Search Scamdex & Scamalot
A Scam Email with the Subject "FW: From Alimatu Baba." was received in one of Scamdex's honeypot email accounts on Thu, 11 Jun 2009 04:01:07 -0700 and has been classified as a Advance Fee Fraud/419 Scam. The sender was "srt@beadata.com" <srt@beadata.com>, although it may have been spoofed.
Return-path: <alimatu_baba1@yahoo.co.th> Envelope-to: srt@beadata.com Received: from onehothost.onehothost.com ([216.40.232.2]) by smtp4.uk2.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.60) (envelope-from <alimatu_baba1@yahoo.co.th>) id 1MEdEA-0008Fq-4m for srt@beadata.com; Thu, 11 Jun 2009 06:53:33 +0100 Received: from [41.207.194.86] (port=4729 helo=User) by onehothost.onehothost.com with esmtpa (Exim 4.69) (envelope-from <alimatu_baba1@yahoo.co.th>) id 1MEdCW-0001F5-3s; Thu, 11 Jun 2009 00:51:48 -0500 Reply-To: <alimatu_baba1@yahoo.co.th> From: "alimatu_baba149@yahoo.co.th"<alimatu_baba1@yahoo.co.th> Subject: From Alimatu Baba. Date: Thu, 11 Jun 2009 05:51:31 -0000 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - onehothost.onehothost.com X-AntiAbuse: Original Domain - beadata.com X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - yahoo.co.th X-Source: X-Source-Args: X-Source-Dir: X-Spam_score: 16.8 X-Spam-Score: 16.8 X-Spam-Report: Spam detection software, running on the system "spam24.uk2net.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From Alimatu Baba. Based on your profile i am happy to request for your assistance and also to go into business partnership with you, i believe that you will not betray my trust which I am going to lay on you. [...] Content analysis details: (16.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MISSING_MID Missing Message-Id: header 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?41.207.194.86>] 1.1 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server [41.207.194.86 listed in dnsbl.sorbs.net] 2.8 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.207.194.86 listed in zen.spamhaus.org] -1.0 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [216.40.232.2 listed in list.dnswl.org] 2.1 DNS_FROM_RFC_BOGUSMX RBL: Envelope sender in bogusmx.rfc-ignorant.org 1.6 MISSING_HEADERS Missing To: header 1.8 MILLION_USD BODY: Talks about millions of dollars 2.0 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419) 4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
during one of his business trips in Accra capital city of Ghana , year 12th=2EFebuary 2005=2EThough his sudden death was linked or rather suspect= ed to have been masterminded by an uncle of his who travelled with him at that time=2E=20 =20 But God knows the truth! My mother died when I was just 4 years old, and since then my father took me so special=2E Before his death on February 12= th 2005 I received a call through his secretary who accompanied him to the hospital that my father want to see me urgently, reaching to the hospital= I cold not recorgnise my father any more I was totally discouraged and h= e called me and told me that he has the sum of Twenty eight Million United State Dollars=2E(USD$28 000 000) left in a security company in a metallic trunk box, but the security company didn't know the content because it was= registered as family valuables personal for security reasons=2E=20 =20 I am just 21years old and a university undergraduate at cape coast university where I was schooling when the incident happened, I can not continue my education, and I really don't know what to do=2E This is because I have suffered a lot of set backs as a result of incessant political crisis here in Ivory coast=2E The death of my father actually brought sorrow to my life=2E I am in a sincere desire of your humble assistance in this regards=2E So that I can give my life am meaning your suggestions and ideas will be highly regarded=2E Now permit me to ask thes= e few questions, =20 1=2E Can I completely trust you=3F=20 2=2E What percentage of the total amount in question will be good for you=3F= =20 =20 Consider this and get back to me as soon as possible=2E =20 Thank you so much=2E=20 =20 My sincere regards,=20 =20 Alimatu Baba -------------------------------------------------------------------- mail2web=2Ecom =96 What can On Demand Business Solutions do for you=3F http://link=2Email2web=2Ecom/Business/SharePoint