Information on romance scams and scammers.
by buried under 419s Tue Oct 20, 2015 4:40 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 20 Oct 2015 00:11:26 -0700
Received: from 181-160-87-184.baf.movistar.cl ([181.160.87.184]:3053)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1ZoR4s-0006JY-RL
for ; Tue, 20 Oct 2015 00:11:26 -0700
Received: from 181-160-87-184.baf.movistar.cl ([181.160.87.184:35183] helo=181-160-87-184.baf.movistar.cl)
by xISJ.181-160-87-184.baf.movistar.cl (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 70/81-48784-B05EEE03; Tue, 20 Oct 2015 03:23:59 -0400
From: "Ramona Ferrell" <[email protected]>
To: <>
Reply-To: <[email protected]>
Date: Tue, 20 Oct 2015 03:23:58 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_002B_01D10AE6.C1C7FD00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=15.2
X-Spam-Score: 152
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hi sugar, Have not heard from you for ages! Have you forgotten
about me? Hope not! How are things going? I am still single and spring has
come.. all of my friends are hnaging out with their boyfriends and I am alone
L Though we might get to know each other better and perhaps this Spring will
be the last lonely spring for us? Why don’t you come and see my new photos?
And perhaps even email me.. Will be waiting xoxoxoxxo [...]

Content analysis details: (15.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[181.160.87.184 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.0 TVD_RCVD_IP Message was received from an IP address
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[181.160.87.184 listed in psbl.surriel.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7516]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 MISSING_MID Missing Message-Id: header
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
X-Spam-Flag: YES
Subject: ***SPAM*** hi xxxxxxxx

This is a multi-part message in MIME format.

------=_NextPart_000_002B_01D10AE6.C1C7FD00
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi sugar,
Have not heard from you for ages! Have you forgotten about me? Hope not!
How are things going?
I am still single and spring has come.. all of my friends are hnaging out with their boyfriends and I am alone L
Though we might get to know each other better and perhaps this Spring will be the last lonely spring for us?
Why don’t you come and see my new photos? And perhaps even email me..
Will be waiting…
xoxoxoxxo

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 13 guests