Hoax Clearing Center

Return-Path: <fulan3719@gmail.com>

Received: from m.launchco.com ([127.0.0.1]) by m.launchco.com with LMTP id uOaiE0hQil1mIAAAa1G0NA for <dropbox@plan.io>; Tue, 24 Sep 2019 19:20:08 +0200

Received: from pdx1-sub0-mail-mx57.g.dreamhost.com (mx2.dreamhost.com [64.90.62.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by m.launchco.com (Postfix) with ESMTPS id 1749D807F4 for <inbox+rlxc+36be+hoax-clearing-center@plan.io>; Tue, 24 Sep 2019 19:20:08 +0200

Received: from vade-backend13.dreamhost.com (fltr-in2.mail.dreamhost.com [66.33.205.213]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pdx1-sub0-mail-mx57.g.dreamhost.com (Postfix) with ESMTPS id 73364964B4 for <lapor@turnbackhoax.id>; Tue, 24 Sep 2019 10:20:05 -0700

Received: from localhost.jcmadrid.com (unknown [82.223.109.177]) by vade-backend13.dreamhost.com (Postfix) with ESMTPS id E54FF400C259B for <lapor@turnbackhoax.id>; Tue, 24 Sep 2019 10:20:04 -0700

Received: from User (unknown [185.162.235.76]) by localhost.jcmadrid.com (Postfix) with ESMTPA id 8AEE7BCC023; Mon, 23 Sep 2019 19:19:40 +0000

Date: Mon, 23 Sep 2019 12:19:43 -0700

From: "Mr. Fu Lan" <fulan3719@gmail.com>

Reply-To: fulan4927@gmail.com

Message-ID: <5d8a504acc972_55ae3fd36094997c89453@voyager.mail>

Subject: Please my good friend

Mime-Version: 1.0

Content-Type: text/plain;

charset=Windows-1251

Content-Transfer-Encoding: 7bit

X-He-Spam-Score: 37.5

Delivered-To: dropbox@plan.io

X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on m.launchco.com

X-Spam-Flag: YES

X-Spam-Level: *************************************

X-Spam-Status: Yes, score=37.5 required=5.0

tests=AXB_XMAILER_MIMEOLE_OL_024C2,

BAYES_50,DKIM_ADSP_CUSTOM_MED,FORGED_GMAIL_RCVD,FORGED_MUA_OUTLOOK,

FREEMAIL_FROM,FREEMAIL_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,

FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT,FROM_MISSP_USER,FROM_MISSP_XPRIO,

FSL_CTYPE_WIN1251,FSL_NEW_HELO_USER,HK_SCAM,MISSING_HEADERS,

MISSING_MID,NML_ADSP_CUSTOM_MED,NSL_RCVD_FROM_USER,PYZOR_CHECK,

RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_NONE,REPLYTO_WITHOUT_TO_CC,

SPF_HELO_NONE,SPOOFED_FREEMAIL,SPOOFED_FREEM_REPTO,TO_NO_BRKTS_MSFT,

T_HK_NAME_FM_MR_MRS autolearn=no autolearn_force=no version=3.4.2

X-Spam-Report: * -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at *

https://www.dnswl.org/, no trust * [64.90.62.164 listed in list.dnswl.org] *

0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% * [score: 0.4849] * 3.4

FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam * 1.9 NSL_RCVD_FROM_USER

Received from User * 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in *

bl.spamcop.net * [Blocked - see

<https://www.spamcop.net/bl.shtml?82.223.109.177>] * 1.0 MISSING_HEADERS

Missing To: header * 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match

'Received' * headers * 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF

Record * 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override *

is CUSTOM_MED * 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends

in * digit (fulan4927[at]gmail.com) * 0.0 FREEMAIL_FROM Sender email is

commonly abused enduser mail * provider (romeo_82[at]ukr.net)

(fulan3719[at]gmail.com) * 1.4 PYZOR_CHECK Listed in Pyzor *

(https://pyzor.readthedocs.io/en/latest/) * 2.0 HK_SCAM No description

available. * 2.2 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool *

1.6 REPLYTO_WITHOUT_TO_CC No description available. * 2.5 FROM_MISSP_XPRIO

Misspaced FROM + X-Priority * 3.0 FROM_MISSP_USER From misspaced, from "User"

* 0.0 T_HK_NAME_FM_MR_MRS No description available. * 2.8

AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait * 1.4

FSL_NEW_HELO_USER Spam's using Helo and User * 0.5 MISSING_MID Missing

Message-Id: header * 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body

contain * different freemails * 0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit,

and not from a mailing * list * 2.0 SPOOFED_FREEMAIL No description available.

* 2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool * 2.0

SPOOFED_FREEM_REPTO Forged freemail sender with freemail * reply-to * 1.9

FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook * 0.0

FROM_MISSP_FREEMAIL From misspaced + freemail provider

X-Spam-Score: 37.5

Envelope-to: inbox+rlxc+36be+hoax-clearing-center@plan.io

Authentication-Results: m.launchco.com; dmarc=pass (p=none dis=none)

header.from=gmail.com

Authentication-Results: localhost.jcmadrid.com; spf=pass (sender IP is

185.162.235.76) smtp.mailfrom=fulan3719@gmail.com smtp.helo=User

Received-SPF: pass (localhost.jcmadrid.com: connection is authenticated)

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

X-VR-STATUS: SPAM

X-VR-SCORE: 301

X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgedufedrfedtgdduuddtucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuggftfghnshhusghstghrihgsvgdpffftgfetoffjqffuvfenuceurghilhhouhhtmecufedttdenucgoufhprghmkfhpucdluddmnegoufhprghmtehlphhhrgetlhhirghsucdlfedttddmnecujfgurheprhfhufffgggtgffrigfoqfesthejtddtuddtfeenucfhrhhomhepfdforhdrucfhuhcunfgrnhdfoehfuhhlrghnfeejudelsehgmhgrihhlrdgtohhmqeenucfkphepkedvrddvvdefrddutdelrddujeejpddukeehrdduiedvrddvfeehrdejieenucfrrghrrghmpehmohguvgepshhmthhppdhhvghloheplhhotggrlhhhohhsthdrjhgtmhgrughrihgurdgtohhmpdhinhgvthepkedvrddvvdefrddutdelrddujeejpdhrvghtuhhrnhdqphgrthhhpedfofhrrdcuhfhuucfnrghnfdeofhhulhgrnhefjeduleesghhmrghilhdrtghomheqpdhmrghilhhfrhhomhepfhhulhgrnhefjeduleesghhmrghilhdrtghomhdpnhhrtghpthhtoheplhgrphhorhesthhurhhnsggrtghkhhhorgigrdhiugenucevlhhushhtvghrufhiiigvpedv

This message is not spam

Please my good friend

I have a lucrative business proposal that I would like to share with you.

I'm glad about your quick answer

E-mail; fulan3719@gmail.com

greetings

Mr. Fu Lan