by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 27 Aug 2015 05:56:11 -0700
Received: from 41-134-77-26.dsl.mweb.co.za ([41.134.77.26]:4080)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1ZUwir-0003jS-TL
for ; Thu, 27 Aug 2015 05:56:11 -0700
Received: from 41-134-77-26.dsl.mweb.co.za ([41.134.77.26:31328] helo=41-134-77-26.dsl.mweb.co.za)
by bHIWImuk.41-134-77-26.dsl.mweb.co.za (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 96/17-71793-1C3ED135; Thu, 27 Aug 2015 15:05:59 +0200
From: "Letitia Hampton" <[email protected]>
To: <c>
Reply-To: <[email protected]>
Date: Thu, 27 Aug 2015 15:05:58 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0030_01D0E0D9.E1166250"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hellow. How is your day? My name is Letitia and you? Are you
frequently on this site? I like your profile and want to chat with you, but
unfortunately you was online 3 days ago. I hope that you will write to me
soon. I guess that we will have many topics to talk about. Do you have gmail?
[...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[41.134.77.26 listed in zen.spamhaus.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9999]
1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.0 TVD_RCVD_IP Message was received from an IP address
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[41.134.77.26 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.134.77.26>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 0.9999]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 MISSING_MID Missing Message-Id: header
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.8 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
X-Spam-Flag: YES
Subject: ***SPAM*** hi
This is a multi-part message in MIME format.
------=_NextPart_000_0030_01D0E0D9.E1166250
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hellow.
How is your day?
My name is Letitia and you? Are you frequently on this site? I like your profile and want to chat with you, but unfortunately you was online 3 days ago. I hope that you will write to me soon. I guess that we will have many topics to talk about.
Do you have gmail?
Envelope-to:
Delivery-date: Thu, 27 Aug 2015 05:56:11 -0700
Received: from 41-134-77-26.dsl.mweb.co.za ([41.134.77.26]:4080)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1ZUwir-0003jS-TL
for ; Thu, 27 Aug 2015 05:56:11 -0700
Received: from 41-134-77-26.dsl.mweb.co.za ([41.134.77.26:31328] helo=41-134-77-26.dsl.mweb.co.za)
by bHIWImuk.41-134-77-26.dsl.mweb.co.za (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 96/17-71793-1C3ED135; Thu, 27 Aug 2015 15:05:59 +0200
From: "Letitia Hampton" <[email protected]>
To: <c>
Reply-To: <[email protected]>
Date: Thu, 27 Aug 2015 15:05:58 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0030_01D0E0D9.E1166250"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=17.5
X-Spam-Score: 175
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hellow. How is your day? My name is Letitia and you? Are you
frequently on this site? I like your profile and want to chat with you, but
unfortunately you was online 3 days ago. I hope that you will write to me
soon. I guess that we will have many topics to talk about. Do you have gmail?
[...]
Content analysis details: (17.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[41.134.77.26 listed in zen.spamhaus.org]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9999]
1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname
(Split IP)
0.0 TVD_RCVD_IP Message was received from an IP address
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[41.134.77.26 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.134.77.26>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 0.9999]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 MISSING_MID Missing Message-Id: header
3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.8 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
X-Spam-Flag: YES
Subject: ***SPAM*** hi
This is a multi-part message in MIME format.
------=_NextPart_000_0030_01D0E0D9.E1166250
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hellow.
How is your day?
My name is Letitia and you? Are you frequently on this site? I like your profile and want to chat with you, but unfortunately you was online 3 days ago. I hope that you will write to me soon. I guess that we will have many topics to talk about.
Do you have gmail?
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
