Information on romance scams and scammers.
by buried under 419s Tue Oct 20, 2015 11:54 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 20 Oct 2015 05:56:40 -0700
Received: from [181.171.194.184] (port=1492 helo=184-194-171-181.fibertel.com.ar)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1ZoWSw-0007iS-Gq
for ; Tue, 20 Oct 2015 05:56:39 -0700
Received: from 184-194-171-181.fibertel.com.ar ([181.171.194.184:36172] helo=184-194-171-181.fibertel.com.ar)
by wXL.184-194-171-181.fibertel.com.ar (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 77/85-74954-42820FFB; Tue, 20 Oct 2015 10:09:19 -0300
From: "Sherri David" <[email protected]>
To: <>
Reply-To: <[email protected]>
Date: Tue, 20 Oct 2015 10:09:09 -0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0017_01D10B1F.5CD10930"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=17.2
X-Spam-Score: 172
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hello dear, do you remember how we communicated with you?
Long ago you could not see, I am Marina - with Russia, do you remember me?
email me - let's talk, I'm waiting! Hello dear, do you remember how we communicated
with you? Long ago you could not see, I am Marina - with Russia, do you remember
me? email me - let's talk, I'm waiting! [...]

Content analysis details: (17.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[181.171.194.184 listed in psbl.surriel.com]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[181.171.194.184 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.5 MISSING_MID Missing Message-Id: header
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
X-Spam-Flag: YES
Subject: ***SPAM*** hi xxxxxxxxxxxxxxxxx

This is a multi-part message in MIME format.

------=_NextPart_000_0017_01D10B1F.5CD10930
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hello dear, do you remember how we communicated with you? Long ago you could not see, I am Marina - with Russia, do you remember me? email me - let's talk, I'm waiting!

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 19 guests