[email protected] HEARTLAND LOAN FIRM

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 11 Dec 2017 10:58:07 -0800
Received: from cams.careind.net ([1.23.164.19]:48735)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1eOTH8-0005Q5-Gp
for ; Mon, 11 Dec 2017 10:58:07 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
by cams.careind.net (Postfix) with ESMTP id 350C12860409;
Tue, 12 Dec 2017 00:00:27 +0530 (IST)
X-Virus-Scanned: amavisd-new at careind.net
Received: from cams.careind.net ([127.0.0.1])
by localhost (cams.careind.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id e7ai51UMOdYY; Tue, 12 Dec 2017 00:00:26 +0530 (IST)
Received: from cams.careind.net (cams.careind.net [192.168.0.5])
by cams.careind.net (Postfix) with ESMTP id 4A5062850085;
Tue, 12 Dec 2017 00:00:24 +0530 (IST)
Date: Tue, 12 Dec 2017 00:00:24 +0530 (IST)
From: HEARTLAND LOAN FIRM <[email protected]>
Reply-To: HEARTLAND LOAN FIRM <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: [192.168.0.5]
X-Mailer: Zimbra 7.2.3_GA_2872 (zclient/7.2.3_GA_2872)
To: undisclosed-recipients:;
X-Spam-Status: Yes, score=12.8
X-Spam-Score: 128
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Welcome to HEARTLAND LOAN FIRM,we give out loans from the
range of €9,000 to €900,000,000 at 2% interest rate. Reply if you are
interested [...]

Content analysis details: (12.8 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[1.23.164.19 listed in bb.barracudacentral.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[1.23.164.19 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(heartlandloancenter8282[at]gmail.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject: ***SPAM***


Welcome to HEARTLAND LOAN FIRM,we give out loans from the range of €9,000 to
€900,000,000 at 2% interest rate. Reply if you are interested