#337094 by buried under 419s
Fri Aug 18, 2017 9:26 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 18 Aug 2017 00:33:58 -0700
Received: from cmr-208-124-138-22.cr.net.cable.rogers.com ([208.124.138.22]:42078 helo=scientahealth.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dibn2-0006fR-Cg
for ; Fri, 18 Aug 2017 00:33:57 -0700
Received: from [10.30.227.74] ([197.211.59.131]) by scientahealth.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 17 Aug 2017 20:38:58 -0400
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Lian Bonaparte" <[email protected]>
Date: Fri, 18 Aug 2017 01:38:42 +0100
Reply-To: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 18 Aug 2017 00:38:58.0287 (UTC) FILETIME=[6103C7F0:01D317BA]
X-Spam-Status: Yes, score=25.3
X-Spam-Score: 253
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Your fund has been moved from West Africa to Paris, France.
due to fraudulent act in West African Region. Get back to me for more details
on claims process. Lian Bonaparte. [...]
Content analysis details: (25.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[208.124.138.22 listed in bb.barracudacentral.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.59.131 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.211.59.131>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[197.211.59.131 listed in dnsbl.sorbs.net]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR UNCLAIMED FUND DETAILS...
Your fund has been moved from West Africa to Paris, France. due to fraudulent act in
West African Region.
Get back to me for more details on claims process.
Lian Bonaparte.
Envelope-to:
Delivery-date: Fri, 18 Aug 2017 00:33:58 -0700
Received: from cmr-208-124-138-22.cr.net.cable.rogers.com ([208.124.138.22]:42078 helo=scientahealth.com)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dibn2-0006fR-Cg
for ; Fri, 18 Aug 2017 00:33:57 -0700
Received: from [10.30.227.74] ([197.211.59.131]) by scientahealth.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 17 Aug 2017 20:38:58 -0400
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Lian Bonaparte" <[email protected]>
Date: Fri, 18 Aug 2017 01:38:42 +0100
Reply-To: [email protected]
Message-ID: <[email protected]>
X-OriginalArrivalTime: 18 Aug 2017 00:38:58.0287 (UTC) FILETIME=[6103C7F0:01D317BA]
X-Spam-Status: Yes, score=25.3
X-Spam-Score: 253
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Your fund has been moved from West Africa to Paris, France.
due to fraudulent act in West African Region. Get back to me for more details
on claims process. Lian Bonaparte. [...]
Content analysis details: (25.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.4 UNCLAIMED_MONEY BODY: People just leave money laying around
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[208.124.138.22 listed in bb.barracudacentral.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.59.131 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.211.59.131>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[197.211.59.131 listed in dnsbl.sorbs.net]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR UNCLAIMED FUND DETAILS...
Your fund has been moved from West Africa to Paris, France. due to fraudulent act in
West African Region.
Get back to me for more details on claims process.
Lian Bonaparte.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces