API tools faq
paste
Advertisement
Guest User

Spam FROM LOCAL

a guest
Sep 5th, 2015
909
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.55 KB | None | 0 0
raw download clone embed print report
  1. Header: Spam FROM LOCAL [127.0.0.1]:34045 <support@supermec.com.sg>
  2.  
  3. Content type: Spam
  4. Internal reference code for the message is 05574-12/237DPupzLhgH
  5.  
  6. First upstream SMTP client IP address: [127.0.0.1]:34045 localhost
  7. Received from: 127.0.0.1 < 127.0.0.1 < 104.171.124.79
  8.  
  9. Return-Path: <support@supermec.com.sg>
  10. From: "Mr John Ego"<support@supermec.com.sg>
  11. Message-ID: <20150904192909.0D01D23A4C96@mail.midominio.com>
  12. X-Mailer: Microsoft Outlook Express 6.00.2600.0000
  13. Subject: VERIFICATION OF YOUR PAYMENT/WINNINGS FILE.
  14. Not quarantined.
  15.  
  16. The message WAS NOT relayed to:
  17. <tfosta@aol.com>:
  18. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  19. <tfox110494@aol.com>:
  20. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  21. <tfox5146@aol.com>:
  22. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  23. <tfox15@cinci.rr.com>:
  24. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  25. <tfp@culorful.net>:
  26. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  27. <tfoust@frontiernet.net>:
  28. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  29. <tfortpoetry@gmail.com>:
  30. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  31. <tfoss24@gmail.com>:
  32. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  33. <tfoster2500@gmail.com>:
  34. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  35. <tfox540@gmail.com>:
  36. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  37. <tfour52@hotmail.com>:
  38. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  39. <tfoushee_1@hotmail.com>:
  40. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  41. <tfoust60@hotmail.com>:
  42. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  43. <tfoutz@hotmail.com>:
  44. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  45. <tfowens81@hotmail.com>:
  46. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  47. <tfowlkes@kc.rr.com>:
  48. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  49. <tfox5@netzero.com>:
  50. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  51. <tfought@sbcglobal.net>:
  52. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  53. <tfouty@sbcglobal.net>:
  54. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  55. <tfoster33@verizon.net>:
  56. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  57. <tfoxbarn@yahoo.co.uk>:
  58. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  59. <tfortwangler@yahoo.com>:
  60. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  61. <tforuinorlando@yahoo.com>:
  62. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  63. <tforward@yahoo.com>:
  64. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  65. <tfoscolo@yahoo.com>:
  66. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  67. <tfossell@yahoo.com>:
  68. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  69. <tfosselman@yahoo.com>:
  70. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  71. <tfoster0861@yahoo.com>:
  72. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  73. <tfoster1066@yahoo.com>:
  74. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  75. <tfoster1125@yahoo.com>:
  76. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  77. <tfoster1361@yahoo.com>:
  78. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  79. <tfoster6225@yahoo.com>:
  80. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  81. <tfoti@yahoo.com>:
  82. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  83. <tfought@yahoo.com>:
  84. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  85. <tfouts@yahoo.com>:
  86. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  87. <tfouty76@yahoo.com>:
  88. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  89. <tfowers@yahoo.com>:
  90. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  91. <tfowler1965@yahoo.com>:
  92. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  93. <tfowler35744@yahoo.com>:
  94. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  95. <tfox2930@yahoo.com>:
  96. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  97. <tfox_1209@yahoo.com>:
  98. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  99. <tfoxred@yahoo.com>:
  100. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  101. <tfoy47@yahoo.com>:
  102. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  103. <tfoy6450@yahoo.com>:
  104. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  105. <tfoy6459@yahoo.com>:
  106. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  107. <tfoye84@yahoo.com>:
  108. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  109. <tfoytik@yahoo.com>:
  110. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  111. <tfp19423@yahoo.com>:
  112. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  113. <tfp1942@yahoo.com>:
  114. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  115. <tfoudray@ymail.com>:
  116. 250 2.7.0 Ok, discarded, id=05574-12 - spam
  117.  
  118. Spam scanner report:
  119. Spam detection software, running on the system "mail.midominio.com",
  120. has identified this incoming email as possible spam. The original
  121. message has been attached to this so you can view it or label
  122. similar future email. If you have any questions, see
  123. the administrator of that system for details.
  124.  
  125. Content preview: MR JOHN EGO DIRECTOR INTERNATIONAL REMITTANCE DEPARTMENT CENTRAL
  126. BANK OF NIGERIA(CBN) VERIFICATION OF YOUR PAYMENT/WINNINGS FILE. DEAR SIR/MADAM
  127. [...]
  128.  
  129. Content analysis details: (28.5 points, 5.0 required)
  130.  
  131. pts rule name description
  132. ---- ---------------------- --------------------------------------------------
  133. -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
  134. 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
  135. [score: 1.0000]
  136. 0.4 NSL_RCVD_FROM_USER Received from User
  137. 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
  138. 1.5 SUBJ_ALL_CAPS Subject is all capitals
  139. 1.0 MISSING_HEADERS Missing To: header
  140. 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
  141. (mrjohnego2026[at]gmail.com)
  142. (mrjohnego2026[at]gmail.com)
  143. (mrjohnego2026[at]gmail.com)
  144. (mrjohnego2026[at]gmail.com)
  145. (mrjohnego2026[at]gmail.com)
  146. (mrjohnego2026[at]gmail.com)
  147. (mrjohnego2026[at]gmail.com)
  148. (mrjohnego2026[at]gmail.com)
  149. (mrjohnego2026[at]gmail.com)
  150. 1.0 HK_SCAM_N3 BODY: No description available.
  151. 0.6 URG_BIZ BODY: Contains urgent matter
  152. 2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
  153. 0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
  154. [score: 1.0000]
  155. 0.0 LOTS_OF_MONEY Huge... sums of money
  156. 1.6 REPLYTO_WITHOUT_TO_CC No description available.
  157. 0.0 UPPERCASE_75_100 message body is 75-100% uppercase
  158. 2.6 MSOE_MID_WRONG_CASE No description available.
  159. 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  160. 0.0 FROM_MISSP_USER From misspaced, from "User"
  161. 1.0 HK_NAME_MR_MRS No description available.
  162. 0.7 FSL_NEW_HELO_USER Spam's using Helo and User
  163. 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
  164. 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
  165. 0.0 MONEY_FROM_MISSP Lots of money and misspaced From
  166. 2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  167. 1.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
  168. 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
  169. 0.0 FROM_MISSPACED From: missing whitespace
  170. 0.0 XFER_LOTSA_MONEY Transfer a lot of money
  171. 1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
  172. 0.0 LOTTO_DEPT Claims Department
  173. 2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
  174. 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
  175. 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
  176. 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form
  177. 3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
  178. 0.2 FORM_FRAUD_5 Fill a form and many fraud phrases
  179.  
  180. Return-Path: <support@supermec.com.sg>
  181. Received: from localhost (localhost [127.0.0.1])
  182. by mail.midominio.com (Postfix) with ESMTP id E711B23A4CA5;
  183. Fri, 4 Sep 2015 14:29:12 -0500 (EST)
  184. X-Virus-Scanned: amavisd-new at midominio.com
  185. Received: from mail.midominio.com ([127.0.0.1])
  186. by localhost (mail.midominio.com [127.0.0.1]) (amavisd-new, port 10026)
  187. with ESMTP id NtQNNTcHV570; Fri, 4 Sep 2015 14:29:12 -0500 (EST)
  188. Received: from User (unknown [104.171.124.79])
  189. by mail.midominio.com (Postfix) with ESMTPA id 0D01D23A4C96;
  190. Fri, 4 Sep 2015 14:29:08 -0500 (EST)
  191. Reply-To: <mrjohnego2026@gmail.com>
  192. From: "Mr John Ego"<support@supermec.com.sg>
  193. Subject: VERIFICATION OF YOUR PAYMENT/WINNINGS FILE.
  194. Date: Fri, 4 Sep 2015 12:29:53 -0700
  195. MIME-Version: 1.0
  196. Content-Type: text/plain;
  197. charset="Windows-1251"
  198. Content-Transfer-Encoding: 7bit
  199. X-Priority: 3
  200. X-MSMail-Priority: Normal
  201. X-Mailer: Microsoft Outlook Express 6.00.2600.0000
  202. X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
  203. Message-Id: <20150904192909.0D01D23A4C96@mail.midominio.com>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!