Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Thu, 25 Oct 2012 05:34:11 -0700 [received:] => Array ( [0] => from [174.37.207.80] (port=34047 helo=lynx1.prodesignz.net)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80)(envelope-from )id 1TRMdW-0007WK-MJfor submissions@scamdex.com; Thu, 25 Oct 2012 05:34:11 -0700 [1] => from rkinfrat by lynx1.prodesignz.net with local (Exim 4.80)(envelope-from )id 1TRMdH-0006RE-EQfor submissions@scamdex.com; Thu, 25 Oct 2012 07:33:55 -0500 ) [to:] => submissions@scamdex.com [subject:] => PLATINUM ENTREPRENEURAL EXPANSION COMMISSION [from:] => FRANK HOLMES [reply-to:] => frankholmes1@adinet.com.uy [mime-version:] => 1.0 [content-type:] => text/html [content-transfer-encoding:] => 8bit [message-id:] => [sender:] => [date:] => Thu, 25 Oct 2012 07:33:55 -0500 [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - lynx1.prodesignz.net [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [771 769] / [47 12] [4] => Sender Address Domain - lynx1.prodesignz.net ) [x-spam-status:] => No, score=-0.3 [x-spam-score:] => -2 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: PLATINUM ENTREPRENEURAL EXPANSION COMMISSION (PEEC Inc) LONDON. Email: frankholmes1@adinet.com.uy Dear Sir/Madam, I write to you based on a request by an investor and his need for investment/fundingin your country. My name is FRANK HOLMES, a financial consultant with PLATINUM ENTREPRENEURAL EXPANSION COMMISSION, which is a reputable financial services firm. My company most times represents the interests of very wealthy investors. Due to the sensitivity of the position they hold in their society and the unstable investment environment of their country, they evacuate majority of their funds into more stable economies and developed nations where they can get good yield for their money. A Reserved Client, whom I had personally worked with a few years ago with a proposal,recently approached me. What he request is an individual such as yourself, who will be willing to receive money on his behalf abroad, and put it to good use for a period not exceeding 6 years for a start. The client has offered these terms: 1. 5% commission paid to me and my foreign partner of the total funds successfully evacuated. The funds in question are over 250,000,000.00MUSD (Two Hundred And Fifty Million United States Dollars.) 2. The funds will be used by the foreign partner for six years as a loan without any interest. That is, you do not pay any interest on the money but you give the client 50% of all profits after tax that accrued from the use of the funds. If these terms are agreeable to you, kindly let me know and I will provide you with all necessary information and procedures involved. All reply should be sent to this Email: peec26investment for urgent attendance. Sincerely yours, FRANK HOLMES Consultant Officer PEEC. Inc. London Email: frankholmes1@adinet.com.uy PS* The client is willing to make available the fund to your possession and in your country within 14days of confirmation of your capabilities. http://rkinfratel.com/css/5.php [...] Content analysis details: (-0.3 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 DEAR_SOMETHING BODY: Contains 'Dear (something)'-3.0 MILLION_USD BODY: Talks about millions of dollars 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (frankholmes2[at]adinet.com.uy)-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only 3.7 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.