From: "Mohammed Malik" (may be fake)
Reply-To: <mmhammedmalik@gmail.com>
Date: Sun, 2 Jul 2017 09:10:07 -0700
Subject: Re Gold Bar And Gold Dust needed urgent now


*****************************************************************
********************** SPAM REPORT MESSAGE **********************
*****************************************************************

Datagate AntiSPAM detection software has identified this incoming
email as possible spam. The original message report has been
attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, please contact
Datagate PostMaster <antispam@postmaster.datagate.net.uk>.

Content preview: Dear Sir, We are large scale miners located at Tarkwa in Western
Region Ghana with postal address as follows: Achimota, Accra - Ghana, West
Africa. We are incorporated under the Companies Code 1963, Act 179 with RC
No: 63,556 (Registrar of Companies, Ghana). We are duly registered with the
Minerals Commission as well as the Precious Minerals Marketing Company Limited,
Ghana (PMMC). [...]

Content analysis details: (7.8 points, 6.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[62.210.143.208 listed in dnsbl.sorbs.net]
0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FROM_MISSP_USER From misspaced, from "User"
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.4 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money


Datagate AntiSPAM Service <antispam@postmaster.datagate.net.uk>
---------------------------------------------------------------