Advance fee loan scams and fraudulent loan sites.
#412308 by buried under 419s Tue Jun 16, 2020 9:00 am
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id ekrqCm9c6F5H4wEAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 16 Jun 2020 01:45:19 -0400
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 16 Jun 2020 01:45:19 -0400
Received: from mail-oln040092074109.outbound.protection.outlook.com ([40.92.74.109]:26764 helo=EUR04-DB3-obe.outbound.protection.outlook.com)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <[email protected]>)
id 1jl4PM-000WAp-Su
for ; Tue, 16 Jun 2020 01:45:19 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=EXGkDbwRHGXp7Iz5i2+402VTOlMctFjXabN03As+GOYkgkPJpEgB7fyO3IK8hiI+MumonrfgI6yLlMFZklxc0/fZ66V6UfEBGtR81Y4zyiTHSSw5jnJE+Hz6INoRvojbateAjalDLtWJIj5gs/Mx1E/fZ5qXNxcjr8z51djgwvmn/nP9Y7gwLcWkxoZ/g2vzjoO5KL1qhDY9EVu9XtmaRC8hGa5XRHK8RHHKo8W0maOReQuO+NhPfjaM9quoliDvPinF94OY6HwRU1PKHJZiFWt1v6dlwVvy3F7z+RFKwiu76rOrSPZsKeH7XpUQ/3BIbkp7SreaF2F0pp8/DWwo9Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=A1zr5l3RAYQTAL4E5coRa8AqtvPgBCXWc4SEqcboUgM=;
b=I9RDLX+FfDr66KxGByUalsRR5s1WxZVAddIcRh65n1Uo0Wv6Y0B5h2JU0e9Qk/DLa4KTTNwBbIoilYfeq7NuAmYC7UtkldPWZeonoPGuTduY8NXiWi267bCIRyTami6UBLpe0enI7MGIMF886u25q9HdYbqylC4tMq5JxA/Gn+H7rJ9ugVsYSIH0xhno2jkvyLgh864gLxkGfyiKLbyQr7McqXhvM6uuw0dErEjyjVcWYVeRU0DDfe3ZttfEywZujEKM+nsEE40JARtq0tOIBt75WEPxOIbID4utiEbvxFGTHKtz6xkmVeV3wu6OgG9R4/88RqcWDOqiYeoBWFwCWw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=A1zr5l3RAYQTAL4E5coRa8AqtvPgBCXWc4SEqcboUgM=;
b=bDW48QdcO7vx9BUD65k12Jl7vM/ZVVJjb6O6IEp7wRnlspxukf2ovIwpB4EKq1f1OfZLizJtpfB6zImmS8vd5f7aRJVxzN3CaqjJ85SGTpEPN06XusMD7sVWlziH6yQC7Lll/xBiaih6ZNpeDvmiPwnve1IhZG4Ge4N2QDavAAyF+RRo3x063cEoini7pWIGgR1JDsdxN/PczwdOEcaH7HeUnGYkRBJax6xyZXcLTpTfeF70eMgNa9lJuPupxR5jIu6DUOol2uaNrmoBp2vbzcnEQ860NwhDgf9Vesb3AEjv2YrHg+C1lOwGgvrEd14VBZk2TdzV4zUt39OJJt3C3g==
Received: from DB3EUR04FT055.eop-eur04.prod.protection.outlook.com
(2a01:111:e400:7e0c::46) by
DB3EUR04HT067.eop-eur04.prod.protection.outlook.com (2a01:111:e400:7e0c::167)
with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18; Tue, 16 Jun
2020 05:44:20 +0000
Received: from VI1PR04MB5120.eurprd04.prod.outlook.com
(2a01:111:e400:7e0c::47) by DB3EUR04FT055.mail.protection.outlook.com
(2a01:111:e400:7e0c::64) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3088.18 via Frontend
Transport; Tue, 16 Jun 2020 05:44:20 +0000
Received: from VI1PR04MB5120.eurprd04.prod.outlook.com
([fe80::209a:288e:1c5e:34e7]) by VI1PR04MB5120.eurprd04.prod.outlook.com
([fe80::209a:288e:1c5e:34e7%5]) with mapi id 15.20.3088.029; Tue, 16 Jun 2020
05:44:19 +0000
From: FOREIGN BILL PAYMENT DEPT <[email protected]>
Thread-Topic: LOAN OFFER
Thread-Index: AQHWQ6EBHwskeNKi8kejehS23Ac07g==
Date: Tue, 16 Jun 2020 05:44:19 +0000
Message-ID:
<[email protected]od.outlook.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker:
OriginalChecksum:B8D0E77235FFDE7CDDCA66F7C9896945896DCD56CC5AF79D6FE5F6AB32B0A7E1;UpperCasedChecksum:7D364FB73B70C49DA08693BD89C13F3E970F26F8C18F4FB57A7F0F9FD46B6E27;SizeAsReceived:11621;Count:40
x-tmn: [lMbWViseCAmQ3SDEACSRDzJv4P06WRvp]
x-ms-publictraffictype: Email
x-incomingheadercount: 40
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: 8ea8c1f2-3a12-4868-e856-08d811b850b5
x-ms-exchange-slblob-mailprops:
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
x-ms-traffictypediagnostic: DB3EUR04HT067:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
H5eWC//ln7M7zYe4z83bUsTXvENsmBbWOM5ypgYGjOQCAmiTPkDUlP/usrQBEqTbqjlM4DBLnmE0B+pdTzjnElHHqH4eJQ1ekFqYzwahVCU2AihnDe1XDwCp2L1hbuLGFnGJzglt6ZiBYWZKyzo246XpuzRpkeKSm0EbeP3ibKDz5T6DzN3VuKLn33DlxnrYvbBMyq80HjbdSoeHvj+2Yw==
x-forefront-antispam-report:
CIP:255.255.255.255;CTRY:;LANG:en;SCL:0;SRV:;IPV:NLI;SFV:NSPM;H:VI1PR04MB5120.eurprd04.prod.outlook.com;PTR:;CAT:NONE;SFTY:;SFS:;DIR:OUT;SFP:1901;
x-ms-exchange-antispam-messagedata:
95+Z6bELHCJQMGo5J/WHTGaPKDJT91hqOpSfxoqd5v/IrSzkOqaSKDjilbf/nDXgaiFDIi3nef2iVx7HQkPo32DKwg6o42rSuCLU1l26nkHjGYNkhOX2oLwdKVIQNECq5s3/D+eBLpW4kpe6rPuH4w==
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative;
boundary="_000_VI1PR04MB5120DB2B66C9E5FB703204DAC89D0VI1PR04MB5120eurp_"
MIME-Version: 1.0
X-OriginatorOrg: hotmail.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 8ea8c1f2-3a12-4868-e856-08d811b850b5
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jun 2020 05:44:19.7779
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB3EUR04HT067
X-Spam-Status: Yes, score=11.3
X-Spam-Score: 113
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir , LOAN OFFER We are a financial institution,Our company
provides and assists individuals and business organization with lines of
credit ranging from Ten Thousand US Dollars ($10,000.00) to On [...]
Content analysis details: (11.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[foreignbilldept.fgn6[at]hotmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/,
no trust
[40.92.74.109 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.74.109 listed in wl.mailspike.net]
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[foreignbilldept.fgn6[at]hotmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 AC_DIV_BONANZA RAW: Too many divs in a row... spammy template
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLY From and body contain different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** LOAN OFFER

--_000_VI1PR04MB5120DB2B66C9E5FB703204DAC89D0VI1PR04MB5120eurp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Dear Sir , LOAN OFFER


We are a financial institution,Our company provides and assists individuals and business organizationwith lines of credit ranging from Ten Thousand US Dollars ($10,000.00) to One Hundred Million US Dollars($100,000,000.00) . Our primary targets are SMEs and businesses seeking funds to finance capital/viable projects worldwide. Loan value could go up dependingon our physical evaluations of projects.

We help clients who are interested in expanding their business in the areas of;Private health Petro - Chemical , Manufacturing & Engineering Construction & Contractors GovernmentReal estate and rental Wallets Investment and trading structured systems I.T and Software Development

May be you will need funds or you have someone credible who is in need.
We offer one of the best facilities in Europe . Our terms are flexible with an interest rate of 2 % per year and repayable within 12 months to 10 years .
If you are interested, contact us or send us an email and someone will assist you and also tell you if you qualify to benefit from our services available without collateral.

Regards,
Mr. Paul Crompton .
Union Capital Facilities
Direct Email: [email protected]

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: No registered users and 5 guests