[email protected] LOAN OFFICE

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 16 Apr 2012 20:34:33 -0700
Received: from nm30.bullet.mail.sp2.yahoo.com ([98.139.91.100]:22824)
by with smtp (Exim 4.77)
(envelope-from <[email protected]>)
id 1SJzBV-0002aH-S6
for ; Mon, 16 Apr 2012 20:34:33 -0700
Received: from [72.30.22.92] by nm30.bullet.mail.sp2.yahoo.com with NNFMP; 17 Apr 2012 03:34:31 -0000
Received: from [68.142.200.226] by tm14.bullet.mail.sp2.yahoo.com with NNFMP; 17 Apr 2012 03:34:31 -0000
Received: from [66.94.237.99] by t7.bullet.mud.yahoo.com with NNFMP; 17 Apr 2012 03:34:31 -0000
Received: from [127.0.0.1] by omp1004.access.mail.mud.yahoo.com with NNFMP; 17 Apr 2012 03:34:31 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: [email protected]
Received: (qmail 6332 invoked by uid 60001); 17 Apr 2012 03:34:30 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1334633670; bh=cmKuQB5nH+pH2bovkg2IgZccS9bPj5DnXidOHkrMnjA=; h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=teypyUhKcH+xuZSH9x8F2vTcnb4shEKAV5VgB/wKxQ2SmxCJu16IU7sBeB4LnYFSEa6kxApH6X1Q0uDk4mtxSqkz+urz1HaeD5DFeulYN5Wgp4h1SPemm74qK9dw0TNbO1aBL11NZ+UruI2WBW+aKipLeG8uGG6i102Htk3qDfo=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=att.net;
h=X-YMail-OSG:Received:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type;
b=TdvAD8QfZhCFLpeH8iAqkb1PDfnSTpJDy4CrGUjWZUU2DmgZDcUevSLcI+qIwYBuQ/gKMEBLo6WDckgwRK5eZRDLIIHzFx6SQfQBkmiM3yhwtmdzL58ByH3+rLAo3mxT5YUp+30nxU5mWCueXJHmLFwYgs48YPsztTlE2Cb8pUA=;
X-YMail-OSG: O1_vajcVM1l1bk9jN7SehTQ9sr6gXdc8rvK9Vj.rXLaBiN2
xRCIz3w4NF6BYAnjQb2rOS8xhZpVrJEu_WuUoYHbZeKlD6dC4.MPA8xW.A97
zRMnEu7.8CPQDWDKDXLm4bJFN9s8QVfkSQzhWnDHwALqQHFcFfZ4jZkP9yAE
jYJ6Cg2ZZtxLFITtw7R.30tl8YS_u4JYyhPE6nXlvYkQQyf.fyGH.M.HrUK7
n4.Lg989Tsw57OuvvRDW8T1dCEu1CENwe3s8qLdMVldqYu5EnYYYaaS86Xfc
OMhv.iz57NqMYjk7GRKBtcibYD7m9Y.Af6UZaPl9JRr1upkPmnFLYrUKT613
onc4Nj_dLGZdxT.6nUtE5V54bHEgrNCMWdrnIMWrUM2REf0crQAIDqxERgrQ
ASs_hSf_uk87A557VBakj0dwijInDAdc9cj2G6sw8hfSjpG0p16TX_E2nKww
uTYH982SpzSvuxkCWjEE-
Received: from [69.64.49.1] by web181312.mail.ne1.yahoo.com via HTTP; Mon, 16 Apr 2012 20:34:30 PDT
X-Mailer: YahooMailClassic/15.0.5 YahooMailWebService/0.8.117.340979
Message-ID: <[email protected]>
Date: Mon, 16 Apr 2012 20:34:30 -0700 (PDT)
From: LOAN OFFICE <[email protected]>
Reply-To: [email protected]
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-633838615-2035241754-1334633670=:33591"
X-Spam-Status: No, score=3.9
X-Spam-Score: 39
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "server.trucidodolusloricaproject.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: DO YOU NEED A LOAN AT 3% RATE?IF YES E-MAIL US FOR MORE DETAILS.
DO YOU NEED A LOAN AT 3% RATE?IF YES E-MAIL US FOR MORE DETAILS. [...]

Content analysis details: (3.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(web.office.000300[at]att.net)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[98.139.91.100 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (web.office.000300[at]att.net)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5013]
1.8 MISSING_SUBJECT Missing Subject: header
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
X-Spam-Flag: NO

---633838615-2035241754-1334633670=:33591
Content-Type: text/plain; charset=us-ascii



DO YOU NEED A LOAN AT 3% RATE?IF YES E-MAIL US FOR MORE DETAILS.
---633838615-2035241754-1334633670=:33591
Content-Type: text/html; charset=us-ascii



DO YOU NEED A LOAN AT 3% RATE?IF YES E-MAIL US FOR MORE DETAI

Buried,
I've had emails from legit lending institutes that didn't say a whole lot more, but the email
address always gives the scammers away. That's not to say that some "legit" lenders aren't
just as big a thief's