by buried under 419s
Thu Mar 19, 2015 8:45 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 19 Mar 2015 14:49:49 -0700
Received: from millswaterwell.com ([66.11.240.250]:51011 helo=webhosting.bledsoe.net)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1YYiK3-0000k0-6e
for ; Thu, 19 Mar 2015 14:49:49 -0700
Received: from [173.245.71.84] (port=3269 helo=User)
by webhosting.bledsoe.net with esmtpa (Exim 4.85)
(envelope-from <[email protected]>)
id 1YYiLc-0004wr-3x; Thu, 19 Mar 2015 16:51:24 -0500
Reply-To: <[email protected]>
From: "Just Paid Me Loan Firm"<[email protected]>
Date: Thu, 19 Mar 2015 15:50:56 -0600
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - webhosting.bledsoe.net
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: webhosting.bledsoe.net: authenticated_id: [email protected]
X-Spam-Status: Yes, score=15.0
X-Spam-Score: 150
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Are you aware about the new revolution financial meltdown
on 2015 and need help? You don't have to look that far. We give out loan ranging
from $5000 to $900,000.00 to individuals around the globe even within 24
working hours. To apply text/sms to us on +1 (805) 613-7255 or email to [email protected]
your application to us by sending your [...]
Content analysis details: (15.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.9 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(justpaidmeloanfirm[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?66.11.240.250>]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5791]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.6 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** Loan
Are you aware about the new revolution financial meltdown on 2015 and need help? You don't have to look that far. We give out loan ranging from $5000 to $900,000.00 to individuals around the globe even within 24 working hours. To apply text/sms to us on +1 (805) 613-7255 or email to [email protected] your application to us by sending your
1. Name:
2. Address:
3. Sex:
4. Country:
5. Loan Amount Needed & Duration:
6. Email Address:
7. Phone Number:
Regards
Just Paid Me Loan Firm
Scott Dunbar
Marketing
3038 Salem Ave,
Dayton, OH 45406
United States
Tel: +1 (805) 613-7255 (Text only)
Envelope-to:
Delivery-date: Thu, 19 Mar 2015 14:49:49 -0700
Received: from millswaterwell.com ([66.11.240.250]:51011 helo=webhosting.bledsoe.net)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1YYiK3-0000k0-6e
for ; Thu, 19 Mar 2015 14:49:49 -0700
Received: from [173.245.71.84] (port=3269 helo=User)
by webhosting.bledsoe.net with esmtpa (Exim 4.85)
(envelope-from <[email protected]>)
id 1YYiLc-0004wr-3x; Thu, 19 Mar 2015 16:51:24 -0500
Reply-To: <[email protected]>
From: "Just Paid Me Loan Firm"<[email protected]>
Date: Thu, 19 Mar 2015 15:50:56 -0600
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - webhosting.bledsoe.net
X-AntiAbuse: Original Domain -
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: webhosting.bledsoe.net: authenticated_id: [email protected]
X-Spam-Status: Yes, score=15.0
X-Spam-Score: 150
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Are you aware about the new revolution financial meltdown
on 2015 and need help? You don't have to look that far. We give out loan ranging
from $5000 to $900,000.00 to individuals around the globe even within 24
working hours. To apply text/sms to us on +1 (805) 613-7255 or email to [email protected]
your application to us by sending your [...]
Content analysis details: (15.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.9 NSL_RCVD_HELO_USER Received from HELO User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(justpaidmeloanfirm[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?66.11.240.250>]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5791]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.4 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
3.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.6 MONEY_FORM Lots of money if you fill out a form
X-Spam-Flag: YES
Subject: ***SPAM*** Loan
Are you aware about the new revolution financial meltdown on 2015 and need help? You don't have to look that far. We give out loan ranging from $5000 to $900,000.00 to individuals around the globe even within 24 working hours. To apply text/sms to us on +1 (805) 613-7255 or email to [email protected] your application to us by sending your
1. Name:
2. Address:
3. Sex:
4. Country:
5. Loan Amount Needed & Duration:
6. Email Address:
7. Phone Number:
Regards
Just Paid Me Loan Firm
Scott Dunbar
Marketing
3038 Salem Ave,
Dayton, OH 45406
United States
Tel: +1 (805) 613-7255 (Text only)
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces