#380229 by buried under 419s
Sat Jan 19, 2019 4:09 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 18 Jan 2019 23:08:47 -0800
Received: from fixed-187-190-218-101.totalplay.net ([187.190.218.101]:18194 helo=it-web.mx)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gkkkG-0007Xs-Nj
for ; Fri, 18 Jan 2019 23:08:46 -0800
Received: from localhost (localhost [127.0.0.1])
by it-web.mx (Postfix) with ESMTP id 1E2EDE1E23CF;
Fri, 18 Jan 2019 20:36:39 -0700 (MST)
X-Virus-Scanned: amavisd-new at it-web.mx
Received: from it-web.mx ([127.0.0.1])
by localhost (it-web.mx [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id T8eiNFCkPoH0; Fri, 18 Jan 2019 20:36:38 -0700 (MST)
Received: from User (unknown [38.141.46.48])
by it-web.mx (Postfix) with ESMTPA id 60CD0E1E2397;
Fri, 18 Jan 2019 20:36:33 -0700 (MST)
Reply-To: <[email protected]>
From: "Jan. 18. 2019."<[email protected]>
Date: Fri, 18 Jan 2019 19:36:46 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=29.9
X-Spam-Score: 299
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, Please let me take a moment to introduce myself
to you. My name is Ismael from Syrian Arab Republic. I found your email address
on the net, and I wonder if you could help me, as I genuinely look forward
to having the opportunity to invest in your country, and I thought it would
be nice to open a private communication and investment arrangement with you.
I will provide the details of the investment funds to you only if you indicate
your interest in this proposal. I am willing to offer you 10 per cent of
the total investment fund and additional 25 per cent from return on investment
(ROI), and the fund in question is quite large. I am expecting to hear from
you, if you are interested and please reply me directly to my private email
address: ([email protected]) Thank you Best Regards Ismael [...]
Content analysis details: (29.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[187.190.218.101 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(efax.uci[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[187.190.218.101 listed in psbl.surriel.com]
3.2 FOUND_YOU I found you...
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.6 MISSING_MID Missing Message-Id: header
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** 2019 - For Your Kind Attention.
Dear Friend,
Please let me take a moment to introduce myself to you. My name is Ismael from
Syrian Arab Republic. I found your email address on the net, and I wonder if you
could help me, as I genuinely look forward to having the opportunity to invest in
your country, and I thought it would be nice to open a private communication and
investment arrangement with you. I will provide the details of the investment funds
to you only if you indicate your interest in this proposal. I am willing to offer
you 10 per cent of the total investment fund and additional 25 per cent from return
on investment (ROI), and the fund in question is quite large. I am expecting to hear
from you, if you are interested and please reply me directly to my private email
address: ( [email protected] )
Thank you
Best Regards
Ismael
Envelope-to:
Delivery-date: Fri, 18 Jan 2019 23:08:47 -0800
Received: from fixed-187-190-218-101.totalplay.net ([187.190.218.101]:18194 helo=it-web.mx)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1gkkkG-0007Xs-Nj
for ; Fri, 18 Jan 2019 23:08:46 -0800
Received: from localhost (localhost [127.0.0.1])
by it-web.mx (Postfix) with ESMTP id 1E2EDE1E23CF;
Fri, 18 Jan 2019 20:36:39 -0700 (MST)
X-Virus-Scanned: amavisd-new at it-web.mx
Received: from it-web.mx ([127.0.0.1])
by localhost (it-web.mx [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id T8eiNFCkPoH0; Fri, 18 Jan 2019 20:36:38 -0700 (MST)
Received: from User (unknown [38.141.46.48])
by it-web.mx (Postfix) with ESMTPA id 60CD0E1E2397;
Fri, 18 Jan 2019 20:36:33 -0700 (MST)
Reply-To: <[email protected]>
From: "Jan. 18. 2019."<[email protected]>
Date: Fri, 18 Jan 2019 19:36:46 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=29.9
X-Spam-Score: 299
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Friend, Please let me take a moment to introduce myself
to you. My name is Ismael from Syrian Arab Republic. I found your email address
on the net, and I wonder if you could help me, as I genuinely look forward
to having the opportunity to invest in your country, and I thought it would
be nice to open a private communication and investment arrangement with you.
I will provide the details of the investment funds to you only if you indicate
your interest in this proposal. I am willing to offer you 10 per cent of
the total investment fund and additional 25 per cent from return on investment
(ROI), and the fund in question is quite large. I am expecting to hear from
you, if you are interested and please reply me directly to my private email
address: ([email protected]) Thank you Best Regards Ismael [...]
Content analysis details: (29.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[187.190.218.101 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(efax.uci[at]gmail.com)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.0 MISSING_HEADERS Missing To: header
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[187.190.218.101 listed in psbl.surriel.com]
3.2 FOUND_YOU I found you...
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.6 MISSING_MID Missing Message-Id: header
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** 2019 - For Your Kind Attention.
Dear Friend,
Please let me take a moment to introduce myself to you. My name is Ismael from
Syrian Arab Republic. I found your email address on the net, and I wonder if you
could help me, as I genuinely look forward to having the opportunity to invest in
your country, and I thought it would be nice to open a private communication and
investment arrangement with you. I will provide the details of the investment funds
to you only if you indicate your interest in this proposal. I am willing to offer
you 10 per cent of the total investment fund and additional 25 per cent from return
on investment (ROI), and the fund in question is quite large. I am expecting to hear
from you, if you are interested and please reply me directly to my private email
address: ( [email protected] )
Thank you
Best Regards
Ismael
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces