Advance fee loan scams and fraudulent loan sites.
by buried under 419s Sun Nov 25, 2012 4:42 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 25 Nov 2012 00:21:59 -0800
Received: from mail.knust.edu.gh ([80.87.90.72]:20644 helo=mailx.knust.edu.gh)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1TcXTO-0006jk-OZ
for ; Sun, 25 Nov 2012 00:21:59 -0800
Received: from localhost (localhost [127.0.0.1])
by mailx.knust.edu.gh (Postfix) with ESMTP id 40F1613FD934;
Sun, 25 Nov 2012 13:38:58 +0000 (GMT)
X-Virus-Scanned: amavisd-new at mailx.knust.edu.gh
Received: from mailx.knust.edu.gh ([127.0.0.1])
by localhost (mailx.knust.edu.gh [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 5GnGnINL4YSQ; Sun, 25 Nov 2012 13:38:55 +0000 (GMT)
Received: from mailx.knust.edu.gh (localhost [127.0.0.1])
by mailx.knust.edu.gh (Postfix) with ESMTP id 9DD9913FD923;
Sun, 25 Nov 2012 13:38:53 +0000 (GMT)
Date: Sun, 25 Nov 2012 13:38:53 +0000 (GMT+00:00)
From: "HARRY WOODS LOAN." <[email protected]>
Reply-To: "HARRY WOODS LOAN." <[email protected]>
Message-ID: <[email protected]>
Subject: HARRY WOODS LOAN.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [116.202.5.237]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient - [unknown] (Win)/7.2.0_GA_2669)
To: undisclosed-recipients:;
X-Spam-Status: No, score=5.4
X-Spam-Score: 54
X-Spam-Bar: +++++
X-Ham-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: LOAN AS LOW AS 3% RATE, CONTACT US. [...]

Content analysis details: (5.4 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[80.87.90.72 listed in bb.barracudacentral.org]
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
("harry woods loan."
<loan.services74[at]yahoo.com.sg>
)
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5118]
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO



LOAN AS LOW AS 3% RATE, CONTACT US.

Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
Advertisement

Who is online

Users browsing this forum: ClaudeBot and 5 guests