by buried under 419s
Tue Sep 27, 2011 9:44 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 27 Sep 2011 16:22:26 -0700
Received: from mail.hospitalviladaserra.com.br ([187.1.82.170] helo=viladaserra.netsolbox.com.br)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R8gyl-0005ss-0S
for ; Tue, 27 Sep 2011 16:22:26 -0700
Received: from viladaserra.zimbra.netsolbox.com.br (webmail.hospitalviladaserra.com.br [10.19.1.127])
by viladaserra.netsolbox.com.br (8.14.1/8.14.1) with ESMTP id p8RNF0lH011306;
Tue, 27 Sep 2011 20:18:22 -0300
Received: from localhost (localhost [127.0.0.1])
by viladaserra.zimbra.netsolbox.com.br (Postfix) with ESMTP id 28A7313BC317;
Tue, 27 Sep 2011 20:16:33 -0300 (BRT)
X-Virus-Scanned: amavisd-new at hospitalviladaserra.com.br
Received: from viladaserra.zimbra.netsolbox.com.br ([127.0.0.1])
by localhost (viladaserra.zimbra.netsolbox.com.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 40jGhnU2Il-h; Tue, 27 Sep 2011 20:16:27 -0300 (BRT)
Received: from viladaserra.zimbra.netsolbox.com.br (viladaserra.zimbra.netsolbox.com.br [10.19.1.127])
by viladaserra.zimbra.netsolbox.com.br (Postfix) with ESMTP id 8DF5013BC4AA;
Tue, 27 Sep 2011 20:08:53 -0300 (BRT)
Date: Tue, 27 Sep 2011 20:08:53 -0300 (GMT-03:00)
From: =?utf-8?Q?Western_Union=C2=AE_Money_Transfer?= <[email protected]>
Reply-To: =?utf-8?Q?Western=C2=AE_Union_Money_Transfer?= <[email protected]>
Message-ID: <10326219.44741317164933500.JavaMail.root@viladaserra>
Subject: GREETINGS
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [85.153.34.25]
X-Mailer: Zimbra 5.0.14_GA_2850.DEBIAN4.0 (zclient/5.0.14_GA_2850.DEBIAN4.0)
To: undisclosed-recipients:;
X-Spam-Status: No, score=2.4
X-Spam-Score: 24
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Please be informed that You have $250,000.00 Lodged in our
Western Union to transfer to you as Compensation [...]
Content analysis details: (2.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[187.1.82.170 listed in bb.barracudacentral.org]
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7539]
0.0 LOTS_OF_MONEY Huge... sums of money
X-Spam-Flag: NO
Please be informed that You have $250,000.00 Lodged in our Western Union to transfer to you as Compensation
Envelope-to:
Delivery-date: Tue, 27 Sep 2011 16:22:26 -0700
Received: from mail.hospitalviladaserra.com.br ([187.1.82.170] helo=viladaserra.netsolbox.com.br)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R8gyl-0005ss-0S
for ; Tue, 27 Sep 2011 16:22:26 -0700
Received: from viladaserra.zimbra.netsolbox.com.br (webmail.hospitalviladaserra.com.br [10.19.1.127])
by viladaserra.netsolbox.com.br (8.14.1/8.14.1) with ESMTP id p8RNF0lH011306;
Tue, 27 Sep 2011 20:18:22 -0300
Received: from localhost (localhost [127.0.0.1])
by viladaserra.zimbra.netsolbox.com.br (Postfix) with ESMTP id 28A7313BC317;
Tue, 27 Sep 2011 20:16:33 -0300 (BRT)
X-Virus-Scanned: amavisd-new at hospitalviladaserra.com.br
Received: from viladaserra.zimbra.netsolbox.com.br ([127.0.0.1])
by localhost (viladaserra.zimbra.netsolbox.com.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 40jGhnU2Il-h; Tue, 27 Sep 2011 20:16:27 -0300 (BRT)
Received: from viladaserra.zimbra.netsolbox.com.br (viladaserra.zimbra.netsolbox.com.br [10.19.1.127])
by viladaserra.zimbra.netsolbox.com.br (Postfix) with ESMTP id 8DF5013BC4AA;
Tue, 27 Sep 2011 20:08:53 -0300 (BRT)
Date: Tue, 27 Sep 2011 20:08:53 -0300 (GMT-03:00)
From: =?utf-8?Q?Western_Union=C2=AE_Money_Transfer?= <[email protected]>
Reply-To: =?utf-8?Q?Western=C2=AE_Union_Money_Transfer?= <[email protected]>
Message-ID: <10326219.44741317164933500.JavaMail.root@viladaserra>
Subject: GREETINGS
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [85.153.34.25]
X-Mailer: Zimbra 5.0.14_GA_2850.DEBIAN4.0 (zclient/5.0.14_GA_2850.DEBIAN4.0)
To: undisclosed-recipients:;
X-Spam-Status: No, score=2.4
X-Spam-Score: 24
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Please be informed that You have $250,000.00 Lodged in our
Western Union to transfer to you as Compensation [...]
Content analysis details: (2.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[187.1.82.170 listed in bb.barracudacentral.org]
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7539]
0.0 LOTS_OF_MONEY Huge... sums of money
X-Spam-Flag: NO
Please be informed that You have $250,000.00 Lodged in our Western Union to transfer to you as Compensation
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces