[email protected] Rev. Larsons

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by s with LMTP id WNmeEaQMnFxmQgAAjbubUg
for <>; Wed, 27 Mar 2019 16:52:04 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 27 Mar 2019 16:52:04 -0700
Received: from mx5.mail.bg ([193.201.172.121]:40131)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1h9IKt-0004PM-ST
for ; Wed, 27 Mar 2019 16:52:04 -0700
Received: from User (unknown [98.143.104.197])
by mx5.mail.bg (Postfix) with ESMTPA id A618C8087812;
Thu, 28 Mar 2019 01:50:37 +0200 (EET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=mail.bg; s=default;
t=1553730675; bh=uiWVpVUMH/whMk8MStl1WwI0NtaLqOnQ2R/XzsfklNA=;
h=Reply-To:From:Subject:Date:MIME-Version:Content-Type:
Content-Transfer-Encoding;
b=xu37O0IijwmIsqZtTq1yEsHyxt49f1WIyoOZQXK8SxdpL3eJJqOSmxattM7Tm/Tlq
FlBdxIB2qRFcYBwY3nc/6CLpjyBlSCo66ZWphi5HWaxTFLaADBiljMCaKpw+Ds6m6+
253+9YsOKvJ2ChGbX8xkk/UGQ4Odx3IZs4Ns8iPM=
Reply-To: <[email protected]>
From: "Rev. Lawrence"<[email protected]>
Date: Thu, 28 Mar 2019 00:51:05 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=19.1
X-Spam-Score: 191
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Greetings friend, I have a business proposal that will be
of mutual benefit for the both of us. Kindly get back to me with your name,and
phone numbers if interested for more details. Thanks, Rev. Larsons [...]

Content analysis details: (19.1 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low
trust
[193.201.172.121 listed in list.dnswl.org]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(imfortsdmxr[at]mail.bg)
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(raylass212[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
1.6 REPLYTO_WITHOUT_TO_CC No description available.
1.5 MALFORMED_FREEMAIL Bad headers on message from free email service
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 FAKE_REPLY_C No description available.
0.0 FROM_MISSPACED From: missing whitespace
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
3.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
X-Spam-Flag: YES
Subject: ***SPAM*** Re:

Greetings friend,
I have a business proposal that will be of mutual benefit for the
both of us. Kindly get back to me with your name,and phone
numbers if interested for more details.
Thanks,
Rev. Larsons