by buried under 419s
Mon Jan 15, 2018 1:11 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 15 Jan 2018 06:17:51 -0800
Received: from ns1.wnetsystem.com.br ([177.12.92.8]:54481 helo=srv01.wnetsystem.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eb5a9-0001Jo-Nv
for ; Mon, 15 Jan 2018 06:17:51 -0800
Received: from [41.203.72.7] (helo=User)
by srv01.wnetsystem.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1eb5W2-0001zB-Fb; Mon, 15 Jan 2018 12:13:35 -0200
Reply-To: <[email protected]>
Date: Mon, 15 Jan 2018 15:13:32 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=41.2
X-Spam-Score: 412
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Thanks for connecting with us. CreditIncome Limited (UK) invite
you to benefit from our new low rate loan program. We offer flexible loans
and funding for investment projects to expand our business growth globally.
Whether you are a start-up business looking to launch a pilot project, a
company with proven business -investment that needs help reaching commercial
scale. We are open to structure a funding package and agreement based on
your financial projections. We are currently funding for: * Equipment financing
* Business Acquisition * Business Expansion * Commercial Real Estate, heavy
constructions, farm lands,Fix & Flip and multi-family projects Our low interest-loan
offer is available to both startups and existing business., For information
on our low interest-rates loans and application , kindly send in your inquiries
via our admin-email : [email protected] Cordially, Regards,
Mr.Victor Gabe Anna Sigurlaug Pálsdóttir CreditIncome Limited Company Registered
Number 02591468 www.creditincomelimited.com [...]
Content analysis details: (41.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 NSL_RCVD_HELO_USER Received from HELO User
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[41.203.72.7 listed in zen.spamhaus.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.12.92.8 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.12.92.8 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.203.72.7>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(annasigurlaugpalsdottir68[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.8 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.6 MSOE_MID_WRONG_CASE No description available.
2.2 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.6 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Sir / Madam
Thanks for connecting with us.
CreditIncome Limited (UK) invite you to benefit from our new low rate
loan program. We offer flexible loans and funding for investment
projects to expand our business growth globally.
Whether you are a start-up business looking to launch a pilot project,
a company with proven business -investment that needs help reaching
commercial scale. We are open to structure a funding package and
agreement based on your financial projections. We are currently
funding for:
* Equipment financing
* Business Acquisition
* Business Expansion
* Commercial Real Estate, heavy constructions, farm lands,Fix & Flip
and multi-family projects
Our low interest-loan offer is available to both startups and existing
business., For information on our low interest-rates loans and
application , kindly send in your inquiries via our admin-email :
[email protected]
Cordially,
Regards,
Mr.Victor Gabe
CreditIncome Limited
Company Registered Number 02591468
www.creditincomelimited.com
Envelope-to:
Delivery-date: Mon, 15 Jan 2018 06:17:51 -0800
Received: from ns1.wnetsystem.com.br ([177.12.92.8]:54481 helo=srv01.wnetsystem.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1eb5a9-0001Jo-Nv
for ; Mon, 15 Jan 2018 06:17:51 -0800
Received: from [41.203.72.7] (helo=User)
by srv01.wnetsystem.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1eb5W2-0001zB-Fb; Mon, 15 Jan 2018 12:13:35 -0200
Reply-To: <[email protected]>
Date: Mon, 15 Jan 2018 15:13:32 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=41.2
X-Spam-Score: 412
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Thanks for connecting with us. CreditIncome Limited (UK) invite
you to benefit from our new low rate loan program. We offer flexible loans
and funding for investment projects to expand our business growth globally.
Whether you are a start-up business looking to launch a pilot project, a
company with proven business -investment that needs help reaching commercial
scale. We are open to structure a funding package and agreement based on
your financial projections. We are currently funding for: * Equipment financing
* Business Acquisition * Business Expansion * Commercial Real Estate, heavy
constructions, farm lands,Fix & Flip and multi-family projects Our low interest-loan
offer is available to both startups and existing business., For information
on our low interest-rates loans and application , kindly send in your inquiries
via our admin-email : [email protected] Cordially, Regards,
Mr.Victor Gabe Anna Sigurlaug Pálsdóttir CreditIncome Limited Company Registered
Number 02591468 www.creditincomelimited.com [...]
Content analysis details: (41.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 NSL_RCVD_HELO_USER Received from HELO User
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[41.203.72.7 listed in zen.spamhaus.org]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.12.92.8 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.12.92.8 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.203.72.7>]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(annasigurlaugpalsdottir68[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.8 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.6 MSOE_MID_WRONG_CASE No description available.
2.2 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.6 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
X-Spam-Flag: YES
Subject: ***SPAM*** Attention: Sir / Madam
Thanks for connecting with us.
CreditIncome Limited (UK) invite you to benefit from our new low rate
loan program. We offer flexible loans and funding for investment
projects to expand our business growth globally.
Whether you are a start-up business looking to launch a pilot project,
a company with proven business -investment that needs help reaching
commercial scale. We are open to structure a funding package and
agreement based on your financial projections. We are currently
funding for:
* Equipment financing
* Business Acquisition
* Business Expansion
* Commercial Real Estate, heavy constructions, farm lands,Fix & Flip
and multi-family projects
Our low interest-loan offer is available to both startups and existing
business., For information on our low interest-rates loans and
application , kindly send in your inquiries via our admin-email :
[email protected]
Cordially,
Regards,
Mr.Victor Gabe
CreditIncome Limited
Company Registered Number 02591468
www.creditincomelimited.com
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces