by buried under 419s
Thu Mar 21, 2013 1:19 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 20 Mar 2013 18:25:48 -0700
Received: from nm24.access.bullet.mail.mud.yahoo.com ([66.94.237.89]:29193)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1UIUGI-0006Ap-6t
for ; Wed, 20 Mar 2013 18:25:48 -0700
Received: from [66.94.237.194] by nm24.access.bullet.mail.mud.yahoo.com with NNFMP; 21 Mar 2013 01:25:45 -0000
Received: from [66.94.237.116] by tm5.access.bullet.mail.mud.yahoo.com with NNFMP; 21 Mar 2013 01:25:45 -0000
Received: from [127.0.0.1] by omp1021.access.mail.mud.yahoo.com with NNFMP; 21 Mar 2013 01:25:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 41424 invoked by uid 60001); 21 Mar 2013 01:25:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1363829145; bh=KhXsong6TpKC5pHNeMd7OwuQTIFY/thd8M0E3BwM00M=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=K8OjPM7VX2lv/LhabTEpR+UKD05sI1XN4G3dnO3wNKB5y12E/Fv6f4yAM7gb9iHtJrOM+DbdA8e29lq6XbLu0yedOkEVZJ8NY8rQoO/CgeTuH2f9hvFMPqfcpsEOsSPnGH65Teuh952vMHLIqiVN5243DiS5nTIb7ZTbQpv8B4M=
X-YMail-OSG: vUc1XhEVM1kVdXHmq77MoeX0beKReudhBv1tQpGpNelc9uD
8fQoDuhDecMhwUCnSPFx20rCS7u5dBO6V3lue1FQP2SJoZosxLBes5XC07yN
bEVTppZvuS6xFQ3rs224DMW99Qmsp7E16h7yexIIuzX2aXzQhx3onFZ7GooO
anydXhRIszdiHWqxWsnlbqPltPrNjf1Ni9aGTVGknNAA0olEC_aYjGrMy_ZD
gLp634a9gcnJJuKuOjGz3KEtk0Qcv4YevREUyMj2.Ldi3gtL4SzY60OClERy
TlWTwQUaUd6D6WMYmnRQeGcH.H0WTOMpH0AGtu7Stgvvg40drvz5nq0t39Kj
CuF.PESybSYv5pm1JZRr2aIAlTjpUscvsFuPZxYkgGjVaL_3rjvq42M9v5sJ
hnNUx1C4D6j8kq0k1chdp9ShgjaIr1s792rj8M5Rtne0qu6WzAbfhI3nf1Ec
18j2_qNjiVx7R.xeGF8MzxIblczivVkclPDnKTd08huuAN9F_yEKNz1xRhPH
G
Received: from [108.60.134.173] by web5702.biz.mail.ne1.yahoo.com via HTTP; Wed, 20 Mar 2013 18:25:45 PDT
X-Rocket-MIMEInfo: 002.001,CgEwAQEBAQ--
X-RocketYMMF: webmoqq
X-Mailer: YahooMailWebService/0.8.138.524
Message-ID: <[email protected]>
Date: Wed, 20 Mar 2013 18:25:45 -0700 (PDT)
From: MR RICHARD CROSBY <[email protected]>
Reply-To: MR RICHARD CROSBY <[email protected]>
Subject: HELLO, I AM CONTACTING YOU TO ASSIST ME IN A TRANSACTION TO LEGALLY CLAIM AN ASSET OF A DECEASE CLIENT THAT IS DORMANT WITH OUR FIRM FOR THE PAST YEARS,REPLY FOR DETAILS
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=4.1
X-Spam-Score: 41
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (4.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(j9696c[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.237.89 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4753]
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
=0A
Envelope-to:
Delivery-date: Wed, 20 Mar 2013 18:25:48 -0700
Received: from nm24.access.bullet.mail.mud.yahoo.com ([66.94.237.89]:29193)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1UIUGI-0006Ap-6t
for ; Wed, 20 Mar 2013 18:25:48 -0700
Received: from [66.94.237.194] by nm24.access.bullet.mail.mud.yahoo.com with NNFMP; 21 Mar 2013 01:25:45 -0000
Received: from [66.94.237.116] by tm5.access.bullet.mail.mud.yahoo.com with NNFMP; 21 Mar 2013 01:25:45 -0000
Received: from [127.0.0.1] by omp1021.access.mail.mud.yahoo.com with NNFMP; 21 Mar 2013 01:25:45 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 41424 invoked by uid 60001); 21 Mar 2013 01:25:45 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1363829145; bh=KhXsong6TpKC5pHNeMd7OwuQTIFY/thd8M0E3BwM00M=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=K8OjPM7VX2lv/LhabTEpR+UKD05sI1XN4G3dnO3wNKB5y12E/Fv6f4yAM7gb9iHtJrOM+DbdA8e29lq6XbLu0yedOkEVZJ8NY8rQoO/CgeTuH2f9hvFMPqfcpsEOsSPnGH65Teuh952vMHLIqiVN5243DiS5nTIb7ZTbQpv8B4M=
X-YMail-OSG: vUc1XhEVM1kVdXHmq77MoeX0beKReudhBv1tQpGpNelc9uD
8fQoDuhDecMhwUCnSPFx20rCS7u5dBO6V3lue1FQP2SJoZosxLBes5XC07yN
bEVTppZvuS6xFQ3rs224DMW99Qmsp7E16h7yexIIuzX2aXzQhx3onFZ7GooO
anydXhRIszdiHWqxWsnlbqPltPrNjf1Ni9aGTVGknNAA0olEC_aYjGrMy_ZD
gLp634a9gcnJJuKuOjGz3KEtk0Qcv4YevREUyMj2.Ldi3gtL4SzY60OClERy
TlWTwQUaUd6D6WMYmnRQeGcH.H0WTOMpH0AGtu7Stgvvg40drvz5nq0t39Kj
CuF.PESybSYv5pm1JZRr2aIAlTjpUscvsFuPZxYkgGjVaL_3rjvq42M9v5sJ
hnNUx1C4D6j8kq0k1chdp9ShgjaIr1s792rj8M5Rtne0qu6WzAbfhI3nf1Ec
18j2_qNjiVx7R.xeGF8MzxIblczivVkclPDnKTd08huuAN9F_yEKNz1xRhPH
G
Received: from [108.60.134.173] by web5702.biz.mail.ne1.yahoo.com via HTTP; Wed, 20 Mar 2013 18:25:45 PDT
X-Rocket-MIMEInfo: 002.001,CgEwAQEBAQ--
X-RocketYMMF: webmoqq
X-Mailer: YahooMailWebService/0.8.138.524
Message-ID: <[email protected]>
Date: Wed, 20 Mar 2013 18:25:45 -0700 (PDT)
From: MR RICHARD CROSBY <[email protected]>
Reply-To: MR RICHARD CROSBY <[email protected]>
Subject: HELLO, I AM CONTACTING YOU TO ASSIST ME IN A TRANSACTION TO LEGALLY CLAIM AN ASSET OF A DECEASE CLIENT THAT IS DORMANT WITH OUR FIRM FOR THE PAST YEARS,REPLY FOR DETAILS
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=4.1
X-Spam-Score: 41
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (4.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(j9696c[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.237.89 listed in list.dnswl.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4753]
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO
=0A
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces