by buried under 419s
Sat Jul 18, 2015 7:29 am
Return-path: <>
Envelope-to:
Delivery-date: Sat, 18 Jul 2015 00:30:53 -0700
Received: from [82.99.255.68] (port=15051 helo=82.99.255.68.parsonline.net)
by with esmtp (Exim 4.80)
(envelope-from <>)
id 1ZGMaA-0003Z5-MW
for ; Sat, 18 Jul 2015 00:30:53 -0700
Message-ID: <548DC51621DD6846AC528546983687E4@>
Date: Sat, 18 Jul 2015 11:08:45 +0330
From: Jimmie <>
To: <>
Reply-To: <[email protected]>
X-Priority: 3
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="------=_Next_Part_8301278235.983"
X-Spam-Status: Yes, score=13.3
X-Spam-Score: 133
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi How are you? My name is Jimmie. I am 25 years old.
I am from Chongqing. I like your page. How often do you visit the site? I
really want to communicate with you. I am good at Thai massage and really
like to eat fish. What about you? I guess that we will have many topics to
talk about. [...]
Content analysis details: (13.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[82.99.255.68 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[82.99.255.68 listed in psbl.surriel.com]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[82.99.255.68 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?82.99.255.68>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<yvettehgtiddjii2133[at]yahoo.com>
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5036]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** hi
--------=_Next_Part_8301278235.983
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 8bit
Hi XXXXXX
How are you?
My name is Jimmie. I am 25 years old. I am from Chongqing. I like your page. How often do you visit the site? I really want to communicate with you. I am good at Thai massage and really like to eat fish. What about you? I guess that we will have many topics to talk about.
Do you have some social networks? I will be waiting for your letter.
Best wishes,
Jimmie
Envelope-to:
Delivery-date: Sat, 18 Jul 2015 00:30:53 -0700
Received: from [82.99.255.68] (port=15051 helo=82.99.255.68.parsonline.net)
by with esmtp (Exim 4.80)
(envelope-from <>)
id 1ZGMaA-0003Z5-MW
for ; Sat, 18 Jul 2015 00:30:53 -0700
Message-ID: <548DC51621DD6846AC528546983687E4@>
Date: Sat, 18 Jul 2015 11:08:45 +0330
From: Jimmie <>
To: <>
Reply-To: <[email protected]>
X-Priority: 3
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="------=_Next_Part_8301278235.983"
X-Spam-Status: Yes, score=13.3
X-Spam-Score: 133
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi How are you? My name is Jimmie. I am 25 years old.
I am from Chongqing. I like your page. How often do you visit the site? I
really want to communicate with you. I am good at Thai massage and really
like to eat fish. What about you? I guess that we will have many topics to
talk about. [...]
Content analysis details: (13.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[82.99.255.68 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[82.99.255.68 listed in psbl.surriel.com]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[82.99.255.68 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?82.99.255.68>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<yvettehgtiddjii2133[at]yahoo.com>
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5036]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** hi
--------=_Next_Part_8301278235.983
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 8bit
Hi XXXXXX
How are you?
My name is Jimmie. I am 25 years old. I am from Chongqing. I like your page. How often do you visit the site? I really want to communicate with you. I am good at Thai massage and really like to eat fish. What about you? I guess that we will have many topics to talk about.
Do you have some social networks? I will be waiting for your letter.
Best wishes,
Jimmie
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces