by buried under 419s
Thu Jun 12, 2014 8:31 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 12 Jun 2014 15:33:53 -0700
Received: from [119.235.252.20] (port=47032 helo=my-serversindo.us.to)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1WvDZ1-0005j7-0A
for ; Thu, 12 Jun 2014 15:33:53 -0700
Received: from paypal19 by my-serversindo.us.to with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1WvDTs-0005qY-PR
for ; Thu, 12 Jun 2014 18:28:24 -0400
To:
Subject: AUTO-WRAP!!
X-PHP-Script: paypal190.us.to/mailer2014.php for 41.138.171.65
Date: Thu, 12 Jun 2014 18:28:24 -0400
From: Paul Thacker <[email protected]>
Message-ID: <[email protected]>
X-Priority: 1
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - my-serversindo.us.to
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [697 698] / [47 12]
X-AntiAbuse: Sender Address Domain - my-serversindo.us.to
X-Get-Message-Sender-Via: my-serversindo.us.to: authenticated_id: paypal19/only user confirmed/virtual account not confirmed
X-Spam-Status: No, score=4.1
X-Spam-Score: 41
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, Would you wrap your car, bus, truck, van or bike in
an Ad and earn $300 Weekly at no cost by just going about your normal routine
only with a small advert(LOGO) of Monster Energy Drink plastered on your
vehicle without affecting the painting or the body? Kindly reply via email
if you are interested to get more details about this promo. Best Regards,
Paul Thacker. Hiring Manager Monster Energy Drink® 323-647-3697 [...]
Content analysis details: (4.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[119.235.252.20 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Spam-Flag: NO
Hello, Would you wrap your car, bus, truck, van or bike in an Ad and earn $300 Weekly at no cost by just going about your normal routine only with a small advert(LOGO) of Monster Energy Drink plastered on your vehicle without affecting the painting or the body? Kindly reply via email if you are interested to get more details about this promo. Best Regards, Paul Thacker. Hiring Manager Monster Energy Drink� 323-647-3697
Envelope-to:
Delivery-date: Thu, 12 Jun 2014 15:33:53 -0700
Received: from [119.235.252.20] (port=47032 helo=my-serversindo.us.to)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1WvDZ1-0005j7-0A
for ; Thu, 12 Jun 2014 15:33:53 -0700
Received: from paypal19 by my-serversindo.us.to with local (Exim 4.82)
(envelope-from <[email protected]>)
id 1WvDTs-0005qY-PR
for ; Thu, 12 Jun 2014 18:28:24 -0400
To:
Subject: AUTO-WRAP!!
X-PHP-Script: paypal190.us.to/mailer2014.php for 41.138.171.65
Date: Thu, 12 Jun 2014 18:28:24 -0400
From: Paul Thacker <[email protected]>
Message-ID: <[email protected]>
X-Priority: 1
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - my-serversindo.us.to
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [697 698] / [47 12]
X-AntiAbuse: Sender Address Domain - my-serversindo.us.to
X-Get-Message-Sender-Via: my-serversindo.us.to: authenticated_id: paypal19/only user confirmed/virtual account not confirmed
X-Spam-Status: No, score=4.1
X-Spam-Score: 41
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, Would you wrap your car, bus, truck, van or bike in
an Ad and earn $300 Weekly at no cost by just going about your normal routine
only with a small advert(LOGO) of Monster Energy Drink plastered on your
vehicle without affecting the painting or the body? Kindly reply via email
if you are interested to get more details about this promo. Best Regards,
Paul Thacker. Hiring Manager Monster Energy Drink® 323-647-3697 [...]
Content analysis details: (4.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[119.235.252.20 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5001]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Spam-Flag: NO
Hello, Would you wrap your car, bus, truck, van or bike in an Ad and earn $300 Weekly at no cost by just going about your normal routine only with a small advert(LOGO) of Monster Energy Drink plastered on your vehicle without affecting the painting or the body? Kindly reply via email if you are interested to get more details about this promo. Best Regards, Paul Thacker. Hiring Manager Monster Energy Drink� 323-647-3697
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces