by buried under 419s
Mon Sep 26, 2011 5:22 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 26 Sep 2011 01:30:23 -0700
Received: from nm18.access.bullet.mail.mud.yahoo.com ([66.94.237.219])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R86Zy-00028v-9j
for ; Mon, 26 Sep 2011 01:30:22 -0700
Received: from [66.94.237.198] by nm18.access.bullet.mail.mud.yahoo.com with NNFMP; 26 Sep 2011 08:30:19 -0000
Received: from [66.94.237.108] by tm9.access.bullet.mail.mud.yahoo.com with NNFMP; 26 Sep 2011 08:30:19 -0000
Received: from [127.0.0.1] by omp1013.access.mail.mud.yahoo.com with NNFMP; 26 Sep 2011 08:30:19 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 85203 invoked by uid 60001); 26 Sep 2011 08:30:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1317025819; bh=nPTQTRbeFE/FywDom1Xl1tjPg/mbcZdVJD04qDET9d4=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=0j3dLmYrx/+6CeNVdVIy0TEND4Q0yV6cCwfc8SLcE0Oato+6xCYklCyxYpdFo0uNoSZPJmX69Zb7n40MDlfMBYuCitrsMwpzENAIWLiOoGs7zyExvFMNBivaj/02QVbmFxjEFfz+XyceGwz72LLwV1vplK34Xxgd2idQYlxlHgM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=f+hmXdBUxd5yqpg8fRVVCF79vlf52Affd+Rd12ErTJCsVLd8RK7HkpXXrgkL5URZidUxfnvmZkcRVAQROmr30aN2Mk0vuacCskXbBrutAkStetFhytZspHcjDysDBsvZmiZrIb5ezvnDAEgPBhIWWggxFcHyO9AnFXfOi4iyUg4=;
X-YMail-OSG: 38dzmMUVM1llTSspWUC4NkumsuEDmJSaf8MwII4qNBSAWA9
PUAepI0H0ix52N2BXWZJWKR1PAoZidKaaeU_jZS6iUc0ObJbWDLVvr90Rwib
9OtywhH.fe03isr4DyoyNw3coTSK9uLwnzFRbT5UCAb9KFqGQvdQty3sdWkP
b5AUuFM2FY9D0HkxXf5fvWvs.ebYuluz5p_06jKziPhka5cj.YZphbAnsiAa
i8r0RcZ0HystKA99B8nBdEyA69cC4twyhuflC9TQFtF.OvkstmOslv1nE.1i
A_u4alIyAKeS5Xp9rGma2ug.VIPizODvqU5KbklWc0DUOjQWrdToAh1tKpio
dIEpUtbml9.Eh3Nc0fB.6h7FjcG08VjGiTAKzFmiCcknP7wWbeW5Hm4fjvDF
vxcp5owdILimfAbhu32p6zNNV3Hvq2RHvloWfRKqd089yB7gU1cN690ec6dK
ptjYic9GQIvDUhR7Pf_AEqi_TG1XmbAc-
Received: from [41.206.12.62] by web181706.mail.ne1.yahoo.com via HTTP; Mon, 26 Sep 2011 01:30:19 PDT
X-Mailer: YahooMailClassic/14.0.5 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Mon, 26 Sep 2011 01:30:19 -0700 (PDT)
From: Alliance Loan Company <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-474050689-1317025819=:66635"
X-Spam-Status: No, score=5.9
X-Spam-Score: 59
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: DO YOU NEED LOAN? IF YES EMAIL US FOR MORE INFO DO YOU NEED
LOAN? IF YES EMAIL US FOR MORE INFO [...]
Content analysis details: (5.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.237.219 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.206.12.62 listed in dnsbl.sorbs.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web-ffic-0-0-05156[at]att.net)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web-ffic-0-0-05156[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5755]
1.8 MISSING_SUBJECT Missing Subject: header
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: NO
--0-474050689-1317025819=:66635
Content-Type: text/plain; charset=us-ascii
DO YOU NEED LOAN? IF YES EMAIL US FOR MORE INFO
Envelope-to:
Delivery-date: Mon, 26 Sep 2011 01:30:23 -0700
Received: from nm18.access.bullet.mail.mud.yahoo.com ([66.94.237.219])
by with smtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R86Zy-00028v-9j
for ; Mon, 26 Sep 2011 01:30:22 -0700
Received: from [66.94.237.198] by nm18.access.bullet.mail.mud.yahoo.com with NNFMP; 26 Sep 2011 08:30:19 -0000
Received: from [66.94.237.108] by tm9.access.bullet.mail.mud.yahoo.com with NNFMP; 26 Sep 2011 08:30:19 -0000
Received: from [127.0.0.1] by omp1013.access.mail.mud.yahoo.com with NNFMP; 26 Sep 2011 08:30:19 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 85203 invoked by uid 60001); 26 Sep 2011 08:30:19 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1317025819; bh=nPTQTRbeFE/FywDom1Xl1tjPg/mbcZdVJD04qDET9d4=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=0j3dLmYrx/+6CeNVdVIy0TEND4Q0yV6cCwfc8SLcE0Oato+6xCYklCyxYpdFo0uNoSZPJmX69Zb7n40MDlfMBYuCitrsMwpzENAIWLiOoGs7zyExvFMNBivaj/02QVbmFxjEFfz+XyceGwz72LLwV1vplK34Xxgd2idQYlxlHgM=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=f+hmXdBUxd5yqpg8fRVVCF79vlf52Affd+Rd12ErTJCsVLd8RK7HkpXXrgkL5URZidUxfnvmZkcRVAQROmr30aN2Mk0vuacCskXbBrutAkStetFhytZspHcjDysDBsvZmiZrIb5ezvnDAEgPBhIWWggxFcHyO9AnFXfOi4iyUg4=;
X-YMail-OSG: 38dzmMUVM1llTSspWUC4NkumsuEDmJSaf8MwII4qNBSAWA9
PUAepI0H0ix52N2BXWZJWKR1PAoZidKaaeU_jZS6iUc0ObJbWDLVvr90Rwib
9OtywhH.fe03isr4DyoyNw3coTSK9uLwnzFRbT5UCAb9KFqGQvdQty3sdWkP
b5AUuFM2FY9D0HkxXf5fvWvs.ebYuluz5p_06jKziPhka5cj.YZphbAnsiAa
i8r0RcZ0HystKA99B8nBdEyA69cC4twyhuflC9TQFtF.OvkstmOslv1nE.1i
A_u4alIyAKeS5Xp9rGma2ug.VIPizODvqU5KbklWc0DUOjQWrdToAh1tKpio
dIEpUtbml9.Eh3Nc0fB.6h7FjcG08VjGiTAKzFmiCcknP7wWbeW5Hm4fjvDF
vxcp5owdILimfAbhu32p6zNNV3Hvq2RHvloWfRKqd089yB7gU1cN690ec6dK
ptjYic9GQIvDUhR7Pf_AEqi_TG1XmbAc-
Received: from [41.206.12.62] by web181706.mail.ne1.yahoo.com via HTTP; Mon, 26 Sep 2011 01:30:19 PDT
X-Mailer: YahooMailClassic/14.0.5 YahooMailWebService/0.8.114.317681
Message-ID: <[email protected]>
Date: Mon, 26 Sep 2011 01:30:19 -0700 (PDT)
From: Alliance Loan Company <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-474050689-1317025819=:66635"
X-Spam-Status: No, score=5.9
X-Spam-Score: 59
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: DO YOU NEED LOAN? IF YES EMAIL US FOR MORE INFO DO YOU NEED
LOAN? IF YES EMAIL US FOR MORE INFO [...]
Content analysis details: (5.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[66.94.237.219 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.206.12.62 listed in dnsbl.sorbs.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web-ffic-0-0-05156[at]att.net)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web-ffic-0-0-05156[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5755]
1.8 MISSING_SUBJECT Missing Subject: header
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: NO
--0-474050689-1317025819=:66635
Content-Type: text/plain; charset=us-ascii
DO YOU NEED LOAN? IF YES EMAIL US FOR MORE INFO
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces