by buried under 419s
Sat Aug 27, 2011 12:24 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 27 Aug 2011 06:46:11 -0700
Received: from mail.vitalmed.com.br ([201.73.162.3])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QxJD8-0001V2-Bz
for .com; Sat, 27 Aug 2011 06:46:11 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.vitalmed.com.br (Postfix) with ESMTP id 6CB9921A87CA;
Sat, 27 Aug 2011 10:38:43 -0300 (BRT)
X-Virus-Scanned: amavisd-new at vitalmed.com.br
Received: from mail.vitalmed.com.br ([127.0.0.1])
by localhost (mail.vitalmed.com.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id McITZbw0q4Xx; Sat, 27 Aug 2011 10:38:41 -0300 (BRT)
Received: from mail.vitalmed.com.br (mail.vitalmed.com.br [192.168.1.19])
by mail.vitalmed.com.br (Postfix) with ESMTP id 4F40A33E1B0A;
Sat, 27 Aug 2011 10:38:39 -0300 (BRT)
Date: Sat, 27 Aug 2011 10:38:39 -0300 (BRT)
From: Paul Ronard <[email protected]>
Reply-To: Paul Ronard <[email protected]>
Message-ID: <[email protected]>
Subject:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_1517_33127174.1314452319090"
X-Originating-IP: [41.204.224.12]
X-Mailer: Zimbra 6.0.8_GA_2661 (zclient/6.0.8_GA_2661)
To: undisclosed-recipients:;
X-Spam-Status: No, score=3.7
X-Spam-Score: 37
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Need Business or personal loan? If yes Contact: [email protected]
you can contact us with info below: Name in full: Loan Amount: Duration:
Purpose of loan: Country: Phone Number Monthly Income [email protected].
[...]
Content analysis details: (3.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5990]
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
X-Spam-Flag: NO
------=_Part_1517_33127174.1314452319090
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Need Business or personal loan? If yes Contact:
[email protected] you can contact us with info below:
Name in full:.................
Loan Amount:..............
Duration:.................
Purpose of loan:...........................
Country:.........................
Phone Number...............
Monthly Income.............
[email protected].
Envelope-to:
Delivery-date: Sat, 27 Aug 2011 06:46:11 -0700
Received: from mail.vitalmed.com.br ([201.73.162.3])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QxJD8-0001V2-Bz
for .com; Sat, 27 Aug 2011 06:46:11 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.vitalmed.com.br (Postfix) with ESMTP id 6CB9921A87CA;
Sat, 27 Aug 2011 10:38:43 -0300 (BRT)
X-Virus-Scanned: amavisd-new at vitalmed.com.br
Received: from mail.vitalmed.com.br ([127.0.0.1])
by localhost (mail.vitalmed.com.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id McITZbw0q4Xx; Sat, 27 Aug 2011 10:38:41 -0300 (BRT)
Received: from mail.vitalmed.com.br (mail.vitalmed.com.br [192.168.1.19])
by mail.vitalmed.com.br (Postfix) with ESMTP id 4F40A33E1B0A;
Sat, 27 Aug 2011 10:38:39 -0300 (BRT)
Date: Sat, 27 Aug 2011 10:38:39 -0300 (BRT)
From: Paul Ronard <[email protected]>
Reply-To: Paul Ronard <[email protected]>
Message-ID: <[email protected]>
Subject:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_1517_33127174.1314452319090"
X-Originating-IP: [41.204.224.12]
X-Mailer: Zimbra 6.0.8_GA_2661 (zclient/6.0.8_GA_2661)
To: undisclosed-recipients:;
X-Spam-Status: No, score=3.7
X-Spam-Score: 37
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Need Business or personal loan? If yes Contact: [email protected]
you can contact us with info below: Name in full: Loan Amount: Duration:
Purpose of loan: Country: Phone Number Monthly Income [email protected].
[...]
Content analysis details: (3.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5990]
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
0.0 FILL_THIS_FORM Fill in a form with personal information
2.9 FILL_THIS_FORM_LOAN Answer loan question(s)
X-Spam-Flag: NO
------=_Part_1517_33127174.1314452319090
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Need Business or personal loan? If yes Contact:
[email protected] you can contact us with info below:
Name in full:.................
Loan Amount:..............
Duration:.................
Purpose of loan:...........................
Country:.........................
Phone Number...............
Monthly Income.............
[email protected].
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces