An
Email with the Subject "Hello" was
received in one of Scamdex's honeypot email accounts on Sat, 11 Jun 2011 01:55:03 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "Dr. James Walker" <james_walker101@live.co.uk>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
assistancebankfundusdjames_walker101@live.co will widow(usd)
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Sat, 11 Jun 2011 01:55:03 -0700
[received:] => Array
(
[0] => from nm7-vm0.access.bullet.mail.mud.yahoo.com ([66.94.237.189])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1QVJyA-0001Pb-4Vfor scams@scamdex.com; Sat, 11 Jun 2011 01:55:03 -0700
[1] => from [66.94.237.196] by nm7.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jun 2011 08:55:10 -0000
[2] => from [66.94.237.107] by tm7.access.bullet.mail.mud.yahoo.com with NNFMP; 11 Jun 2011 08:55:10 -0000
[3] => from [127.0.0.1] by omp1012.access.mail.mud.yahoo.com with NNFMP; 11 Jun 2011 08:55:10 -0000
[4] => (qmail 81398 invoked by uid 60001); 11 Jun 2011 08:55:10 -0000
[5] => from [98.138.82.32] by web181601.mail.ne1.yahoo.com via HTTP; Sat, 11 Jun 2011 01:55:10 PDT
)
[x-yahoo-newman-property:] => ymail-3
[x-yahoo-newman-id:] => 757823.1251.bm@omp1012.access.mail.mud.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1307782510; bh=3QZqqgu2/pMYE0jUmWY4wuLYJYxO7WW2GwrJ4BTQ3Q0=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=sxjC9Y+oa4vGBYRcV+yI+hgR9yTmoMLkOB75ra0dYrBzbKdl5KdKeWXNExzG8fDziW/Mlb3cpWp0nQkwcfOLpzEX0jKhDSBq873OM2LE+enWZ8P2+r60tAClSuSA7r7BlWLu1eevcjwsoJc3j4gccsH8RK/KOjwQrYBvObdDTn0=
[message-id:] => <173716.25266.qm@web181601.mail.ne1.yahoo.com>
[x-ymail-osg:] => f1rV3hAVM1nr1kkLp8M3ZlbSwv7FKenAV9wZZNPGzIcR9IRQA.f6ZA0UO4tY0QFKB4RdY5xgUOxkK8G1IjXjqxz6S725jXuAA9EX.1rc5azGPm_Iynp_1htWwNCWfMLMXKFqAQzxcGmc3sX4fHFWx0OSodLImCU3eG2CvrT1UlvKTraRNeI2Gs.xXMuVexDeQggCIkRHbJ5B7Ku3xo5A0KNudzLp7KA1ApFXRPef8okOiWngtspnZYdbEIi0ydZTqwk1AvuemU1zdk1sViJxzxGeRurj4VqAXVCMxnrHp8l5w7A6jLebT5VvpjnjMX4kCXYNxxmf.UWa8bLGYx.zPVq8S_lrF5AEuhk1PZgzPQ_Knf8g5j6g47HGWrKzQ8HVhkAvL4mlXz0gFyD6Myv44ELf5_aUrcHv3iOe1Rnje7t3BMVtdDqW2iuKy19qKuNtwqZ2KGYLi7ej6y66JxHFvCRXEUFBHaHLVubb6xNBvj2MBmgTGO5oGb9BknMvqt7zViHs58xrPNR5j8VnlJGSwQzS6eR4nN26aZfbqvrbxGyDaKCLdgHnh4beGRw0RodGfcIxUeQgwZIiMd9gZAjymUvLANkjtLSk7pZerR6sNFbybbKjcvnwQyTGqAQqQBU4q_xWl_3P9fPj7ZBbsYpyevbt92ycGMCs0ALOvRWWcAKmBvb7HJEppZ9E2t_qsA5qHAa.Peg4DKRCL.DbaNSE2Kr0A0opJu2CKAk0d8MQ0M79farFkMaSIo64fgKeAh5KkM9U1l_0d39zD5K2ZdB_c6pQN7QradqkbPbCNL2M3mT2UenKbYhj_NSqVn3gbIba6G7ES2rBZsM75s5OIwsl._LvEKLSowxGSaLSJhwCcrkprYTmAI1btoZmUuFJhveUvD_.3kdulbV148YtIOh4OgPTSlQypYhzSrbcVn.p6sGpVySYHAmUWRyl0aRkue3ZNaXjvz.mktcjcRoubT0j98WFXH2Cd587dFRC6LT09wvUgFXU_5vCcIlNHIIborcfZErYiifoQO_JJnc6rJSVx8XaYnI9c76L9qh.UNxAVCNpt0ie0ZA1MT1P4QgYVBfmmWuP8Lu9kTgki6dx42F5Qgoj8qqwG9JKfPiZbvsyHMTJvXa92oOYLsoWMpTQD_x.TeFy1LIDopoYmMQI2mNeRZK5qEnUcgKQaCDtvei.pRKQADdvDzxjexd3fAhiClbV.ZKR9oX9b3BlwA8PF9fo25LCcshZC6W0GcmJenCOp7S5vZHRtN_ctm6xMi7GG6XumBNObLqImsphM.Np_umbWCEzpMCmKx2779KUNUwHoOXUKLA0G_0WfgXVq7cid6U1.pHCFApmB_RIU0g3dEqMQahjHyY30Rp3wl159WfSjU2R6Bf9mFwN9vCqPcPSJzrdeYoUSZGqRyE108MpHCbn4yS7tUe5DqTbnq4mr4tNTpnrZ9cAafl..lp.UgM2IIWmBMrAXSZ5lXXDrIOz2cAJ3.BewMtoPb21_1M899vy2qtmhl_Xc0XOTzXQ4TDvpaAMbFwQoSZ1uKykQaCt3FpZdjpGwio16SRYNDLez5WCmILnrA30VJLIycrYN4zt0.r6KGGLscU8snLeha8sGpdIgk3ILPKO3IKpE.8Zl2pA1fxHL9nKPfc5UxPDDRZDbzI8FcGDiFG6r2Hk3AkBD6T_qIeaAC5dQlHne0hUNrtGH45SVfpnfJbMMme3a9gbiIcipOElTXOAcphgr9cqLEzc76FUaSYc6TGa3OschPt9rojGzmotu5CLs0WxPiuERf_q.QdWSNeG_tHbMzbCUaSD2unnyGVDU7y_uO54d3aEjqI72_gI9GtadL7ad59mZbDeALbaXl2q6aPtmHd6BQhkSLOQGWdTZ5n2Pw4qKerFfN214b8uMy5fd.V3b2HTfXLMoDNaIT492QAvljJnOi_M0BaOPsB94DgEBMmXflpWEjb82pDpnPk.d0s3.9C3_L8fgl42gaXn94RzKD6z98xS7y_ToT0qPbLlyDwy6TqTxrnvxqLEJTBwwf2IqjWfqR4EFImX1SWf1y1aN2vKZ1cRVC2h7GUv_.uZgyrXeD.qrQy4kl38CRPp9k77TnRFgFxFV4yklDW0q896ahulXgovLAOwM8k_my0EuJxxayHPc6VapH8zXcKPI9hDUPmnUy4h1Cc9yeLZrCc_N5Vu8_XS9wVqMSQxJJOhyaYJgUMD0hDm_OUD5vBaer5ETOh3RtGwLppyads_PtwynU9ag3cXYNpGZx2ELjAVtv1Gig--
[x-rocketymmf:] => james_walker06@att.net
[x-mailer:] => YahooMailRC/570 YahooMailWebService/0.8.111.304355
[date:] => Sat, 11 Jun 2011 01:55:10 -0700 (PDT)
[from:] => "Dr. James Walker"
[reply-to:] => "Dr. James Walker"
[subject:] => Hello
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-332151620-1307782510=:25266"
[x-spam-status:] => No, score=2.2
[x-spam-score:] => 22
[x-spam-bar:] => ++
[x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Hello, My patient Mrs. Lena Williams, A widow in an hospicehome made an oral Will this morning for her life savings worth over 6,000,000.00(USD)with one of the banks here in MSIA. She Urged me as her Doctor to find agood citizen, whom will make use of this fund for humanitarian assistanceand help the earthquake and tsunami victims in Japan. If you receive thisletter with interest respond and I will explain more to you on the next stepto take. Dr. James Walker. [...] Content analysis details: (2.2 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net[Blocked - see ]0.0 SINGLE_HEADER_2K A single header contains 2K-3K characters1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 T_HK_NAME_DR T_HK_NAME_DR0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Hello, My patient Mrs. LenaWilliams, A widow in an hospice home made an oral Will this morning for her life savings worth over 6,000,000.00(USD) with one of the banks here in MSIA. She Urged me as her Doctor to find a good citizen, whom will make use of this fund for humanitarian assistance and help the earthquake and tsunami victims in Japan. If you receive this letter with interest respond and I will explain more to you on the next step to take. Dr. James
Walker.
Hello, My patient Mrs. Lena Williams, A widow in an hospice home made an oral Will this morning for her life savings worth over 6,000,000.00(USD) with one of the banks here in MSIA. She Urged me as her Doctor to find a good citizen, whom will make use of this fund for humanitarian assistance and help the earthquake and tsunami victims in Japan. If you receive this letter with interest respond and I will explain more to you on the next step to take. Dr. James
Walker.