[email protected] 2012 London Olympics Promo

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 30 Aug 2012 18:40:46 -0700
Received: from utservm.ut.ac.ir ([80.66.177.10]:36208)
by with esmtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1T7GE0-0006U6-Fr
for ; Thu, 30 Aug 2012 18:40:46 -0700
Received: from localhost (localhost [127.0.0.1])
by utservm.ut.ac.ir (Postfix) with ESMTP id 483C3108FB2;
Fri, 31 Aug 2012 06:10:40 +0430 (IRDT)
X-Virus-Scanned: amavisd-new at ut.ac.ir
Received: from utservm.ut.ac.ir ([127.0.0.1])
by localhost (utservm.ut.ac.ir [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id RFfWjZKjwJwX; Fri, 31 Aug 2012 06:10:39 +0430 (IRDT)
Received: from User (unknown [216.201.139.189])
by utservm.ut.ac.ir (Postfix) with ESMTPA id 15A91108F96;
Fri, 31 Aug 2012 06:10:25 +0430 (IRDT)
Reply-To: <[email protected]>
From: "London Olympics"<[email protected]>
Date: Thu, 30 Aug 2012 20:40:39 -0500
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=14.3
X-Spam-Score: 143
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Congratulations! You've won the sum of 1,200,000 GBP, You
are a lucky winner from the 2012 London Olympics Promo HOLD IN UK. Contact
us on: [email protected] for your claims. [...]

Content analysis details: (14.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_RCVD_USER FSL_RCVD_USER
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[80.66.177.10 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?216.201.139.189>]
-0.2 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5170]
1.9 FSL_UA FSL_UA
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
2.1 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
3.0 FROM_MISSP_URI From misspaced, has URI
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Congratulations

Congratulations! You've won the sum of 1,200,000 GBP, You are a lucky winner from the 2012 London Olympics Promo HOLD IN UK. Contact us on: [email protected] for your claims.