by buried under 419s
Sat Nov 20, 2010 3:23 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 19 Nov 2010 20:11:22 -0800
Received: from hm1831-14.locaweb.com.br ([189.126.112.34])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PJenJ-00076o-OW
for ; Fri, 19 Nov 2010 20:11:22 -0800
Received: from hm2598.locaweb.com.br (10.1.4.12) by hm1831-14.locaweb.com.br (PowerMTA(TM) v3.5r15) id hst56o0nva4d for <>; Sat, 20 Nov 2010 02:11:18 -0200 (envelope-from <[email protected]>)
Received: by hm2598.locaweb.com.br (Postfix, from userid 0)
id 993D72170B1; Sat, 20 Nov 2010 02:11:18 -0200 (BRST)
From: "=?ISO-8859-1?Q?Western Union Money Transfer?=" <[email protected]>
Date: Sat, 20 Nov 2010 02:11:18 -0200
To:
Reply-to: [email protected]
Subject: Notice
X-LocaWeb-COR: locaweb_2009_x-mail
References:
In-Reply-To:
X-Mailer: LocaMail
X-Auth-User: unidas.rs at unidas.org.br
X-IPAddress: 41.206.15.1
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Message-Id: <[email protected]>
X-Spam-Subject: ***SPAM*** Notice
X-Spam-Status: Yes, score=8.1
X-Spam-Score: 81
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: You've earned £750,000.Send:Name,Age,Country,Email:[email protected]
[...]
Content analysis details: (8.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 BAD_ENC_HEADER Message has bad MIME encoding in the header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[189.126.112.34 listed in list.dnswl.org]
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.2198]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
You've earned £750,000.Send:Name,Age,Country,Email:[email protected]
Envelope-to:
Delivery-date: Fri, 19 Nov 2010 20:11:22 -0800
Received: from hm1831-14.locaweb.com.br ([189.126.112.34])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1PJenJ-00076o-OW
for ; Fri, 19 Nov 2010 20:11:22 -0800
Received: from hm2598.locaweb.com.br (10.1.4.12) by hm1831-14.locaweb.com.br (PowerMTA(TM) v3.5r15) id hst56o0nva4d for <>; Sat, 20 Nov 2010 02:11:18 -0200 (envelope-from <[email protected]>)
Received: by hm2598.locaweb.com.br (Postfix, from userid 0)
id 993D72170B1; Sat, 20 Nov 2010 02:11:18 -0200 (BRST)
From: "=?ISO-8859-1?Q?Western Union Money Transfer?=" <[email protected]>
Date: Sat, 20 Nov 2010 02:11:18 -0200
To:
Reply-to: [email protected]
Subject: Notice
X-LocaWeb-COR: locaweb_2009_x-mail
References:
In-Reply-To:
X-Mailer: LocaMail
X-Auth-User: unidas.rs at unidas.org.br
X-IPAddress: 41.206.15.1
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Message-Id: <[email protected]>
X-Spam-Subject: ***SPAM*** Notice
X-Spam-Status: Yes, score=8.1
X-Spam-Score: 81
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: You've earned £750,000.Send:Name,Age,Country,Email:[email protected]
[...]
Content analysis details: (8.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 BAD_ENC_HEADER Message has bad MIME encoding in the header
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[189.126.112.34 listed in list.dnswl.org]
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.2198]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
You've earned £750,000.Send:Name,Age,Country,Email:[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces