by buried under 419s
Sat Jul 18, 2015 7:23 am
Return-path: <>
Envelope-to:
Delivery-date: Sat, 18 Jul 2015 03:59:47 -0700
Received: from ip-88-152-21-45.hsi03.unitymediagroup.de ([88.152.21.45]:3456)
by with esmtp (Exim 4.80)
(envelope-from <>)
id 1ZGPqM-0001OH-G6
for ; Sat, 18 Jul 2015 03:59:47 -0700
Message-ID: <CE09623D7D097DC5E6720455AEB180DD@>
Date: Sat, 18 Jul 2015 13:07:43 +0200
From: Monica <>
To: <>
Reply-To: <[email protected]>
X-Priority: 3
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="------=_Next_Part_3048812216.642"
X-Spam-Status: Yes, score=15.3
X-Spam-Score: 153
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi How are you? My name is Monica. I am 25 years old.
I am from Chongqing. I like your page. How often do you visit the site? I
really want to communicate with you. I am good at Thai massage and really
like to eat fish. What about you? I guess that we will have many topics to
talk about. [...]
Content analysis details: (15.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[88.152.21.45 listed in bb.barracudacentral.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[88.152.21.45 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[88.152.21.45 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[88.152.21.45 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?88.152.21.45>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<ginettepososnacaz8127[at]yahoo.com>
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5106]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
X-Spam-Flag: YES
Subject: ***SPAM*** hi
--------=_Next_Part_3048812216.642
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 8bit
Hi XXXXXX
How are you?
My name is Monica. I am 25 years old. I am from Chongqing. I like your page. How often do you visit the site? I really want to communicate with you. I am good at Thai massage and really like to eat fish. What about you? I guess that we will have many topics to talk about.
Do you have some social networks? I will be waiting for your letter.
Best wishes,
Monica
Envelope-to:
Delivery-date: Sat, 18 Jul 2015 03:59:47 -0700
Received: from ip-88-152-21-45.hsi03.unitymediagroup.de ([88.152.21.45]:3456)
by with esmtp (Exim 4.80)
(envelope-from <>)
id 1ZGPqM-0001OH-G6
for ; Sat, 18 Jul 2015 03:59:47 -0700
Message-ID: <CE09623D7D097DC5E6720455AEB180DD@>
Date: Sat, 18 Jul 2015 13:07:43 +0200
From: Monica <>
To: <>
Reply-To: <[email protected]>
X-Priority: 3
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="------=_Next_Part_3048812216.642"
X-Spam-Status: Yes, score=15.3
X-Spam-Score: 153
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi How are you? My name is Monica. I am 25 years old.
I am from Chongqing. I like your page. How often do you visit the site? I
really want to communicate with you. I am good at Thai massage and really
like to eat fish. What about you? I guess that we will have many topics to
talk about. [...]
Content analysis details: (15.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[88.152.21.45 listed in bb.barracudacentral.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[88.152.21.45 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[88.152.21.45 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[88.152.21.45 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?88.152.21.45>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<ginettepososnacaz8127[at]yahoo.com>
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5106]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
X-Spam-Flag: YES
Subject: ***SPAM*** hi
--------=_Next_Part_3048812216.642
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 8bit
Hi XXXXXX
How are you?
My name is Monica. I am 25 years old. I am from Chongqing. I like your page. How often do you visit the site? I really want to communicate with you. I am good at Thai massage and really like to eat fish. What about you? I guess that we will have many topics to talk about.
Do you have some social networks? I will be waiting for your letter.
Best wishes,
Monica
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces