#378286 by buried under 419s
Wed Dec 12, 2018 10:40 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 12 Dec 2018 00:50:23 -0800
Received: from [27.102.206.241] (port=34707 helo=huega.vps.phps.kr)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gX0Di-0004Mi-Dk
for; Wed, 12 Dec 2018 00:50:22 -0800
Received: from User (localhost [127.0.0.1])
by huega.vps.phps.kr (Postfix) with SMTP id 96BE762475;
Wed, 12 Dec 2018 17:31:23 +0900 (KST)
Reply-To: <[email protected]>
From: "George Mensah"<[email protected]>
Date: Wed, 12 Dec 2018 09:48:17 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=26.1
X-Spam-Score: 261
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Your ATM card is ready for delivery get back to
me . George Mensah [...]
Content analysis details: (26.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[27.102.206.241 listed in bl.score.senderscore.com]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[27.102.206.241 listed in zen.spamhaus.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=h ... .or.kr;ip=]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
X-Spam-Flag: YES
Subject: ***SPAM*** Atten:Beneficiary.
Attention Your ATM card is ready for delivery get back to me .
George Mensah
Envelope-to:
Delivery-date: Wed, 12 Dec 2018 00:50:23 -0800
Received: from [27.102.206.241] (port=34707 helo=huega.vps.phps.kr)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1gX0Di-0004Mi-Dk
for; Wed, 12 Dec 2018 00:50:22 -0800
Received: from User (localhost [127.0.0.1])
by huega.vps.phps.kr (Postfix) with SMTP id 96BE762475;
Wed, 12 Dec 2018 17:31:23 +0900 (KST)
Reply-To: <[email protected]>
From: "George Mensah"<[email protected]>
Date: Wed, 12 Dec 2018 09:48:17 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=26.1
X-Spam-Score: 261
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention Your ATM card is ready for delivery get back to
me . George Mensah [...]
Content analysis details: (26.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[27.102.206.241 listed in bl.score.senderscore.com]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[27.102.206.241 listed in zen.spamhaus.org]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=h ... .or.kr;ip=]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
X-Spam-Flag: YES
Subject: ***SPAM*** Atten:Beneficiary.
Attention Your ATM card is ready for delivery get back to me .
George Mensah
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces