Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => service@scamdex.com [delivery-date:] => Thu, 21 Jul 2011 10:51:07 -0700 [received:] => Array ( [0] => from nm21.bullet.mail.bf1.yahoo.com ([98.139.212.180])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1QjxOr-0007Ap-5Qfor service@scamdex.com; Thu, 21 Jul 2011 10:51:06 -0700 [1] => from [98.139.212.146] by nm21.bullet.mail.bf1.yahoo.com with NNFMP; 21 Jul 2011 17:51:06 -0000 [2] => from [98.139.212.241] by tm3.bullet.mail.bf1.yahoo.com with NNFMP; 21 Jul 2011 17:51:06 -0000 [3] => from [127.0.0.1] by omp1050.mail.bf1.yahoo.com with NNFMP; 21 Jul 2011 17:51:06 -0000 [4] => (qmail 67262 invoked by uid 60001); 21 Jul 2011 17:51:06 -0000 [5] => from [196.28.245.214] by web161714.mail.bf1.yahoo.com via HTTP; Thu, 21 Jul 2011 10:51:06 PDT ) [x-yahoo-newman-property:] => ymail-3 [x-yahoo-newman-id:] => 645093.97810.bm@omp1050.mail.bf1.yahoo.com [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1311270666; bh=sCTkqF35Gy1BGJ88Z4bjWfCta5U8chJVFC+tBkrfVJ0=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Cd20+c/jGnUMFA0T1KHDUIINTPSEyjpgNeWvK6XK5x/8NlhJVneUzDgK9NJEPrzFbXAKmgIb/V63k+9+6tBCTnCOVT/fpVbvsw9dJgzDcSaY8/UFgx5XWgynLcSInn6izW1GshyhtB/XkvisbZ1Eo+jjPlI5HoxZW0h0w2CJFkI= [x-ymail-osg:] => im5oBiQVM1kgIiT2GSOSYp_izjY2zbp08TizDb3Bi5AoSo5XTayv04327zg8nCVWl5rjh1AJE5tIBliCT1lI3KKY0KAYA2m7OW0IoUO7r0nIq_jHbJpMW.HMaY78EcEBnvGppVw9yn2MwGe47Adu0niH_nvdnyqiT14F56nnHcrvecqhGAbre34Rl_7ZluAKSvRQJFbLWHy1EIZlRHC3Gxc0DNgNoL5bll54F3avMs7F592EeZmhiYrLTO.8CX1MzeZH0Vjya3xBv0kslncJ_apRXOzcf45TBLdtRTWpmROlLLtCAg5vGx1RxxyRrRsAIlP2UgtCXK4lg4nojAyhPHQMbKsfLbNaO0PKKTNOTuRLrXRRJdCRC4KfJolUsaqdjfFABeSZZbo2HiBcBycbR0m3TxEdJVPPvNopPV17MUP0Bw53Dl.gtvJwYvimKM3N2afH8uW56q.b4ojhrdab.jZusTZfJj_Xy8zGGvi5_uzLiFx.xwjEVxVAGkVw88bLcCuXoovMmoFu_ovaBF4wlAQVWoSeVCIZApf_JVi2F559DlZAv3c- [x-rocketymmf:] => mahim_ali010 [x-mailer:] => YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.307740 [message-id:] => <1311270666.42071.YahooMailClassic@web161714.mail.bf1.yahoo.com> [date:] => Thu, 21 Jul 2011 10:51:06 -0700 (PDT) [from:] => "Mr. Abdul Ghani" [reply-to:] => abdughani01@gmail.com [subject:] => Confidential notice with due respect [to:] => undisclosed recipients: ; [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="0-1683651416-1311270666=:42071" [x-spam-status:] => No, score=3.4 [x-spam-score:] => 34 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Confidential notice with due respect, With due respect I amMr. Abdul ghani, the manager auditing and accounts unit, foreign remittancedept. African Development Bank (A.D.B) Burkina Faso. Again in my departmentwe discovered an abandoned sum of $10.5 Million U.S dollars, TEN MILLIONFIVE HUNDRED THOUSAND UNITED STATES DOLLARS in an account that belonged toone of our foreign customers who died along with his entire family in a planecrash, since July 31st 2000. Pls go through the website (http://news.bbc.co.uk/1/hi/world/europe/859479.stm).Since we got information about his death, we have been expecting his nextof kin to come over and claim his money because we cannot release it unlesssomebody applies for it as the next of kin or a business associate to thedeceased customer as indicated in our banking guidelines and laws, So pleasei want you to assist me to stand as the next of kin to the late deceasedcustomer to claim his money in our bank as his next of kin. Please once youreceived my proposal i will like you to show me your full consent to enableme forward to you the full Details and also obtain an official text of ApplicationForm which you will fill and Apply to our bank as the next of kin. I haveagreed and also decided that 50% of this money will be for you as a foreignpartner, in respect to the provision of a foreign account which you are goingto bring for the transferring of the fund and 50% will be for me and my Family.There after I and my Family will visit your country for disbursement accordingto respective percentages indicated and i will also invest my own share ofthe fund in your country. Please i'm waiting to hear from you soonest, myprivate cell number +226 7622 7757 Mr. Abdul ghani. [...] Content analysis details: (3.4 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------0.0 T_LOTTO_DEPT BODY: Claims Department-3.0 MILLION_USD BODY: Talks about millions of dollars-2.0 NA_DOLLARS BODY: Talks about a million North American dollars3.1 HK_SCAM_N2 BODY: HK_SCAM_N20.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(abdughani01[at]gmail.com)0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server[196.28.245.214 listed in dnsbl.sorbs.net]0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (abdughani01[at]gmail.com)0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 T_HK_NAME_FM_MR_MRS T_HK_NAME_FM_MR_MRS0.1 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_MONEY_PERCENT X% of a lot of money for you0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money0.5 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money1.4 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases0.5 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.