[email protected] Dr.Paul Heyman

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 25 Mar 2013 23:45:06 -0700
Received: from smtp2web.tin.it ([212.216.176.236]:55615)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1UKNd1-0002jo-Kn
for ; Mon, 25 Mar 2013 23:45:06 -0700
Received: from feu20 (10.192.64.30) by smtp2web.tin.it (8.6.023.02)
id 50BDDAED01ECBAF6; Tue, 26 Mar 2013 07:45:04 +0100
Received: from (81.201.49.34) by webmailcommunicator.alice.it; Tue, 26 Mar 2013 07:45:04 +0100
Message-ID: <[email protected]>
Date: Tue, 26 Mar 2013 07:45:04 +0100 (CET)
From: "MR. TODD W. SIBLEY" <[email protected]>
Reply-To: [email protected]
Subject: Attention please!!!
Mime-Version: 1.0
Content-Type: text/plain;charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Originating-IP: 81.201.49.34
X-Spam-Status: No, score=3.9
X-Spam-Score: 39
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Attention please!!! I have registered your ATM CARD of $4.8with
Dhl Express Courier Company with registration code of ( DCJKT00678G). please
Contact with your delivery information such as, Your Name, Your Address ID
CARD COPY and Your Telephone Number: [...]

Content analysis details: (3.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(romaexgh[at]tin.it)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[212.216.176.236 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dhlcs3[at]yahoo.com.tr
)
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5717]
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM_SHORT Fill in a short form with personal information
X-Spam-Flag: NO

Attention please!!!

I have registered your ATM CARD of $4.8with Dhl Express Courier
Company with registration code of ( DCJKT00678G). please Contact with
your delivery information such as, Your Name, Your Address ID CARD COPY
and Your Telephone Number:

Dhl Office:
Name of Dir: Dr.Paul Heyman.
E-mail: [email protected]

So i want you to contact DHL right now with your full infomation so
that your delivery will be taking over within 24 to 48 hours time.

Best Regards,
MR. TODD W. SIBLEY