An
Email with the Subject "hello" was
received in one of Scamdex's honeypot email accounts on Sun, 30 Jan 2011 06:17:03 -0800
and has been classified as a Generic Scam Email.
The sender shows as stella cox <stella_cox@att.net>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
atm million united states do...bankcreditcontactaccountthree milliondepositedtransactionproject15%accessprocessproposal transferfundinvestmentcertifymailpackagebank dollarusd princinpal bank principal bank as a surprisedormantreferencerespect will remittanceremitt($3.000.000usd)(foundation projects and ... miss stella cox.
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Sun, 30 Jan 2011 06:17:03 -0800
[received:] => Array
(
[0] => from nm22-vm1.bullet.mail.sp2.yahoo.com ([98.139.91.223])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1PjY5O-0002SV-Vvfor scams@scamdex.com; Sun, 30 Jan 2011 06:17:03 -0800
[1] => from [98.139.91.69] by nm22.bullet.mail.sp2.yahoo.com with NNFMP; 30 Jan 2011 14:17:02 -0000
[2] => from [98.139.91.40] by tm9.bullet.mail.sp2.yahoo.com with NNFMP; 30 Jan 2011 14:17:02 -0000
[3] => from [127.0.0.1] by omp1040.mail.sp2.yahoo.com with NNFMP; 30 Jan 2011 14:17:02 -0000
[4] => (qmail 72648 invoked by uid 60001); 30 Jan 2011 14:17:00 -0000
[5] => from [41.202.100.96] by web83710.mail.sp1.yahoo.com via HTTP; Sun, 30 Jan 2011 06:17:00 PST
)
[x-yahoo-newman-property:] => ymail-5
[x-yahoo-newman-id:] => 31229.26531.bm@omp1040.mail.sp2.yahoo.com
[dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1296397020; bh=Pic2sGpegWgGpfFyAh0RMjNQjh0Z9kibChKNIQajsXo=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=etwQoU1+6NfqF0HJfD9cmpgud5pDBrzAfEOkyJ0PV3DTHzq62FjzljG27FymGuLUIw9RpA0luzu/RwGJlyrYNHC/b4wGWqCESSZnm6M5u1axHbpfMh8JqKi7CUaCX1ZwnCp7ySjI4r/rxzfZwXbpgTvdRNWTO4C5aDHoYylBpoo=
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=att.net; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=Rp3BXQ7OQFEFUKxtw0wzm0Ch+mkFBAsgEyWfh6N5RgrEVgemdv72TG97de5kedVkcigsvplVQ7yCIGlLk6Qs9Bex/FxI7JyjwiD+82/MlsKGsEz9G5JDGxMPwiKuex8FiahmGS7ITUqWAuQjRZ/ovQfJzKQn62vXRBD6EYk15UE=;
[message-id:] => <270587.68011.qm@web83710.mail.sp1.yahoo.com>
[x-ymail-osg:] => mH.P9PYVM1kQ5FGm8..zrLGtKey.Hk9gwKBhBTZcVe1TmriWwzYP4LzyLDBo6p7nSi6p6ffa4hYiAMYY79sdapsGwSceHZTBXKaSTdOROqdpJEYe6CW4fH9vHFQWrtRYMTcQngtM8dkS7Q9SG73ji8L6zZ1EKqOJVuBpTN7lr.uuOCDwsZTRt88TyZieg3rQ3Lg6yO2.0WGhx9DYhiDH1fH.J.qsk.9J6nD.U3dnmeCcfdbU1JTAOWGNpBBEv.WCX1cF1ZTjxmtU2mLyPChudiq1gaUFQX7RdkExesoj5WPs_6Izz_w0hVFOX9B3aoV99IDcK0ADnzSQE0mQEF8XABBDczI-
[x-mailer:] => YahooMailClassic/11.4.20 YahooMailWebService/0.8.107.285259
[date:] => Sun, 30 Jan 2011 06:17:00 -0800 (PST)
[from:] => stella cox
[reply-to:] => stellacox88@yahoo.co.id
[subject:] => hello
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-2018368398-1296397020=:68011"
[x-spam-status:] => No, score=3.1
[x-spam-score:] => 31
[x-spam-bar:] => +++
[x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Hello, It's my pleasure to proposed to you this my proposalfor a joint venture arrangement, I know my mail will comes to you as a surprisepackage, the reason i contacted you is for an assitance and as the impendingtransaction involve for you to stand as my Advisor/Trustee in respect orreferences to remittance process of Three Million United States Dollars($3.000.000USD)to you through ATM CERTIFY CREDIT CARD WIRED TRANSFER MEANS based on thedormant account that the princinpal bank here in RCI created where this saidfunds was deposited by the acccount holder which neccessited this said sumto be remitted to you without any difficulties, [...] Content analysis details: (3.1 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, lowtrust[98.139.91.223 listed in list.dnswl.org]-3.0 MILLION_USD BODY: Talks about millions of dollars0.0 FREEMAIL_FROM Sender email is freemail (stella_cox[at]att.net)1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,https://senderscore.org/blacklistlookup/[98.139.91.223 listed in bl.score.senderscore.com]1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit(stellacox88[at]yahoo.co.id)-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
It's my pleasure to proposed to you this my proposal for a joint venture arrangement, I know my mail will comes to you as a surprise package, the reason i contacted you is for an assitance and as the impending transaction involve for you to stand as my Advisor/Trustee in respect or references to remittance process of Three Million United States Dollars($3.000.000USD) to you through ATM CERTIFY CREDIT CARD WIRED TRANSFER MEANS based on the dormant account that the princinpal bank here in RCI created where this said funds was deposited by the acccount holder which neccessited this said sum to be remitted to you without any difficulties,
This funds is meant for proposed investment entity (Foundation projects and Real Estates Developers) in your country.
In respect of the above proposition to you, if you are really
interested to assit for the effective remittance of the said funds to you via ATM CERTIFY CREDIT CARD WIRED TRANSFER MEANS, i will immensely compensate you with 15% of the total sum once you confirmed access to the said credit card account created in your name and a genuine credit card delivered to you in your country of abode, for more update informations about the proposed transaction, please feel free to contact me on my email address hence all logistics have been put placed by the principal bank here in RCI.
Remain bless while expecting your prompt reply soonest.
Best Regards,
Miss Stella cox.
Hello,
It's my pleasure to proposed to you this my proposal for a joint venture arrangement, I know my mail will comes to you as a surprise package, the reason i contacted you is for an assitance and as the impending transaction involve for you to stand as my Advisor/Trustee in respect or references to remittance process of Three Million United States Dollars($3.000.000USD) to you through ATM CERTIFY CREDIT CARD WIRED TRANSFER MEANS based on the dormant account that the princinpal bank here in RCI created where this said funds was deposited by the acccount holder which neccessited this said sum to be remitted to you without any difficulties,
This funds is meant for proposed investment entity (Foundation projects and Real Estates Developers) in your country.
In respect of the above proposition to you, if you are really
interested to assit for the effective remittance of the said funds to you via ATM CERTIFY CREDIT CARD WIRED TRANSFER MEANS, i will immensely compensate you with 15% of the total sum once you confirmed access to the said credit card account created in your name and a genuine credit card delivered to you in your country of abode, for more update informations about the proposed transaction, please feel free to contact me on my email address hence all logistics have been put placed by the principal bank here in RCI.
Remain bless while expecting your prompt reply soonest.