An
Email with the Subject "Fwd: Your email was selected as winner!!!" was
received in one of Scamdex's honeypot email accounts on Tue, 04 Mar 2008 10:59:44 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Cordelynn Baumeister <redandcurly@sbcglobal.net>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
contactwinnumbersnationalawardedagentglobalsecretaryexecutiverussiabusinessfundmailuserbrian_walter_rfbr@yahoo.it will nwill willnyahoofyahoo.comyahoo.boa[77.234.201.66](no sig)(207.115.20.171)[77.234.201.66])(8.13.8 inb regex/8.13.8)(localhost [127.0.0.1])(postfix)(msk)(gmt)(normal)(http://www.rfbr.ru)(n-222-6647, e-910-56)donationhttp://www.rfbr.ru),
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => submitted@scamdex.com
[delivery-date:] => Tue, 04 Mar 2008 10:59:44 -0800
[received:] => Array
(
[0] => from web82002.mail.mud.yahoo.com ([66.163.178.246])by bartok.o7e.net with smtp (Exim 4.68)(envelope-from )id 1JWcMQ-0002AQ-RHfor submitted@scamdex.com; Tue, 04 Mar 2008 10:59:44 -0800
[1] => (qmail 4148 invoked by uid 60001); 4 Mar 2008 18:59:02 -0000
[2] => from [75.18.186.152] by web82002.mail.mud.yahoo.com via HTTP; Tue, 04 Mar 2008 10:59:02 PST
)
[domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=sbcglobal.net; h=X-YMail-OSG:Received:Date:From:Subject:To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=bh5xLBtTLGQWIAkjmSUuIluAwQ5MdqL3dyhqQp0Ewz4fqZXnKqauo5VDRFWd3i3zLRYpLMVgzJ89Bm85iWJ1IU25/ZAlCSuR8KSjEJuYTsLQ7LxHug9rufuqzXoYe/wsOTf63GQFl2IrmoAt6I04hB1OYpUDoxyRbf9ASDQBzMM=;
[x-ymail-osg:] => 8Ys3nUIVM1kugP76AArlv2Oy9Aoy7EQHGz1I2TahnQTEVyPkUM6dh3NznCp.cttHV9GAU52bShUe31yAptEbPr1YRhLoSTbAy2ByJ0nOJV9XXIkadDs1BLPU4VRHq1A6KI.PSaB.AoYLstzVTQJ1aZ9kYlRR5S9.WW7qlEE-
[date:] => Tue, 4 Mar 2008 10:59:02 -0800 (PST)
[from:] => Cordelynn Baumeister
[subject:] => Fwd: Your email was selected as winner!!!
[to:] => spam@uce.gov
[cc:] => scams@fraudwatchinternational.com
[mime-version:] => 1.0
[content-type:] => text/plain; charset=iso-8859-1
[content-transfer-encoding:] => 8bit
[x-uid:] => <826882.3445.qm@web82002.mail.mud.yahoo.com>
[x-spam-status:] => No, score=-2.6
[x-spam-score:] => -25
[x-spam-bar:] => --
[x-spam-flag:] => NO
[message-id:] => REIDs3x1207081624.M689508P639V-S3X
[x-scamdex-scores:] => S:44 P:35 A:39 L:50 E:40 G:35
[x-scamdex-classtype:] => L
[x-scamdex-classscore:] => 50
[x-scamdex-totscore:] => 243
[x-scamdex-kw:] => agent,award,business,contact,executive,fund,global,national,numbers,russia,trust,winn
[x-scamdex-em:] => brian_walter_rfbr@yahoo.it,otdelka@dom35.ru,redandcurly@sbcglobal.net,scams@fraudwatchinternational.com,spam@uce.gov
[x-scamdex-dir:] => E
[x-scamdex-id:] => E1207081624.M689508P639V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
--- otdelka@dom35.ru wrote:
X-Apparently-To: redandcurly@sbcglobal.net via
66.163.178.248; Fri, 29 Feb 2008 10:11:34 -0800
X-YahooFilteredBulk: 77.234.201.66
X-Originating-IP: [77.234.201.66]
Return-Path: <otdelka@dom35.ru>
Authentication-Results:
mta134.sbc.mail.mud.yahoo.com from=dom35.ru;
domainkeys=neutral (no sig)
Received: from 77.234.201.66 (EHLO
flpi131.prodigy.net) (207.115.20.171)
by mta134.sbc.mail.mud.yahoo.com with SMTP; Fri,
29 Feb 2008 10:11:33 -0800
X-Header-Overseas:
Mail.from.Overseas.source.hostland.ru
X-Originating-IP: [77.234.201.66]
Received: from hostland.ru (hostland.ru
[77.234.201.66])
by flpi131.prodigy.net (8.13.8 inb regex/8.13.8)
with ESMTP id m1TIBQZ3021183;
Fri, 29 Feb 2008 10:11:32 -0800
Received: from mail.dom35.ru (localhost [127.0.0.1])
by hostland.ru (Postfix) with ESMTP id 6B09AD10A1;
Fri, 29 Feb 2008 21:11:17 +0300 (MSK)
Received: from 77.73.191.98 (proxying for
192.168.0.28)
(SquirrelMail authenticated user
otdelka@dom35.ru)
by mail.dom35.ru with HTTP;
Fri, 29 Feb 2008 18:11:19 -0000 (GMT)
Message-ID:
<1809.77.73.191.98.1204308679.squirrel@mail.dom35.ru>
Date: Fri, 29 Feb 2008 18:11:19 -0000 (GMT)
Subject: Your email was selected as winner!!!
From: otdelka@dom35.ru
User-Agent: SquirrelMail/1.4.6
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
To: undisclosed-recipients:;
Content-Length: 1343
THE RUSSIAN FOUNDATION FOR BASIC RESEARCH
The Russian Foundation for basic research
(http://www.rfbr.ru), would like
to notify you that you have been chosen by the
board of trustees as one
of the final recipients of a cash Grant/Donation for
your ownpersonal,
educational, and business development.
Kindly note that you will only be chosen to
receive the donation
once,which means that subsequent yearly donation
will not get to you
again. Take time and thought in spending the
donation wisely on
something will last you a long time. Recipients are
only eligible to be
awarded this donation once. You are required to
contact the Executive
Secretary below, for qualification document you will
be given your
donation pin number,which you will use in collecting
the funds. Please
endeavor to quote your Qualification numbers
(N-222-6647, E-910-56) in
all discussions. You are required to assist in the
documentation of your
donation by filling the requested information stated
in the form below.
DONATION DOCUMENTATION FORM.
Kindly provide all required information.
1.FULL NAMES:_____2.ADDRESS:______
3.NATIONALITY:____4.STATE:______
5.COUNTRY:______6.TEL:____
7.FAX:____8.AGE/DATE OF BIRTH:____
10.MARITAL STATUS:_______
11.OCCUPATION:______
Executive Sec. Barr.Brian walter
Email: brian_walter_rfbr@yahoo.it
Regards.
Mr.Vikki Malcom
