by buried under 419s
Tue Jun 28, 2011 1:28 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 27 Jun 2011 20:40:37 -0700
Received: from mail.rwandatel.rw ([196.12.157.157] helo=rwandatel.rw)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QbPAB-0001fb-Kn
for ; Mon, 27 Jun 2011 20:40:37 -0700
Received: from [120.140.225.237] (account tgershom HELO User)
by rwandatel.rw (CommuniGate Pro SMTP 4.2.
with ESMTP id 83444545; Tue, 28 Jun 2011 05:50:26 +0200
Reply-To: <[email protected]>
From: "Natalia Fernando"<[email protected]>
Subject: LOAN OFFER (APPLY NOW)
Date: Tue, 28 Jun 2011 11:40:18 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Subject: ***SPAM*** LOAN OFFER (APPLY NOW)
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, My name is Mrs Natalia Fernando, i will love to become
your loan Lender. I am a legitimate money lender and an angel investor I
offer short or long term,secure or unsecured loan Business, Personal, Home,Auto,
Debt Consolidation loans with 5.5%.for more information on how to acquire
loan mail me [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FREEMAIL_FROM Sender email is freemail
(tinafinanceservices[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[196.12.157.157 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?120.140.225.237>]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5613]
0.0 FROM_MISSPACED From: missing whitespace
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Hello,
My name is Mrs Natalia Fernando, i will love to become your loan Lender.
I am a legitimate money lender and an angel investor I offer short
or long term,secure or unsecured loan Business, Personal, Home,Auto, Debt
Consolidation loans with 5.5%.for more information on how to acquire loan mail
me
Regards
Natalia Fernando
Envelope-to:
Delivery-date: Mon, 27 Jun 2011 20:40:37 -0700
Received: from mail.rwandatel.rw ([196.12.157.157] helo=rwandatel.rw)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QbPAB-0001fb-Kn
for ; Mon, 27 Jun 2011 20:40:37 -0700
Received: from [120.140.225.237] (account tgershom HELO User)
by rwandatel.rw (CommuniGate Pro SMTP 4.2.
with ESMTP id 83444545; Tue, 28 Jun 2011 05:50:26 +0200
Reply-To: <[email protected]>
From: "Natalia Fernando"<[email protected]>
Subject: LOAN OFFER (APPLY NOW)
Date: Tue, 28 Jun 2011 11:40:18 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-Spam-Subject: ***SPAM*** LOAN OFFER (APPLY NOW)
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, My name is Mrs Natalia Fernando, i will love to become
your loan Lender. I am a legitimate money lender and an angel investor I
offer short or long term,secure or unsecured loan Business, Personal, Home,Auto,
Debt Consolidation loans with 5.5%.for more information on how to acquire
loan mail me [...]
Content analysis details: (19.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 FREEMAIL_FROM Sender email is freemail
(tinafinanceservices[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low
trust
[196.12.157.157 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?120.140.225.237>]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5613]
0.0 FROM_MISSPACED From: missing whitespace
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Hello,
My name is Mrs Natalia Fernando, i will love to become your loan Lender.
I am a legitimate money lender and an angel investor I offer short
or long term,secure or unsecured loan Business, Personal, Home,Auto, Debt
Consolidation loans with 5.5%.for more information on how to acquire loan mail
me
Regards
Natalia Fernando
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces