#338596 by buried under 419s
Wed Sep 06, 2017 9:52 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 06 Sep 2017 01:42:18 -0700
Received: from mail.krk-rg.ru ([81.26.138.202]:46775)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dpVuV-0001J6-Rc
for ; Wed, 06 Sep 2017 01:42:18 -0700
Received: from [10.105.43.5] (105.13.48.58) by mail.KRK-RG.RU (10.4.123.7)
with Microsoft SMTP Server id 14.3.361.1; Wed, 6 Sep 2017 11:40:08 +0300
Content-Type: multipart/alternative; boundary="===============1127856427=="
MIME-Version: 1.0
Subject:
To: Recipients <[email protected]>
From: <[email protected]>
Date: Wed, 6 Sep 2017 10:38:43 +0200
Reply-To: <[email protected]>
X-Antivirus: Avast (VPS 170905-2, 05/09/2017), Outbound message
X-Antivirus-Status: Clean
Message-ID: <[email protected]>
X-EsetResult: clean, is OK
X-EsetId: 37303A2905E6A16C63716A
X-Spam-Status: No, score=6.3
X-Spam-Score: 63
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: We would like you to work with us, as our company is expanding
to Canada and the USA, and we would like you to act as our Payment Receiving
Officer (PRO) in your region for more information please contact us via the
email below Mega Printings [email protected] [...]
Content analysis details: (6.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[81.26.138.202 listed in dnsbl.sorbs.net]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.4 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5238]
0.0 HTML_MESSAGE BODY: HTML included in message
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: NO
We would like you to work with us, as our company is expanding to Canada and the
USA, and we would like you to act as our Payment Receiving Officer (PRO) in your
region for more information please contact us via the email below
Mega Printings
[email protected]
Envelope-to:
Delivery-date: Wed, 06 Sep 2017 01:42:18 -0700
Received: from mail.krk-rg.ru ([81.26.138.202]:46775)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dpVuV-0001J6-Rc
for ; Wed, 06 Sep 2017 01:42:18 -0700
Received: from [10.105.43.5] (105.13.48.58) by mail.KRK-RG.RU (10.4.123.7)
with Microsoft SMTP Server id 14.3.361.1; Wed, 6 Sep 2017 11:40:08 +0300
Content-Type: multipart/alternative; boundary="===============1127856427=="
MIME-Version: 1.0
Subject:
To: Recipients <[email protected]>
From: <[email protected]>
Date: Wed, 6 Sep 2017 10:38:43 +0200
Reply-To: <[email protected]>
X-Antivirus: Avast (VPS 170905-2, 05/09/2017), Outbound message
X-Antivirus-Status: Clean
Message-ID: <[email protected]>
X-EsetResult: clean, is OK
X-EsetId: 37303A2905E6A16C63716A
X-Spam-Status: No, score=6.3
X-Spam-Score: 63
X-Spam-Bar: ++++++
X-Ham-Report: Spam detection software, running on the system "",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: We would like you to work with us, as our company is expanding
to Canada and the USA, and we would like you to act as our Payment Receiving
Officer (PRO) in your region for more information please contact us via the
email below Mega Printings [email protected] [...]
Content analysis details: (6.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[81.26.138.202 listed in dnsbl.sorbs.net]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.4 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5238]
0.0 HTML_MESSAGE BODY: HTML included in message
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: NO
We would like you to work with us, as our company is expanding to Canada and the
USA, and we would like you to act as our Payment Receiving Officer (PRO) in your
region for more information please contact us via the email below
Mega Printings
[email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces