[email protected] Prospect Finance

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 03 Aug 2017 12:06:12 -0700
Received: from mail.intanpariwara.or.id ([202.173.17.162]:52484)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ddLRi-0003iF-E8
for ; Thu, 03 Aug 2017 12:06:12 -0700
Received: from localhost (localhost [127.0.0.1])
by mail.intanpariwara.or.id (Postfix) with ESMTP id 6787724642B;
Thu, 3 Aug 2017 22:20:55 +0700 (WIB)
Received: from mail.intanpariwara.or.id ([127.0.0.1])
by localhost (mail.intanpariwara.or.id [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id BzJOzMZnFQfK; Thu, 3 Aug 2017 22:20:55 +0700 (WIB)
Received: from localhost (localhost [127.0.0.1])
by mail.intanpariwara.or.id (Postfix) with ESMTP id D499F226974;
Thu, 3 Aug 2017 21:10:46 +0700 (WIB)
X-Virus-Scanned: amavisd-new at mail.intanpariwara.or.id
Received: from mail.intanpariwara.or.id ([127.0.0.1])
by localhost (mail.intanpariwara.or.id [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id Tx0CKmpdnl_M; Thu, 3 Aug 2017 21:10:46 +0700 (WIB)
Received: from [192.168.43.48] (unknown [197.210.24.204])
by mail.intanpariwara.or.id (Postfix) with ESMTPSA id 21E152265EC;
Thu, 3 Aug 2017 20:57:44 +0700 (WIB)
Content-Type: multipart/alternative; boundary="===============0199614380=="
MIME-Version: 1.0
To: Recipients <[email protected]>
From: "Prospect Finance 2017"<[email protected]>
Date: Thu, 03 Aug 2017 15:00:31 -0700
Reply-To: [email protected]
X-Antivirus: Avast (VPS 170803-2, 08/03/2017), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=10.9
X-Spam-Score: 109
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Do you need a loan to pay off your bills or start new investment?
contact us for any kinds of loan at:[email protected] for more info.
--- This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus [...]

Content analysis details: (10.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[202.173.17.162 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.173.17.162 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(ps367776355512[at]gmail.com)
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7950]
1.1 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** Loan Offer at 3% rate Apply Now!!!


Do you need a loan to pay off your bills or start new investment? contact us for any
kinds of loan at: [email protected] for more info.