[email protected] David Morgan

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 12 Jul 2011 08:15:15 -0700
Received: from linux01.atx.net ([209.239.36.12])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Qgeg4-0002R7-Ka
for ; Tue, 12 Jul 2011 08:15:15 -0700
Received: from localhost.localdomain (localhost [127.0.0.1])
by linux01.atx.net (8.14.3/8.12.10) with ESMTP id p6CF2ONG005287;
Tue, 12 Jul 2011 11:02:24 -0400
From: "David Morgan" <[email protected]>
Reply-To: [email protected]
Subject: $5,000.00 sent today.
Date: Tue, 12 Jul 2011 11:02:24 -0400
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 41.216.40.128 (angie)
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
X-Spam-Subject: ***SPAM*** $5,000.00 sent today.
X-Spam-Status: Yes, score=14.0
X-Spam-Score: 140
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: $5,000.00 sent today. We have concluded to effect your payment
through western union$5,000.00 daily until the $5,000,000.00 is completely
transfered.Though, JAMES EDDY sent $5,000.00 in your name today so contact
Western union Agent: Mr.Harry Musa. [...]
Content analysis details: (14.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.8 SUBJ_DOLLARS Subject starts with dollar amount
0.0 FREEMAIL_FROM Sender email is freemail (danmorgan2[at]hotmail.com)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.239.36.12 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.239.36.12 listed in list.dnswl.org]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(money.trans0[at]hotmail.com
)
1.6 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (danmorgan2[at]hotmail.com)
1.0 MISSING_HEADERS Missing To: header
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5075]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
X-Spam-Flag: YES

$5,000.00 sent today.

We have concluded to effect your payment through western union$5,000.00 daily
until the $5,000,000.00 is completely transfered.Though, JAMES EDDY sent
$5,000.00 in your name today so contact Western union Agent:
Mr.Harry Musa.

TEL: +229-99-35-65-70
E-mail: [email protected]
and tell him to give you the mtcn, sender name and question/answer to pick the
$5,000.00.

Thanks
David Morgan.