by Reportandie
Thu Feb 07, 2013 5:54 am
Delivered-To: [my.redacted.address]
Received: by 10.194.23.98 with SMTP id l2csp127952wjf;
Wed, 30 Jan 2013 05:53:07 -0800 (PST)
X-Received: by 10.101.131.29 with SMTP id i29mr468113ann.37.1359553986563;
Wed, 30 Jan 2013 05:53:06 -0800 (PST)
Return-Path: <[email protected]>
Received: from linux.acotec.com.br (linux.acotec.com.br. [200.205.89.106])
by mx.google.com with ESMTP id p4si587875ann.138.2013.01.30.05.53.02;
Wed, 30 Jan 2013 05:53:06 -0800 (PST)
Received-SPF: neutral (google.com: 200.205.89.106 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip0.205.89.106;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 200.205.89.106 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by linux.acotec.com.br (Postfix, from userid 105)
id 483B4180C55; Wed, 30 Jan 2013 10:27:36 -0200 (BRST)
Received: from localhost by linux.acotec.com.br
with SpamAssassin (version 3.2.5);
Wed, 30 Jan 2013 10:27:36 -0200
From: "Mrs. Diana Williams"<[email protected]>
To: [redacted]
Subject: [SPAM] Your Money Is Ready!
Date: Wed, 30 Jan 2013 07:32:39 -0500
Message-Id: <[email protected]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on linux.acotec.com.br
X-Spam-Level: ************
X-Spam-Status: Yes, score=12.1 required=6.0 tests=ADVANCE_FEE_2,ADVANCE_FEE_3,
ALL_TRUSTED,AWL,BAYES_99,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,
FORGED_OUTLOOK_TAGS,FORGED_YAHOO_RCVD,HTML_MESSAGE,MIME_HTML_ONLY,
MSOE_MID_WRONG_CASE autolearn=spam version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_510911B8.133157D6"
Spam detection software, running on the system "linux.acotec.com.br", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FROM THE DESK OF: DR. SANUSI LAMIDO GOVERNOR CENTRAL BANK
OF NIGERIA CBN COMPLEX, GARIKI ABUJA,NIGERIA [...]
Content analysis details: (12.1 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.8 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
2.3 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
noname.eml noname.eml
9K View Download
Received: by 10.194.23.98 with SMTP id l2csp127952wjf;
Wed, 30 Jan 2013 05:53:07 -0800 (PST)
X-Received: by 10.101.131.29 with SMTP id i29mr468113ann.37.1359553986563;
Wed, 30 Jan 2013 05:53:06 -0800 (PST)
Return-Path: <[email protected]>
Received: from linux.acotec.com.br (linux.acotec.com.br. [200.205.89.106])
by mx.google.com with ESMTP id p4si587875ann.138.2013.01.30.05.53.02;
Wed, 30 Jan 2013 05:53:06 -0800 (PST)
Received-SPF: neutral (google.com: 200.205.89.106 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip0.205.89.106;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 200.205.89.106 is neither permitted nor denied by best guess record for domain of [email protected]) [email protected]
Received: by linux.acotec.com.br (Postfix, from userid 105)
id 483B4180C55; Wed, 30 Jan 2013 10:27:36 -0200 (BRST)
Received: from localhost by linux.acotec.com.br
with SpamAssassin (version 3.2.5);
Wed, 30 Jan 2013 10:27:36 -0200
From: "Mrs. Diana Williams"<[email protected]>
To: [redacted]
Subject: [SPAM] Your Money Is Ready!
Date: Wed, 30 Jan 2013 07:32:39 -0500
Message-Id: <[email protected]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on linux.acotec.com.br
X-Spam-Level: ************
X-Spam-Status: Yes, score=12.1 required=6.0 tests=ADVANCE_FEE_2,ADVANCE_FEE_3,
ALL_TRUSTED,AWL,BAYES_99,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,
FORGED_OUTLOOK_TAGS,FORGED_YAHOO_RCVD,HTML_MESSAGE,MIME_HTML_ONLY,
MSOE_MID_WRONG_CASE autolearn=spam version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_510911B8.133157D6"
Spam detection software, running on the system "linux.acotec.com.br", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FROM THE DESK OF: DR. SANUSI LAMIDO GOVERNOR CENTRAL BANK
OF NIGERIA CBN COMPLEX, GARIKI ABUJA,NIGERIA [...]
Content analysis details: (12.1 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.8 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
2.3 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
noname.eml noname.eml
9K View Download