[email protected] Marie Holme

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 26 Jul 2017 12:59:52 -0700
Received: from mop1000.hostmop.com ([75.98.233.2]:59280)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1daSTH-0007rF-Ls
for m; Wed, 26 Jul 2017 12:59:52 -0700
Received: from [::1] (port=39834 helo=pygmatour.com)
by mop1000.hostmop.com with esmtpa (Exim 4.89)
(envelope-from <[email protected]>)
id 1daSQY-001eeF-81; Thu, 27 Jul 2017 02:57:02 +0700
Received: from 38.132.119.70 ([38.132.119.70])
(SquirrelMail authenticated user [email protected])
by pygmatour.com with HTTP;
Thu, 27 Jul 2017 02:57:02 +0700
Message-ID: <[email protected]>
Date: Thu, 27 Jul 2017 02:57:02 +0700
From: "Marie Holmes" <[email protected]>
Reply-To: [email protected]
User-Agent: SquirrelMail/1.5.2 [SVN]
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mop1000.hostmop.com
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - marieholmes.com
X-Get-Message-Sender-Via: mop1000.hostmop.com: authenticated_id: [email protected]
X-Authenticated-Sender: mop1000.hostmop.com: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-From-Rewrite: rewritten was: [[email protected]], actual sender does not match
X-Spam-Status: Yes, score=14.7
X-Spam-Score: 147
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: This is Marie Holmes from North Carolina, I won the lottery
2 Years ago, Me and my Fiance have decided to give out 1,200,000.00 USD to
2 lucky individuals via their email with credible identity and personality
and yours has been selected and 3 charity organizations from all over the
world. Reply me via my Email: [email protected] for more details.
[...]

Content analysis details: (14.7 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[75.98.233.2 listed in dnsbl.sorbs.net]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.5 KAM_LINKBAIT Short messages containing little more than a link, from
a domain with no security in place
0.0 BODY_URI_ONLY Message body is only a URI in one line of text or for
an image
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Re


This is Marie Holmes from North Carolina, I won the lottery 2 Years ago,
Me and my Fiance have decided to give out 1,200,000.00 USD to 2 lucky
individuals via their email with credible identity and personality and
yours has been selected and 3 charity organizations from all over the
world. Reply me via my Email: [email protected] for more
details.