If I open the message, the sender (in this particular case) is shown as:
"???? ????????????" [qisdri@boxlight.com]
In the header, it is shown as:
From: =?koi8-r?B?IuDSycog98zBxMnNydLP18neIg==?=
<qisdri@boxlight.com>
Does this info help? There are so many variations of this that it seems difficult to trap each one.
Here is a snipet of typical content:
LADIES NIGHT
(?. ????????, ?. ???????, ?. ???????, ?. ?????????, ??????? ??????? ??? ?????? ?? ??????????) - 8, 9, 15.06 ? 13, 20, 27.07
????????? ?????? ???????? ???????? ? ????????, ???? ? ??????????? ??????
(?????????? ????? "??????? ?") - 9, 10, 23, 24.06 ? 1, 2.07
? ??? ??????? ???????, ????? ??? ????? ?????????, ??? ?????????? ? ????? ???????? ?? ????????? - ? ??? ?? ??? ???! ??, ?????? ??? ?????????? ?????, ???? ? ????? ????????. ??, ????? ????, ??? ???????. ?? ??????!