by buried under 419s
Tue Sep 15, 2015 12:17 pm
eturn-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 15 Sep 2015 01:52:02 -0700
Received: from 97-80-74-76.dhcp.slid.la.charter.com ([97.80.74.76]:1266)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1Zbly0-0000Fu-Uu
for ; Tue, 15 Sep 2015 01:52:02 -0700
Received: from 97-80-74-76.dhcp.slid.la.charter.com ([97.80.74.76:39392] helo=97-80-74-76.dhcp.slid.la.charter.com)
by sjLaPHTg.97-80-74-76.dhcp.slid.la.charter.com (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 28/49-46511-32A80088; Tue, 15 Sep 2015 05:02:58 -0400
From: "Etta Zimmerman" <[email protected]>
To: <>
Reply-To: <[email protected]>
Date: Tue, 15 Sep 2015 05:02:48 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0032_01D0EF73.C3EF1ED0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi. How have you been? What is your name? Where are you from?
My name is Etta. I actually like to chat with you. What do you think about
it? I hope that in the near future we will talk with you, how you consider?
I'll wait for your letter with impatience and expect that it will be soon.
Have a wonderful day. My email. Best wishes Etta [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[97.80.74.76 listed in zen.spamhaus.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9942]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[97.80.74.76 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?97.80.74.76>]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[97.80.74.76 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[97.80.74.76 listed in bl.score.senderscore.com]
1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.0 TVD_RCVD_IP Message was received from an IP address
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 MISSING_MID Missing Message-Id: header
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.8 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
X-Spam-Flag: YES
Subject: ***SPAM*** hello
This is a multi-part message in MIME format.
------=_NextPart_000_0032_01D0EF73.C3EF1ED0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi.
How have you been? What is your name? Where are you from?
My name is Etta. I actually like to chat with you. What do you think about it? I hope that in the near future we will talk with you, how you consider? I'll wait for your letter with impatience and expect that it will be soon.
Have a wonderful day.
My email.
Best wishes Etta
Envelope-to:
Delivery-date: Tue, 15 Sep 2015 01:52:02 -0700
Received: from 97-80-74-76.dhcp.slid.la.charter.com ([97.80.74.76]:1266)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1Zbly0-0000Fu-Uu
for ; Tue, 15 Sep 2015 01:52:02 -0700
Received: from 97-80-74-76.dhcp.slid.la.charter.com ([97.80.74.76:39392] helo=97-80-74-76.dhcp.slid.la.charter.com)
by sjLaPHTg.97-80-74-76.dhcp.slid.la.charter.com (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 28/49-46511-32A80088; Tue, 15 Sep 2015 05:02:58 -0400
From: "Etta Zimmerman" <[email protected]>
To: <>
Reply-To: <[email protected]>
Date: Tue, 15 Sep 2015 05:02:48 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0032_01D0EF73.C3EF1ED0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi. How have you been? What is your name? Where are you from?
My name is Etta. I actually like to chat with you. What do you think about
it? I hope that in the near future we will talk with you, how you consider?
I'll wait for your letter with impatience and expect that it will be soon.
Have a wonderful day. My email. Best wishes Etta [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[97.80.74.76 listed in zen.spamhaus.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9942]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[97.80.74.76 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?97.80.74.76>]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[97.80.74.76 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[97.80.74.76 listed in bl.score.senderscore.com]
1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.0 TVD_RCVD_IP Message was received from an IP address
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 MISSING_MID Missing Message-Id: header
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.8 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
X-Spam-Flag: YES
Subject: ***SPAM*** hello
This is a multi-part message in MIME format.
------=_NextPart_000_0032_01D0EF73.C3EF1ED0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi.
How have you been? What is your name? Where are you from?
My name is Etta. I actually like to chat with you. What do you think about it? I hope that in the near future we will talk with you, how you consider? I'll wait for your letter with impatience and expect that it will be soon.
Have a wonderful day.
My email.
Best wishes Etta
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces