[email protected] Alberto Mansini.

X-Spam-Flag: YES
Return-Path: <MAILER-DAEMON>
Received: from mx1.inst.ac.in (mx.inst.ac.in [202.164.49.115])
by mail50c28.carrierzone.com (8.14.9/8.13.1) with ESMTP id u351XQfX025583
for <>; Mon, 4 Apr 2016 21:33:30 -0400
Received: from localhost (localhost [127.0.0.1])
by mx1.inst.ac.in (Postfix) with ESMTP id 71059A7EAC1;
Tue, 5 Apr 2016 03:47:22 +0530 (IST)
Received: from mx1.inst.ac.in ([127.0.0.1])
by localhost (mx.inst.ac.in [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id qsaEwd4Bp6GM; Tue, 5 Apr 2016 03:47:22 +0530 (IST)
Received: from UsinMultiMedia.hi.link (unknown [151.57.111.44])
by mx1.inst.ac.in (Postfix) with ESMTPA id 248A7A7E715;
Tue, 5 Apr 2016 00:26:55 +0530 (IST)
Content-Type: multipart/alternative; boundary="===============1396335806=="
MIME-Version: 1.0
Subject: *****SPAM***** SALES REPRESENTATIVE WANTED.
To: "\"Alberto\" info\" <@aol.com>" <>
From: "Alberto mansini" <>
Date: Mon, 04 Apr 2016 20:57:03 -0700
Reply-To: [email protected]
X-Antivirus: avast! (VPS 160404-0, 04/04/2016), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
X-CTCH-RefID: str=0001.0A010205.5702A00E.018C,ss=4,sh,re=2.100,recu=0.000,reip=0.000,cl=4,cld=1,fgs=520
X-CTCH-VOD: Unknown
X-CTCH-Spam: Confirmed
X-CTCH-Score: 2.100
X-CTCH-Rules: FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO,
X-CTCH-Flags: 520
X-CTCH-ScoreCust: 0.000
X-CSC: 100
X-CHA: v=2.1 cv=Rb6pVTdv c=1 sm=1 tr=0 p=CuB4mEbGhFcA:10 p=gPOYK7XhF9cA:10
p=reYfWO5jDdP7f0XT:21 p=ZamGPKTNeJ_mQjwy:21 p=nXyqIiPbMD12DXi6TwIA:9
p=lnkzqkwj0zdhlc-M:21 p=rQVsny68fnpjdtfQ:21 p=wggwHnXJFnOZ01wE:21
a=VbK4S14wZmp0vy5mLTdt4A==:117 a=VbK4S14wZmp0vy5mLTdt4A==:17
a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10 a=1oJP67jkp3AA:10
a=ZZnuYtJkoWoA:10 a=kziv93cY1bsA:10 a=KXl77lDgDEgIEtoqJYcA:9
a=3oc9M9_CAAAA:8 a=_6GpL_ENAAAA:8 a=MyMLOGNxsp1x54UmdRAA:9
a=wPNLvfGTeEIA:10 a=grZJ4aqtjGMA:10 a=xupg4knwUDYA:10 a=_W_S_7VecoQA:10
Received-SPF: none (mail50c28: domain of does not provide an SPF record) client-ip=202.164.49.115; envelope-from=postmaster@;
X-WHL: LR



We are pleased to inform you that vacancies exist in our foreign department as offshore representatives. We would be very happy if you agree to be named and earn 5% of every payment made through you to our office. There are no anticipated costs involved.

Please if you are interested forward to us your full names, phone number,email and your residential/office address to this email:[email protected]. You can also call on

+39 351 1811016 for more clarification.




Sincerely,

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 20 Sep 2017 02:22:41 -0700
Received: from [94.177.234.115] (port=47858 helo=digit-mail.fr)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dubD8-0002ex-Tr
for ; Wed, 20 Sep 2017 02:22:41 -0700
Received: from [5.102.12.156] (helo=User)
by digit-mail.fr with esmtpa (Exim 4.88)
(envelope-from <[email protected]>)
id 1dubCC-0003gi-8g; Wed, 20 Sep 2017 11:21:28 +0200
Reply-To: <[email protected]>
From: "Alberto Mansini"<[email protected]>
Date: Wed, 20 Sep 2017 11:21:24 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=33.4
X-Spam-Score: 334
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: My dear friend, I am Mr Alberto Mansini, the chief accounts
operating officer with my bank and I want to inform you that an amount of
Euro 16.6 million will be transfered in your favour as the Foreign Business
Partner to our late deceased customer Mr.Edward Bryan. I need your help to
receive this money as we shall share the proceeds in the ratio of 60:40%.Be
rest assured that this transaction is risk free, as there is no known or
existing next of kin as beneficiary to the late mr.Bryan's estate.I am and
have been the custodian of this portfolio with absolute control of all matters
relating to this funds deposit. [...]

Content analysis details: (33.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_SCAM_N2 BODY: No description available.
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[94.177.234.115 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[94.177.234.115 listed in bl.score.senderscore.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[94.177.234.115 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[94.177.234.115 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?94.177.234.115>]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (albertomansini9[at]gmail.com)
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(albertomansini9[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.6 MSOE_MID_WRONG_CASE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** BUSINESS PROPOSAL

My dear friend,

I am Mr Alberto Mansini, the chief accounts operating officer with my bank and I
want to inform you that an amount of Euro 16.6 million will be transfered in your
favour as the Foreign Business Partner to our late deceased customer Mr.Edward
Bryan. I need your help to receive this money as we shall share the proceeds in the
ratio of 60:40%.Be rest assured that this transaction is risk free, as there is no
known or existing next of kin as beneficiary to the late mr.Bryan's estate.I am and
have been the custodian of this portfolio with absolute control of all matters
relating to this funds deposit.

Please send your full names, direct telephone numbers, and home address, more
details of how to claim the form will be given upon your reply.

Yours sincerely,
Alberto Mansini