More Nigerian Yahoo! Spam
Posted by Dave Yadallee on
From - Sat Jun 01 13:16:22 2013
X-Account-Key: account1
X-UIDL: 00001b8a4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 31 May 2013 03:15:02 -0600
Received: from nm40-vm1.bullet.mail.ne1.yahoo.com ([98.138.229.177])
by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80.1)
(envelope-from)
id 1UiLQH-0001vN-OP
for dave@doctor.nl2k.ab.ca; Fri, 31 May 2013 03:15:02 -0600
Received: from [98.138.90.56] by nm40.bullet.mail.ne1.yahoo.com with NNFMP; 31 May 2013 09:14:54 -0000
Received: from [98.138.84.44] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 31 May 2013 09:14:54 -0000
Received: from [127.0.0.1] by smtp112.mail.ne1.yahoo.com with NNFMP; 31 May 2013 09:14:54 -0000
X-Yahoo-Newman-Id: 693383.54375.bm@smtp112.mail.ne1.yahoo.com
Message-ID: <693383.54375.bm@smtp112.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: bSDcmrwVM1nGgAmJaR7IOZiXCF56_yaEDkLIi6E.SVrIpOV
olpy6RWV.wap8H5za4nck6hUNcWApaCFoqc_daL5CWdXnwmUhHBYTFK3SIaj
KD_dHrtC2F_zItm.rQod8ZDE6.LxLfX_v0JA9lkaJOJj6xcgPkJ6Q5SH0naz
_qtmkHsHrYVcEPgGsNoGzBBPCRG9U2WnXAKm7NHkEXLC2FwrWai9X124XL4o
F1Da3cDOofum_aOhiFlwT5W4EJ9C9JREZ41Kk_z8wD9qdZni.uX4el_0OzD2
x0Fx4JXuyFy.xa3QkZT0R9Twso7MUcrUg2Vxcb5Nk93uD0ctAssM77i00V8u
Luf_QahfsYzL6PeqZ3Eq_Yw6U8x8KYTbeFZ.hRVBmps0LrFgEQFns7eWXOyE
3uAWR6LXJHU8qaBTDokbmj3HMOe4Zy6NAmv79h1Z_UpyVqaFDjCJRojoL0zR
3o3U01blrUrMzEvPPhAMbX9H0YVd4edHnjPSmUpF_PUeb7HKb4jHfyElYa_t
ITmeTHkMfmJSTW.z3TKRpOY32jdkEw5BT
X-Yahoo-SMTP: H7Q6IfKswBDGOT6tVMCPFh39BNFeYogzMXl5fOo3
X-Rocket-Received: from User (officamals0@70.90.68.149 with )
by smtp112.mail.ne1.yahoo.com with SMTP; 31 May 2013 02:14:54 -0700 PDT
Reply-To:
From: "CENTRAL BANK OF NIGERIA"
Subject: IRREVOCABLE RELEASE OF YOUR PAYMENT
Date: Fri, 31 May 2013 05:14:53 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0104_01C2A9A6.18BD9088"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 5.9
X-Spam_score_int: 59
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: IRREVOCABLE RELEASE OF YOUR PAYMENT, KINDLY OPEN THE ATTACHED
MESSAGE [...]
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org
[98.138.229.177 listed in ips.backscatterer.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} IRREVOCABLE RELEASE OF YOUR PAYMENT
This is a multi-part message in MIME format.
------=_NextPart_000_0104_01C2A9A6.18BD9088
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
IRREVOCABLE RELEASE OF YOUR PAYMENT, KINDLY OPEN THE ATTACHED MESSAGE
------=_NextPart_000_0104_01C2A9A6.18BD9088
Content-Type: application/octet-stream;
name="IRREVOCABLE RELEASE OF YOUR PAYMENT.rtf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="IRREVOCABLE RELEASE OF YOUR PAYMENT.rtf"
e1xydGYxXGFuc2lcYW5zaWNwZzEyNTJcZGVmZjBcZGVmbGFuZzEwMzN7XGZv
bnR0Ymx7XGYwXGZzd2lzc1xmY2hhcnNldDAgQXJpYWw7fX0NCntcKlxnZW5l
cmF0b3IgTXNmdGVkaXQgNS40MS4yMS4yNTAwO31cdmlld2tpbmQ0XHVjMVxw
YXJkXGJcZjBcZnMyMCBNWSBHT09EIEZSSUVORCxccGFyDQpccGFyDQpUSElT
IElTIFRPIE9GRklDSUFMTFkgSU5GT1JNIFlPVSBUSEFUIFdFIEhBVkUgQkVF
TiBBVVRIT1JJWkVEIEJZIFRIRSBXT1JMRCBCQU5LLCBVTiBTRUNSRVRBUlkg
IEdFTkVSQUwgQU5EIElOVEVSTkFUSU9OQUwgTU9ORVRBUlkgRlVORCAoSU1G
KSBUTyBBUlJBTkdFRCBBTkQgQVBQUk9WRSBZT1VSIFBBWU1FTlQgT0YgJDIu
NU1JTExJT04gVVNELCBUSFJPVUdIIFNXSUZUIENBUkQgUEFZTUVOVCBDRU5U
RVIgQVNJQSBQQUNJRklDLFRISVMgQ0FSRCBDRU5URVIgV0lMTCBTRU5EIFlP
VSBBTiBBVE0gQ0FSRCBXSElDSCBZT1UgV0lMTCBVU0UgVE8gV0lUSERSQVcg
WU9VUiBNT05FWSBJTiBBTlkgQVRNIE1BQ0hJTkUgSU4gQU5ZIFBBUlQgT0Yg
VEhFIFdPUkxELCBCVVQgVEhFIE1BWElNVU0gQU1PVU5UIFlPVSBXSUxMIEJF
IFdJVEhEUkFXSU5HIEVWRVJZIERBWSBJUyBUSFJFRSBUSE9VU0FORCBVTklU
RUQgU1RBVEVTIERPTExBUlMgUEVSIERBWS4gIFxwYXINClxwYXINClRIRSBB
VE0gQ0FSRCBOVU1CRVIgNTQyOCAwNTAwIDEwMTAwIDQ0MzIsIEhBVkUgQkVF
TiBDUkVESVRFRCBJTiBZT1VSIEZBVk9SLiBZT1VSIFBFUlNPTkFMIElERU5U
SUZJQ0FUSU9OIFBJTiBOVU1CRVIgSVMgMjkwOyBUTyBGSUxFIEZPUiBZT1VS
IENMQUlNIFBMRUFTRSBDT05UQUNUIFRIRSBSRU1JVFRBTkNFIERFUEFSVE1F
TlQgT0ZGSUNFUiwgTVIuIFdJTExJQU1TIFJPQkVSVCBPTiBISVMgRU1BSUwg
QkVMT1cuIE5PVEUgVEhBVCBZT1VSIEFUTSBDQVJEIEhBVkUgQkVFTiBTSElG
VEVEIFRPIE5JR0VSSUEsIFRIRU4gU0VORCBUSEUgRk9MTE9XSU5HIElORk9S
TUFUSU9OIEFTIFNUQVRFRCBCRUxPVyBGT1IgVEhFIERFTElWRVJZLiBccGFy
DQogIFxwYXINClxwYXINCllPVVIgRlVMTCBOQU1FLi4uLi4uLi4uLi4uLi4u
Li4uLi4uLi4uLi4uLi5ccGFyDQpZT1VSIEFERFJFU1MuLi4uLi4uLi4uLi4u
Li4uLi4uLi4uLi4uLi4uLi4uXHBhcg0KWU9VUiBDT1VOVFJZLi4uLi4uLi4u
Li4uLi4uLi4uLi4uLi4uLi4uLi4uLlxwYXINCllPVVIgQUdFLi4uLi4uLi4u
Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi5ccGFyDQpZT1VSIFBIT05FIE5V
TUJFUi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi5ccGFyDQpccGFyDQpOb3Rl
OiBUaGUgZGVsaXZlcnkgb2YgeW91ciBBVE0gQ2FyZCBieSB0aGUgQ291cmll
ciBzZXJ2aWNlIGRlcGVuZHMgb24gdGhlIHRlcm1zIGFuZCBBZ3JlZW1lbnQg
b2YgdGhlIGRlbGl2ZXJ5IGZpcm0uIFRoaXMgQVRNIENhcmQgdW5pdCBpcyBu
b3QgbGlhYmxlIGZvciBhbnkgZGFtYWdlIG9yIHlvdXIgaW5hYmlsaXR5IHRv
IG1lZXQgdXAgd2l0aCB0aGUgY2xhaW1zIHJlcXVpcmVtZW50LlxwYXINClxw
YXINCkhPV0VWRVIsIEtJTkRMWSBDT05UQUNUIFRIRSBCRUxPVyBQRVJTT04g
V0hPIElTIElOIFBPU0lUSU9OIFRPIFJFTEVBU0UgWU9VUiBBVE0gUEFZTUVO
VCBDQVJEXHBhcg0KXHBhcg0KQ09OVEFDVCBQRVJTT046IE1SLiBXSUxMSUFN
UyBST0JFUlQsXHBhcg0KRElSRUNUT1IsQVRNIFBBWU1FTlQgREVQQVJUTUVO
VFxwYXINClxwYXINCkVNQUlMOiAgYXRtY2FyZF8xY2FudGVyQHlhaG9vLmNv
bS5waFxwYXINCn0NCgA=
------=_NextPart_000_0104_01C2A9A6.18BD9088--
X-Account-Key: account1
X-UIDL: 00001b8a4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 31 May 2013 03:15:02 -0600
Received: from nm40-vm1.bullet.mail.ne1.yahoo.com ([98.138.229.177])
by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80.1)
(envelope-from
id 1UiLQH-0001vN-OP
for dave@doctor.nl2k.ab.ca; Fri, 31 May 2013 03:15:02 -0600
Received: from [98.138.90.56] by nm40.bullet.mail.ne1.yahoo.com with NNFMP; 31 May 2013 09:14:54 -0000
Received: from [98.138.84.44] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 31 May 2013 09:14:54 -0000
Received: from [127.0.0.1] by smtp112.mail.ne1.yahoo.com with NNFMP; 31 May 2013 09:14:54 -0000
X-Yahoo-Newman-Id: 693383.54375.bm@smtp112.mail.ne1.yahoo.com
Message-ID: <693383.54375.bm@smtp112.mail.ne1.yahoo.com>
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: bSDcmrwVM1nGgAmJaR7IOZiXCF56_yaEDkLIi6E.SVrIpOV
olpy6RWV.wap8H5za4nck6hUNcWApaCFoqc_daL5CWdXnwmUhHBYTFK3SIaj
KD_dHrtC2F_zItm.rQod8ZDE6.LxLfX_v0JA9lkaJOJj6xcgPkJ6Q5SH0naz
_qtmkHsHrYVcEPgGsNoGzBBPCRG9U2WnXAKm7NHkEXLC2FwrWai9X124XL4o
F1Da3cDOofum_aOhiFlwT5W4EJ9C9JREZ41Kk_z8wD9qdZni.uX4el_0OzD2
x0Fx4JXuyFy.xa3QkZT0R9Twso7MUcrUg2Vxcb5Nk93uD0ctAssM77i00V8u
Luf_QahfsYzL6PeqZ3Eq_Yw6U8x8KYTbeFZ.hRVBmps0LrFgEQFns7eWXOyE
3uAWR6LXJHU8qaBTDokbmj3HMOe4Zy6NAmv79h1Z_UpyVqaFDjCJRojoL0zR
3o3U01blrUrMzEvPPhAMbX9H0YVd4edHnjPSmUpF_PUeb7HKb4jHfyElYa_t
ITmeTHkMfmJSTW.z3TKRpOY32jdkEw5BT
X-Yahoo-SMTP: H7Q6IfKswBDGOT6tVMCPFh39BNFeYogzMXl5fOo3
X-Rocket-Received: from User (officamals0@70.90.68.149 with )
by smtp112.mail.ne1.yahoo.com with SMTP; 31 May 2013 02:14:54 -0700 PDT
Reply-To:
From: "CENTRAL BANK OF NIGERIA"
Subject: IRREVOCABLE RELEASE OF YOUR PAYMENT
Date: Fri, 31 May 2013 05:14:53 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0104_01C2A9A6.18BD9088"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 5.9
X-Spam_score_int: 59
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: IRREVOCABLE RELEASE OF YOUR PAYMENT, KINDLY OPEN THE ATTACHED
MESSAGE [...]
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org
[98.138.229.177 listed in ips.backscatterer.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} IRREVOCABLE RELEASE OF YOUR PAYMENT
This is a multi-part message in MIME format.
------=_NextPart_000_0104_01C2A9A6.18BD9088
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
IRREVOCABLE RELEASE OF YOUR PAYMENT, KINDLY OPEN THE ATTACHED MESSAGE
------=_NextPart_000_0104_01C2A9A6.18BD9088
Content-Type: application/octet-stream;
name="IRREVOCABLE RELEASE OF YOUR PAYMENT.rtf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="IRREVOCABLE RELEASE OF YOUR PAYMENT.rtf"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------=_NextPart_000_0104_01C2A9A6.18BD9088--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments