by buried under 419s
Sun Apr 24, 2011 6:20 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 24 Apr 2011 14:34:56 -0700
Received: from mailfilter5.ihug.co.nz ([203.109.136.5])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QE6xD-0001qM-Q9
for ; Sun, 24 Apr 2011 14:34:56 -0700
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ao1vAFmXtE3LbYkX/2dsb2JhbACDCgEBgUKHSphUgUEBhlYBASmBaAEBqnJGhSBciReBKYNQfQSSLw5VhhmCeQI
X-IronPort-AV: E=Sophos;i="4.64,264,1301832000";
d="scan'208";a="366151263"
Received: from out.webmail3.content.vf.net.nz (HELO webmail.vodafone.co.nz) ([203.109.137.23])
by smtp.mailfilter5.ihug.co.nz with ESMTP; 25 Apr 2011 09:34:32 +1200
MIME-Version: 1.0
Date: Mon, 25 Apr 2011 09:34:32 +1200
From: Saif Islam Gaddafi <[email protected]>
To: undisclosed-recipients:;
Subject: Funds Transfer
Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
SenderIP: 92.241.168.116
Received: from [92.241.168.116] (92.241.168.116)
(login=ZXNoaXJsZXlAaWh1Zy5jby5ueg==)
by webmail.vodafone.co.nz (running Vodafone Webmail)
via TCP with HTTP/1.1
id <[email protected]>;
25 Apr 2011 09:34:32 +1200
User-Agent: Vodafone Webmail
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-Spam-Status: No, score=5.7
X-Spam-Score: 57
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I need your help in transfer of funds. [...]
Content analysis details: (5.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[203.109.136.5 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[92.241.168.116 listed in zen.spamhaus.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(saifalislamghadaffi_0_0111[at]hotmail.co.uk
)
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9898]
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO
I need your help in transfer of funds.
Envelope-to:
Delivery-date: Sun, 24 Apr 2011 14:34:56 -0700
Received: from mailfilter5.ihug.co.nz ([203.109.136.5])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QE6xD-0001qM-Q9
for ; Sun, 24 Apr 2011 14:34:56 -0700
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ao1vAFmXtE3LbYkX/2dsb2JhbACDCgEBgUKHSphUgUEBhlYBASmBaAEBqnJGhSBciReBKYNQfQSSLw5VhhmCeQI
X-IronPort-AV: E=Sophos;i="4.64,264,1301832000";
d="scan'208";a="366151263"
Received: from out.webmail3.content.vf.net.nz (HELO webmail.vodafone.co.nz) ([203.109.137.23])
by smtp.mailfilter5.ihug.co.nz with ESMTP; 25 Apr 2011 09:34:32 +1200
MIME-Version: 1.0
Date: Mon, 25 Apr 2011 09:34:32 +1200
From: Saif Islam Gaddafi <[email protected]>
To: undisclosed-recipients:;
Subject: Funds Transfer
Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
SenderIP: 92.241.168.116
Received: from [92.241.168.116] (92.241.168.116)
(login=ZXNoaXJsZXlAaWh1Zy5jby5ueg==)
by webmail.vodafone.co.nz (running Vodafone Webmail)
via TCP with HTTP/1.1
id <[email protected]>;
25 Apr 2011 09:34:32 +1200
User-Agent: Vodafone Webmail
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="UTF-8"
X-Spam-Status: No, score=5.7
X-Spam-Score: 57
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I need your help in transfer of funds. [...]
Content analysis details: (5.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[203.109.136.5 listed in list.dnswl.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[92.241.168.116 listed in zen.spamhaus.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(saifalislamghadaffi_0_0111[at]hotmail.co.uk
)
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9898]
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO
I need your help in transfer of funds.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces