by buried under 419s
Tue Apr 10, 2018 11:36 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 10 Apr 2018 07:52:44 -0700
Received: from ns1.wnetsystem.com.br ([177.12.92.8]:59519 helo=srv01.wnetsystem.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1f5udW-0003sO-Ua
for ; Tue, 10 Apr 2018 07:52:44 -0700
Received: from 202-39-28-79.hinet-ip.hinet.net ([202.39.28.79] helo=User)
by srv01.wnetsystem.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1f5ucK-00079t-Q3; Tue, 10 Apr 2018 11:51:29 -0300
Reply-To: <[email protected]>
From: "Mr Ahmed Abdullahalmuhari"<[email protected]>
Date: Tue, 10 Apr 2018 22:51:39 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="_iso-2022-jp$ESC"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=33.5
X-Spam-Score: 335
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam, My Name is Mr.Ahmed Abdullah Al Muhairi Member
High Investment Committee Arab Investment Company (TAIC) is a Pan-Arabjoint-stock
company established in July 1974 andowned by governments of 17 Arab states.
Due to the global need for funding TAIC is participating in Global funding
Scheme at the moment . [...]
Content analysis details: (33.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.0 NSL_RCVD_HELO_USER Received from HELO User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[177.12.92.8 listed in psbl.surriel.com]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[177.12.92.8 listed in bl.mailspike.net]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.12.92.8>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.12.92.8 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(abdullahalmuharia[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Investment Proposal
Dear Sir/Madam,
My Name is Mr.Ahmed Abdullah Al Muhairi Member High Investment
Committee Arab Investment Company (TAIC) is a Pan-Arabjoint-stock
company established in July 1974 andowned by governments of 17 Arab
states. Due to the global need for funding TAIC is participating in
Global funding Scheme at the moment .
We Fund Real Estate Investors Funding, Construction Loans, Start Up
Loans, Mortgage Loans, HUD Personal Loan, Business Loan, FHA loans, VA
loans Conforming Loans etc.We fund early-stage start-up
ventures,partnership, is not Ventures and the total completion and
investment expansion projects. Leverage walk-in equity on discounted
commercial or residential purchases, Brokers welcome! Contact us for
start-up funding, commercial RE finance, seed capital, early stage
start-up ventures, Joint Venture / Partnership investment, Loans,
Mortgages.
We can fund excess of $800M for more details contact me on
Email: [email protected]
Regards,
Mr Ahmed Abdullahalmuhari
Member
High Investment Committe
The Arab Investment Company S.A.A
Envelope-to:
Delivery-date: Tue, 10 Apr 2018 07:52:44 -0700
Received: from ns1.wnetsystem.com.br ([177.12.92.8]:59519 helo=srv01.wnetsystem.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1f5udW-0003sO-Ua
for ; Tue, 10 Apr 2018 07:52:44 -0700
Received: from 202-39-28-79.hinet-ip.hinet.net ([202.39.28.79] helo=User)
by srv01.wnetsystem.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1f5ucK-00079t-Q3; Tue, 10 Apr 2018 11:51:29 -0300
Reply-To: <[email protected]>
From: "Mr Ahmed Abdullahalmuhari"<[email protected]>
Date: Tue, 10 Apr 2018 22:51:39 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="_iso-2022-jp$ESC"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=33.5
X-Spam-Score: 335
X-Spam-Bar: +++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam, My Name is Mr.Ahmed Abdullah Al Muhairi Member
High Investment Committee Arab Investment Company (TAIC) is a Pan-Arabjoint-stock
company established in July 1974 andowned by governments of 17 Arab states.
Due to the global need for funding TAIC is participating in Global funding
Scheme at the moment . [...]
Content analysis details: (33.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.0 NSL_RCVD_HELO_USER Received from HELO User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[177.12.92.8 listed in psbl.surriel.com]
2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
[177.12.92.8 listed in bl.mailspike.net]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.12.92.8>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.12.92.8 listed in zen.spamhaus.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(abdullahalmuharia[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC No description available.
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Investment Proposal
Dear Sir/Madam,
My Name is Mr.Ahmed Abdullah Al Muhairi Member High Investment
Committee Arab Investment Company (TAIC) is a Pan-Arabjoint-stock
company established in July 1974 andowned by governments of 17 Arab
states. Due to the global need for funding TAIC is participating in
Global funding Scheme at the moment .
We Fund Real Estate Investors Funding, Construction Loans, Start Up
Loans, Mortgage Loans, HUD Personal Loan, Business Loan, FHA loans, VA
loans Conforming Loans etc.We fund early-stage start-up
ventures,partnership, is not Ventures and the total completion and
investment expansion projects. Leverage walk-in equity on discounted
commercial or residential purchases, Brokers welcome! Contact us for
start-up funding, commercial RE finance, seed capital, early stage
start-up ventures, Joint Venture / Partnership investment, Loans,
Mortgages.
We can fund excess of $800M for more details contact me on
Email: [email protected]
Regards,
Mr Ahmed Abdullahalmuhari
Member
High Investment Committe
The Arab Investment Company S.A.A
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces