by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 27 Aug 2015 09:49:52 -0700
Received: from [58.186.153.207] (port=3308)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1ZV0N5-0000PD-Ke
for ; Thu, 27 Aug 2015 09:49:52 -0700
Received: from ITQUANGNAM ([58.186.153.207:17271] helo=[58.186.153.207])
by lKtt.ITQUANGNAM (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 90/49-07014-8244FA71; Thu, 27 Aug 2015 23:59:56 +0700
From: "Janelle Cline" <[email protected]>
To: <>
Reply-To: <[email protected]>
Date: Thu, 27 Aug 2015 23:59:55 +0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_002B_01D0E124.78E4D7C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=13.4
X-Spam-Score: 134
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: How are you doing? What is your name? My name is Janelle.
When the last time you were on the site? I really want to chat with you. I
like your photos, so I send you my own. I hope that you will write to me
on my email or hotmail ID, do you have such one? Please write back! [...]
Content analysis details: (13.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 DOS_RCVD_IP_TWICE_C Received from the same IP twice in a row (only
one external relay; empty or IP helo)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?58.186.153.207>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[58.186.153.207 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[58.186.153.207 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9253]
0.0 HTML_MESSAGE BODY: HTML included in message
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[58.186.153.207 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
0.5 MISSING_MID Missing Message-Id: header
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** hi
This is a multi-part message in MIME format.
How are you doing? What is your name?
My name is Janelle. When the last time you were on the site? I really want to chat with you. I like your photos, so I send you my own.
I hope that you will write to me on my email or hotmail ID, do you have such one?
Please write back!
Envelope-to:
Delivery-date: Thu, 27 Aug 2015 09:49:52 -0700
Received: from [58.186.153.207] (port=3308)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1ZV0N5-0000PD-Ke
for ; Thu, 27 Aug 2015 09:49:52 -0700
Received: from ITQUANGNAM ([58.186.153.207:17271] helo=[58.186.153.207])
by lKtt.ITQUANGNAM (envelope-from <[email protected]>)
(ecelerity 3.3.2.44647 r(44647)) with ESMTP
id 90/49-07014-8244FA71; Thu, 27 Aug 2015 23:59:56 +0700
From: "Janelle Cline" <[email protected]>
To: <>
Reply-To: <[email protected]>
Date: Thu, 27 Aug 2015 23:59:55 +0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_002B_01D0E124.78E4D7C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6002.18005
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6002.18005
X-Spam-Status: Yes, score=13.4
X-Spam-Score: 134
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: How are you doing? What is your name? My name is Janelle.
When the last time you were on the site? I really want to chat with you. I
like your photos, so I send you my own. I hope that you will write to me
on my email or hotmail ID, do you have such one? Please write back! [...]
Content analysis details: (13.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 DOS_RCVD_IP_TWICE_C Received from the same IP twice in a row (only
one external relay; empty or IP helo)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?58.186.153.207>]
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[58.186.153.207 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[58.186.153.207 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9253]
0.0 HTML_MESSAGE BODY: HTML included in message
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[58.186.153.207 listed in zen.spamhaus.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
0.5 MISSING_MID Missing Message-Id: header
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** hi
This is a multi-part message in MIME format.
How are you doing? What is your name?
My name is Janelle. When the last time you were on the site? I really want to chat with you. I like your photos, so I send you my own.
I hope that you will write to me on my email or hotmail ID, do you have such one?
Please write back!
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
