[email protected] Sue Mccarthy

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 27 Aug 2015 08:19:26 -0700
Received: from 47.36.174.83.rev.vodafone.pt ([83.174.36.47]:52032)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1ZUyxY-0006vh-2k
for ; Thu, 27 Aug 2015 08:19:26 -0700
Received: from 47.36.174.83.rev.vodafone.pt ([83.174.36.47:56916] helo=47.36.174.83.rev.vodafone.pt)
by tbnkBC.47.36.174.83.rev.vodafone.pt (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 57/18-77374-4C7FDF3E; Thu, 27 Aug 2015 16:29:44 +0100
From: "Sue Mccarthy" <[email protected]>
To: <>
Reply-To: <[email protected]>
Date: Thu, 27 Aug 2015 16:29:34 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0029_01D0E0E5.8EBE8E90"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=15.2
X-Spam-Score: 152
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: How are you doing? What is your name? My name is Sue. When
the last time you were on the site? I really want to chat with you. I like
your photos, so I send you my own. I hope that you will write to me on my
email or hotmail ID, do you have such one? Please write back! [...]

Content analysis details: (15.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9943]
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mccarthyf9[at]vodafone.pt)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[83.174.36.47 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[83.174.36.47 listed in psbl.surriel.com]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[83.174.36.47 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?83.174.36.47>]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[83.174.36.47 listed in zen.spamhaus.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (mccarthyf9[at]vodafone.pt)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 MISSING_MID Missing Message-Id: header
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
X-Spam-Flag: YES
Subject: ***SPAM*** hi

This is a multi-part message in MIME format.

------=_NextPart_000_0029_01D0E0E5.8EBE8E90
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

How are you doing? What is your name?
My name is Sue. When the last time you were on the site? I really want to chat with you. I like your photos, so I send you my own.
I hope that you will write to me on my email or hotmail ID, do you have such one?
Please write back!