Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Thu, 28 Apr 2011 01:22:59 -0700 [received:] => Array ( [0] => from nm20-vm0.bullet.mail.sp2.yahoo.com ([98.139.91.218])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1QFMUq-0000oh-9ufor submissions@scamdex.com; Thu, 28 Apr 2011 01:22:59 -0700 [1] => from [98.139.91.62] by nm20.bullet.mail.sp2.yahoo.com with NNFMP; 28 Apr 2011 08:22:55 -0000 [2] => from [98.139.91.37] by tm2.bullet.mail.sp2.yahoo.com with NNFMP; 28 Apr 2011 08:22:55 -0000 [3] => from [127.0.0.1] by omp1037.mail.sp2.yahoo.com with NNFMP; 28 Apr 2011 08:22:55 -0000 [4] => (qmail 18258 invoked by uid 60001); 28 Apr 2011 08:22:55 -0000 [5] => from [41.203.234.234] by web46013.mail.sp1.yahoo.com via HTTP; Thu, 28 Apr 2011 01:22:55 PDT ) [x-yahoo-newman-property:] => ymail-3 [x-yahoo-newman-id:] => 631641.82807.bm@omp1037.mail.sp2.yahoo.com [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1303978975; bh=clzQujrR1oixJ8tcdlwBTqYGdXFJ6HYjddp5DFvjUjQ=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=nC/8e5TAY1unxFziJuCpqdMtVodwmCz5eyrt0w4BE7pIvX84xOfNb05ljoGSa4mIXRGsMznqB5fETl0bauo4Mw9m94BaiT2AbKNrJkUqNDjx7rWWcX6APgwZuU8sFMTJT8wMUlUVeakVaQwBGmw7PUv/F9Y253fDoii+Sb4zF2Q= [message-id:] => <387480.94636.qm@web46013.mail.sp1.yahoo.com> [x-ymail-osg:] => V.SOkqcVM1mO_ZrGyN2TGZIFoN_Isy7PYCbgP9dETDrNuC9d9lgWBl6Jp1NEzy5hEDuVr167cLmt_ZqAsNAXPzN5y6v9NTu_NE27JVUHNY0MMilByGf_78a4.yvnZCU.feEoEFQvPVp4FMVBpgRX8iPwmM1Fe9da3iyxIhSN5fH5ShkEGcuRAjM63bZ..LdnwS1kVezn.BK3SF.gGGaZ_k4orW39x4jHuxzkBVuM.fJUhLTHoWwKdsmUcNMFopGh0hTID6ucA9av61mVkV2CEhhus9agyM4POnhOovfpJNe1jmhfnLUiNxtb.VjXIW0AS08SJt_p1HDhFVNi.Vjy657KB2lle_vlk4slv_mpSCfUgRvCwyRxWFG.PaHsG6.NfCeHow-- [x-rocketymmf:] => ame_paris [x-mailer:] => YahooMailClassic/12.0.2 YahooMailWebService/0.8.110.299900 [date:] => Thu, 28 Apr 2011 01:22:55 -0700 (PDT) [from:] => Zeba idrissa [reply-to:] => zebaidrissa@gmail.com [subject:] => very urgent [to:] => undisclosed recipients: ; [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="0-606200379-1303978975=:94636" [x-spam-subject:] => ***SPAM*** very urgent [x-spam-status:] => Yes, score=4.3 [x-spam-score:] => 43 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: I am Mr zeba idrissa a banker in AFRICA Bank (B OA). I havedecided to contact you on business deal of us$4.5.000 (four.five millionUnited States dollars). The depositor of the said fund died with his entirefamily during the Iraq war in 2004. According to our banking law, if thefund remains unclaimed for six (6) years then, the fund will be transferredinto the reserve bank as unclaimed bill. I wish to present you as his cousinor business partner so that the bank will transfer the fund into your bankaccount for us to share it. Your percentage will be 40% while 60% will befor me. As an insider in this bank, I assure you that, this transaction is100% risk free. If you are willing for this deal, contact me for more detailsbut if you are not capable, please notify me. The transaction will take usonly few banking days. Do not disclose this deal to anybody because I wantthe secret to be between us only. I will give you the text of the applicationto fill and send to the Bank for the release of the fund into your bank accounton the receipt of your message. I will be glad to hear from you as soon asyou receive this message as to enable me give you the application to filland send to the bank. 1 Phone And Fax Number, 2 Address 3 Your Full Nam 4country Name 5 Your Age 6 your sex [...] Content analysis details: (4.3 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars0.0 FREEMAIL_FROM Sender email is freemail (zebaidrissa[at]gmail.com)0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, lowtrust[98.139.91.218 listed in list.dnswl.org]0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain3.1 RISK_FREE No risk0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.0 T_MONEY_PERCENT X% of a lot of money for you0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => YES )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.