Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: Direct Tel.:+882-164-6655121 Direct Tel.:+871-762-535915 Direct Fax: +871-762-535916 Corporate Tel.:+27-839494291 erick_tam@latinmail.com Dear, I am Dr. E. Zulu, a native of Cape Town in South Africa and I am an Executive Accountant with the South Africa Department of Mining & Natural Resources. First and foremost, I apologized using this medium to reach you for a transaction/business of this magnitude, but this is due to Confidentiality and prompt access reposed on this medium. Be informed that a member of the South Africa Export Promotion Council (SEPC) who was at the Government delegation to your country during a trade exhibition gave your enviable credentials/particulars to me. I have decided to seek a confidential co-operation with you in the execution of the deal described hereunder for the benefit of all parties and hope you will keep it as a top secret because of the nature of this transaction. [...] Content analysis details: (12.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 OFFSHORE_SCAM BODY: Off Shore Scams 2.0 NA_DOLLARS BODY: Talks about a million North American dollars 0.6 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?212.100.65.13>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL16952>] 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [212.100.65.13 listed in dnsbl.sorbs.net] 0.1 RCVD_IN_RFCI RBL: Sent via a relay in ipwhois.rfc-ignorant.org [$ has inaccurate or missing WHOIS data at the] [RIR] 0.7 NIGERIAN_BODY2 Message body looks like a Nigerian spam message 2+ 1.6 NIGERIAN_BODY1 Message body looks like a Nigerian spam message 1+ 2.8 NIGERIAN_BODY_GOVT_3 Message body has many indications of Nigerian scam 0.0 AWL AWL: Auto-whitelist adjustment