*****SPAM***** FINAL NOTIFICATION ON FOREIGN PAYMENT.

Our MailScanner believes that the attachment to this message sent to you

From: ba7pc@ba7pc.com.br
Subject: FINAL NOTIFICATION ON FOREIGN PAYMENT.

is Unsolicited Commercial Email (spam). Unless you are sure that this message
is incorrectly thought to be spam, please delete this message without opening
it. Opening spam messages might allow the spammer to verify your email
address.

If you believe that this message has been incorrectly marked as spam, please
forward this email to postmaster.

Date: 20151221
pts rule name description
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.1 NSL_RCVD_FROM_USER Received from User
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(ecobanknigplc52[at]gmail.com)
1.2 MISSING_HEADERS Missing To: header
3.0 HK_SCAM_N2 BODY: No description available.
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.4 DNS_FROM_AHBL_RHSBL RBL: Envelope sender listed in dnsbl.ahbl.org
[listed in ba7pc.com.br.rhsbl.ahbl.org. IN]
[A]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 FROM_MISSP_USER From misspaced, from "User"
0.8 FSL_NEW_HELO_USER No description available.
0.1 MISSING_MID Missing Message-Id: header
2.5 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
1.9 REPLYTO_WITHOUT_TO_CC No description available.
1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
2.3 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.2 FROM_MISSPACED From: missing whitespace
2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
1.8 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 LOTTO_DEPT Claims Department
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)