by buried under 419s
Mon Oct 30, 2017 9:25 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 30 Oct 2017 10:20:39 -0700
Received: from mail.choray.vn ([222.253.120.213]:4155 helo=choray.vn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1e9Dji-000487-7P
for ; Mon, 30 Oct 2017 10:20:39 -0700
X-MDAV-Processed: choray.vn, Tue, 31 Oct 2017 00:27:53 +0700
Received: from User by choray.vn (MDaemon PRO v10.0.0)
with ESMTP id md50000115296.msg
for <>; Tue, 31 Oct 2017 00:27:48 +0700
X-Spam-Processed: choray.vn, Tue, 31 Oct 2017 00:27:48 +0700
(not processed: message from trusted or authenticated source)
X-MDPtrLookup-Result: hardfail ip=142.0.37.229 (no ptr match) (choray.vn)
X-MDHeloLookup-Result: pass smtp.helo=User (ip=142.0.37.229) (choray.vn)
X-Authenticated-Sender: [email protected]
X-MDRemoteIP: 142.0.37.229
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-MDaemon-Deliver-To:
Reply-To: <[email protected]>
From: "Mr.Walter Heusser (CEO)"<[email protected]>
Date: Mon, 30 Oct 2017 02:42:36 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=27.6
X-Spam-Score: 276
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, We are a private lender based in UK,branched in TURKEY,CYPRUS,INDIA
You are free to Contact us for any type of loan, initial capital to Finance
the early stage ventures,and expansion of existing businesses investment
We can finance any Project . [...]
Content analysis details: (27.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[222.253.120.213 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[222.253.120.213 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?222.253.120.213>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[222.253.120.213 listed in bl.score.senderscore.com]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[222.253.120.213 listed in dnsbl.sorbs.net]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
1.0 MISSING_HEADERS Missing To: header
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** APPLY FOR A LOAN AT ANY RATE!!
Hello,
We are a private lender based in UK,branched in TURKEY,CYPRUS,INDIA
You are free to Contact us for any type of loan, initial capital to
Finance the early stage ventures,and expansion of existing businesses
investment We can finance any Project .
Our Company Offer loans to individuals and companies at interest rate
of 2% Per Annual
If you are interested kindly contact us for with the details below:
1.Your Full Name :
2.Your Residential Address:
3.Age:
4.Gender:
5.Marital Status:
6.Place Of Work:
7.Loan Amount Needed:
8.Purpose Of Loan:
9.Loan Duration:
10.Tel Number:
Contact us immediately with below E-mail address: [email protected]
Thanks You.
Mr.Walter Heusser (CEO)
(TEAM DIRECTOR) MCKENZIE MICRO FINANCE FIRM.
Envelope-to:
Delivery-date: Mon, 30 Oct 2017 10:20:39 -0700
Received: from mail.choray.vn ([222.253.120.213]:4155 helo=choray.vn)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1e9Dji-000487-7P
for ; Mon, 30 Oct 2017 10:20:39 -0700
X-MDAV-Processed: choray.vn, Tue, 31 Oct 2017 00:27:53 +0700
Received: from User by choray.vn (MDaemon PRO v10.0.0)
with ESMTP id md50000115296.msg
for <>; Tue, 31 Oct 2017 00:27:48 +0700
X-Spam-Processed: choray.vn, Tue, 31 Oct 2017 00:27:48 +0700
(not processed: message from trusted or authenticated source)
X-MDPtrLookup-Result: hardfail ip=142.0.37.229 (no ptr match) (choray.vn)
X-MDHeloLookup-Result: pass smtp.helo=User (ip=142.0.37.229) (choray.vn)
X-Authenticated-Sender: [email protected]
X-MDRemoteIP: 142.0.37.229
X-Return-Path: [email protected]
X-Envelope-From: [email protected]
X-MDaemon-Deliver-To:
Reply-To: <[email protected]>
From: "Mr.Walter Heusser (CEO)"<[email protected]>
Date: Mon, 30 Oct 2017 02:42:36 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=27.6
X-Spam-Score: 276
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello, We are a private lender based in UK,branched in TURKEY,CYPRUS,INDIA
You are free to Contact us for any type of loan, initial capital to Finance
the early stage ventures,and expansion of existing businesses investment
We can finance any Project . [...]
Content analysis details: (27.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[222.253.120.213 listed in psbl.surriel.com]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[222.253.120.213 listed in bb.barracudacentral.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?222.253.120.213>]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[222.253.120.213 listed in bl.score.senderscore.com]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[222.253.120.213 listed in dnsbl.sorbs.net]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
1.0 MISSING_HEADERS Missing To: header
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FORM_FRAUD Fill a form and a fraud phrase
X-Spam-Flag: YES
Subject: ***SPAM*** APPLY FOR A LOAN AT ANY RATE!!
Hello,
We are a private lender based in UK,branched in TURKEY,CYPRUS,INDIA
You are free to Contact us for any type of loan, initial capital to
Finance the early stage ventures,and expansion of existing businesses
investment We can finance any Project .
Our Company Offer loans to individuals and companies at interest rate
of 2% Per Annual
If you are interested kindly contact us for with the details below:
1.Your Full Name :
2.Your Residential Address:
3.Age:
4.Gender:
5.Marital Status:
6.Place Of Work:
7.Loan Amount Needed:
8.Purpose Of Loan:
9.Loan Duration:
10.Tel Number:
Contact us immediately with below E-mail address: [email protected]
Thanks You.
Mr.Walter Heusser (CEO)
(TEAM DIRECTOR) MCKENZIE MICRO FINANCE FIRM.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces