Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Mon, 10 Oct 2011 19:21:52 -0700 [received:] => Array ( [0] => from mta153.breakthru.com ([208.88.180.153])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RDRyZ-0005gA-VUfor submissions@scamdex.com; Mon, 10 Oct 2011 19:21:52 -0700 [1] => from ii16-16.friendfinderinc.com (unknown [10.91.9.1])by mta153.breakthru.com (Postfix) with ESMTP id AFB74ED3A0F;Mon, 10 Oct 2011 09:58:20 -0700 (PDT) [2] => by ii16-16.friendfinderinc.com (Postfix, from userid 0)id 4AD2E27790E; Mon, 10 Oct 2011 09:58:20 -0700 (PDT) ) [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="_----------=_131826590063163668" [date:] => Mon, 10 Oct 2011 09:58:20 -0700 [subject:] => MALLE DOMA [to:] => mlledoma201121@gmail.com [from:] => "mlle DOMA" [x-mailer:] => FRIENDFINDERINC MAILER [message-id:] => <20111010165820.4AD2E27790E@ii16-16.friendfinderinc.com> [content-transfer-encoding:] => 7bit [x-spam-status:] => No, score=2.5 [x-spam-score:] => 25 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: From Miss Mlle Doma. I would like to use this opportunityto introduce myself to you. I am 22Years Old Girl from (COTE D' IVOIRE WESTAFRICA),the only Daughter of Houphouet, My father is now late,I am contactingyou now is to seek your assistance in Claiming This fund (US5.7 Million dollars)That was deposited in a private security company outside my country in (REPUBLICOF GHANA) a year ago by my late father and he made me the sole beneficiary.I am now asking you to stand on my behalf, to stand as my partner and intime of the claim and investment as well. Please email me with my privateemail: mlledoma20112011@gmail.com Best Regards Mlle Doma. BreakThru.com -Pure email. Zero spam. [...] Content analysis details: (2.5 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT[208.88.180.153 listed in bb.barracudacentral.org]2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL[208.88.180.153 listed in psbl.surriel.com]-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.1 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

http://friendfinder.com/go/f47930 - Dating Personals and Social Networkin=
g

--_----------=_131826590063163668
Content-Disposition: inline
Content-Length: 912
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<HTML>
<BODY>

</BODY>
</HTML>
<!--  -->
--_----------=_131826590063163668--