More Yahoo! Spam
Posted by Dave Yadallee on
From - Tue May 21 10:17:38 2013
X-Account-Key: account1
X-UIDL: 00001aa44f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 21 May 2013 06:01:37 -0600
From: "Mr.Ahmed Kaigama"
To: undisclosed recipients: ;
Subject: [Norton AntiSpam]*SPAM* TRANSACTIONAL PROPOSAL
Date: Tue, 21 May 2013 13:01:21 +0100 (BST)
Message-Id: <1369137681.19492.YahooMailClassic@web172102.mail.ir2.yahoo.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: **********************************************
X-Spam-Status: Yes, score=46.4 required=5.0 tests=DKIM_SIGNED,DKIM_VERIFIED,
RCVD_IN_BACKSCATTER,SARE_FRAUD_X3,SARE_FREE_WEBM_FrVoila
autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_519B6221.71462DFD"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5841]
X-AVG-ID: ID5986AC31-5DBDEA04
X-Brightmail-Tracker: AAAABQyymP8dxOgKHcToAR3FMlYdxTTr
This is a multi-part message in MIME format.
------------=_519B6221.71462DFD
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: TRANSACTIONAL PROPOSAL Dear Friend, Good day and sorry for
the way this email came to you as I'm in desperate need of your help to transfer
the sum of $20.5 Million Dollars belonging to an aid to Colonel Gadahafi
whose name I cannot mention for security reasons who also died in the fierce
fighting in Si-rte Libya and before his death I was his personal accounts
Manager here in Burkina Faso where He secretly lodged this money without
anyone else knowledge except me and the Bank. [...]
Content analysis details: (46.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org
[212.82.109.208 listed in ips.backscatterer.org]
-0.0 DKIM_VERIFIED Domain Keys Identified Mail: signature passes
verification
0.0 DKIM_SIGNED Domain Keys Identified Mail: message has a signature
0.4 SARE_FREE_WEBM_FrVoila Sender used free email account - may be
spammer
45 SARE_FRAUD_X3 Matches 3+ phrases commonly used in fraud spam
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_519B6221.71462DFD
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: from nm25-vm7.bullet.mail.ird.yahoo.com (nm25-vm7.bullet.mail.ird.yahoo.com [212.82.109.208])
by doctor.nl2k.ab.ca (Postfix) with SMTP id 501EE12CFA9B
for; Tue, 21 May 2013 06:01:31 -0600 (MDT)
Received: from [77.238.189.239] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 21 May 2013 12:01:24 -0000
Received: from [212.82.98.89] by tm20.bullet.mail.ird.yahoo.com with NNFMP; 21 May 2013 12:01:23 -0000
Received: from [127.0.0.1] by omp1026.mail.ir2.yahoo.com with NNFMP; 21 May 2013 12:01:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 689752.50844.bm@omp1026.mail.ir2.yahoo.com
Received: (qmail 19668 invoked by uid 60001); 21 May 2013 12:01:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1369137681; bh=6IWaYowZDzkGSlirlJtPQPEJmJwpCKguI3gUl0y3PRo=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gPH4H1JcJpIw2AXykQEuQ6C7FUjsWDMuOAl5wS9k6+t6jLo0zBL468q8bJCpf6ozVcViZFmxsO0QneE9qS5k3jbvVmDi4XEctFjkbxYrQdAUqcOyXbhKNK2eySHiZ00i4dvObFAQ+5gTJvacKrDzSvjuQq1geCH6Y8MNvwcqIgM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.fr;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=hpNnSpWebkmgUTNxE3tFLzofLiF4CAM7NPIurlmvKaQBWAHQBk8thZkbN5YAOwJXHA4Y9yMrWEy8YLNk7VUfQwqltkvReMfiUG8O7fWiibVDOa3gjED2B8P2/e3Gq1vXREvGBreMg4H8dk58/WKNj+ep8pWpoo0/uub0P82E2cA=;
X-YMail-OSG: 401W0a8VM1kTd2_fXZ1gHmXqd8nZ_cYFYn7E8byTsHKAAUh
reiQP6x0rA0mb3RbiNqgKfYcimbSAFzTy6UjzXV_OHKE0_8d9ZvBUeM1LB1X
gy.H.MvNtRbZH17ofBBxBtHPyInyF54FmtMwRy5s5DF0aAe34TUH4l4FSX5W
cz6rOdDUnRj5cL3Ok9w8zSmlfDp2RKih39G8bARpI4M9BOc8zHd0510uwmHk
3e3Od9khVAnRD7pwcKU6gYnlWxBMJ_ecBTe5FVblRULToqRB_P_i9bRM1LPH
6WxgqzHDSlvNmRUTVpymNC7HOCsm3mxLyJk4qP3X22HsoCEw3iQtKg_Zathd
28eXoPgT8..ITcPSwRJm4Rz8UGt38Wlaexm9RKhzBX.lls6CWMPvVu1QXluJ
tZr7YDggy8JEGehrSYDIbmXilCK3d3KOTklXZoYLZCVqTWVzUxnPh3nCPgPm
1gvZFlD1DHbmgwYBsesCP5T9xu9FllDLajU1dY_tgjkwr_cgo4SpTjrxOQaW
03FrNnm7QXo44ypNR7Oz499AisIRHyaJtqTR1z8fyofY8mJKwk95JpAnzdkj
0QHA72ojKTmGwu_gXLUFz1RBQ8TP71I44.jXZxoKthZBVkoq_2MhnVD8GJ3M
GQZ3V1d0-
Received: from [196.28.249.111] by web172102.mail.ir2.yahoo.com via HTTP; Tue, 21 May 2013 13:01:21 BST
X-Rocket-MIMEInfo: 002.001,DQoNClRSQU5TQUNUSU9OQUwgUFJPUE9TQUwNCg0KRGVhciBGcmllbmQsDQoNCkdvb2QgZGF5IGFuZCBzb3JyeSBmb3IgdGhlIHdheSB0aGlzIGVtYWlsIGNhbWUgdG8geW91IGFzIEknbSBpbiBkZXNwZXJhdGUgbmVlZCBvZiB5b3VyIGhlbHAgdG8gdHJhbnNmZXIgdGhlIHN1bSBvZiAkMjAuNSBNaWxsaW9uIERvbGxhcnMgYmVsb25naW5nIHRvIGFuIGFpZCB0byBDb2xvbmVsIEdhZGFoYWZpIHdob3NlIG5hbWUgSSBjYW5ub3QgbWVudGlvbiBmb3Igc2VjdXJpdHkgcmVhc29ucyB3aG8gYWxzbyBkaWVkIGluIHQBMAEBAQE-
X-RocketYMMF: mail2baroisa
X-Mailer: YahooMailClassic/15.1.8 YahooMailWebService/0.8.142.542
Message-ID: <1369137681.19492.YahooMailClassic@web172102.mail.ir2.yahoo.com>
Date: Tue, 21 May 2013 13:01:21 +0100 (BST)
From: "Mr.Ahmed Kaigama"
Reply-To: ahmed.kaigama@yahoo.fr
Subject: TRANSACTIONAL PROPOSAL
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1921167399-2107204256-1369137681=:19492"
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
--1921167399-2107204256-1369137681=:19492
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
TRANSACTIONAL PROPOSAL
Dear Friend,
Good day and sorry for the way this email came to you as I'm in desperate n=
eed of your help to transfer the sum of $20.5 Million Dollars belonging to =
an aid to Colonel Gadahafi whose name I cannot mention for security reasons=
who also died in the fierce fighting in Si-rte Libya and before his death =
I was his personal accounts Manager here in Burkina Faso where He secretly =
lodged this money without anyone else knowledge except me and the Bank.=20
I want you to apply to my Bank as the next of kin hence I can provide you w=
ith all the information's that can lead to the release of the money into yo=
ur account I will like you to furnish me with the below information's as 60=
% of the fund will be for me and 40% for you :=20
Your Name......................=20
Your occupation....................=20
Your Country of origin..............=20
Your age and contact number..........=20
I shall furnish you with the details of the deal once I receive the above r=
equirements and please feel free to delete the message if you are not inter=
ested and do keep the secret for me so that I can look for another reliable=
person.=20
Thanks in Anticipation.=20
Mr.Ahmed Kaigama
--1921167399-2107204256-1369137681=:19492
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
--1921167399-2107204256-1369137681=:19492--
------------=_519B6221.71462DFD
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-3982A10F======="
--=======AVGMAIL-3982A10F=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-3982A10F=======--
------------=_519B6221.71462DFD
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-349EBDC2======="
--=======AVGMAIL-349EBDC2=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-349EBDC2=======--
------------=_519B6221.71462DFD--
X-Account-Key: account1
X-UIDL: 00001aa44f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 21 May 2013 06:01:37 -0600
From: "Mr.Ahmed Kaigama"
To: undisclosed recipients: ;
Subject: [Norton AntiSpam]*SPAM* TRANSACTIONAL PROPOSAL
Date: Tue, 21 May 2013 13:01:21 +0100 (BST)
Message-Id: <1369137681.19492.YahooMailClassic@web172102.mail.ir2.yahoo.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: **********************************************
X-Spam-Status: Yes, score=46.4 required=5.0 tests=DKIM_SIGNED,DKIM_VERIFIED,
RCVD_IN_BACKSCATTER,SARE_FRAUD_X3,SARE_FREE_WEBM_FrVoila
autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_519B6221.71462DFD"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5841]
X-AVG-ID: ID5986AC31-5DBDEA04
X-Brightmail-Tracker: AAAABQyymP8dxOgKHcToAR3FMlYdxTTr
This is a multi-part message in MIME format.
------------=_519B6221.71462DFD
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: TRANSACTIONAL PROPOSAL Dear Friend, Good day and sorry for
the way this email came to you as I'm in desperate need of your help to transfer
the sum of $20.5 Million Dollars belonging to an aid to Colonel Gadahafi
whose name I cannot mention for security reasons who also died in the fierce
fighting in Si-rte Libya and before his death I was his personal accounts
Manager here in Burkina Faso where He secretly lodged this money without
anyone else knowledge except me and the Bank. [...]
Content analysis details: (46.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org
[212.82.109.208 listed in ips.backscatterer.org]
-0.0 DKIM_VERIFIED Domain Keys Identified Mail: signature passes
verification
0.0 DKIM_SIGNED Domain Keys Identified Mail: message has a signature
0.4 SARE_FREE_WEBM_FrVoila Sender used free email account - may be
spammer
45 SARE_FRAUD_X3 Matches 3+ phrases commonly used in fraud spam
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_519B6221.71462DFD
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: from nm25-vm7.bullet.mail.ird.yahoo.com (nm25-vm7.bullet.mail.ird.yahoo.com [212.82.109.208])
by doctor.nl2k.ab.ca (Postfix) with SMTP id 501EE12CFA9B
for
Received: from [77.238.189.239] by nm25.bullet.mail.ird.yahoo.com with NNFMP; 21 May 2013 12:01:24 -0000
Received: from [212.82.98.89] by tm20.bullet.mail.ird.yahoo.com with NNFMP; 21 May 2013 12:01:23 -0000
Received: from [127.0.0.1] by omp1026.mail.ir2.yahoo.com with NNFMP; 21 May 2013 12:01:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 689752.50844.bm@omp1026.mail.ir2.yahoo.com
Received: (qmail 19668 invoked by uid 60001); 21 May 2013 12:01:21 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1369137681; bh=6IWaYowZDzkGSlirlJtPQPEJmJwpCKguI3gUl0y3PRo=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=gPH4H1JcJpIw2AXykQEuQ6C7FUjsWDMuOAl5wS9k6+t6jLo0zBL468q8bJCpf6ozVcViZFmxsO0QneE9qS5k3jbvVmDi4XEctFjkbxYrQdAUqcOyXbhKNK2eySHiZ00i4dvObFAQ+5gTJvacKrDzSvjuQq1geCH6Y8MNvwcqIgM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.fr;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=hpNnSpWebkmgUTNxE3tFLzofLiF4CAM7NPIurlmvKaQBWAHQBk8thZkbN5YAOwJXHA4Y9yMrWEy8YLNk7VUfQwqltkvReMfiUG8O7fWiibVDOa3gjED2B8P2/e3Gq1vXREvGBreMg4H8dk58/WKNj+ep8pWpoo0/uub0P82E2cA=;
X-YMail-OSG: 401W0a8VM1kTd2_fXZ1gHmXqd8nZ_cYFYn7E8byTsHKAAUh
reiQP6x0rA0mb3RbiNqgKfYcimbSAFzTy6UjzXV_OHKE0_8d9ZvBUeM1LB1X
gy.H.MvNtRbZH17ofBBxBtHPyInyF54FmtMwRy5s5DF0aAe34TUH4l4FSX5W
cz6rOdDUnRj5cL3Ok9w8zSmlfDp2RKih39G8bARpI4M9BOc8zHd0510uwmHk
3e3Od9khVAnRD7pwcKU6gYnlWxBMJ_ecBTe5FVblRULToqRB_P_i9bRM1LPH
6WxgqzHDSlvNmRUTVpymNC7HOCsm3mxLyJk4qP3X22HsoCEw3iQtKg_Zathd
28eXoPgT8..ITcPSwRJm4Rz8UGt38Wlaexm9RKhzBX.lls6CWMPvVu1QXluJ
tZr7YDggy8JEGehrSYDIbmXilCK3d3KOTklXZoYLZCVqTWVzUxnPh3nCPgPm
1gvZFlD1DHbmgwYBsesCP5T9xu9FllDLajU1dY_tgjkwr_cgo4SpTjrxOQaW
03FrNnm7QXo44ypNR7Oz499AisIRHyaJtqTR1z8fyofY8mJKwk95JpAnzdkj
0QHA72ojKTmGwu_gXLUFz1RBQ8TP71I44.jXZxoKthZBVkoq_2MhnVD8GJ3M
GQZ3V1d0-
Received: from [196.28.249.111] by web172102.mail.ir2.yahoo.com via HTTP; Tue, 21 May 2013 13:01:21 BST
X-Rocket-MIMEInfo: 002.001,DQoNClRSQU5TQUNUSU9OQUwgUFJPUE9TQUwNCg0KRGVhciBGcmllbmQsDQoNCkdvb2QgZGF5IGFuZCBzb3JyeSBmb3IgdGhlIHdheSB0aGlzIGVtYWlsIGNhbWUgdG8geW91IGFzIEknbSBpbiBkZXNwZXJhdGUgbmVlZCBvZiB5b3VyIGhlbHAgdG8gdHJhbnNmZXIgdGhlIHN1bSBvZiAkMjAuNSBNaWxsaW9uIERvbGxhcnMgYmVsb25naW5nIHRvIGFuIGFpZCB0byBDb2xvbmVsIEdhZGFoYWZpIHdob3NlIG5hbWUgSSBjYW5ub3QgbWVudGlvbiBmb3Igc2VjdXJpdHkgcmVhc29ucyB3aG8gYWxzbyBkaWVkIGluIHQBMAEBAQE-
X-RocketYMMF: mail2baroisa
X-Mailer: YahooMailClassic/15.1.8 YahooMailWebService/0.8.142.542
Message-ID: <1369137681.19492.YahooMailClassic@web172102.mail.ir2.yahoo.com>
Date: Tue, 21 May 2013 13:01:21 +0100 (BST)
From: "Mr.Ahmed Kaigama"
Reply-To: ahmed.kaigama@yahoo.fr
Subject: TRANSACTIONAL PROPOSAL
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1921167399-2107204256-1369137681=:19492"
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
--1921167399-2107204256-1369137681=:19492
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
TRANSACTIONAL PROPOSAL
Dear Friend,
Good day and sorry for the way this email came to you as I'm in desperate n=
eed of your help to transfer the sum of $20.5 Million Dollars belonging to =
an aid to Colonel Gadahafi whose name I cannot mention for security reasons=
who also died in the fierce fighting in Si-rte Libya and before his death =
I was his personal accounts Manager here in Burkina Faso where He secretly =
lodged this money without anyone else knowledge except me and the Bank.=20
I want you to apply to my Bank as the next of kin hence I can provide you w=
ith all the information's that can lead to the release of the money into yo=
ur account I will like you to furnish me with the below information's as 60=
% of the fund will be for me and 40% for you :=20
Your Name......................=20
Your occupation....................=20
Your Country of origin..............=20
Your age and contact number..........=20
I shall furnish you with the details of the deal once I receive the above r=
equirements and please feel free to delete the message if you are not inter=
ested and do keep the secret for me so that I can look for another reliable=
person.=20
Thanks in Anticipation.=20
Mr.Ahmed Kaigama
--1921167399-2107204256-1369137681=:19492
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
--1921167399-2107204256-1369137681=:19492--
------------=_519B6221.71462DFD
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-3982A10F======="
--=======AVGMAIL-3982A10F=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-3982A10F=======--
------------=_519B6221.71462DFD
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-349EBDC2======="
--=======AVGMAIL-349EBDC2=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-349EBDC2=======--
------------=_519B6221.71462DFD--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments