[email protected] Nastuf Steph

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 28 Mar 2018 14:49:09 -0700
Received: from mx.rbadecomunicacao.com.br ([201.90.229.149]:32828 helo=mail.rbadecomunicacao.com.br)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1f1IwL-0005A5-0T
for ; Wed, 28 Mar 2018 14:49:09 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.rbadecomunicacao.com.br (Postfix) with ESMTP id 021A82E697A;
Wed, 28 Mar 2018 18:35:33 -0300 (-03)
Received: from mail.rbadecomunicacao.com.br ([127.0.0.1])
by localhost (mail.rbadecomunicacao.com.br [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id 4SsPq0AnzsSj; Wed, 28 Mar 2018 18:35:32 -0300 (-03)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.rbadecomunicacao.com.br (Postfix) with ESMTP id 4DE7F2E6979;
Wed, 28 Mar 2018 18:34:58 -0300 (-03)
X-Virus-Scanned: amavisd-new at rbadecomunicacao.com.br
Received: from mail.rbadecomunicacao.com.br ([127.0.0.1])
by localhost (mail.rbadecomunicacao.com.br [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id kVOXXWw3bluT; Wed, 28 Mar 2018 18:34:57 -0300 (-03)
Received: from [10.32.59.96] (unknown [197.211.63.66])
by mail.rbadecomunicacao.com.br (Postfix) with ESMTPSA id 84BB02E684A;
Wed, 28 Mar 2018 18:34:10 -0300 (-03)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: "Nastuf Steph" <[email protected]>
Date: Wed, 28 Mar 2018 22:34:35 +0100
Reply-To: [email protected]
X-Antivirus: Avast (VPS 180328-6, 03/28/2018), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=8.4
X-Spam-Score: 84
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Hello Friend, My name is Nastuf Steph. I am top-exec in a
global bank here in Asia. I have an offer for you that will greatly benefit
us both. A customer of ours died 10-years ago and left unclaimed, dormant
funds in our bank. If we work together, we can easily claim this money because
of my position and your surname. If you wish, I can send you more details.
[...]

Content analysis details: (8.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[197.211.63.66 listed in zen.spamhaus.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.8 KAM_OTHER_BAD_TLD Other untrustworthy TLDs
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.5 KAM_LINKBAIT Short messages containing little more than a link, from
a domain with no security in place
X-Spam-Flag: YES
Subject: ***SPAM*** HELLO


Hello Friend,

My name is Nastuf Steph. I am top-exec in a global bank here in Asia.

I have an offer for you that will greatly benefit us both. A customer of ours died
10-years ago and left unclaimed, dormant funds in our bank. If we work together, we
can easily claim this money because of my position and your surname. If you wish, I
can send you more details.

Sincerely,
Nastuf Steph