by buried under 419s
Tue Dec 24, 2019 4:57 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 8N92JwS0AV7SQQAAjbubUg
for <>; Mon, 23 Dec 2019 22:45:24 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 23 Dec 2019 22:45:24 -0800
Received: from mail-qt1-f194.google.com ([209.85.160.194]:38735)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ijdwZ-0004N5-4T
for ; Mon, 23 Dec 2019 22:45:24 -0800
Received: by mail-qt1-f194.google.com with SMTP id n15so17428857qtp.5
for <>; Mon, 23 Dec 2019 22:45:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=UucK2j+eWY0L9tJQatVFW26Tm5bg+Sry0km0Wuk0N+o=;
b=JPzT6VrnvglvebtQCnqwQpBrY5oTPxvwNxBqpnTAfO+xNxbHG2GvR2rEU+ByaHxNBN
fMnJ0MRqC9WHNfwokrWXTB8NA82SivuM9aa0mO/xND/AX+TGfOWAAUOh05Q2GTuQWNF5
xA5PoHtGuHtDA5zunK+/YUcrmFom1/Z3ob4UpbTJZTlQe7zcf2xTQeF95YQYNJ3wrmSt
yCD/cXgQJUws6+QCpjmr4mwXUCS9KrnkY6bvSmyKJgcK1OBiV6Awj7S8BrZ19A6eTG0l
wrFcN7xHClqNe6mvIchlFRtwP4OaecnCTBBd+BUVhQOmITc2vXGVKQLheCEGrSOgstg9
o6cQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=UucK2j+eWY0L9tJQatVFW26Tm5bg+Sry0km0Wuk0N+o=;
b=Nqd/fPW839P78BfCkYc23e+IyJQ4RsgiWhntxQjSbtkB44gZBiGZ/PPEq2/O6f8fGs
a+kqZqNjromBW+DBu12t/U3rWrS4C/wCCeIaqD9I4TKRDzg0M59I+MAVO/z9pCZ04oON
7qG+Dtw6gCqPmOhRIAvUBvwTb1LQXAQQgC0wSQYuduGBu6TwNm6XStcXCoKhT1OHl5k/
6Wsq7Kw+tWoKqerceKy/DEkX2SaGschhBZRU0pi8nznHqvwZrSHe8IKeG3zWaO2DGZ4s
OXb3H9PDnaw1K8nLwOekUl0CkeV+xQqnv72GeWY12p+Gb9F71MYO0ddJo6quTK6pYklU
Z9tQ==
X-Gm-Message-State: APjAAAVG/5Nn4vWH7+Kw55cAsSoiA8ncnGN/6qFDAUlFdYx8XlR7pL0q
A093lKwlyZbmb+PGNQXZ+gE17xEanqo5snGYfOQ=
X-Google-Smtp-Source: APXvYqwpCHZSu94qnunhHkcLpd7L3fXpnP1d1EoiT0FMtzHUDJiKHVCB8wKUaDwHcx/ljLVwPiQTLY6UwsqIfE0gPJ0=
X-Received: by 2002:ac8:47d3:: with SMTP id d19mr25475988qtr.142.1577169881431;
Mon, 23 Dec 2019 22:44:41 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a0c:ff4c:0:0:0:0:0 with HTTP; Mon, 23 Dec 2019 22:44:41
-0800 (PST)
Reply-To: [email protected]
From: SAL Investment Group <[email protected]>
Date: Tue, 24 Dec 2019 07:44:41 +0100
Message-ID: <CAJXRM=cFuCFECXP985t+fTmrv+WNPXt+6VPSM7hoGdZna=8BOw@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Mam, We offer funding in a form of a DIRECT LOAN
at a low interest rate at 3% per annum and we are also open to JOINT VENTURE
at 30% Return On Investment (R.O.I) for a period of 1 - 50 years with an
option for re-investment if both parties involved are satisfied with the profit
accrued from the project. Feel free to send your business plan, executive
summary and financial projection for review. We are willing to sign a Non
Disclosure Agreement with you upon request for your protection. We look forward
to doing business with you. [...]
Content analysis details: (9.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.160.194 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (couriercompanyservice234[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(couriercompanyservice234[at]gmail.com)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.194 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** We offer funding in a form of a DIRECT LOAN at a low interest rate.
Dear Sir/Mam,
We offer funding in a form of a DIRECT LOAN at a low interest rate at
3% per annum and we are also open to JOINT VENTURE at 30% Return On
Investment (R.O.I) for a period of 1 - 50 years with an option for
re-investment if both parties involved are satisfied with the profit
accrued from the project. Feel free to send your business plan,
executive summary and financial projection for review. We are willing
to sign a Non Disclosure Agreement with you upon request for your
protection. We look forward to doing business with you.
Lender: SAL Investment Group
Reply Email: [email protected]
Delivered-To:
Received: from
by with LMTP id 8N92JwS0AV7SQQAAjbubUg
for <>; Mon, 23 Dec 2019 22:45:24 -0800
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 23 Dec 2019 22:45:24 -0800
Received: from mail-qt1-f194.google.com ([209.85.160.194]:38735)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ijdwZ-0004N5-4T
for ; Mon, 23 Dec 2019 22:45:24 -0800
Received: by mail-qt1-f194.google.com with SMTP id n15so17428857qtp.5
for <>; Mon, 23 Dec 2019 22:45:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=UucK2j+eWY0L9tJQatVFW26Tm5bg+Sry0km0Wuk0N+o=;
b=JPzT6VrnvglvebtQCnqwQpBrY5oTPxvwNxBqpnTAfO+xNxbHG2GvR2rEU+ByaHxNBN
fMnJ0MRqC9WHNfwokrWXTB8NA82SivuM9aa0mO/xND/AX+TGfOWAAUOh05Q2GTuQWNF5
xA5PoHtGuHtDA5zunK+/YUcrmFom1/Z3ob4UpbTJZTlQe7zcf2xTQeF95YQYNJ3wrmSt
yCD/cXgQJUws6+QCpjmr4mwXUCS9KrnkY6bvSmyKJgcK1OBiV6Awj7S8BrZ19A6eTG0l
wrFcN7xHClqNe6mvIchlFRtwP4OaecnCTBBd+BUVhQOmITc2vXGVKQLheCEGrSOgstg9
o6cQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=UucK2j+eWY0L9tJQatVFW26Tm5bg+Sry0km0Wuk0N+o=;
b=Nqd/fPW839P78BfCkYc23e+IyJQ4RsgiWhntxQjSbtkB44gZBiGZ/PPEq2/O6f8fGs
a+kqZqNjromBW+DBu12t/U3rWrS4C/wCCeIaqD9I4TKRDzg0M59I+MAVO/z9pCZ04oON
7qG+Dtw6gCqPmOhRIAvUBvwTb1LQXAQQgC0wSQYuduGBu6TwNm6XStcXCoKhT1OHl5k/
6Wsq7Kw+tWoKqerceKy/DEkX2SaGschhBZRU0pi8nznHqvwZrSHe8IKeG3zWaO2DGZ4s
OXb3H9PDnaw1K8nLwOekUl0CkeV+xQqnv72GeWY12p+Gb9F71MYO0ddJo6quTK6pYklU
Z9tQ==
X-Gm-Message-State: APjAAAVG/5Nn4vWH7+Kw55cAsSoiA8ncnGN/6qFDAUlFdYx8XlR7pL0q
A093lKwlyZbmb+PGNQXZ+gE17xEanqo5snGYfOQ=
X-Google-Smtp-Source: APXvYqwpCHZSu94qnunhHkcLpd7L3fXpnP1d1EoiT0FMtzHUDJiKHVCB8wKUaDwHcx/ljLVwPiQTLY6UwsqIfE0gPJ0=
X-Received: by 2002:ac8:47d3:: with SMTP id d19mr25475988qtr.142.1577169881431;
Mon, 23 Dec 2019 22:44:41 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a0c:ff4c:0:0:0:0:0 with HTTP; Mon, 23 Dec 2019 22:44:41
-0800 (PST)
Reply-To: [email protected]
From: SAL Investment Group <[email protected]>
Date: Tue, 24 Dec 2019 07:44:41 +0100
Message-ID: <CAJXRM=cFuCFECXP985t+fTmrv+WNPXt+6VPSM7hoGdZna=8BOw@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Mam, We offer funding in a form of a DIRECT LOAN
at a low interest rate at 3% per annum and we are also open to JOINT VENTURE
at 30% Return On Investment (R.O.I) for a period of 1 - 50 years with an
option for re-investment if both parties involved are satisfied with the profit
accrued from the project. Feel free to send your business plan, executive
summary and financial projection for review. We are willing to sign a Non
Disclosure Agreement with you upon request for your protection. We look forward
to doing business with you. [...]
Content analysis details: (9.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no
trust
[209.85.160.194 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (couriercompanyservice234[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(couriercompanyservice234[at]gmail.com)
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.194 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: YES
Subject: ***SPAM*** We offer funding in a form of a DIRECT LOAN at a low interest rate.
Dear Sir/Mam,
We offer funding in a form of a DIRECT LOAN at a low interest rate at
3% per annum and we are also open to JOINT VENTURE at 30% Return On
Investment (R.O.I) for a period of 1 - 50 years with an option for
re-investment if both parties involved are satisfied with the profit
accrued from the project. Feel free to send your business plan,
executive summary and financial projection for review. We are willing
to sign a Non Disclosure Agreement with you upon request for your
protection. We look forward to doing business with you.
Lender: SAL Investment Group
Reply Email: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces