by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 09 Oct 2017 22:54:14 -0700
Received: from redencao.grupojcc.com.br ([177.36.241.26]:58938 helo=sv01.jc.net.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e1nUY-000108-2i
for ; Mon, 09 Oct 2017 22:54:14 -0700
Received: from toroon09-3096780088.sdsl.bell.ca ([184.149.29.56] helo=User)
by sv01.jc.net.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1e1nT0-00050o-MP; Tue, 10 Oct 2017 02:52:35 -0300
Reply-To: <[email protected]>
From: "Kirill"<[email protected]>
Date: Tue, 10 Oct 2017 01:52:34 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=23.7
X-Spam-Score: 237
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir, My names are Seleznev K. Gennadievich, I got your
contact from a business directory, Please accept my correspondence sent to
you in consideration of your status. My email serves as a Letter of Intent
to enter into a Joint Venture Partnership with you. So I request for your
cooperation to invest with you in a profitable industries in your country.
[...]
Content analysis details: (23.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 KAM_NUMSUBJECT Subject ends in numbers
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.36.241.26 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.36.241.26 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[177.36.241.26 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(wo4208986[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.36.241.26>]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(wo4208986[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (wo4208986[at]gmail.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** INQUIRY.....09/10/2017
Attn: Sir,
My names are Seleznev K. Gennadievich, I got your contact from a business directory,
Please accept my correspondence sent to you in consideration of your status. My
email serves as a Letter of Intent to enter into a Joint Venture Partnership with
you. So I request for your cooperation to invest with you in a profitable industries
in your country.
Kindly get back for more details.
Seleznev Kirill Gennadievich
Member of the Management Board, Gazprom Neft PJSC.
Department Head, Processing of Gas and Liquid Hydrocarbons,
PJSC Gazprom.
www.gazprom-neft.
Envelope-to:
Delivery-date: Mon, 09 Oct 2017 22:54:14 -0700
Received: from redencao.grupojcc.com.br ([177.36.241.26]:58938 helo=sv01.jc.net.br)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1e1nUY-000108-2i
for ; Mon, 09 Oct 2017 22:54:14 -0700
Received: from toroon09-3096780088.sdsl.bell.ca ([184.149.29.56] helo=User)
by sv01.jc.net.br with esmtpa (Exim 4.84_2)
(envelope-from <[email protected]>)
id 1e1nT0-00050o-MP; Tue, 10 Oct 2017 02:52:35 -0300
Reply-To: <[email protected]>
From: "Kirill"<[email protected]>
Date: Tue, 10 Oct 2017 01:52:34 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=23.7
X-Spam-Score: 237
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn: Sir, My names are Seleznev K. Gennadievich, I got your
contact from a business directory, Please accept my correspondence sent to
you in consideration of your status. My email serves as a Letter of Intent
to enter into a Joint Venture Partnership with you. So I request for your
cooperation to invest with you in a profitable industries in your country.
[...]
Content analysis details: (23.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 NSL_RCVD_HELO_USER Received from HELO User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.5 KAM_NUMSUBJECT Subject ends in numbers
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[177.36.241.26 listed in bb.barracudacentral.org]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[177.36.241.26 listed in zen.spamhaus.org]
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[177.36.241.26 listed in dnsbl.sorbs.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(wo4208986[at]gmail.com)
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?177.36.241.26>]
1.0 MISSING_HEADERS Missing To: header
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(wo4208986[at]gmail.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (wo4208986[at]gmail.com)
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
2.6 MSOE_MID_WRONG_CASE No description available.
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** INQUIRY.....09/10/2017
Attn: Sir,
My names are Seleznev K. Gennadievich, I got your contact from a business directory,
Please accept my correspondence sent to you in consideration of your status. My
email serves as a Letter of Intent to enter into a Joint Venture Partnership with
you. So I request for your cooperation to invest with you in a profitable industries
in your country.
Kindly get back for more details.
Seleznev Kirill Gennadievich
Member of the Management Board, Gazprom Neft PJSC.
Department Head, Processing of Gas and Liquid Hydrocarbons,
PJSC Gazprom.
www.gazprom-neft.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
