by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 17 Apr 2018 02:03:04 -0700
Received: from sonic306-19.consmr.mail.ir2.yahoo.com ([77.238.176.205]:37493)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1f8MVn-0000Qm-DP
for ; Tue, 17 Apr 2018 02:03:04 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1523955729; bh=O872vYOQMvCSeZafJVD0woC5Npfr8P4n55HvU5wgcg8=; h=Date:From:Reply-To:Subject:References:From:Subject; b=HpfGibX3z4DD740QKOPYmJ/r991jsW1zcI1V7/tOn9yn+5Kueqfj+IjSlbvUNnlsxIzNJsIDKJvUFA3w8KSAm4rcTP+59F3gVF5zgl8yvc5EhvkQ6jqJr9722dmkdq2sozH9V4QgtyKZkuriPCyuQKDiuGFfTBTSTsWo/Tz4MQIrsKl2zuogrjrMGELbK9uOnzF+UAS7nZ7mdKFHBmyxkoblKu7DPjpijW6aC8k0hiYPAcTsj9MLCWxR8+QK3/P7M9HjHgPZRCBySUO/WpsvPN4yssEvp+TgBW2S8WM3UYTpJLubiuUEYJiTncdzCjZcgWAI6uI3Kg3nRke904rrSQ==
X-YMail-OSG: qy4_VWoVM1mM_.YJyf_YZ_058SHrLYmmCW0RwewwubM_XRCgni8YpulB3EFp.n3
EOYY9m4dpJBFU8Uo5P44ET6eabQVFBIv6eOjBhL7F8FikgdgpdKnlfbYmJWE_vl4WNEm0MLYjHaj
9eOwGV.DeljwQGYcIzu6uAXVVLs54SI4j2lWMkkYQL5_qQdU4XbpRC_zY3uBBZN7MHCdds.uJ4gJ
2CPpJvtg0904ZC2W9cBRdy_Xi3Ljr5dRqLRoadG_M1Il8qJrg5AWmhVszo9BbAXxBEc1MtjC8NKx
XZQJ8NM1BZMkGJx0ab1Int8cMpZvh2uRnxL.0K9Fm2VJqSQNpt7tTdhqX5QjFGtW79ncQaVpdvZ1
hKz1vG1r_qnwKi49ZSJ8nAKliSBjAeJdlpUPT.N.nO6MYhqaS8a7nUt7PnFWn8egKPU9SR5pQa.5
hSVMq600.brt6g.A5ND4ZytIM_H2uVN1nr8RP
Received: from sonic.gate.mail.ne1.yahoo.com by sonic306.consmr.mail.ir2.yahoo.com with HTTP; Tue, 17 Apr 2018 09:02:09 +0000
Date: Tue, 17 Apr 2018 09:02:04 +0000 (UTC)
From: Mrs Judy Pelsa <[email protected]>
Reply-To: Mrs Judy Pelsa <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.11782 YahooMailBasic Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Content-Length: 87
X-Spam-Status: Yes, score=10.6
X-Spam-Score: 106
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I have a proposal for you that will benefit you for your effort
email me directly on: [...]
Content analysis details: (10.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
1.0 MISSING_HEADERS Missing To: header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[77.238.176.205 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (judyo0[at]yahoo.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(judypelsa26[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(judyo0[at]yahoo.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** I Need Your Urgent Reply
I have a proposal for you that will benefit you for your effort email me directly on:
Envelope-to:
Delivery-date: Tue, 17 Apr 2018 02:03:04 -0700
Received: from sonic306-19.consmr.mail.ir2.yahoo.com ([77.238.176.205]:37493)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1f8MVn-0000Qm-DP
for ; Tue, 17 Apr 2018 02:03:04 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1523955729; bh=O872vYOQMvCSeZafJVD0woC5Npfr8P4n55HvU5wgcg8=; h=Date:From:Reply-To:Subject:References:From:Subject; b=HpfGibX3z4DD740QKOPYmJ/r991jsW1zcI1V7/tOn9yn+5Kueqfj+IjSlbvUNnlsxIzNJsIDKJvUFA3w8KSAm4rcTP+59F3gVF5zgl8yvc5EhvkQ6jqJr9722dmkdq2sozH9V4QgtyKZkuriPCyuQKDiuGFfTBTSTsWo/Tz4MQIrsKl2zuogrjrMGELbK9uOnzF+UAS7nZ7mdKFHBmyxkoblKu7DPjpijW6aC8k0hiYPAcTsj9MLCWxR8+QK3/P7M9HjHgPZRCBySUO/WpsvPN4yssEvp+TgBW2S8WM3UYTpJLubiuUEYJiTncdzCjZcgWAI6uI3Kg3nRke904rrSQ==
X-YMail-OSG: qy4_VWoVM1mM_.YJyf_YZ_058SHrLYmmCW0RwewwubM_XRCgni8YpulB3EFp.n3
EOYY9m4dpJBFU8Uo5P44ET6eabQVFBIv6eOjBhL7F8FikgdgpdKnlfbYmJWE_vl4WNEm0MLYjHaj
9eOwGV.DeljwQGYcIzu6uAXVVLs54SI4j2lWMkkYQL5_qQdU4XbpRC_zY3uBBZN7MHCdds.uJ4gJ
2CPpJvtg0904ZC2W9cBRdy_Xi3Ljr5dRqLRoadG_M1Il8qJrg5AWmhVszo9BbAXxBEc1MtjC8NKx
XZQJ8NM1BZMkGJx0ab1Int8cMpZvh2uRnxL.0K9Fm2VJqSQNpt7tTdhqX5QjFGtW79ncQaVpdvZ1
hKz1vG1r_qnwKi49ZSJ8nAKliSBjAeJdlpUPT.N.nO6MYhqaS8a7nUt7PnFWn8egKPU9SR5pQa.5
hSVMq600.brt6g.A5ND4ZytIM_H2uVN1nr8RP
Received: from sonic.gate.mail.ne1.yahoo.com by sonic306.consmr.mail.ir2.yahoo.com with HTTP; Tue, 17 Apr 2018 09:02:09 +0000
Date: Tue, 17 Apr 2018 09:02:04 +0000 (UTC)
From: Mrs Judy Pelsa <[email protected]>
Reply-To: Mrs Judy Pelsa <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
References: <[email protected]>
X-Mailer: WebService/1.1.11782 YahooMailBasic Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36
Content-Length: 87
X-Spam-Status: Yes, score=10.6
X-Spam-Score: 106
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I have a proposal for you that will benefit you for your effort
email me directly on: [...]
Content analysis details: (10.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.6 URG_BIZ BODY: Contains urgent matter
1.0 MISSING_HEADERS Missing To: header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[77.238.176.205 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (judyo0[at]yahoo.com)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(judypelsa26[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(judyo0[at]yahoo.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** I Need Your Urgent Reply
I have a proposal for you that will benefit you for your effort email me directly on:
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
