Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

"Email Team" <jlopez@rovellacarranza.com.ar>

DO NOT click on any links in these emails.

"Email Team" <jlopez@rovellacarranza.com.ar>

Unread postby SlapHappy » Wed Jan 04, 2017 8:44 pm

* 14.139.59.198 Nkn Core Network India

Return-path: <jlopez@rovellacarranza.com.ar>
Envelope-to: xxx
Delivery-date: Wed, 04 Jan 2017
Received: from mail.rovellae.com.ar ([190.3.13.34]:38793
helo=zimbraos.rovellacarranza.com.ar)
by xxx with esmtp (Exim 4.87)
(envelope-from <jlopez@rovellacarranza.com.ar>)
id 1cOePh-0004Tz-PL
for xxx; Wed, 04 Jan 2017
Received: from localhost (localhost [127.0.0.1])
by zimbraos.rovellacarranza.com.ar (Postfix) with ESMTP id D762B7ECE9DF
for <xxxx>; Tue, 3 Jan 2017 (ART)
X-Virus-Scanned: amavisd-new at zimbraos.rovellacarranza.com.ar
Received: from zimbraos.rovellacarranza.com.ar ([127.0.0.1])
by localhost (zimbraos.rovellacarranza.com.ar [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id MQdIViiK8UXi for <xxx>;
Tue, 3 Jan 2017 (ART)
Received: from TESTXENAPP32.slbsrsv.ac.in (unknown [14.139.59.198])
by zimbraos.rovellacarranza.com.ar (Postfix) with ESMTPSA id 6124B71FE2C1
for <xxx>; Tue, 3 Jan 2017 (ART)
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: EMAIL DE-ACTIVATION NOTICE (xxx@xxx)
To: xxx@xxx
From: "Email Team" <jlopez@rovellacarranza.com.ar>
Date: Wed, 04 Jan 2017
Message-Id: <20170104003826.6124B71FE2C1@zimbraos.rovellacarranza.com.ar>
X-Spam-Status: No, score=2.6
X-Spam-Score: 26
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "xxx,
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview:
[...]
Content analysis details: (2.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/Dns ... nsbl-block
for more information.
[URIs: xxx
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[14.139.59.198 listed in dnsbl.sorbs.net]
0.6 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: frenzdigital.com.np]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.4926]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
X-Spam-Flag: NO


Hello xxx@xxx,


Your account has been suspended due to mail policy violation,

CLICK HERE to re-verify and continue usage.
http:/ /frenzdigital.com.np/edomail/Account/index.php?email=xxx@xxx

Best,
© 2016 mail All rights reserved. NMLSR ID 399801
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 10 guests