by buried under 419s
Sun Jul 20, 2014 10:22 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 20 Jul 2014 16:11:31 -0700
Received: from mail-sg1hn0250.outbound.protection.outlook.com ([134.170.132.250]:7184 helo=APAC01-SG1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1X90GM-0004vS-F1
for ; Sun, 20 Jul 2014 16:11:31 -0700
Received: from [116.202.5.238] (174.36.222.250) by
HKNPR04MB083.apcprd04.prod.outlook.com (10.242.101.150) with Microsoft SMTP
Server (TLS) id 15.0.990.7; Sun, 20 Jul 2014 23:10:45 +0000
Content-Type: multipart/alternative; boundary="===============0203968352=="
MIME-Version: 1.0
To: Recipients <[email protected]>
From: ''Bristol Financial Management'' <[email protected]>
Date: Mon, 21 Jul 2014 04:40:11 +0530
Reply-To: <[email protected]>
Message-ID: <5c56aec2-6a35-4390-ab16-83859d7cade0@HKNPR04MB083.apcprd04.prod.outlook.com>
X-Originating-IP: [174.36.222.250]
X-ClientProxiedBy: BY2PR06CA047.namprd06.prod.outlook.com (10.141.250.165) To
HKNPR04MB083.apcprd04.prod.outlook.com (10.242.101.150)
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:
X-Forefront-PRVS: 02788FF38E
X-Forefront-Antispam-Report: SFV:SPM;SFS:(416774004);DIR:OUT;SFP:1501;SCL:5;SRVR:HKNPR04MB083;H:[116.202.5.238];FPR:;MLV:spm;PTR:InfoNoRecords;MX:1;LANG:en;
X-OriginatorOrg: Business158.onmicrosoft.com
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: DO YOU NEED A LOAN?IF YES,E-MAIL US THE LOAN AMOUNT NEEDED
AND DURATION DO YOU NEED A LOAN?IF YES,E-MAIL US THE LOAN AMOUNT NEEDED AND
DURATION [...]
Content analysis details: (7.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[134.170.132.250 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... roject.com]
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7207]
0.0 HTML_MESSAGE BODY: HTML included in message
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.2 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN OFFER
--===============0203968352==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
DO YOU NEED A LOAN?IF YES,E-MAIL US THE LOAN AMOUNT NEEDED AND DURATION
Envelope-to:
Delivery-date: Sun, 20 Jul 2014 16:11:31 -0700
Received: from mail-sg1hn0250.outbound.protection.outlook.com ([134.170.132.250]:7184 helo=APAC01-SG1-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1X90GM-0004vS-F1
for ; Sun, 20 Jul 2014 16:11:31 -0700
Received: from [116.202.5.238] (174.36.222.250) by
HKNPR04MB083.apcprd04.prod.outlook.com (10.242.101.150) with Microsoft SMTP
Server (TLS) id 15.0.990.7; Sun, 20 Jul 2014 23:10:45 +0000
Content-Type: multipart/alternative; boundary="===============0203968352=="
MIME-Version: 1.0
To: Recipients <[email protected]>
From: ''Bristol Financial Management'' <[email protected]>
Date: Mon, 21 Jul 2014 04:40:11 +0530
Reply-To: <[email protected]>
Message-ID: <5c56aec2-6a35-4390-ab16-83859d7cade0@HKNPR04MB083.apcprd04.prod.outlook.com>
X-Originating-IP: [174.36.222.250]
X-ClientProxiedBy: BY2PR06CA047.namprd06.prod.outlook.com (10.141.250.165) To
HKNPR04MB083.apcprd04.prod.outlook.com (10.242.101.150)
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:
X-Forefront-PRVS: 02788FF38E
X-Forefront-Antispam-Report: SFV:SPM;SFS:(416774004);DIR:OUT;SFP:1501;SCL:5;SRVR:HKNPR04MB083;H:[116.202.5.238];FPR:;MLV:spm;PTR:InfoNoRecords;MX:1;LANG:en;
X-OriginatorOrg: Business158.onmicrosoft.com
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: DO YOU NEED A LOAN?IF YES,E-MAIL US THE LOAN AMOUNT NEEDED
AND DURATION DO YOU NEED A LOAN?IF YES,E-MAIL US THE LOAN AMOUNT NEEDED AND
DURATION [...]
Content analysis details: (7.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[134.170.132.250 listed in list.dnswl.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=a ... roject.com]
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.7207]
0.0 HTML_MESSAGE BODY: HTML included in message
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.2 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN OFFER
--===============0203968352==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
DO YOU NEED A LOAN?IF YES,E-MAIL US THE LOAN AMOUNT NEEDED AND DURATION
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces