Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Wed, 14 Dec 2011 19:48:01 -0800 [received:] => from mailhost.agnesb.com ([212.99.10.93] helo=mail.agnesb.fr)by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1Rb2Ib-0006M3-DQfor submitted@scamdex.com; Wed, 14 Dec 2011 19:48:01 -0800 [from:] => M_AROKODARE@agnesb.fr [mime-version:] => 1.0 [sender:] => support@agnesb.fr [importance:] => [x-priority:] => [subject:] => FROM: Mr. Michael A. Arokodare, (NNPC Chief Accountant): [sensitivity:] => [date:] => Thu, 15 Dec 2011 04:46:06 +0100 [message-id:] => [x-mailer:] => Lotus Domino Web Server Release 7.0.1 January 17, 2006 [x-mimetrack:] => Serialize by Router on mail.agnesb.fr/QNotesCertif/FR(Release 7.0.1|January17, 2006) at 15/12/2011 04:47:28 [content-type:] => text/plain; charset=US-ASCII [bcc:] => submitted@scamdex.com [x-spam-status:] => No, score=0.7 [x-spam-score:] => 7 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: FROM: Mr. Michael A. Arokodare, (NNPC Chief Accountant): Date:15th DEC. 2011. Confidential Business Proposal. Dear Sir, Having consultedwith my colleagues and based on the information gathered about you, whichI have the privilege to request for your assistance to transfer the sum ofUS$15,200,000.00 (Fifteen Million Two Hundred Thousand United States dollars)into your accounts. The above sum is an over-invoiced resulted from contractalready executed and commissioned, of course foreign contractors has beenpaid a month ago. This action was however intentional and since then thefund has been in our suspense account in Central Bank of Nigeria. We are nowready to transfer the above fund overseas and that is where you come in.It is important to inform you that as civil servants, we are forbidden tooperate a foreign account; that is why we require your assistance. The totalsum will be shared as follows: 70% for us, 25% for you and 5% for local andinternational expenses incidental to the transfer. The transfer is risk freeon both sides. I am an accountant with the Nigerian National Petroleum Corporation(NNPC). If you find this proposal acceptable, we shall require the followingdocuments: [...] Content analysis details: (0.7 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at http://www.dnswl.org/, hightrust[212.99.10.93 listed in list.dnswl.org]-3.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'-3.0 MILLION_USD BODY: Talks about millions of dollars1.2 MISSING_HEADERS Missing To: header-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 LOTS_OF_MONEY Huge... sums of money3.9 RISK_FREE No risk!0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.8 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_MONEY_PERCENT X% of a lot of money for you0.9 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money1.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money0.2 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.9 MONEY_FRAUD_5 Lots of money and many fraud phrases0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)0.5 FORM_FRAUD_5 Fill a form and many fraud phrases1.1 FORM_FRAUD_3 Fill a form and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.