Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com,submissions@scamdex.com [delivery-date:] => Wed, 10 Aug 2011 10:15:53 -0700 [received:] => Array ( [0] => from orval.can.rogers.com ([209.5.194.98])by chester.loopbiz.com with esmtp (Exim 4.69)(envelope-from )id 1QrCNk-0001y4-1f; Wed, 10 Aug 2011 10:15:53 -0700 [1] => from localhost ([209.5.194.50]) by orval.can.rogers.com (InterMail vM.5.01.02.00 201-253-122-103-101-20001108) with ESMTP id <20110810171555.TFYU5901.orval.can.rogers.com@localhost>; Wed, 10 Aug 2011 13:15:55 -0400 [2] => from 180.215.162.152 ([180.215.162.152]) by mymail.rogerstelecom.ca (IMP) with HTTP for ; Wed, 10 Aug 2011 13:32:34 -0400 ) [message-id:] => <1312997554.4e42c0b2b23c5@mymail.rogerstelecom.ca> [date:] => Wed, 10 Aug 2011 13:32:34 -0400 [from:] => IYAYI HOLDINGS LTD [reply-to:] => iyayi.holdings@hotmail.co.uk [subject:] => BUSINESS PROPOSAL [mime-version:] => 1.0 [content-type:] => text/plain; charset=ISO-8859-1 [content-transfer-encoding:] => 8bit [user-agent:] => Internet Messaging Program (IMP) 3.2.3 [x-originating-ip:] => 180.215.162.152 [x-spam-status:] => No, score=1.3 [x-spam-score:] => 13 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Friend, I am interested in establishing and operatinga very viable business as a means of investment abroad. I do not know toowell on how this is done in your country, so I will need you to help me inthis regard. My preference is any good profit yielding business and I wouldappreciate any viable ideas you could come up with. I will also need youto help me look for properties like homes and lands for sale as I am proposingto invest the sum of Twenty-five Million United States Dollars ($25,000,000.00USD) for this. I do not know if you can and will be of help to me. For abrief on my personality; I am Engr.Iyayi Okada, I am a Tanzania Citizen basedin south Africa . I am a Business man, formally into private Shipping Business.I am 52 years of age, married with a wife and 4 lovely children. I droppedmy Shipping business because it wasn't producing profitable in come. I hadproblems with the South Africa Authority just because am a foreigner andvery friendly with the Governor of the cool rich state Pretoria. They feel,I am actually aiding him launder the Government's funds. My need for thisbusiness proposition and to acquire these properties is very urgent as Iam planning to move out of this country with my family down to your countryand I want you to also help in finding a good home where my family and Iwill live in. Please I expect your good and prompt reply so that we can proceedswiftly. I will need your phone and fax numbers for easier communicationwith you in case I am unable to access my emails please contact me throughmy Email: iyayi.holdings@yahoo.com Best Regards, Engr.Iyayi Okada [...] Content analysis details: (1.3 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain1.2 MISSING_HEADERS Missing To: header-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear!0.0 T_FRT_INCOME BODY: ReplaceTags: Income-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 LOTS_OF_MONEY Huge... sums of money1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails0.1 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money0.5 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money1.4 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases0.5 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.