by buried under 419s
Wed Aug 30, 2017 8:42 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 30 Aug 2017 14:15:20 -0700
Received: from ns1.wnetsystem.com.br ([177.12.92.8]:35656 helo=srv01.wnetsystem.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dnAKU-0000Qm-Dg
for ; Wed, 30 Aug 2017 14:15:20 -0700
Received: from [197.211.61.133] (helo=User)
by srv01.wnetsystem.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1dnABr-0001tQ-NY; Wed, 30 Aug 2017 18:06:25 -0300
Reply-To: <[email protected]>
From: "Al-Fadhli Mohsan Abdul"<[email protected]>
Date: Wed, 30 Aug 2017 22:06:27 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=29.7
X-Spam-Score: 297
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system ",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Sir / Madam We offer Loan and Project Funding services.
We also finance Projects through Joint Venture Services (JVC) using as non-recourse
Loan . Our Interest rate is 2% annually & 3 Years Grace Period and Loan re-payment
duration of ten (10) Years. Brokers and Intermediaries are welcome to work
with our Company as we offer Great commission to our Brokers. For further
Inquiry and Information about our Services contact us by email:[email protected]
[...]
Content analysis details: (29.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[177.12.92.8 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.12.92.8 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[177.12.92.8 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.12.92.8 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.61.133 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.211.61.133>]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(alfadhliabdul111[at]gmail.com)
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Sir / Madam
Attention: Sir / Madam
We offer Loan and Project Funding services. We also finance Projects through Joint
Venture Services (JVC) using as non-recourse Loan . Our Interest rate is 2% annually
& 3 Years Grace Period and Loan re-payment duration of ten (10) Years. Brokers
and Intermediaries are welcome to work with our Company as we offer Great commission
to our Brokers. For further Inquiry and Information about our Services contact us by
email: [email protected]
Thanks and Best regards
Al-Fadhli Mohsan Abdul
Financing Executive
Envelope-to:
Delivery-date: Wed, 30 Aug 2017 14:15:20 -0700
Received: from ns1.wnetsystem.com.br ([177.12.92.8]:35656 helo=srv01.wnetsystem.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dnAKU-0000Qm-Dg
for ; Wed, 30 Aug 2017 14:15:20 -0700
Received: from [197.211.61.133] (helo=User)
by srv01.wnetsystem.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1dnABr-0001tQ-NY; Wed, 30 Aug 2017 18:06:25 -0300
Reply-To: <[email protected]>
From: "Al-Fadhli Mohsan Abdul"<[email protected]>
Date: Wed, 30 Aug 2017 22:06:27 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=29.7
X-Spam-Score: 297
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system ",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: Sir / Madam We offer Loan and Project Funding services.
We also finance Projects through Joint Venture Services (JVC) using as non-recourse
Loan . Our Interest rate is 2% annually & 3 Years Grace Period and Loan re-payment
duration of ten (10) Years. Brokers and Intermediaries are welcome to work
with our Company as we offer Great commission to our Brokers. For further
Inquiry and Information about our Services contact us by email:[email protected]
[...]
Content analysis details: (29.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[177.12.92.8 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.12.92.8 listed in bb.barracudacentral.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[177.12.92.8 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.12.92.8 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[197.211.61.133 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?197.211.61.133>]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(alfadhliabdul111[at]gmail.com)
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.6 MSOE_MID_WRONG_CASE No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSPACED From: missing whitespace
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Sir / Madam
Attention: Sir / Madam
We offer Loan and Project Funding services. We also finance Projects through Joint
Venture Services (JVC) using as non-recourse Loan . Our Interest rate is 2% annually
& 3 Years Grace Period and Loan re-payment duration of ten (10) Years. Brokers
and Intermediaries are welcome to work with our Company as we offer Great commission
to our Brokers. For further Inquiry and Information about our Services contact us by
email: [email protected]
Thanks and Best regards
Al-Fadhli Mohsan Abdul
Financing Executive
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces