by buried under 419s
Thu Feb 21, 2013 3:55 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 20 Feb 2013 23:11:54 -0800
Received: from 181-163-178-44.baf.movistar.cl ([181.163.178.44]:3844)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1U8QJr-000886-SA
for ; Wed, 20 Feb 2013 23:11:54 -0800
MIME-Version: 1.0
Date: Thu, 21 Feb 2013 04:11:48 -0300
Message-ID: <A32AEDCB0F7616B0C38C86FFD2FD.163.324878294950@181-163-178-44.baf.movistar.cl>
From: "Tanya" <[email protected]>
To:
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
List-Unsubscribe: <mailto:[email protected]>
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello! You have very much interested me. It will be pleasant
for me if you want with me will get acquainted. It will be very pleasant
for me to find the friend or second half through the Internet. We can exchange
photos. You can write to me the letter on this electronic address [email protected]
I wait for your answer. [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 TVD_RCVD_IP TVD_RCVD_IP
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(vwsfjrt763[at]mail2hank.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[181.163.178.44 listed in bb.barracudacentral.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (vwsfjrt763[at]mail2hank.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5948]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[181.163.178.44 listed in bl.score.senderscore.com]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** You have very much interested me
Hello!
You have very much interested me.
It will be pleasant for me if you want with me will get acquainted.
It will be very pleasant for me to find the friend or second half through the Internet.
We can exchange photos.
You can write to me the letter on this electronic address [email protected]
I wait for your answer.
My name is Tanya.
Good-bye.
Envelope-to:
Delivery-date: Wed, 20 Feb 2013 23:11:54 -0800
Received: from 181-163-178-44.baf.movistar.cl ([181.163.178.44]:3844)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1U8QJr-000886-SA
for ; Wed, 20 Feb 2013 23:11:54 -0800
MIME-Version: 1.0
Date: Thu, 21 Feb 2013 04:11:48 -0300
Message-ID: <A32AEDCB0F7616B0C38C86FFD2FD.163.324878294950@181-163-178-44.baf.movistar.cl>
From: "Tanya" <[email protected]>
To:
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
List-Unsubscribe: <mailto:[email protected]>
X-Spam-Status: Yes, score=9.9
X-Spam-Score: 99
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello! You have very much interested me. It will be pleasant
for me if you want with me will get acquainted. It will be very pleasant
for me to find the friend or second half through the Internet. We can exchange
photos. You can write to me the letter on this electronic address [email protected]
I wait for your answer. [...]
Content analysis details: (9.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 TVD_RCVD_IP TVD_RCVD_IP
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(vwsfjrt763[at]mail2hank.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[181.163.178.44 listed in bb.barracudacentral.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (vwsfjrt763[at]mail2hank.com)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5948]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[181.163.178.44 listed in bl.score.senderscore.com]
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** You have very much interested me
Hello!
You have very much interested me.
It will be pleasant for me if you want with me will get acquainted.
It will be very pleasant for me to find the friend or second half through the Internet.
We can exchange photos.
You can write to me the letter on this electronic address [email protected]
I wait for your answer.
My name is Tanya.
Good-bye.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces