X-Spam-Flag: YES X-Spam-Level: ************************************************** X-Spam-Status: Yes, score=57.8 required=5.0 tests=ADVANCE_FEE_2_NEW_FORM, ADVANCE_FEE_2_NEW_FRM_MNY,ADVANCE_FEE_2_NEW_MONEY,ADVANCE_FEE_3_NEW, ADVANCE_FEE_3_NEW_FORM,ADVANCE_FEE_3_NEW_FRM_MNY,ADVANCE_FEE_3_NEW_MONEY, ADVANCE_FEE_4_NEW,ADVANCE_FEE_4_NEW_FORM,ADVANCE_FEE_4_NEW_FRM_MNY, ADVANCE_FEE_4_NEW_MONEY,ADVANCE_FEE_5_NEW,ADVANCE_FEE_5_NEW_FORM, ADVANCE_FEE_5_NEW_FRM_MNY,ADVANCE_FEE_5_NEW_MONEY,DATE_IN_FUTURE_96_Q, FILL_THIS_FORM,FILL_THIS_FORM_FRAUD_PHISH,FILL_THIS_FORM_LOAN, FILL_THIS_FORM_LONG,FORGED_MUA_OUTLOOK,FORM_FRAUD_3,FORM_FRAUD_5, FREEMAIL_FROM,FREEMAIL_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED, FROM_MISSP_EH_MATCH,FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT,FROM_MISSP_NO_TO, FROM_MISSP_REPLYTO,FROM_MISSP_URI,FSL_CTYPE_WIN1251,FSL_UA,FSL_XM_419, HK_SCAM_N8,LOTS_OF_MONEY,MISSING_HEADERS,MONEY_FORM,MONEY_FRAUD_3, MONEY_FRAUD_5,MONEY_FROM_MISSP,PYZOR_CHECK,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PSBL, RCVD_IN_SORBS_WEB,RCVD_IN_XBL,REPLYTO_WITHOUT_TO_CC,SPF_SOFTFAIL, SUBJ_ALL_CAPS,TO_NO_BRKTS_FROM_MSSP,TO_NO_BRKTS_MSFT,T_TO_NO_BRKTS_FREEMAIL, US_DOLLARS_3 autolearn=unavailable version=3.3.1 X-Spam-Report: * 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [82.162.65.217 listed in zen.spamhaus.org] * 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam * 0.2 FSL_XM_419 Old OE version in X-Mailer only seen in 419 spam * 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT * [82.162.65.217 listed in bb.barracudacentral.org] * 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider * (imfswss[at]yahoo.co.jp) * 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL * [82.162.65.217 listed in psbl.surriel.com] * 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server * [82.162.65.217 listed in dnsbl.sorbs.net] * 2.8 DATE_IN_FUTURE_96_Q Date: is 4 days to 4 months after Received: date * 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) * 1.6 SUBJ_ALL_CAPS Subject is all capitals * 1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit * ( ) * 1.2 MISSING_HEADERS Missing To: header * 2.7 HK_SCAM_N8 BODY: HK_SCAM_N8 * 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) * 2.0 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/) * 0.7 FSL_UA FSL_UA * 0.0 LOTS_OF_MONEY Huge... sums of money * 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC * 1.8 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool * 1.1 FROM_MISSP_NO_TO From misspaced, To missing * 0.5 FROM_MISSPACED From: missing whitespace * 1.2 MONEY_FROM_MISSP Lots of money and misspaced From * 2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different * freemails * 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To * 1.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors * 2.5 FROM_MISSP_EH_MATCH From misspaced, matches envelope * 0.0 FROM_MISSP_URI From misspaced, has URI * 3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool * 0.4 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) * 1.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419) * 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook * 0.0 MONEY_FORM Lots of money if you fill out a form * 0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) * 0.0 FILL_THIS_FORM Fill in a form with personal information * 3.5 FILL_THIS_FORM_LONG Fill in a form with personal information * 2.5 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money * 2.5 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form * 0.2 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money * 0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form * 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money * 1.0 ADVANCE_FEE_5_NEW_FORM Advance Fee fraud and a form * 0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money * 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money * 0.3 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money * 0.8 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money * 2.2 FILL_THIS_FORM_LOAN Answer loan question(s) * 1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money * 0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service * 0.2 MONEY_FRAUD_5 Lots of money and many fraud phrases * 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider * 0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form * 0.1 MONEY_FRAUD_3 Lots of money and several fraud phrases * 0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) * 0.5 FORM_FRAUD_5 Fill a form and many fraud phrases * 0.0 FORM_FRAUD_3 Fill a form and several fraud phrases