[email protected] Kristina

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 12 Apr 2013 00:03:40 -0700
Received: from [213.172.178.174] (port=13332 helo=justicia.ru)
by with smtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1UQY1L-0001qP-8s
for ; Fri, 12 Apr 2013 00:03:40 -0700
Received: from [213.172.178.174] (port=83587 helo=a785-67.smtp-out.justicia.ru)
by justicia.ru with esmtp (envelope-from <[email protected]>)
for ; Fri, 12 Apr 2013 09:03:03 +0200
Message-ID: <[email protected]>
Date: Fri, 12 Apr 2013 09:03:03 +0200
From: Kristi <[email protected]>
Reply-To: Kristi <[email protected]>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.06) Gecko/20081008 Thunderbird/3.1.4
MIME-Version: 1.0
To:
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Hi!!! Im Kristina. I seek a mate! I commonly dance and draw!
Reply me letter to [email protected] Best regards, Kristina! [...]


Content analysis details: (11.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[213.172.178.174 listed in bb.barracudacentral.org]
0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[213.172.178.174 listed in zen.spamhaus.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[213.172.178.174 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[213.172.178.174 listed in psbl.surriel.com]
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.9068]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Kristinna Good evening!

Hi!!! Im Kristina. I seek a mate! I commonly dance and draw! Reply me letter to [email protected] Best regards, Kristina!

[junren71]

"Reply me" is a strong clue to a non-native English speaker, often used by West African male scammers who pretend to be women. Will also use "I did not read from him/her" when talking about e-mail contacts instead of "I have not heard from him/her." There is some irony here.