Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Fri, 01 Jul 2011 06:44:43 -0700 [received:] => Array ( [0] => from nm1-vm1.bullet.mail.in.yahoo.com ([121.101.151.242])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1Qce1O-0004pj-Dxfor submissions@scamdex.com; Fri, 01 Jul 2011 06:44:43 -0700 [1] => from [121.101.151.236] by nm1.bullet.mail.in.yahoo.com with NNFMP; 01 Jul 2011 13:44:37 -0000 [2] => from [121.101.151.232] by tm1.bullet.mail.in.yahoo.com with NNFMP; 01 Jul 2011 13:46:36 -0000 [3] => from [127.0.0.1] by omp1001.mail.in.yahoo.com with NNFMP; 01 Jul 2011 13:44:37 -0000 [4] => (qmail 34298 invoked by uid 60001); 1 Jul 2011 13:44:36 -0000 [5] => from [41.203.225.201] by web137109.mail.in.yahoo.com via HTTP; Fri, 01 Jul 2011 19:14:36 IST ) [x-yahoo-newman-property:] => ymail-5 [x-yahoo-newman-id:] => 64540.17991.bm@omp1001.mail.in.yahoo.com [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1309527876; bh=/GM8GRlvCgB7l+sj9LGCYtpGrDL0IijvXxNxcBs/RjM=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=M/YlRf/TKeQRORdeS9oCP+GZG88teUrdtPm4sMVyg9U2rAm9j01lx0FYJOdsxmo1Q0cO9OOcoSjKAlJHA4ajbrM+jYciEuBTsndrNuUMUP7xJ5XoMDJMbsUNbmzOp+stbEs8mL3DFie9wEg3x+foZntng/8aJ/5FPk+7KZJ0n+0= [x-ymail-osg:] => 9ZgD9t8VM1kIsGDZr5CIbdT2mcnfiEpiw1GnjPm2mrH_D4VxbnEzDISDl5v2rVSWBnQHSdaztLEhSponNdt3Tq7eJLFN4uEGo7S9It9ArwaTIMUi2A4hcktpOnq2O7A07.AP5iLOBJe8I215QR5nXNkoUcpEIEhBXB6x5MrSIz8pDGX1qEHtvtPRpYKtqsoBtmUbC1vtlk14Ww9.qkv3X9ViK3TLHLJ6oQWRGyshFUH7DDUXueVQ0b4F4TEMRW4ZrgeMhKeVZeeJtJHEeCgsztkq5F96JJTU0jKXOrzDR57ZJepH4rew6kmOB2CtnCYvaKgCB7uPbpvKQdRN4UAqlJ6GIVMVgUewLfZ_ESq5BE_UUG8UQonwebZjxVPAj7YTndT5cNPSok1MaYoSl2C_QESt.oSASDzvhWu6vSIsmJtz43taEZABn9Z6v.doCLXUwVK5gag4YcizFRL9ZAFVcv.ZbJP7_Ig2H8omzsnhVu1.8K1Cs.iJP_1bFtynZLCqGuSjVOYkm2xbB_6DUy6LaZ7aX0IKkiZgTepkbTHByAf2iYdvFmWEwA005yz8DfLnz9uxvEycjwLgM5TLb41.OtQFi98zcNSPZna_w5UTpsMyliRGjP.i4VRhtYwAMUJmKk0fiCi.9aA1DIYW4d30GDWZsB1im.mIW_NdTynGk.n3i4o9ptVWTcvEMQwWycaLjrACpaq8frX_KrciPtz9L95T58.UGwNGSNOgD0Ozc.lnIE0gw4luI5PDO6QsCXcC_kQKMGtACKovyH2.4eKsgR0uQSB4Sryj8lIrryDpEqfYJm7kdhtiHdERTP.wSRPR_bm_BdQpi7nzAUIe8zgzKCMYWPIio.4maV9jbb6T_tYmrzrjQ75sxvRYw5fuhH9E0StFLaMov5MMoBi4fVzCN7WCAUsHEsO2ZnW2RkZRN1LgheV3pVwDj5W6jtupgZ_ELenIzPzkoTK5i8Q6vUErgL2zqmAmdFo0J6I2r8HGw49GVW4oTfYhGe7lEDbRp5ET2RNNi_mjcXmsBK2C3m7ByySh2t5B.dlTyqv.kaLrl8e5jylrUvHGqX2YKQWEeNSF3BbX6Tvmbmc.7rLxFAtQtfYho9i73xHpnd8W4Kzb8ejXFIxa_VIrWnN2623YUo2ZldWkuYpA.ScHy_FxlERKaM0VILbQD6kP1rYOg2i7_ER6ogc5_bDAiApL8nk9bOMNDiH3hNNC9FuT_xd5vj6TJJ_BS36_5I7jOF40n1mv4uVJvOsFAJnW1PV_lyvlX8ADx..rmId_qxVwvmkOVf7_ROBMrzrzheBfzzXwqkqBYSmcH7APK52M2jBCll04IMBgDNrbRmqbF3M1aqZMlcHOj.pl69YqEK8QypU39mA.odo- [x-rocketymmf:] => musa_raz [x-mailer:] => YahooMailWebService/0.8.112.307740 [message-id:] => <1309527876.27739.YahooMailNeo@web137109.mail.in.yahoo.com> [date:] => Fri, 1 Jul 2011 19:14:36 +0530 (IST) [from:] => Abdullahi [reply-to:] => Abdullahi [subject:] => READ AND GET BACK TO ME [to:] => undisclosed recipients: ; [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="0-872184655-1309527876=:27739" [x-spam-status:] => No, score=2.8 [x-spam-score:] => 28 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: READ AND GET BACK TO ME I want you to patiently read thisoffer. I am Mrs.Aminata Abdullahi,the wife to the deceased former Head ofDelegation to the World Bank in West Africa. My husband was the linkman betweenthe Organization for Petroleum Exporting Countries - OPEC and the petroleumsector in a West African country. He also attend OPEC meetings constantlyin Geneva before his death caused by cardiac arrest in our home town. Throughthe sale of our allocated oil quota in OPEC, he was able to make S$8.million.(EIGHTMILLION UNITED STATES DOLLARS)I want you to assist me to claim this moneyas i cannot claim it directly because he made the deposit as a fund belongingto his business associate in order not to raise eyebrow since he was a civilservant during that time, and the code of conduct bureau forbids him or hiswife to acquire such amount of money. It is on this basis that I am contactingyou for assistance, if you will be interested, claim documents will beenprocessed and sent to you. The documents with which the fund is depositedwill be amended to reflect you as the beneficiary so that you will be eligibleto collect the fund as his business associate. You shall be entitled to 30%of the total funds while the rest will be given to me on arrival in yourcountry for the up keeping of my only son and for further investment underyour kind control there in your country as I can not be able to do any investmenthere in West Africa due to the origin of the said fund. I will not fail tobring to your notice that this business is risk free and doesn't have anynegative implication. You should not entertain any fear as all modalitiesfor the smooth and easy transfer of this fund have been finalized. If youcan conveniently assure me of your ability to keep this business very secretand confidential, you can write back to me for further details. Expectingyour urgent response. Best regards, Mrs.Aminata Abdullahi [...] Content analysis details: (2.8 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 URG_BIZ BODY: Contains urgent matter-3.0 MILLION_USD BODY: Talks about millions of dollars0.0 FREEMAIL_FROM Sender email is freemail(aminataabdullahi2[at]gmail.com)0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)-2.0 SUBJ_ALL_CAPS Subject is all capitals2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (aminataabdullahi2[at]gmail.com)0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain0.0 DECEASED_NO_ML Dead not via mailing list3.1 RISK_FREE No risk1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.0 T_MONEY_PERCENT X% of a lot of money for you0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases-3.3 AWL AWL: From: address is in the auto white-list [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.