by buried under 419s
Mon Oct 15, 2018 9:22 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 14 Oct 2018 23:11:25 -0700
Received: from earth.syntechcreative.biz ([104.236.105.103]:38585)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gBw63-0003A2-T4
for ; Sun, 14 Oct 2018 23:11:25 -0700
Received: from User (unknown [42.191.198.51])
by earth.syntechcreative.biz (Postfix) with ESMTPA id EE947317EE9;
Sun, 14 Oct 2018 15:55:29 -0500 (EST)
Reply-To: <[email protected]>
From: "PRIME LOAN FUNDING"<[email protected]>
Date: Sun, 14 Oct 2018 21:55:55 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=31.1
X-Spam-Score: 311
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: We offer all kind of Loans at 2% rate. Get back to us with
the information below if you are interested. Name: Phone: Loan Duration:
Address: Amount: Tel: Contact us for more information. [...]
Content analysis details: (31.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[42.191.198.51 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?104.236.105.103>]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[104.236.105.103 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[104.236.105.103 listed in bl.score.senderscore.com]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(loanfundingprime11[at]gmail.com)
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** Affordable Loan Offer
We offer all kind of Loans at 2% rate. Get back to us with the
information below if you are interested.
Name:
Phone:
Loan Duration:
Address:
Amount:
Tel:
Contact us for more information.
Loan Term Board
Prime Loan Funding
Envelope-to:
Delivery-date: Sun, 14 Oct 2018 23:11:25 -0700
Received: from earth.syntechcreative.biz ([104.236.105.103]:38585)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gBw63-0003A2-T4
for ; Sun, 14 Oct 2018 23:11:25 -0700
Received: from User (unknown [42.191.198.51])
by earth.syntechcreative.biz (Postfix) with ESMTPA id EE947317EE9;
Sun, 14 Oct 2018 15:55:29 -0500 (EST)
Reply-To: <[email protected]>
From: "PRIME LOAN FUNDING"<[email protected]>
Date: Sun, 14 Oct 2018 21:55:55 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=31.1
X-Spam-Score: 311
X-Spam-Bar: +++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: We offer all kind of Loans at 2% rate. Get back to us with
the information below if you are interested. Name: Phone: Loan Duration:
Address: Amount: Tel: Contact us for more information. [...]
Content analysis details: (31.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[42.191.198.51 listed in zen.spamhaus.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?104.236.105.103>]
6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)
[104.236.105.103 listed in bl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[104.236.105.103 listed in bl.score.senderscore.com]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(loanfundingprime11[at]gmail.com)
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.6 MISSING_MID Missing Message-Id: header
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
X-Spam-Flag: YES
Subject: ***SPAM*** Affordable Loan Offer
We offer all kind of Loans at 2% rate. Get back to us with the
information below if you are interested.
Name:
Phone:
Loan Duration:
Address:
Amount:
Tel:
Contact us for more information.
Loan Term Board
Prime Loan Funding
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces