An
Email with the Subject "CHILD FOR ADOPTION." was
received in one of Scamdex's honeypot email accounts on Wed, 12 Nov 2014 05:35:26 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as Mrs Yuby Dada <yubydada0@gmail.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scamdex@o7e.net
[delivery-date:] => Wed, 12 Nov 2014 05:35:26 -0800
[received:] => Array
(
[0] => from host.lamasatweb.com ([50.28.63.184]:38191)by bigcat.newsblaze.com with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)(Exim 4.84)(envelope-from )id 1XoY4g-0008Lx-R2for scamdex@o7e.net; Wed, 12 Nov 2014 05:35:26 -0800
[1] => from nobody by host.lamasatweb.com with local (Exim 4.82)(envelope-from )id 1XoSLg-0002ZI-8lfor scamdex@o7e.net; Wed, 12 Nov 2014 02:28:16 -0500
)
[to:] => scamdex@o7e.net
[subject:] => CHILD FOR ADOPTION.
[from:] => Mrs Yuby Dada
[mime-version:] => 1.0
[content-type:] => text/html
[message-id:] =>
[date:] => Wed, 12 Nov 2014 02:28:16 -0500
[x-antiabuse:] => Array
(
[0] => This header was added to track abuse, please include it with any abuse report
[1] => Primary Hostname - host.lamasatweb.com
[2] => Original Domain - o7e.net
[3] => Originator/Caller UID/GID - [99 32007] / [47 12]
[4] => Sender Address Domain - host.lamasatweb.com
)
[x-get-message-sender-via:] => host.lamasatweb.com: uid via acl_c_vhost_owner from authenticated_id: allround from //allroundye.com/a7a.php /only user confirmed/virtual account not confirmed
[x-source:] =>
[x-source-args:] =>
[x-source-dir:] =>
[x-spam-status:] => No, score=2.7
[x-spam-score:] => 27
[x-spam-bar:] => ++
[x-ham-report:] => Spam detection software, running on the system "bigcat.newsblaze.com",has NOT identified this incoming email as spam. The originalmessage has been attached to this so you can view it or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Hi, My name is Mrs Yuby Dada from Republic of Benin, I gave birth to twins, 2 baby girls at a time after the death my husband, I have 7 children birth of twins in addition to the 5 already from God so I 've decided to give up the twins for adoption. If you are interested reply back for more details. Thanks. Mrs Yuby Dada [...] Content analysis details: (2.7 points, 4.5 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (yubydada0[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom freemail headers are different 0.0 T_HK_NAME_FM_MR_MRS No description available. 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.2 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Hi,
My name is Mrs Yuby Dada from Republic of Benin, I gave birth to twins, 2 baby girls at a time after the death my husband, I have 7 children birth of twins in addition to the 5 already from God so I 've decided to give up the twins for adoption.
If you are interested reply back for more details.
Thanks.
Mrs Yuby Dada
Hi,
My name is Mrs Yuby Dada from Republic of Benin, I gave birth to twins, 2 baby girls at a time after the death my husband, I have 7 children birth of twins in addition to the 5 already from God so I 've decided to give up the twins for adoption.
If you are interested reply back for more details.
Thanks.
Mrs Yuby Dada