Return-Path: Delivered-To: info@transocean.com Received: from vps.transocean.com by vps.transocean.com with LMTP id QEYxFiiG1Fr2cwAAInt2oQ for ; Mon, 16 Apr 2018 04:16:56 -0700 Return-path: Envelope-to: info@transocean.com Delivery-date: Mon, 16 Apr 2018 04:16:56 -0700 Received: from [138.197.141.243] (port=46844 helo=ns.gimikm.com) by vps.transocean.com with esmtp (Exim 4.89_1) (envelope-from ) id 1f827m-0007gS-OO for info@transocean.com; Mon, 16 Apr 2018 04:16:56 -0700 Received: from User (unknown [38.141.47.89]) by ns.gimikm.com (Postfix) with ESMTPA id C77A46209C; Mon, 16 Apr 2018 10:57:55 +0000 (UTC) Reply-To: From: "Mark Roy" Subject: Make 2018 your Best Financial Year Yet! Date: Mon, 16 Apr 2018 03:58:10 -0700 MIME-Version: 1.0 Content-Type: text/html; charset="Windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Spam-Status: No, score=-69.1 X-Spam-Score: -690 X-Spam-Bar: --------------------------------------------------- X-Ham-Report: Spam detection software, running on the system "vps.transocean.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear Friend, Its time to dream big. Instead of putting your financial dreams on hold this year, I can help you get back on track and moving in the right direction, and it starts with deciding what you really want and I promise if you take this proposal very seriously, set aside doubts and follow up, you will thank me later. [...] Content analysis details: (-69.1 points, 3.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -100 USER_IN_WHITELIST From: address is in the user's white-list 5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100% [score: 1.0000] 0.0 T_EMRCP BODY: "Excess Maximum Return Capital Profit" scam 1.2 HK_SCAM_N3 BODY: No description available. 0.0 NSL_RCVD_FROM_USER Received from User 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mr9367738[at]gmail.com) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (mr9367738[at]gmail.com) 1.0 MISSING_HEADERS Missing To: header 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (markroy213[at]yahoo.co.uk) 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.0 HTML_MESSAGE BODY: HTML included in message 0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100% [score: 1.0000] 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.6 REPLYTO_WITHOUT_TO_CC No description available. 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 1.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 1.6 MISSING_MID Missing Message-Id: header 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 0.0 FROM_MISSP_USER From misspaced, from "User" 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.7 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 1.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope 1.3 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 1.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to X-Spam-Flag: NO
Dear Friend,
Its time to dream big. Instead of putting your financial dreams on hold this year, I can help you get back on track and moving in the right direction, and it starts with deciding what you really want and I promise if you take this proposal very seriously, set aside doubts and follow up, you will thank me later.
 
My proposal is with regards to one of my clients and his family that were among the passengers on board the missing Malaysia Airline (MH370) that was carrying 239 passengers and crew. As his private accountant and stockbroker, I have been monitoring and handling his account and stocks over the years. We were making serious arrangement to move his direct capital funds and excess maximum return capital profit (EMRCP) which is in a very large amount to one of his private account before the plane crash.
 
Despite experts never having found the body of any of the passengers on board the missing plane, the hunt for missing Malaysia Airline (MH370) was officially suspended in 2017. After a long thought, I decided to extend my interest in forming a partnership with someone who can stand as an investor to receive the annual investment proceeds from the financial institution holding it before is been diverted to their treasury. All confirmable documents to back up this proposal will be made available to you prior to your acceptance.  If you are interested, kindly get back to me with your direct telephone number or you can email me back at: markroy213@yahoo.co.uk, so we can discuss this proposition further.
 
It is my pleasure getting in contact with you. However, if this proposition offends your moral ethics, do accept my sincere apology and thanks for your time.
Sincerely,
Mark Roy.