[email protected] [email protected]

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 04 Apr 2013 23:40:31 -0700
Received: from st11p00mm-asmtp003.mac.com ([17.172.81.2]:54660)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1UO0K5-0000Mz-6O
for ; Thu, 04 Apr 2013 23:40:31 -0700
Received: from [10.1.1.2] ([180.75.248.136]) by st11p00mm-asmtp003.mac.com
(Oracle Communications Messaging Server 7u4-23.01(7.0.4.23.0) 64bit (built Aug
10 2011)) with ESMTPSA id <[email protected]> for
; Fri, 05 Apr 2013 06:40:01 +0000 (GMT)
X-Proofpoint-Virus-Version: vendor=fsecure
engine=2.50.10432:5.10.8626,1.0.431,0.0.0000
definitions=2013-04-05_01:2013-04-05,2013-04-05,1970-01-01 signatures=0
X-Proofpoint-Spam-Details: rule=notspam policy=default score=30 spamscore=30
ipscore=0 suspectscore=22 phishscore=0 bulkscore=8 adultscore=0
classifier=spam adjust=0 reason=mlx scancount=1 engine=6.0.2-1302030000
definitions=main-1304040367
Message-id: <[email protected]>
Content-type: text/plain; charset=iso-8859-1
MIME-version: 1.0
Content-transfer-encoding: quoted-printable
Content-description: Mail message body
Subject: 400,000.00 USD GRANT MONEY FOR YOU:
To: Recipients <[email protected]>
From: "[email protected]" <[email protected]>
Date: Fri, 05 Apr 2013 14:39:31 +0800
Reply-to: [email protected]
X-Spam-Status: No, score=3.3
X-Spam-Score: 33
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: CONGRATULATIONS!!! Reply Required ASAP CALL TO CONFIRM +601-460-37853
[...]

Content analysis details: (3.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_LOTTO_NAME HK_LOTTO_NAME
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[17.172.81.2 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7993]
0.0 LOTS_OF_MONEY Huge... sums of money
X-Spam-Flag: NO

CONGRATULATIONS!!! Reply Required ASAP
CALL TO CONFIRM +601-460-37853