by buried under 419s
Sun Jul 24, 2011 12:42 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 23 Jul 2011 21:11:13 -0700
Received: from mildex.com.cn ([222.191.255.118] helo=mail01.wuximildex.local)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Qkq24-0004Tl-JA
for ; Sat, 23 Jul 2011 21:11:13 -0700
Received: from User ([46.183.216.146] RDNS failed) by mail01.wuximildex.local with Microsoft SMTPSVC(6.0.3790.1830);
Sun, 24 Jul 2011 12:15:11 +0800
Reply-To: <[email protected]>
From: "Hota Ruby"<[email protected]>
To: [email protected]
Subject: One good turn...
Date: Sun, 24 Jul 2011 07:10:04 +0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-OriginalArrivalTime: 24 Jul 2011 04:15:12.0843 (UTC) FILETIME=[48A429B0:01CC49B8]
X-Spam-Subject: ***SPAM*** One good turn...
X-Spam-Status: Yes, score=16.0
X-Spam-Score: 160
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi,I am Ruby, I'm diagnosed with esophageal cancer, because
it went unnoticed I had to undergo laryngectomy.I have decided to donate
my money to you.I am also donating my body after i am gone for research.I
want this last act of mine to be an offering to GOD and humanity. send a note
back with this ref. SvaSo so i know you got this. I know I don't know you.
God bless you abundantly, Hotarubi [...]
Content analysis details: (16.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is freemail (ggdfnt[at]aim.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[222.191.255.118 listed in bb.barracudacentral.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5133]
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.5 FROM_MISSP_USER From misspaced, from "User"
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Hi,I am Ruby,
I'm diagnosed with esophageal cancer, because it went unnoticed
I had to undergo laryngectomy.I have decided to donate my money
to you.I am also donating my body after i am gone for research.I want
this last act of mine to be an offering to GOD and humanity.
send a note back with this ref. SvaSo so i know you got this.
I know I don't know you. God bless you abundantly,
Hotarubi
Envelope-to:
Delivery-date: Sat, 23 Jul 2011 21:11:13 -0700
Received: from mildex.com.cn ([222.191.255.118] helo=mail01.wuximildex.local)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Qkq24-0004Tl-JA
for ; Sat, 23 Jul 2011 21:11:13 -0700
Received: from User ([46.183.216.146] RDNS failed) by mail01.wuximildex.local with Microsoft SMTPSVC(6.0.3790.1830);
Sun, 24 Jul 2011 12:15:11 +0800
Reply-To: <[email protected]>
From: "Hota Ruby"<[email protected]>
To: [email protected]
Subject: One good turn...
Date: Sun, 24 Jul 2011 07:10:04 +0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-OriginalArrivalTime: 24 Jul 2011 04:15:12.0843 (UTC) FILETIME=[48A429B0:01CC49B8]
X-Spam-Subject: ***SPAM*** One good turn...
X-Spam-Status: Yes, score=16.0
X-Spam-Score: 160
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi,I am Ruby, I'm diagnosed with esophageal cancer, because
it went unnoticed I had to undergo laryngectomy.I have decided to donate
my money to you.I am also donating my body after i am gone for research.I
want this last act of mine to be an offering to GOD and humanity. send a note
back with this ref. SvaSo so i know you got this. I know I don't know you.
God bless you abundantly, Hotarubi [...]
Content analysis details: (16.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 FREEMAIL_FROM Sender email is freemail (ggdfnt[at]aim.com)
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[222.191.255.118 listed in bb.barracudacentral.org]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5133]
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.5 FROM_MISSP_USER From misspaced, from "User"
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Hi,I am Ruby,
I'm diagnosed with esophageal cancer, because it went unnoticed
I had to undergo laryngectomy.I have decided to donate my money
to you.I am also donating my body after i am gone for research.I want
this last act of mine to be an offering to GOD and humanity.
send a note back with this ref. SvaSo so i know you got this.
I know I don't know you. God bless you abundantly,
Hotarubi
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces