[email protected] Mr. Jerry Smith

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 22 Aug 2017 00:09:08 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11]:57946)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dk3JD-00035t-2H
for ; Tue, 22 Aug 2017 00:09:08 -0700
X-Virus-Scanned: amavisd-new at cantv.net
X-DNSBL-MILTER: Passed
Received: from [192.168.1.81] (dbe48f7d9.dslam-172-17-49-247-292-746-lms-05.dsl.cantv.net [190.72.247.217] (may be forged))
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id v7M5jusm005417;
Tue, 22 Aug 2017 03:07:57 -0400
Message-Id: <201708220707.v7M5jusm005417@10ibl20ser04.datacenter.cha.cantv.net>
X-Matched-Lists: []
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Mr. Harrison Cole" <[email protected]>
Date: Tue, 22 Aug 2017 03:07:43 -0530
Reply-To: [email protected]
X-Spam-Status: Yes, score=16.0
X-Spam-Score: 160
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Our Ref: LLOYDS-0XX2/482/017 I am Jerry Smith, I got your
email from the directory of Outstanding payment which is to be remitted to
you but someone came to my office with proof of identities to claim it. I
am writing to know if you are aware of it. Please reply back to confirm this
immediately. [...]

Content analysis details: (16.0 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[200.11.173.11 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[200.11.173.11 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(jsmith7800[at]outlook.com)
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM*** Re: Our Ref: LLOYDS-0XX2/482/017


Our Ref: LLOYDS-0XX2/482/017

I am Jerry Smith, I got your email from the directory of Outstanding payment which
is to be remitted to you but someone came to my office with proof of identities to
claim it. I am writing to know if you are aware of it.
Please reply back to confirm this immediately.

Yours Faithfully,
From Mr. Jerry Smith
Finance Director Lloyds Bank.
United Kingdom