D6vVnOrjJzQTeuOlZc68bznV2zVYwNT
UYCAwsmOrM0BiXDCydeFlBdPBgGdnn8swB78n8P7NmecF.P7jo5FpC6gXnQP
W6eCjykCJ5cevUZ8yzOp6QCkfozxlr_8olvOrTxqtBHo.vfRBfn7pZQDoUqv
8hi5zcGXyQuXgpDYQgrw0g0arXZz_7T8Bhtezqrc9K092x6dQ_MEDvHu5s65
jQYa53bKMa.CsZzDFywj_uon2RqAXLHMGcYhEGEgnb8Itq6xinhladXqRQ_l
QnCr9_1IPx64GvX.zGCZb1COfBDj1dpcvFH1HYA_TGn0XwXucnz6I6JEFBsb
E_otA_c28k1eir.fwNRHjofjzpbQe4jV7s7PKQoaeKHTGKFJYItnIzNrB6oa
EZJJOoEN0bSzwt91svOET3dGSFnpycSVfGNfV_qh3L4BK_OMo56HMyhOGlS5
KOW5T_A--
Received: from [109.73.65.118] by web2813.biz.mail.ne1.yahoo.com via HTTP; Thu, 20 Sep 2012 15:46:31 PDT
X-RocketYMMF: webhk
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Thu, 20 Sep 2012 15:46:31 -0700 (PDT)
From: "Mr.David Rogger" <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1995203455-743525664-1348181191=:18200"
X-Spam-Status: Yes, score=8.6
X-Spam-Score: 86
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: KINDLY VIEW THE ATTACHED LETTER FOR MORE DETAILS KINDLY VIEW
THE ATTACHED LETTER FOR MORE DETAILS [...]
Content analysis details: (8.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(martinali1871[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.219 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (martinali1871[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9776]
1.8 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
2.8 FREEMAIL_RVW_ATTCH Please review attached document, from freemail
X-Spam-Flag: YES
Subject: ***SPAM*** Immediate Payment!
---1995203455-743525664-1348181191=:18200
Content-Type: multipart/alternative; boundary="-1995203455-578695459-1348181191=:18200"
---1995203455-578695459-1348181191=:18200
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
KINDLY VIEW THE ATTACHED LETTER FOR MORE DETAILS
Attn
According to the list of beneficiaries available in our data we have been empowered to
pay you US$4.5M, You are advised to stop contacting any other person regarding the
funds which will be sent to you in the form of an ATM CARD Get back for more info
ASAP.
Best Regards
Mr. David Rogger
Envelope-to:
Delivery-date: Thu, 20 Sep 2012 15:46:31 -0700
Received: from nm20-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.219]:39993)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1TEpVu-0007Uh-MR
for ; Thu, 20 Sep 2012 15:46:31 -0700
Received: from [98.139.91.70] by nm20.bullet.mail.sp2.yahoo.com with NNFMP; 20 Sep 2012 22:46:32 -0000
Received: from [98.139.44.92] by tm10.bullet.mail.sp2.yahoo.com with NNFMP; 20 Sep 2012 22:46:32 -0000
Received: from [127.0.0.1] by omp1029.access.mail.sp2.yahoo.com with NNFMP; 20 Sep 2012 22:46:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 24021 invoked by uid 60001); 20 Sep 2012 22:46:31 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1348181191; bh=wAM6EyDn4idkikn1LiwuADfe6iH0Eve84nNmSvKSaa8=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=aWedXdRGkLa22hoMj2cTYn8z1+/a23iEAvaTgk+Tm0wQFhl1vuH/1BRRp/bgpn+sQZJOKd+dkJyTsgpAPfyhlOnvTBXihnHnTKgbmhvs/pj5OmQPIQzx1NJziUaWo9cpQKE0uo3X+EVBS6jP2Pr+PCMLU+MSsHjkSkuP5vMQgOg=
X-YMail-OSG: VbbmWAwVM1lcdenskzCI4lwlg3LTgWDTnQ5a2pCTIN5fOfz
eAd5gbGX_gZcUBE3WR.XPz760JUi5D6vVnOrjJzQTeuOlZc68bznV2zVYwNT
UYCAwsmOrM0BiXDCydeFlBdPBgGdnn8swB78n8P7NmecF.P7jo5FpC6gXnQP
W6eCjykCJ5cevUZ8yzOp6QCkfozxlr_8olvOrTxqtBHo.vfRBfn7pZQDoUqv
8hi5zcGXyQuXgpDYQgrw0g0arXZz_7T8Bhtezqrc9K092x6dQ_MEDvHu5s65
jQYa53bKMa.CsZzDFywj_uon2RqAXLHMGcYhEGEgnb8Itq6xinhladXqRQ_l
QnCr9_1IPx64GvX.zGCZb1COfBDj1dpcvFH1HYA_TGn0XwXucnz6I6JEFBsb
E_otA_c28k1eir.fwNRHjofjzpbQe4jV7s7PKQoaeKHTGKFJYItnIzNrB6oa
EZJJOoEN0bSzwt91svOET3dGSFnpycSVfGNfV_qh3L4BK_OMo56HMyhOGlS5
KOW5T_A--
Received: from [109.73.65.118] by web2813.biz.mail.ne1.yahoo.com via HTTP; Thu, 20 Sep 2012 15:46:31 PDT
X-RocketYMMF: webhk
X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.121.416
Message-ID: <[email protected]>
Date: Thu, 20 Sep 2012 15:46:31 -0700 (PDT)
From: "Mr.David Rogger" <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1995203455-743525664-1348181191=:18200"
X-Spam-Status: Yes, score=8.6
X-Spam-Score: 86
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: KINDLY VIEW THE ATTACHED LETTER FOR MORE DETAILS KINDLY VIEW
THE ATTACHED LETTER FOR MORE DETAILS [...]
Content analysis details: (8.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(martinali1871[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.219 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (martinali1871[at]gmail.com)
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9776]
1.8 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 T_FREEMAIL_DOC_PDF MS document or PDF attachment, from freemail
2.8 FREEMAIL_RVW_ATTCH Please review attached document, from freemail
X-Spam-Flag: YES
Subject: ***SPAM*** Immediate Payment!
---1995203455-743525664-1348181191=:18200
Content-Type: multipart/alternative; boundary="-1995203455-578695459-1348181191=:18200"
---1995203455-578695459-1348181191=:18200
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
KINDLY VIEW THE ATTACHED LETTER FOR MORE DETAILS
Attn
According to the list of beneficiaries available in our data we have been empowered to
pay you US$4.5M, You are advised to stop contacting any other person regarding the
funds which will be sent to you in the form of an ATM CARD Get back for more info
ASAP.
Best Regards
Mr. David Rogger
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces