Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Direct Tel.:+882-164-6655121 Direct
Tel.:+871-762-535915 Direct Fax: +871-762-535916 Corporate
Tel.:+27-839494291 erick_tam(a)latinmail.com Dear, I am Dr. E. Zulu, a
native of Cape Town in South Africa and I am an Executive Accountant
with the South Africa Department of Mining & Natural Resources. First
and foremost, I apologized using this medium to reach you for a
transaction/business of this magnitude, but this is due to
Confidentiality and prompt access reposed on this medium. Be informed
that a member of the South Africa Export Promotion Council (SEPC) who
was at the Government delegation to your country during a trade
exhibition gave your enviable credentials/particulars to me. I have
decided to seek a confidential co-operation with you in the execution
of the deal described hereunder for the benefit of all parties and hope
you will keep it as a top secret because of the nature of this
transaction. [...]
Content analysis details: (12.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 OFFSHORE_SCAM BODY: Off Shore Scams
2.0 NA_DOLLARS BODY: Talks about a million North American dollars
0.6 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?212.100.65.13>]
1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List
[<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL16952>]
0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
[212.100.65.13 listed in
dnsbl.sorbs.net]
0.1 RCVD_IN_RFCI RBL: Sent via a relay in
ipwhois.rfc-ignorant.org
[$ has inaccurate or missing WHOIS data at the]
[RIR]
0.7 NIGERIAN_BODY2 Message body looks like a Nigerian spam message 2+
1.6 NIGERIAN_BODY1 Message body looks like a Nigerian spam message 1+
2.8 NIGERIAN_BODY_GOVT_3 Message body has many indications of Nigerian scam
0.0 AWL AWL: Auto-whitelist adjustment