by buried under 419s
Sat Sep 17, 2011 9:11 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 17 Sep 2011 17:45:00 -0700
Received: from mx2.zajil.net ([85.194.127.204])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R55VD-0001q1-CA
for ; Sat, 17 Sep 2011 17:45:00 -0700
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhYaAD0+dU7UGOA9X2dsb2JhbABBD4F0owCBHz6BDB8pJYFMJyFiLi8fBQUJBAsYF4dalyqUdYkthngEh2mEGYdHjXiDAwIz
X-IronPort-AV: E=Sophos;i="4.68,255,1312146000";
d="scan'208";a="262441342"
Received: from ksa.zajil.com (HELO pop.zajil.net) ([212.24.224.61])
by mx2.zajil.net with ESMTP; 18 Sep 2011 03:43:24 +0300
Received: from localhost ([212.24.224.61])
by pop.zajil.net (Merak 8.3.6) with SMTP id BJS65654;
Sun, 18 Sep 2011 03:52:54 +0300
Date: Sun, 18 Sep 2011 03:52:52 +0300
From: "WESTERN UNION" <[email protected]>
Reply-To: [email protected]
Subject: offer
Message-ID: <[email protected]>
X-Mailer: IceWarp Web Mail 5.5.2
X-Originating-IP: 198.36.222.8
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Spam-Subject: ***SPAM*** offer
X-Spam-Status: Yes, score=7.8
X-Spam-Score: 78
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: You won $1,000.000.00 [...]
Content analysis details: (7.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[198.36.222.8 listed in dnsbl.sorbs.net]
1.9 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
-0.0 SPF_PASS SPF: sender matches SPF record
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9352]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
X-Spam-Flag: YES
You won $1,000.000.00
Envelope-to:
Delivery-date: Sat, 17 Sep 2011 17:45:00 -0700
Received: from mx2.zajil.net ([85.194.127.204])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R55VD-0001q1-CA
for ; Sat, 17 Sep 2011 17:45:00 -0700
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AhYaAD0+dU7UGOA9X2dsb2JhbABBD4F0owCBHz6BDB8pJYFMJyFiLi8fBQUJBAsYF4dalyqUdYkthngEh2mEGYdHjXiDAwIz
X-IronPort-AV: E=Sophos;i="4.68,255,1312146000";
d="scan'208";a="262441342"
Received: from ksa.zajil.com (HELO pop.zajil.net) ([212.24.224.61])
by mx2.zajil.net with ESMTP; 18 Sep 2011 03:43:24 +0300
Received: from localhost ([212.24.224.61])
by pop.zajil.net (Merak 8.3.6) with SMTP id BJS65654;
Sun, 18 Sep 2011 03:52:54 +0300
Date: Sun, 18 Sep 2011 03:52:52 +0300
From: "WESTERN UNION" <[email protected]>
Reply-To: [email protected]
Subject: offer
Message-ID: <[email protected]>
X-Mailer: IceWarp Web Mail 5.5.2
X-Originating-IP: 198.36.222.8
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Spam-Subject: ***SPAM*** offer
X-Spam-Status: Yes, score=7.8
X-Spam-Score: 78
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: You won $1,000.000.00 [...]
Content analysis details: (7.8 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[198.36.222.8 listed in dnsbl.sorbs.net]
1.9 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
-0.0 SPF_PASS SPF: sender matches SPF record
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9352]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
X-Spam-Flag: YES
You won $1,000.000.00
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces