by buried under 419s
Fri Jul 27, 2018 6:35 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 27 Jul 2018 15:17:32 -0700
Received: from [212.200.120.218] (port=11190 helo=212-200-120-218.static.isp.telekom.rs)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fjB39-000872-RB
for ; Fri, 27 Jul 2018 15:17:32 -0700
Message-ID: <89E065D20D0C57BAD356E13E3F6489E0@EEMSB5YPR>
From: <[email protected]>
To: <>
Date: 28 Jul 2018 01:07:08 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="cp-850"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5931
X-Spam-Status: Yes, score=40.4
X-Spam-Score: 404
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good day, dear sir. My name is Sevgi. I am a woman, who believe
in a destiny with a cheerful future for myself and that you could become
a part of it. I do want to be next to a loving man. I wish to find a man that
can give me a real hope and love! [...]
Content analysis details: (40.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[212.200.120.218 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[212.200.120.218 listed in psbl.surriel.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?212.200.120.218>]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[212.200.120.218 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[212.200.120.218 listed in bl.score.senderscore.com]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
1.0 PLING_QUERY Subject has exclamation mark and question mark
1.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
(FTSDMCXX/boundary variant) direct-to-MX
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.5 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
(FTSDMCXX/boundary variant) + no rDNS
0.5 KAM_LINKBAIT Short messages containing little more than a link, from
a domain with no security in place
2.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
2.5 DOS_OE_TO_MX Delivered direct to MX with OE headers
0.3 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address
X-Spam-Flag: YES
Subject: ***SPAM*** I need real happiness. Will you give me this feeling ?!
Good day, dear sir.
My name is Sevgi.
I am a woman, who believe in a destiny with a cheerful future for myself and that
you could become a part of it.
I do want to be next to a loving man. I wish to find a man that can give me a real
hope and love!
Hope you're interested in becoming a part of my adventure and will reply back soon!
If you are interested in getting to know me closer, please write to my personal
e-mail - [email protected]
Your true soul,
Sevgi.
Envelope-to:
Delivery-date: Fri, 27 Jul 2018 15:17:32 -0700
Received: from [212.200.120.218] (port=11190 helo=212-200-120-218.static.isp.telekom.rs)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1fjB39-000872-RB
for ; Fri, 27 Jul 2018 15:17:32 -0700
Message-ID: <89E065D20D0C57BAD356E13E3F6489E0@EEMSB5YPR>
From: <[email protected]>
To: <>
Date: 28 Jul 2018 01:07:08 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="cp-850"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5931
X-Spam-Status: Yes, score=40.4
X-Spam-Score: 404
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Good day, dear sir. My name is Sevgi. I am a woman, who believe
in a destiny with a cheerful future for myself and that you could become
a part of it. I do want to be next to a loving man. I wish to find a man that
can give me a real hope and love! [...]
Content analysis details: (40.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[212.200.120.218 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[212.200.120.218 listed in psbl.surriel.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?212.200.120.218>]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[212.200.120.218 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[212.200.120.218 listed in bl.score.senderscore.com]
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
1.0 PLING_QUERY Subject has exclamation mark and question mark
1.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
(FTSDMCXX/boundary variant) direct-to-MX
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.5 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
(FTSDMCXX/boundary variant) + no rDNS
0.5 KAM_LINKBAIT Short messages containing little more than a link, from
a domain with no security in place
2.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
2.5 DOS_OE_TO_MX Delivered direct to MX with OE headers
0.3 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address
X-Spam-Flag: YES
Subject: ***SPAM*** I need real happiness. Will you give me this feeling ?!
Good day, dear sir.
My name is Sevgi.
I am a woman, who believe in a destiny with a cheerful future for myself and that
you could become a part of it.
I do want to be next to a loving man. I wish to find a man that can give me a real
hope and love!
Hope you're interested in becoming a part of my adventure and will reply back soon!
If you are interested in getting to know me closer, please write to my personal
e-mail - [email protected]
Your true soul,
Sevgi.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces