by buried under 419s
Tue Nov 27, 2012 1:25 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 26 Nov 2012 21:07:53 -0800
Received: from [2.76.9.4] (port=25333)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TdDOg-0003Ns-JH
for ; Mon, 26 Nov 2012 21:07:52 -0800
X-AntiVirus: Checked by Dr.Web [version: 7.0.4.09220, engine: 7.0.100.09170, virus records: 3411993, updated: 27.11.2012]
Received: from mailtx4.habbogroup.com ([62.50.39.198]) by mx.kolumbus.fi;
Tue, 27 Nov 2012 06:07:52 +0600
X-MSFBL: PX39ZKM8JPT3NUHT8R1JZW8GA17VAI48ESLZ8U9L09OQNF1OGYVT
Received: from [62.50.39.209] ([62.50.39.209:49596] helo=mail.habbogroup.com)
by sula0-1113 (envelope-from <[email protected]>)
(ecelerity 3.1.3.39918 r(39919)) with ESMTP
id NS/66-70767-1U54BUC2; Tue, 27 Nov 2012 06:07:52 +0600
Received: from mi46.varoke.net (mi46.varoke.net [66.132.225.103])
by mail.habbogroup.com (Postfix) with ESMTP id T6148COE8DH
for <m>; Tue, 27 Nov 2012 06:07:52 +0600
Date: Tue, 27 Nov 2012 06:07:52 +0600
From: Habbo Hotel <[email protected]>
To:
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_4557_01114246.0976203651258"
X-OriginalArrivalTime: Tue, 27 Nov 2012 06:07:52 +0600 FILETIME=[EB046725:141467DD]
X-Spam-Status: Yes, score=12.3
X-Spam-Score: 123
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Sirs,Your Wire Transfer Amount: USD 85,767.59Transfer
Report: ViewMIRA LEARY,Federal Reserve Wire Network Dear Sirs, Your Wire
Transfer Amount: USD 85,767.59 Transfer Report: View MIRA LEARY, Federal Reserve
Wire Network [...]
Content analysis details: (12.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[2.76.9.4 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: rezevici-apartmani.com]
0.6 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: rezevici-apartmani.com]
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.3066]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
3.5 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** Wire Transfer (6146ZS975)
------=_Part_4557_01114246.0976203651258
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Dear Sirs,Your Wire Transfer Amount: USD 85,767.59Transfer Report: ViewMIRA LEARY,Federal Reserve Wire Network
Envelope-to:
Delivery-date: Mon, 26 Nov 2012 21:07:53 -0800
Received: from [2.76.9.4] (port=25333)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TdDOg-0003Ns-JH
for ; Mon, 26 Nov 2012 21:07:52 -0800
X-AntiVirus: Checked by Dr.Web [version: 7.0.4.09220, engine: 7.0.100.09170, virus records: 3411993, updated: 27.11.2012]
Received: from mailtx4.habbogroup.com ([62.50.39.198]) by mx.kolumbus.fi;
Tue, 27 Nov 2012 06:07:52 +0600
X-MSFBL: PX39ZKM8JPT3NUHT8R1JZW8GA17VAI48ESLZ8U9L09OQNF1OGYVT
Received: from [62.50.39.209] ([62.50.39.209:49596] helo=mail.habbogroup.com)
by sula0-1113 (envelope-from <[email protected]>)
(ecelerity 3.1.3.39918 r(39919)) with ESMTP
id NS/66-70767-1U54BUC2; Tue, 27 Nov 2012 06:07:52 +0600
Received: from mi46.varoke.net (mi46.varoke.net [66.132.225.103])
by mail.habbogroup.com (Postfix) with ESMTP id T6148COE8DH
for <m>; Tue, 27 Nov 2012 06:07:52 +0600
Date: Tue, 27 Nov 2012 06:07:52 +0600
From: Habbo Hotel <[email protected]>
To:
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_4557_01114246.0976203651258"
X-OriginalArrivalTime: Tue, 27 Nov 2012 06:07:52 +0600 FILETIME=[EB046725:141467DD]
X-Spam-Status: Yes, score=12.3
X-Spam-Score: 123
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Sirs,Your Wire Transfer Amount: USD 85,767.59Transfer
Report: ViewMIRA LEARY,Federal Reserve Wire Network Dear Sirs, Your Wire
Transfer Amount: USD 85,767.59 Transfer Report: View MIRA LEARY, Federal Reserve
Wire Network [...]
Content analysis details: (12.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[2.76.9.4 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: rezevici-apartmani.com]
0.6 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: rezevici-apartmani.com]
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.3066]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
3.5 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** Wire Transfer (6146ZS975)
------=_Part_4557_01114246.0976203651258
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Dear Sirs,Your Wire Transfer Amount: USD 85,767.59Transfer Report: ViewMIRA LEARY,Federal Reserve Wire Network
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces