Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Tue, 08 Feb 2011 03:06:01 -0800 [received:] => Array ( [0] => from nm30-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.238])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1PmlOR-0004Jt-Q9for submitted@scamdex.com; Tue, 08 Feb 2011 03:06:01 -0800 [1] => from [98.139.91.66] by nm30.bullet.mail.sp2.yahoo.com with NNFMP; 08 Feb 2011 11:05:57 -0000 [2] => from [98.139.91.4] by tm6.bullet.mail.sp2.yahoo.com with NNFMP; 08 Feb 2011 11:05:57 -0000 [3] => from [127.0.0.1] by omp1004.mail.sp2.yahoo.com with NNFMP; 08 Feb 2011 11:05:57 -0000 [4] => (qmail 75885 invoked by uid 60001); 8 Feb 2011 11:05:57 -0000 [5] => from [212.52.153.229] by web113401.mail.gq1.yahoo.com via HTTP; Tue, 08 Feb 2011 03:05:57 PST ) [x-yahoo-newman-property:] => ymail-3 [x-yahoo-newman-id:] => 653421.80354.bm@omp1004.mail.sp2.yahoo.com [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1297163157; bh=6N4CY58ZdC6Ak9VQ2WlevY8xq/TcmWbCkJxSszyJ1yI=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=PSbQNoBNHvif6n4ZDn7QLPZdRJm/8JcOdCzNVB4u2n/zzL0Njkq5nsYjF9Aib325ieXB2HiNdJsIpNTOKMGr89UpIWmEtVuqQLuobXAKBytGDiS3ebe2+GJaLAQC3WgJkdjRN4kn78L/LE8wIYjQLGmgaZr9ci6l7EnINnev+qM= [message-id:] => <318054.72544.qm@web113401.mail.gq1.yahoo.com> [x-ymail-osg:] => ot.oXdoVM1kSBo6gdlfwb30x6zCg2vzGoiCcKa1l3jVsNkMHt6ySv1P0gd0TtVwK58EoB0foLlYp.kuS6ZgxLgBzHJCjWHOZJbsg52lGIAyetQG1whphCyRAYlIAev.6kyX_DUIiJgrrGptH4F_p6FScTwyHamuXzSN8n2k4saAE4GKDqes8A0w6I589oGg6oSmpQ_5iQMO13XHEeZsqqgMyh3aN2szj9dIrZ0u2u2JY71ZuzZul9QHy_3G61tOKjlH36abk5zdw_vjCTjeAo.Q1NRVVrD9fUX4gQ9PcF5NleYjZj199aNcSiFlEsb3kTPcrTsouy28kcSlehGpXeMWlVEww_sHK1VLFLzOr_R5VpSrqqFqUbLckt3P8TnvVZMJSeNaueZ9HqwqQgvtT0NKrOzJ4NJ7q5VB9ZOKnNhfByAnnOSPwvLSqLNzRXI9DjkcFF1V2CEaPwUAy2IqAHX_7w9eiTyFawLuKNcnq2_82Db.j3QRD.qi560Ggf0i8eZwgof6h8A0A2DzKZY6dNsM.VlfLRIrso9fvbFFg0mcyvRidqiSdUoaGxNUBYkX97nPXYJHwoxSvDHYQ.UBf5qLdHtf5OIE2Ytn3zFcoLCh5c0y55yZeYmBnJPJZlIKTey7J.bo0N.NLgH_fcB9ZMRiKQa71pd6K2INCp_1yGK6U0ms2bopmyMjjbk0lveT3VGookjUSeylFaK6frg8zDcB8KtDYZT2i0r7guL8UoiLfoTxVZGzW4av1bwJf8S8Mq7wCEySfscIpVTwuxw.6UAZGhlw9YQLuBMJdG2LdXENDXDPPcjklvwrAtOgDGuN1Yso_j85dlAV_x.s8QjS6aajU5zLHNiJh71MnwVc9mZ.X_arfb8v5NFYvoUYMe.xZht3JtFWtZb_DUqplT5dYoWYU8Q-- [x-rocketymmf:] => gregsklinfua [x-mailer:] => YahooMailClassic/11.4.20 YahooMailWebService/0.8.108.291010 [date:] => Tue, 8 Feb 2011 03:05:57 -0800 (PST) [from:] => Madam Aidata [reply-to:] => madamaidata03@gmail.com [subject:] => urgent please. [to:] => undisclosed recipients: ; [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="0-629119802-1297163157=:72544" [x-spam-status:] => No, score=2.4 [x-spam-score:] => 24 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear One, I am Madam Aidata Hinda I am a widow being thatI lost my husband,my husband Late Mr Hinda Norman was a serving director ofthe Cocoa exporting board until his death. He was assassinated by the rebelsfollowing the political uprising, before his death he made a deposit of SixMillion Five Hundred Dollars ($6,500,000.00USD) here in Ouagadougou BurkinaFaso in one of the Security Company,he intended to buy a Cocoa processingMachine with the fund. I want you to help me for us to retreive this fundand transfer it to your account in your country or any safer place as youwill be the beneficiary and recipient of the fund which we will use for jointinvestment in your country. I have plans to do investment in your country,like real estate and industrial production. This is my reason for writingto you. Please if you are willing to assist me and my only Duaghter Nora,indicate your interest by replying urgently Thanks and best regards . MadamAidata Hinda [...] Content analysis details: (2.4 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, lowtrust[98.139.91.238 listed in list.dnswl.org]0.0 FREEMAIL_FROM Sender email is freemail (madamaidata03[at]gmail.com)0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (madamaidata03[at]gmail.com)-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.