Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scams@scamdex.com [delivery-date:] => Sat, 21 May 2011 09:11:51 -0700 [received:] => Array ( [0] => from mta153.breakthru.com ([208.88.180.153])by chester.loopbiz.com with esmtp (Exim 4.69)(envelope-from )id 1QNomM-0002R4-Acfor scams@scamdex.com; Sat, 21 May 2011 09:11:51 -0700 [1] => from ii16-16.friendfinderinc.com (unknown [10.91.9.1])by mta153.breakthru.com (Postfix) with ESMTP id 03C53C1149C;Fri, 20 May 2011 12:23:16 -0700 (PDT) [2] => by ii16-16.friendfinderinc.com (Postfix, from userid 0)id 617402779D4; Fri, 20 May 2011 12:23:15 -0700 (PDT) ) [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="_----------=_130591939565392853" [date:] => Fri, 20 May 2011 12:23:15 -0700 [subject:] => I await your urgent reply Asap [to:] => smithallotey12345@gmail.com [from:] => "peter Adams" [x-mailer:] => FRIENDFINDERINC MAILER [message-id:] => <20110520192315.617402779D4@ii16-16.friendfinderinc.com> [content-transfer-encoding:] => 7bit [x-spam-status:] => No, score=0.3 [x-spam-score:] => 3 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Friend, I am Mr. Smith Allotey am a bank branch managerwith a bank here in Accra, Ghana. I contacted you for help because I am interestedin transferring the sum of four million, eight hundred and fifty thousandU.S. dollars U.S. in your account that would like to invest in real estatein your country if possible, personally, I contacted you their informationthrough a personal quest for an honest and reliable foreigner from our chamberof commerce. [...] Content analysis details: (0.3 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 URG_BIZ BODY: Contains urgent matter-2.0 NA_DOLLARS BODY: Talks about a million North American dollars1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT[208.88.180.153 listed in bb.barracudacentral.org]2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL[208.88.180.153 listed in psbl.surriel.com]-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relaydomain-0.0 SPF_PASS SPF: sender matches SPF record-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear!0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_MONEY_PERCENT X% of a lot of money for you1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.