[email protected] Sarah Adele.

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 07 May 2014 03:06:13 -0700
Received: from servermail.essal.cl ([190.13.185.115]:46265)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1Whyjn-0000AO-LJ
for ; Wed, 07 May 2014 03:06:13 -0700
Received: from User (65.210.6.124) by SERVERMAIL.essal.cl (10.0.2.15) with
Microsoft SMTP Server id 14.1.438.0; Wed, 7 May 2014 06:05:35 -0400
X-WatchGuard-Mail-Exception: Allow
Reply-To: <[email protected]>
From: Sarah Adele. <[email protected]>
Date: Wed, 7 May 2014 11:04:45 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
X-Originating-IP: [65.210.6.124]
X-Spam-Status: Yes, score=18.2
X-Spam-Score: 182
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: This is to notify you that your funds has been programmed
for immediate release into your bank account but we can not transfer this
funds direct to your account because we are having problem with the International
Monetary Fund, so our method of payment is via diplomatic courier service.So
Contact your diplomat Paul Sam at Huntsville International Airport Alabama
USA at ([email protected] ) or call him at 240-750-6383 now with your
Full names,home Address,Phone Number also the name of the closet airport near
to you via his email for more details. [...]

Content analysis details: (18.2 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?190.13.185.115>]
3.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.4 NSL_RCVD_FROM_USER Received from User
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<lamido15[at]aol.de>
)
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8608]
0.0 TVD_PH_BODY_META TVD_PH_BODY_META
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
Subject: ***SPAM*** Contact diplomat Paul Sam at Huntsville International Airport Alabama USA ([email protected] )or call +1 240-750-6383 for more details.

This is to notify you that your funds has been programmed for immediate release into your bank account but we can not transfer this funds direct to your account because we are having problem with the International Monetary Fund, so our method of payment is via diplomatic courier service.So Contact your diplomat Paul Sam at Huntsville International Airport Alabama USA at ( [email protected] ) or call him at 240-750-6383 now with your Full names,home Address,Phone Number also the name of the closet airport near to you via his email for more details.

CONGRATULATIONS
Sarah Adele.