Tuesday, March 24, 2015


Spam detection software, running on the system "zeus.emigran.com.br", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
postmaster for details.

Content preview: Dear Sir/Ma I am brokering an Investment deal in your
country on behalf of a client. This deal will involve the eventual
investment of US$50M. ( Fifty Million United States Dollars) within your
country. [...]

Content analysis details: (22.6 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.7 UNDISC_RECIPS Valid-looking To "undisclosed-recipients"
1.2 MSGID_FROM_MTA_ID Message-Id for external message added locally
1.9 DEAR_SOMETHING BODY: Contains 'Dear (something)'
2.8 MILLION_USD BODY: Talks about millions of dollars
0.4 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
3.3 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
3.5 ADVANCE_FEE_4 Appears to be advance fee fraud (Nigerian 419)
0.1 ADVANCE_FEE_1 Appears to be advance fee fraud (Nigerian 419)
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
3.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

No comments: