by buried under 419s
Wed Oct 26, 2011 3:25 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 26 Oct 2011 00:16:05 -0700
Received: from [193.254.233.58] (helo=mail.disk.dn.ua)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RIxiV-0006us-SB
for ; Wed, 26 Oct 2011 00:16:05 -0700
Received: from [41.217.65.3] ([41.217.65.3])
by mail.disk.dn.ua;
Wed, 26 Oct 2011 10:08:19 +0300
To: undisclosed-recipients:;
From: =?utf-8?Q?=D0=9A=D0=B2=D0=B0=D1=87_=D0=A1=2E=D0=9F=2E?=
<[email protected]>
Subject: Beneficiary
Reply-To: [email protected]
Message-ID: <[email protected]>
Date: Wed, 26 Oct 2011 10:08:19 +0300
X-User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1) Gecko/20090624
Firefox/3.5
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="-----------17635f259f960864d5b8d799ccc47808"
X-Spam-Subject: ***SPAM*** Beneficiary
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Att: Beneficiary It was resolved after the Board meetings
today by the foreign Remittance office to release all outstanding payment
waiting for transfer as we begain the sceond fiscal payment of the year.You
are to reconfirm full name, address telephone for your payment. Fm Big John
[...]
Content analysis details: (9.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(fmbigjohn[at]ymail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[193.254.233.58 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.217.65.3 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.217.65.3>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.217.65.3 listed in dnsbl.sorbs.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5798]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
This is a multi-part message in MIME format.
-------------17635f259f960864d5b8d799ccc47808
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Att: Beneficiary
It was resolved after the Board meetings today by the foreign Remittance office to release all outstanding payment waiting for transfer as we begain the sceond fiscal payment of the year.You are to reconfirm full name, address telephone for your payment.
Fm Big John
Envelope-to:
Delivery-date: Wed, 26 Oct 2011 00:16:05 -0700
Received: from [193.254.233.58] (helo=mail.disk.dn.ua)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1RIxiV-0006us-SB
for ; Wed, 26 Oct 2011 00:16:05 -0700
Received: from [41.217.65.3] ([41.217.65.3])
by mail.disk.dn.ua;
Wed, 26 Oct 2011 10:08:19 +0300
To: undisclosed-recipients:;
From: =?utf-8?Q?=D0=9A=D0=B2=D0=B0=D1=87_=D0=A1=2E=D0=9F=2E?=
<[email protected]>
Subject: Beneficiary
Reply-To: [email protected]
Message-ID: <[email protected]>
Date: Wed, 26 Oct 2011 10:08:19 +0300
X-User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1) Gecko/20090624
Firefox/3.5
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="-----------17635f259f960864d5b8d799ccc47808"
X-Spam-Subject: ***SPAM*** Beneficiary
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Att: Beneficiary It was resolved after the Board meetings
today by the foreign Remittance office to release all outstanding payment
waiting for transfer as we begain the sceond fiscal payment of the year.You
are to reconfirm full name, address telephone for your payment. Fm Big John
[...]
Content analysis details: (9.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(fmbigjohn[at]ymail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[193.254.233.58 listed in psbl.surriel.com]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.217.65.3 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.217.65.3>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.217.65.3 listed in dnsbl.sorbs.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5798]
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: YES
This is a multi-part message in MIME format.
-------------17635f259f960864d5b8d799ccc47808
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Att: Beneficiary
It was resolved after the Board meetings today by the foreign Remittance office to release all outstanding payment waiting for transfer as we begain the sceond fiscal payment of the year.You are to reconfirm full name, address telephone for your payment.
Fm Big John
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces