An
Email with the Subject "LOAN OFFER" was
received in one of Scamdex's honeypot email accounts on Fri, 15 Apr 2011 20:49:01 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "eglobal Capital private finance" <funds@loan.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiaryfinancethousand boxforeignbankcreditendedcheckwinnationalaccountglobaltransactionpaymentresponseswift5%processfundbusiness transfermailbank dollar the bank including bank routing# bank will security(our method of loan payment)(not p.o.box)nmr. derek hoffmanfinancial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => cj@scamdex.com
[delivery-date:] => Fri, 15 Apr 2011 20:49:01 -0700
[received:] => Array
(
[0] => from mx1.riseup.net ([204.13.164.18])by chester.loopbiz.com with esmtps (TLSv1:AES256-SHA:256)(Exim 4.69)(envelope-from )id 1QAwVF-0000jR-Ecfor cj@scamdex.com; Fri, 15 Apr 2011 20:49:01 -0700
[1] => from swift.riseup.net (swift-pn.riseup.net [10.0.1.46])(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))(Client CN "*.riseup.net", Issuer "Gandi Standard SSL CA" (verified OK))by mx1.riseup.net (Postfix) with ESMTPS id C2FAE50945;Fri, 15 Apr 2011 20:48:36 -0700 (PDT)
[2] => by swift.riseup.net (Postfix, from userid 33)id 4CBA2D758; Fri, 15 Apr 2011 20:33:07 -0700 (PDT)
[3] => from localhost (localhost [127.0.0.1])by swift.riseup.net (HordeFramework) with HTTP; Fri, 15 Apr 2011 20:33:01 -0700
)
[message-id:] => <20110415203301.52382rt139juda0w@swift.riseup.net>
[date:] => Fri, 15 Apr 2011 20:33:01 -0700
[from:] => "eglobal Capital private finance"
[reply-to:] => derekhoffman@gala.net
[to:] => undisclosed-recipients:;
[subject:] => LOAN OFFER
[mime-version:] => 1.0
[content-type:] => text/plain;charset=ISO-8859-1;DelSp="Yes";format="flowed"
[content-disposition:] => inline
[content-transfer-encoding:] => quoted-printable
[user-agent:] => Internet Messaging Program (IMP) H3 (4.2)
[x-authenticated-user:] => travelqueen@riseup.net
[x-virus-scanned:] => clamav-milter 0.97 at mx1
[x-virus-status:] => Clean
[x-spam-subject:] => ***SPAM*** LOAN OFFER
[x-spam-status:] => Yes, score=4.4
[x-spam-score:] => 44
[x-spam-bar:] => ++++
[x-spam-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: e-GLOBAL PRIVATE SECURITY FINANCE Attention, beneficiary,This is to notify you that we are ready to approve your desired loan to youwith little or no credit check within three (3) working days. Are you a business[...] Content analysis details: (4.4 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------1.7 BAD_CREDIT BODY: Eliminate Bad Credit-0.0 SPF_HELO_PASS SPF: HELO matches SPF record-2.0 SUBJ_ALL_CAPS Subject is all capitals0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=funds%40loan.com;ip=204.13.164.18;r=chester.loopbiz.com]2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:0.0 LOTS_OF_MONEY Huge... sums of money0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
[x-spam-flag:] => YES
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
to you with little or no credit check within three (3) working days.
settle your debt or pay off your bills or start a nice business?
Thousand United State Dollars) and a minimum of 10,000.00 (Ten
on our terms and condition of the loan.
completion of your transaction.(2)for the fact that we have decided to
being use with the intended purpose as explained to us and is also our
you will be able to pay back the loan with the agreed interest, you?re
your transaction.
(Our method of loan payment)
(1) We transfer money in to your zero balance credit card account.
(2) We will transfer money in to your equity account,
(3) We make use of bank to bank wire transfer
request that you send your application with the following information
start the processing of the loan.
1) Your full name and address (not p.o.box) but physical address.
2) Your direct phone# and fax number if any.
name, account#, routing# bank phone and fax number if any.
MR. Derek Hoffman
GM, International Transfers & Foreign Operations.
eglobal Capital private finance
United Kingdom.
Thanks.Management
e-GLOBAL PRIVATE SECURITY FINANCE
Attention, beneficiary,
This is to notify you that we are ready to approve your desired loan
to you with little or no credit check within three (3) working days.
Are you a business
man or woman? Are you in any financial mess? Do you need loan to
settle your debt or pay off your bills or start a nice business?
We can approve a maximum of 750,000.00 (Seven Hundred and Fifty
Thousand United State Dollars) and a minimum of 10,000.00 (Ten
Thousand United State Dollars)
on our terms and condition of the loan.
1. You must follow every of our directives to ensure the successful
completion of your transaction.(2)for the fact that we have decided to
grant you a
guarantee loan, it is our obligation to make sure that the funds are
being use with the intended purpose as explained to us and is also our
obligation to
make sure that your transaction will be successful completed so that
you will be able to pay back the loan with the agreed interest, you?re
going to pay back
the loan with 5% interest of any amount loaned to you, at the end of
your transaction.
(Our method of loan payment)
(1) We transfer money in to your zero balance credit card account.
(2) We will transfer money in to your equity account,
(3) We make use of bank to bank wire transfer
Upon your acceptance to the terms and conditions of the loan, I hereby
request that you send your application with the following information
to enable us
start the processing of the loan.
1) Your full name and address (not p.o.box) but physical address.
2) Your direct phone# and fax number if any.
3) The bank details of any of the three options including bank
name, account#, routing# bank phone and fax number if any.
We will get back to you within 24hrs and we look forward to your swift
response. Send all application to this email: derekhoffman@gala.net
MR. Derek Hoffman
GM, International Transfers & Foreign Operations.
eglobal Capital private finance
United Kingdom.
Thanks.Management