by buried under 419s
Sun Dec 13, 2015 5:31 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 13 Dec 2015 00:41:01 -0800
Received: from host177-112-dynamic.27-79-r.retail.telecomitalia.it ([79.27.112.177]:55775 helo=modemtelecom.homenet.telecomitalia.it)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1a82DE-0005Eu-M1
for ; Sun, 13 Dec 2015 00:41:01 -0800
Received: from modemtelecom.homenet.telecomitalia.it ([79.27.112.177:30548] helo=modemtelecom.homenet.telecomitalia.it)
by LEWr.modemtelecom.homenet.telecomitalia.it (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 81/38-94733-21942744; Sun, 13 Dec 2015 09:56:17 +0200
From: "Kristin Underwood" <[email protected]>
To: <>
Reply-To: <[email protected]>
Date: Sun, 13 Dec 2015 09:56:16 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_002A_01D1358C.82544770"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=14.4
X-Spam-Score: 144
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi! How are you? My name is Anzu. I am 25 years old. I am
from Chongqing. I like your page. How often do you visit the site? I really
want to communicate with you. I am good at Thai massage and really like to
eat fish. What about you? I guess that we will have many topics to talk about.
Do you have some social networks? I will be waiting for your letter. [...]
Content analysis details: (14.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[79.27.112.177 listed in bb.barracudacentral.org]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[79.27.112.177 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[79.27.112.177 listed in psbl.surriel.com]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[79.27.112.177 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?79.27.112.177>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=u ... roject.com]
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 MISSING_MID Missing Message-Id: header
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
X-Spam-Flag: YES
Subject: ***SPAM*** hi
This is a multi-part message in MIME format.
------=_NextPart_000_002A_01D1358C.82544770
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi! How are you?
My name is Anzu. I am 25 years old. I am from Chongqing. I like your page. How often do you visit the site? I really want to communicate with you.
I am good at Thai massage and really like to eat fish. What about you? I guess that we will have many topics to talk about.
Do you have some social networks? I will be waiting for your letter.
Best wishes.
Envelope-to:
Delivery-date: Sun, 13 Dec 2015 00:41:01 -0800
Received: from host177-112-dynamic.27-79-r.retail.telecomitalia.it ([79.27.112.177]:55775 helo=modemtelecom.homenet.telecomitalia.it)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1a82DE-0005Eu-M1
for ; Sun, 13 Dec 2015 00:41:01 -0800
Received: from modemtelecom.homenet.telecomitalia.it ([79.27.112.177:30548] helo=modemtelecom.homenet.telecomitalia.it)
by LEWr.modemtelecom.homenet.telecomitalia.it (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 81/38-94733-21942744; Sun, 13 Dec 2015 09:56:17 +0200
From: "Kristin Underwood" <[email protected]>
To: <>
Reply-To: <[email protected]>
Date: Sun, 13 Dec 2015 09:56:16 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_002A_01D1358C.82544770"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=14.4
X-Spam-Score: 144
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi! How are you? My name is Anzu. I am 25 years old. I am
from Chongqing. I like your page. How often do you visit the site? I really
want to communicate with you. I am good at Thai massage and really like to
eat fish. What about you? I guess that we will have many topics to talk about.
Do you have some social networks? I will be waiting for your letter. [...]
Content analysis details: (14.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[79.27.112.177 listed in bb.barracudacentral.org]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[79.27.112.177 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[79.27.112.177 listed in psbl.surriel.com]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[79.27.112.177 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?79.27.112.177>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=u ... roject.com]
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 MISSING_MID Missing Message-Id: header
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
X-Spam-Flag: YES
Subject: ***SPAM*** hi
This is a multi-part message in MIME format.
------=_NextPart_000_002A_01D1358C.82544770
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi! How are you?
My name is Anzu. I am 25 years old. I am from Chongqing. I like your page. How often do you visit the site? I really want to communicate with you.
I am good at Thai massage and really like to eat fish. What about you? I guess that we will have many topics to talk about.
Do you have some social networks? I will be waiting for your letter.
Best wishes.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces