[ewg] Mail delivery failed: returning message to sender

Sat Aug 16 09:09:55 PDT 2008

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  corbinbonnet at rosso-m.ru
    SMTP error from remote mail server after RCPT TO:<corbinbonnet at rosso-m.ru>:
    host 194.85.88.226 [194.85.88.226]: 552 corbinbonnet at rosso-m.ru account is full (quota exceeded), rejecting

------ This is a copy of the message, including all the headers. ------

Return-path: <ewg at openib.org>
Received: from [75.94.218.61] (port=59706 helo=75-94-218-61.lon.clearwire-dns.net)
	by mx01.nicmail.ru with esmtp (Exim 4.69)
	(envelope-from <ewg at openib.org>)
	id 1KUOLi-000O7b-DT
	for corbinbonnet at rosso-m.ru; Sat, 16 Aug 2008 20:09:55 +0400
Message-ID: <000601c8ffba$0479fcd9$1702368c at khqhmmd>
From: "barry jiong" <ewg at openib.org>
To: <corbinbonnet at rosso-m.ru>
Subject: Stunning Look up porno Beyonce
Date: Sat, 16 Aug 2008 14:22:26 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0003_01C8FFBA.04750800"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300
Received-SPF: none
X-Blacklisted-By: bl.spamcop.net
X-Spam-Level: XXXXXXXX
X-Spam-Report: Spam detection software, running on the system "spam03.mail.nic.ru", has
	identified this incoming email as possible spam.  The original message
	has been attached to this so you can view it (if it isn't spam) or label
	similar future email.  If you have any questions, see
	the administrator of that system for details.
	Content preview:  #RoBosJCarmen Electra Shocking mp3. #FNCEcn Go the site>>
	Carmen Electra Shocking mp3. [...] 
	Content analysis details:   (8.1 points, 5.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	2.0 DNS_BLACKLISTED        Found a X-Blacklisted-By header
	4.4 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
	2)
	0.6 FH_HELO_EQ_D_D_D_D     Helo is d-d-d-d
	1.0 BAYES_60               BODY: Bayesian spam probability is 60 to 80%
	[score: 0.7911]
	0.0 HTML_MESSAGE           BODY: HTML included in message
	0.1 RDNS_NONE              Delivered to trusted network by a host with no rDNS

This is a multi-part message in MIME format.

------=_NextPart_000_0003_01C8FFBA.04750800
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

#RoBosJCarmen Electra Shocking mp3.

#FNCEcn
Go the site>>

------=_NextPart_000_0003_01C8FFBA.04750800
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2720.3000" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV style=3D"background: #E1ECFF; text-align:center; padding:19px; =
width:70%; font-weight:bold; height:100%;">
<STYLE>
#RoBosJ
</STYLE>
<DIV id=3D"sjXfbg">
Carmen Electra Shocking mp3.<BR>
</DIV>
<STYLE>
#FNCEcn
</STYLE>
<DIV class=3D"MkNjSe">
<B><A href=3D"http://mgmvalet.com/index1.php">Go the site>></A></B>
</DIV>
</DIV></BODY></HTML>
------=_NextPart_000_0003_01C8FFBA.04750800--