Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Sat, 15 Oct 2011 12:46:33 -0700 [received:] => Array ( [0] => from mta154.breakthru.com ([208.88.180.154])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RFABk-0003Iu-HZfor scam@scamdex.com; Sat, 15 Oct 2011 12:46:33 -0700 [1] => from ii16-16.friendfinderinc.com (unknown [10.91.9.1])by mta154.breakthru.com (Postfix) with ESMTP id 20B64D154D8;Sat, 15 Oct 2011 07:21:23 -0700 (PDT) [2] => by ii16-16.friendfinderinc.com (Postfix, from userid 0)id 9F49E277936; Sat, 15 Oct 2011 07:21:22 -0700 (PDT) ) [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="_----------=_1318688482192203676" [date:] => Sat, 15 Oct 2011 07:21:22 -0700 [subject:] => SEND YOUR INFORMATION, [to:] => ingemo.tornroos@psori.fi1 [from:] => "tony nice" [x-mailer:] => FRIENDFINDERINC MAILER [message-id:] => <20111015142122.9F49E277936@ii16-16.friendfinderinc.com> [content-transfer-encoding:] => 7bit [x-spam-subject:] => ***SPAM*** SEND YOUR INFORMATION, [x-spam-status:] => Yes, score=4.9 [x-spam-score:] => 49 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: =============================== From the Desk of Mr.David,De-congestion Unit, Head of Customs, Kotoka Intl. Airport, Accra Ghana. WestAfrica. Attention: Beneficiary, Please i know that we do not know each otherbefore but try and get back to me now There are two consignment box whichwas seized by our office here at the airport when departing to a foreignbeneficiary after we scanned and knew it was money we requested clearancecertificate before the release. Since that long period there have not beenanybody coming to claim it and now i used information to reach the beneficiarybut was told he is dead. So now i want the two of us to work and claim themoney since am the head custom here for our benefit. I am due for leave butbefore then i want to put your name on the documents as the receiver of thetrunk which worth US$ 14.5 000,000.00 so that we will get through the clearanceand share 50% each. You know that we need each other for the project to becompleted,so let us work with one spirit. Send me detail of address and airportfor the diplomat coming.I am in the system i know what to do regarding theairport regulations and rules, so we do no need to have problems about thedeparture of the trunk from here. l will complete the release order in yourname and have the trunks to ourselves, when the diplomat delivers it to youi will proceed with my coming to meet you. Let me hear from you as soon asyou read this email, Please email me from here davidkalu39@yahoo.com +233542696240[...] Content analysis details: (4.9 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT[208.88.180.154 listed in bb.barracudacentral.org]2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL[208.88.180.154 listed in psbl.surriel.com]-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain3.1 DEAR_BENEFICIARY BODY: Dear Beneficiary:0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money [x-spam-flag:] => YES )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

===============================

Attention: Beneficiary,
Please i know that we do not know each other before but try and get back =
to me now There are two consignment box which was seized by our office he=
re at the airport when departing to a foreign beneficiary after we scanne=
d and knew it was money we requested clearance certificate before the rel=
ease. Since that long period there have not been anybody coming to claim =
it and now i used information to reach the beneficiary but was told he is=
 dead. So now i want the two of us to work and claim the money since am t=
he head custom here for our benefit. I am due for leave but before then i=
 want to put your name on the documents as the receiver of the trunk whic=
h worth US$ 14.5 000,000.00 so that we will get through the clearance and=
 share 50% each. You know that we need each other for the project to be c=
ompleted,so let us work with one spirit. Send me detail of address and ai=
rport for the diplomat coming.I am in the system i know what to do regard=
ing the airport regulations and rules, so
  we do no need to have problems about the departure of the trunk from he=
re. l will complete the release order in your name and have the trunks to=
 ourselves, when the diplomat delivers it to you i will proceed with my c=
oming to meet you. Let me hear from you as soon as you read this email, P=
lease email me from here davidkalu39@yahoo.com +233542696240

Best Regards,
Mr.David,
__________________________________________
BreakThru.com - Pure email. Zero spam.

http://friendfinder.com/go/f47930 - Dating Personals and Social Networkin=
g

--_----------=_1318688482192203676
Content-Disposition: inline
Content-Length: 1814
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<HTML>
<BODY>
<br>
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D<br>

</BODY>
</HTML>
<!--  -->
--_----------=_1318688482192203676--