[email protected] Patrick Berger

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 03 Jan 2013 00:32:07 -0800
Received: from outrelay02.libero.it ([212.52.84.102]:50205)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TqgDe-0001Ns-JB
for ; Thu, 03 Jan 2013 00:32:07 -0800
X-CTCH-Spam: Bulk
X-CTCH-RefID: str=0001.0A0C0207.50E540DC.008F,ss=3,sh,re=0.000,fgs=0
X-libjamoibt: 1821
Received: from webmail27 (172.31.0.114) by outrelay02.libero.it (8.5.140.03)
id 50D43E1301292784; Thu, 3 Jan 2013 09:30:40 +0100
Message-ID: <743020269.859081357201840738.JavaMail.defaultUser@defaultHost>
Date: Thu, 3 Jan 2013 09:30:40 +0100 (CET)
From: "[email protected]" <[email protected]>
Reply-To: "[email protected]" <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-SenderIP: 41.138.178.44
X-libjamv: uhmvt9OAPn0=
X-libjamsun: ElyRbNa1XduKOW9sTf9aRkJxiIzAnRwS
X-Spam-Status: Yes, score=17.4
X-Spam-Score: 174
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Dear Friend, There is a business opportunity worth Millions
of USD in my office .The owner died intestate without a successor,i intend
to present you as the next of kin to the bank. Should the above be of interest
to you please kindly forward to me the following 1. Your Full Name; 2. Address;
3. Telephone/Fax for further explanation. PLEASE REPLY ONLY TO [email protected]
[...]

Content analysis details: (17.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
4.1 HK_SCAM_N2 BODY: HK_SCAM_N2
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(patbbager[at]libero.it)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?212.52.84.102>]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[212.52.84.102 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5007]
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** CAN I TRUST YOU?

Dear Friend,

There is a business opportunity worth Millions of USD in my office .The owner
died intestate without a successor,i intend to present you as the next of kin
to the bank.
Should the above be of interest to you please kindly forward to me the
following 1. Your Full Name; 2. Address; 3. Telephone/Fax
for further explanation.
PLEASE REPLY ONLY TO
[email protected]

Sincere Regards
Patrick Berger.