An
Email with the Subject "Dear Sir," was
received in one of Scamdex's honeypot email accounts on Tue, 18 Mar 2014 15:20:30 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Tira Turkmani <microlottt@zipmail.com.br>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
generalkilledpresidentoilbankcontactwinresidentpartnertransactionbusinessfundmailbank with bank will securitydearcooperation miss. tira hassanyears old
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Tue, 18 Mar 2014 15:20:30 -0700
[received:] => Array
(
[0] => from web100518.mail.kks.yahoo.co.jp ([183.79.28.148]:46256)by lester.newsblaze.com with smtp (Exim 4.80.1)(envelope-from )id 1WQ2N2-0001rf-Glfor submissions@scamdex.com; Tue, 18 Mar 2014 15:20:30 -0700
[1] => (qmail 47161 invoked by uid 60001); 18 Mar 2014 22:20:28 -0000
[2] => from [41.207.209.20] by web100518.mail.kks.yahoo.co.jp via HTTP; Wed, 19 Mar 2014 07:20:28 JST
)
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=yj20050223; d=yahoo.co.jp; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Sender:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=YlS1UaqEKF5Wm2kd7TPle0hnV70gSosA5S5U+Qdfu2TITpdkYVrVUz1DrkHe1WLZU1Z/RLDXKEPfUZeWXYG5C/rHDqToKSXShJLyVtGqnxgNpX1DbL/ODpRltIsw71fs ;
[message-id:] => <810213.92866.qm@web100518.mail.kks.yahoo.co.jp>
[x-ymail-osg:] => vai7tIEVM1noWz5zdxRl3ILP0vm.HK1K34FzN02I8Zb0ZuN1TaRkcrcCqb0NGicJqbaAWJGFDSufMr1LQPwH7edgOnwJwjfUYSST3kNUjBZbXwVqcQwEOPM.N0z8nOJEs12v96WM.h55.gGfYkh28YwfNRwoZWelFIEBkkXkI96TtDdhGylmrEt8XidoBIfxf0aaY4Suq2DuwZ.ej53fXqSnUXqHNe8ID9PiyPGeW9hVkzpfPpPhVm_GrgdkVoKxnkb2xv1ki0Y.fP2wh2doZMIWHj8oEnp6SLcLj7cahuzPdQKrE.XDFeNzsCl0mMVZCWprxO3fv7JkDF1CGRKIsUd_Y6m6Inm9KIUqYBouKDLjRft.gWNIAk_FOog6wHRee74XnU_IUt2jV0aC1h_z0zjMU7h3z0ozcXDgVbehtEY5F_c8z2_yWfoXfyQ6H7kjgYpw9TwTi1anfg6ucUbKdv41CsK8Y.ddvRLz9bOznASjHDUkaCp7as21OofxC4uFXbySb_Yw8RBp718a6Zosg8vlC8KNTW2i7TBLGYw0M2HE6HfrZJlzZ5KpGtw9PWBGgwuhZOvv2wwGVz5ztNcpPdE1HAE-
[x-rocketymmf:] => caliana_alrasheed0
[x-mailer:] => YahooMailWebService/0.8.111_52
[sender:] => caliana_alrasheed0@yahoo.co.jp
[date:] => Wed, 19 Mar 2014 07:20:28 +0900 (JST)
[from:] => Tira Turkmani
[reply-to:] => Tira Turkmani
[subject:] => Dear Sir,
[to:] => undisclosed recipients: ;
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="0-283083166-1395181228=:92866"
[x-spam-status:] => No, score=-0.8
[x-spam-score:] => -7
[x-spam-bar:] => /
[x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Dear Sir, I am Miss. Tira Hassan Turkmani, I am 17 Years old and a Syrian citizen. My father Hassan Turkmani was al-Assad's security adviser and assistant vice president and was killed in Damascus of Syria and his business office burnt down because of his support to the President Bashar AL- Assad. [...] Content analysis details: (-0.8 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (microlottt[at]zipmail.com.br) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (tira turkmani ) 0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=microlottt%40zipmail.com.br;ip=183.79.28.148;r=lester.newsblaze.com] 0.0 HTML_MESSAGE BODY: HTML included in message-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
I am Miss. Tira Hassan Turkmani, I am 17 Years old and a Syrian citizen. My father Hassan Turkmani was al-Assad's security adviser and assistant vice president and was killed in Damascus of Syria and his business office burnt down because of his support to the President Bashar AL- Assad.
The rebel leaders have tried all they could to persuade President Bashar AL- Assad to conduct a free and all inclusive election but he refused and decided to go to war against the citizens he is pretending to govern. If President Bashar AL- Assad thinks that he is popular, he would have accepted to have a transitional committee and general election will be conducted and who wins will at-least bring peace to Syria.
Anyway, let me not take your time with the situation in Syria as my family was mostly affected.
I lost my father- Hassan Turkmani the security adviser and assistant vice president to President Bashar AL- Assad regime and My Mother in bomb blast at Damascus.
I had to escape Syria with my little sister Yalda to Lebanon and from there to United States where my father had huge sum of money with Bank in United States, so that I can invest the funds with overseas partners because in Syria the political turmoil appeared to be continued for a long time. Honestly, I want to invest and make use of the money in your country, as we all are aware that the crisis still continues in Syria and I cannot also invest in United States due to their double-tax regime.
I can assure you that the transaction is a hitch-free type. Please feel free to contact me.
Let me stop here, hoping that you will respond promptly.
Thanks for your anticipated cooperation.
Regards, Miss Tira & Yalda Turkmani.
Dear Sir,
I am Miss. Tira Hassan Turkmani, I am 17 Years old and a Syrian citizen. My father Hassan Turkmani was al-Assad's security adviser and assistant vice president and was killed in Damascus of Syria and his business office burnt down because of his support to the President Bashar AL- Assad.
The rebel leaders have tried all they could to persuade President Bashar AL- Assad to conduct a free and all inclusive election but he refused and decided to go to war against the citizens he is pretending to govern. If President Bashar AL- Assad thinks that he is popular, he would have accepted to have a transitional committee and general election will be conducted and who wins will at-least bring peace to Syria.
Anyway, let me not take your time with the situation in Syria as my family was mostly affected.
I lost my father- Hassan Turkmani the security adviser and assistant vice president to President Bashar AL- Assad regime and My Mother in bomb blast at Damascus.
I had to escape Syria with my little sister Yalda to Lebanon and from there to United States where my father had huge sum of money with Bank in United States, so that I can invest the funds with overseas partners because in Syria the political turmoil appeared to be continued for a long time. Honestly, I want to invest and make use of the money in your country, as we all are aware that the crisis still continues in Syria and I cannot also invest in United States due to their double-tax regime.
I can assure you that the transaction is a hitch-free type. Please feel free to contact me.
Let me stop here, hoping that you will respond promptly.