[email protected] UN Claims Office

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 29 Apr 2011 17:47:39 -0700
Received: from mail.codelline.com.br ([200.97.21.130])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QFyLQ-0007vN-Uh
for ; Fri, 29 Apr 2011 17:47:39 -0700
Received: (qmail 5777 invoked by uid 1009); 29 Apr 2011 13:31:56 -0300
Received: from 200.97.21.130 by homer (envelope-from <[email protected]>, uid 1007) with qmail-scanner-1.25-st-qms
(clamdscan: 0.88.6/3804. spamassassin: 3.1.6. perlscan: 1.25-st-qms.
Clear:RC:0(200.97.21.130):SA:0(?/?):.
Processed in 0.046498 secs); 29 Apr 2011 16:31:56 -0000
X-Spam-Status: No, hits=? required=?
X-Antivirus-MYDOMAIN-Mail-From: [email protected] via homer
X-Antivirus-MYDOMAIN: 1.25-st-qms (Clear:RC:0(200.97.21.130):SA:0(?/?):. Processed in 0.046498 secs Process 5768)
Received: from mail.codelline.com.br (HELO webmail.codelline.com.br) ([email protected]@200.97.21.130)
by mail.codelline.com.br with SMTP; 29 Apr 2011 13:31:55 -0300
Received: from 41.204.224.14
(SquirrelMail authenticated user [email protected])
by webmail.codelline.com.br with HTTP;
Fri, 29 Apr 2011 13:31:55 -0300 (BRT)
Message-ID: <[email protected]>
Date: Fri, 29 Apr 2011 13:31:55 -0300 (BRT)
Subject: Card Delivery Notification.
From: "UN Claims Office." <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.4.8
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Spam-Subject: ***SPAM*** Card Delivery Notification.
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Over-due ATM Card payment £515,810.00 GBP by the UN Office,
We will send you an International Swift ATM Card that has been approved in
your favor with Card Number:8401236451206112,:Contact Mr. Samuel Hackman:[email protected]
with this details 1.Valid Delivery Address.2. Full Names.3. Phone Number.
Note that you will take responsibility for cost of delivery $130USD. [...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.2 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[200.97.21.130 listed in combined.njabl.org]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[200.97.21.130 listed in bb.barracudacentral.org]
0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[200.97.21.130 listed in dnsbl.sorbs.net]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[200.97.21.130 listed in zen.spamhaus.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7088]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES

Over-due ATM Card payment £515,810.00 GBP by the UN Office, We will send you an
International Swift ATM Card that has been approved in your favor with Card
Number:8401236451206112,:Contact Mr. Samuel Hackman: [email protected]
with this details 1.Valid Delivery Address.2. Full Names.3. Phone Number. Note
that you will take responsibility for cost of delivery $130USD.