In anderem Postfach gefunden Spam detection software, running on the system "web.hutor.ru", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, Let me first of all inform you, I got your email address
from a mail Directory and decided to mail you for a permission to go ahead.
I am Mrs. Stacy Russell from Dublin Ireland, married to Lloyd Russell who
worked with Caltex Oil Company in Malaysia before he died in a ghastly motor
accident on his way to a Board meeting. [...]
Content analysis details: (36.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
2.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(stacyruss5423[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.2 MISSING_HEADERS Missing To: Quelltext
0.9 URG_BIZ BODY: Contains urgent matter
0.6 FSL_UA FSL_UA
0.1 MISSING_MID Missing Message-Id: Quelltext
2.7 HK_NAME_FM_MR_MRS HK_NAME_FM_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.8 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.7 FROM_MISSP_NO_TO From misspaced, To missing
1.6 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
1.1 FROM_MISSP_DKIM From misspaced, DKIM dependable
0.0 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
2.9 FROM_MISSP_USER From misspaced, from "User"
0.0 DECEASED_NO_ML Dead not via mailing list
0.9 FROM_MISSPACED From: missing whitespace
1.9 MONEY_FROM_MISSP Lots of money and misspaced From
2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.1 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.1 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.9 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.1 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.7 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.8 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.6 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
Spoiler:
Return-Path: stacyruss5423@gmail.com
Received: from mail.hutor.ru ([62.231.190.46]) by mx-ha.web.de (mxweb108) with
ESMTP (Nemesis) id 0MJzo1-1Ub2kj06vV-001aff for <xxxxxx>; Tue, 07
May 2013 12:39:48 +0200
Received: by mail.hutor.ru (Postfix, from userid 65534)
id C1C1E3D6A4; Tue, 7 May 2013 16:13:34 +0700 (GMT-7)
Received: from localhost by web.hutor.ru
with SpamAssassin (version 3.3.1);
Tue, 07 May 2013 16:13:34 +0700
From: "Mrs. Stacy Russell"<stacyruss5423@gmail.com>
Subject: Your Response is Needed
Date: Tue, 7 May 2013 02:03:36 -0700
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on web.hutor.ru
X-Spam-Flag: YES
X-Spam-Level: ************************************
X-Spam-Status: Yes, score=36.8 required=5.0 tests=ADVANCE_FEE_2_NEW_MONEY,
ADVANCE_FEE_3_NEW,ADVANCE_FEE_3_NEW_MONEY,ADVANCE_FEE_4_NEW,
ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_MONEY,ALL_TRUSTED,
DECEASED_NO_ML,DKIM_ADSP_CUSTOM_MED,FORGED_MUA_OUTLOOK,FREEMAIL_FROM,
FREEMAIL_REPLYTO,FROM_MISSPACED,FROM_MISSP_DKIM,FROM_MISSP_FREEMAIL,
FROM_MISSP_MSFT,FROM_MISSP_NO_TO,FROM_MISSP_USER,FSL_CTYPE_WIN1251,
FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,FSL_UA,FSL_XM_419,HK_NAME_FM_MR_MRS,
LOTS_OF_MONEY,MISSING_HEADERS,MISSING_MID,MONEY_FRAUD_3,MONEY_FRAUD_5,
MONEY_FRAUD_8,MONEY_FROM_MISSP,NML_ADSP_CUSTOM_MED,NSL_RCVD_FROM_USER,
REPLYTO_WITHOUT_TO_CC,TO_NO_BRKTS_FROM_MSSP,URG_BIZ autolearn=unavailable
version=3.3.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5188C5BE.DF0D631C"
Message-Id: <20130507091334.C1C1E3D6A4@mail.hutor.ru>
Envelope-To: <xxxxx>
Eingeliefert über Russische Föderation
General IP Information
IP: 62.231.190.46
Decimal: 1055374894
Hostname: web.hutor.ru
ISP: Regional Digital Telecommunication Company
Organization: Regional Digital Telecommunication Company
Services: None detected
Type:
Assignment: Static IP
Blacklist:
Geolocation Information
Country: Russian Federation ru flag
State/Region: Kemerovo
City: Novokuznetsk
Latitude: 53.7557 (53° 45′ 20.52″ N)
Longitude: 87.1099 (87° 6′ 35.64″ E)
Zitat:
Received: from mail.hutor.ru ([62.231.190.46]) by mx-ha.web.de (mxweb108) with ESMTP (Nemesis) id 0MJzo1-1Ub2kj06vV-001aff for <xxxxxx>;
Tue, 07 May 2013 12:39:48 +0200
From: "Mrs. Stacy Russell"<stacyruss5423@gmail.com>
Date: Tue, 7 May 2013 02:03:36 -0700