by buried under 419s
Sat Jan 27, 2018 7:09 pm
Return-path: <>
Envelope-to:
Delivery-date: Sat, 27 Jan 2018 13:50:43 -0800
Received: from correo.fie.umich.mx ([148.216.17.22]:38814)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
id 1efYMz-0000SJ-C4
for ; Sat, 27 Jan 2018 13:50:42 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
by correo.fie.umich.mx (Postfix) with ESMTP id 184572ABBF11;
Sat, 27 Jan 2018 12:31:13 -0600 (CST)
Received: from correo.fie.umich.mx ([127.0.0.1])
by localhost (correo.fie.umich.mx [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id SLyWO2vO4a_0; Sat, 27 Jan 2018 12:31:12 -0600 (CST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by correo.fie.umich.mx (Postfix) with ESMTP id B07DA2ABA861;
Sat, 27 Jan 2018 12:08:05 -0600 (CST)
X-Virus-Scanned: amavisd-new at fie.umich.mx
Received: from correo.fie.umich.mx ([127.0.0.1])
by localhost (correo.fie.umich.mx [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id TDWCSJA4T-5W; Sat, 27 Jan 2018 12:08:05 -0600 (CST)
Received: from [192.168.2.110] (unknown [41.90.131.194])
by correo.fie.umich.mx (Postfix) with ESMTPSA id DDD112AB523D;
Sat, 27 Jan 2018 11:57:36 -0600 (CST)
Content-Type: multipart/alternative; boundary="===============1791024576=="
MIME-Version: 1.0
To: Recipients <>
From: Mr Dickson Walker <""@saludstgo.cl>
Date: Sat, 27 Jan 2018 10:07:29 -0800
Reply-To: [email protected]
X-Antivirus: Avast (VPS 180126-6, 01/26/2018), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=13.9
X-Spam-Score: 139
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Do you need business or personal loan? If yes, then get back
for more details. --- This email has been checked for viruses by Avast antivirus
software. https://www.avast.com/antivirus Do you need business or personal
loan? If yes, then get back for more details. [...]
Content analysis details: (13.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.1 TO_MALFORMED To: has a malformed address
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?148.216.17.22>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dicksonwalker3[at]gmail.com)
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[148.216.17.22 listed in wl.mailspike.net]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
2.1 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** Loan Offer,
Do you need business or personal loan? If yes, then get back for more details
Envelope-to:
Delivery-date: Sat, 27 Jan 2018 13:50:43 -0800
Received: from correo.fie.umich.mx ([148.216.17.22]:38814)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
id 1efYMz-0000SJ-C4
for ; Sat, 27 Jan 2018 13:50:42 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
by correo.fie.umich.mx (Postfix) with ESMTP id 184572ABBF11;
Sat, 27 Jan 2018 12:31:13 -0600 (CST)
Received: from correo.fie.umich.mx ([127.0.0.1])
by localhost (correo.fie.umich.mx [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id SLyWO2vO4a_0; Sat, 27 Jan 2018 12:31:12 -0600 (CST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by correo.fie.umich.mx (Postfix) with ESMTP id B07DA2ABA861;
Sat, 27 Jan 2018 12:08:05 -0600 (CST)
X-Virus-Scanned: amavisd-new at fie.umich.mx
Received: from correo.fie.umich.mx ([127.0.0.1])
by localhost (correo.fie.umich.mx [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id TDWCSJA4T-5W; Sat, 27 Jan 2018 12:08:05 -0600 (CST)
Received: from [192.168.2.110] (unknown [41.90.131.194])
by correo.fie.umich.mx (Postfix) with ESMTPSA id DDD112AB523D;
Sat, 27 Jan 2018 11:57:36 -0600 (CST)
Content-Type: multipart/alternative; boundary="===============1791024576=="
MIME-Version: 1.0
To: Recipients <>
From: Mr Dickson Walker <""@saludstgo.cl>
Date: Sat, 27 Jan 2018 10:07:29 -0800
Reply-To: [email protected]
X-Antivirus: Avast (VPS 180126-6, 01/26/2018), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=13.9
X-Spam-Score: 139
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Do you need business or personal loan? If yes, then get back
for more details. --- This email has been checked for viruses by Avast antivirus
software. https://www.avast.com/antivirus Do you need business or personal
loan? If yes, then get back for more details. [...]
Content analysis details: (13.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.1 TO_MALFORMED To: has a malformed address
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?148.216.17.22>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dicksonwalker3[at]gmail.com)
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[148.216.17.22 listed in wl.mailspike.net]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
2.1 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** Loan Offer,
Do you need business or personal loan? If yes, then get back for more details
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces