#372118 by buried under 419s
Sun Aug 26, 2018 11:22 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 26 Aug 2018 06:45:25 -0700
Received: from [66.55.90.25] (port=42118 helo=a0454b.Decor)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ftvM4-0005Ka-OA
for ; Sun, 26 Aug 2018 06:45:25 -0700
Received: from [37.49.224.128] (helo=User)
by a0454b.Decor with esmtpa (Exim 4.76)
(envelope-from <[email protected]>)
id 1ftvKu-0007dc-Gv; Sun, 26 Aug 2018 08:44:13 -0500
Reply-To: <[email protected]>
From: "DFC"<[email protected]>
Date: Sun, 26 Aug 2018 06:44:12 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=28.9
X-Spam-Score: 289
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam, We are a Licensed Investment company in UAE,
duo to market quest for maximizing our shareholders value in our company,
we are looking out for a viable investment projects outside UAE, we can fund
as a soft loan under our ongoing cooperate finance program at 3% interest
rate per annum without collateral. [...]
Content analysis details: (28.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[66.55.90.25 listed in psbl.surriel.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[66.55.90.25 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(dufcaplo[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 MISSING_MID Missing Message-Id: header
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.6 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** INVESTMENT FUNDING
Dear Sir/Madam,
We are a Licensed Investment company in UAE, duo to market quest for maximizing our
shareholders value in our company, we are looking out for a viable investment
projects outside UAE, we can fund as a soft loan under our ongoing cooperate finance
program at 3% interest rate per annum without collateral.
We are mostly interested in the following sectors; Oil/Gas, Banking, Real estate,
Stock Speculation, Mining, Transportation, Hotel & Tourism, Health Sector,
Tobacco, Communication Services, Agriculture, Forestry & Fishing, Thus any
feasible sector.
If you have any viable project which requires funding, we would like to work with
you, send the business plan or any related documents via email at;
[email protected]
Warm Regards,
DFC Management.
E-mail: [email protected]
Envelope-to:
Delivery-date: Sun, 26 Aug 2018 06:45:25 -0700
Received: from [66.55.90.25] (port=42118 helo=a0454b.Decor)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1ftvM4-0005Ka-OA
for ; Sun, 26 Aug 2018 06:45:25 -0700
Received: from [37.49.224.128] (helo=User)
by a0454b.Decor with esmtpa (Exim 4.76)
(envelope-from <[email protected]>)
id 1ftvKu-0007dc-Gv; Sun, 26 Aug 2018 08:44:13 -0500
Reply-To: <[email protected]>
From: "DFC"<[email protected]>
Date: Sun, 26 Aug 2018 06:44:12 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=28.9
X-Spam-Score: 289
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/Madam, We are a Licensed Investment company in UAE,
duo to market quest for maximizing our shareholders value in our company,
we are looking out for a viable investment projects outside UAE, we can fund
as a soft loan under our ongoing cooperate finance program at 3% interest
rate per annum without collateral. [...]
Content analysis details: (28.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[66.55.90.25 listed in psbl.surriel.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[66.55.90.25 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(dufcaplo[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.6 MISSING_MID Missing Message-Id: header
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.6 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** INVESTMENT FUNDING
Dear Sir/Madam,
We are a Licensed Investment company in UAE, duo to market quest for maximizing our
shareholders value in our company, we are looking out for a viable investment
projects outside UAE, we can fund as a soft loan under our ongoing cooperate finance
program at 3% interest rate per annum without collateral.
We are mostly interested in the following sectors; Oil/Gas, Banking, Real estate,
Stock Speculation, Mining, Transportation, Hotel & Tourism, Health Sector,
Tobacco, Communication Services, Agriculture, Forestry & Fishing, Thus any
feasible sector.
If you have any viable project which requires funding, we would like to work with
you, send the business plan or any related documents via email at;
[email protected]
Warm Regards,
DFC Management.
E-mail: [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces