#324287 by buried under 419s
Mon Apr 03, 2017 10:46 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 03 Apr 2017 15:26:15 -0700
Received: from ns1.nazanettelecom.com.br ([177.39.103.182]:48913 helo=srv01.nazanettelecom.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1cvAQQ-0000yG-AJ
for ; Mon, 03 Apr 2017 15:26:15 -0700
Received: from [105.112.42.218] (helo=User)
by srv01.nazanettelecom.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1cvAP1-0005HJ-4V; Mon, 03 Apr 2017 19:24:48 -0300
Reply-To: <[email protected]>
From: "Robert Hembree"<[email protected]>
Date: Mon, 3 Apr 2017 23:24:46 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=26.6
X-Spam-Score: 266
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn:, We are United Kingdom based investment company, trying
to expand our global presence by funding projects as debt finance, for as
low as 4% ROI annually and up to 20 years repayment plan. If you have any
viable project that needs funding, kindly revert back to me with your business
plan/executive summary for further discussion. Furthermore, If all modalities
are met the loan will be available within 10 working days [...]
Content analysis details: (26.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[177.39.103.182 listed in psbl.surriel.com]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[177.39.103.182 listed in dnsbl.sorbs.net]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.39.103.182 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(robert.hembree2121[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (robert.hembree2121[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(robert.hembree2121[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.5 FAKE_REPLY_C No description available.
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Re: SOFT (LOAN) / PROJECT FUNDING '@' EASE--04
Attn:,
We are United Kingdom based investment company, trying to expand our global
presence by funding projects as debt finance, for as low as 4% ROI annually
and up to 20 years repayment plan.
If you have any viable project that needs funding, kindly revert back to me with
your business plan/executive summary for further discussion.
Furthermore, If all modalities are met the loan will be available within 10
working days
Thanks.....
Hembree Robert
UK, Investment Group
Envelope-to:
Delivery-date: Mon, 03 Apr 2017 15:26:15 -0700
Received: from ns1.nazanettelecom.com.br ([177.39.103.182]:48913 helo=srv01.nazanettelecom.com.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1cvAQQ-0000yG-AJ
for ; Mon, 03 Apr 2017 15:26:15 -0700
Received: from [105.112.42.218] (helo=User)
by srv01.nazanettelecom.com.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1cvAP1-0005HJ-4V; Mon, 03 Apr 2017 19:24:48 -0300
Reply-To: <[email protected]>
From: "Robert Hembree"<[email protected]>
Date: Mon, 3 Apr 2017 23:24:46 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=26.6
X-Spam-Score: 266
X-Spam-Bar: ++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn:, We are United Kingdom based investment company, trying
to expand our global presence by funding projects as debt finance, for as
low as 4% ROI annually and up to 20 years repayment plan. If you have any
viable project that needs funding, kindly revert back to me with your business
plan/executive summary for further discussion. Furthermore, If all modalities
are met the loan will be available within 10 working days [...]
Content analysis details: (26.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_HELO_USER Received from HELO User
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[177.39.103.182 listed in psbl.surriel.com]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[177.39.103.182 listed in dnsbl.sorbs.net]
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.39.103.182 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(robert.hembree2121[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (robert.hembree2121[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(robert.hembree2121[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.6 MSOE_MID_WRONG_CASE No description available.
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.5 FAKE_REPLY_C No description available.
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Re: SOFT (LOAN) / PROJECT FUNDING '@' EASE--04
Attn:,
We are United Kingdom based investment company, trying to expand our global
presence by funding projects as debt finance, for as low as 4% ROI annually
and up to 20 years repayment plan.
If you have any viable project that needs funding, kindly revert back to me with
your business plan/executive summary for further discussion.
Furthermore, If all modalities are met the loan will be available within 10
working days
Thanks.....
Hembree Robert
UK, Investment Group
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces