[email protected] Heritage Foundation

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 29 Oct 2015 08:05:32 -0700
Received: from mail-oi0-f66.google.com ([209.85.218.66]:34622)
by with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1Zrole-0005cP-1f
for ; Thu, 29 Oct 2015 08:05:32 -0700
Received: by oiaw3 with SMTP id w3so3137489oia.1
for <>; Thu, 29 Oct 2015 08:18:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:in-reply-to:referencesmessage-id
:subject:from:to:content-type;
bh=xYew+dTVM5BJgPVROKZJ5Ks/08e1jPZXaaidjme7mko=;
b=h9dz8Sg/76pA9QkjyeCqP8ag+2IXU0Pg26LwYSux+D1lTaHJtai+GTUzinC98E3Bgt
u6H19qZQcTqRxehwKklW6icv78z9WTs6p5iIFeZKFnAPR7xjhdUB5ksPkITrb9ESVoAj
pxE3adkT2j19JuxGCssWoEvNL6etIQi00yI8K9vO1V7204lrJN3+e+179TO1xHTnJi8o
UpOlEK7hricW1WqOYjR/pGE+I7e9XkhsblHfuRfpyFYastRi56gOYWhSW1M7I+WREHpt
krgdwvRGAYmwpwGhS86jFJcQ6gXCpVG3EnQ7w/yrEEM4ADu2zDg7cMqARuF1P2rG0sM3
C47A==
MIME-Version: 1.0
X-Received: by 10.202.86.86 with SMTP id k83mr1491870oib.68.1446131915688;
Thu, 29 Oct 2015 08:18:35 -0700 (PDT)
Received: by 10.202.205.72 with HTTP; Thu, 29 Oct 2015 08:18:35 -0700 (PDT)
Reply-To: [email protected]
In-Reply-To: <20151015083151.17972oqtakao9s6o@www.>
References: <20151015083151.17972oqtakao9s6o@www.>
Date: Thu, 29 Oct 2015 16:18:35 +0100
Message-ID: <CADe1yMHiKOyhHMzE==Vo42d15cXp=6Ot7zvkOkTSKMm=4zVo=[email protected]>
Subject: Re: *****SPAM***** Possible Spam : Read Carefully..
From: Heritage Foundation <[email protected]>
To:
Content-Type: multipart/alternative; boundary=001a113dd268220fbf05233fd35a
X-Spam-Status: No, score=4.2
X-Spam-Score: 42
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: You have $500,000 waiting for pickup at Western Union, reply
back for more details. You have $500,000 waiting for pickup at Western Union,
reply back for more details. [...]

Content analysis details: (4.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[209.85.218.66 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mrschleey[at]gmail.com)
-0.0 SPF_PASS SPF: sender matches SPF record
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0043]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
5.8 AWL AWL: Adjusted score from AWL reputation of From: address
X-Spam-Flag: NO

--001a113dd268220fbf05233fd35a
Content-Type: text/plain; charset=UTF-8

You have $500,000 waiting for pickup at Western Union,
reply back for more details.