An
Email with the Subject "HELLO!!!!!!!" was
received in one of Scamdex's honeypot email accounts on Sun, 1 Apr 2007 16:27:01 -0700
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as transcommerce007@2600metros.com.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
saddam$5 million dollarspercentpresidentdiplomaticsmithsoldcontactnumberssaferesident millionpartnerjobiraqurgentfundshippingmailrisk freediplomadollarconfidentialdie will cargoachhttp://news.bbc.co.uk/2/h...http://www.2600metros.com/
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[original-recipient:] => rfc822;mxw@mailcentro.com
[received:] => Array
(
[0] => from relay1.cpsoftwaregroup.com (207.183.238.20) by layla.cpsoftwaregroup.com (NPlex 6.0.045) id 45DDDF3500022B7B for mxw@mailcentro.com; Sun, 1 Apr 2007 16:27:01 -0700
[1] => from smtp3-clo.telesat.com.co (smtp3-clo.telesat.com.co [66.128.32.141])by relay1.cpsoftwaregroup.com (8.13.8(MC-AXH/MJD-001)/8.13.8.mjd-axh) with ESMTP id l31NS3Z4007539for ; Sun, 1 Apr 2007 16:28:04 -0700
[2] => from localhost (smtp3-clo [127.0.0.1])by smtp3-clo.telesat.com.co (Postfix) with ESMTP id F3F655DD83;Sun, 1 Apr 2007 18:28:22 -0500 (COT)
[3] => from smtp3-clo.telesat.com.co ([127.0.0.1])by localhost (smtp3-clo.coldecon.net.co [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id roI5gjuaG3Hf; Sun, 1 Apr 2007 18:28:21 -0500 (COT)
[4] => from localhost (adsnew.telesat.com.co [200.115.102.150])by smtp3-clo.telesat.com.co (Postfix) with ESMTP id 932CF5DD7E;Sun, 1 Apr 2007 18:28:20 -0500 (COT)
[5] => from dial-pool2.lagos.starcomms.com(dial-pool2.lagos.starcomms.com [196.3.63.252]) by webmail.2600metros.com(Horde MIME library) with HTTP; Sun, 01 Apr 2007 18:32:03 -0500
)
[x-mc-sender:] => transcommerce007@2600metros.com
[x-mc-ipaddr:] => smtp3-clo.telesat.com.co [66.128.32.141]
[x-virus-scanned:] => amavisd-new at coldecon.com
[x-uid:] => <20070401183203.1nhmow5q04os00so@webmail.2600metros.com>
[date:] => Sun, 01 Apr 2007 18:32:03 -0500
[from:] => transcommerce007@2600metros.com
[to:] => transcommerce007@2600metros.com
[subject:] => HELLO!!!!!!!
[mime-version:] => 1.0
[content-type:] => text/plain;charset=ISO-8859-1;format="flowed"
[content-disposition:] => inline
[content-transfer-encoding:] => quoted-printable
[user-agent:] => Internet Messaging Program (IMP) H3 (4.0.4)
[x-mc-filter:] => 3.6.2
[x-mc-options:] => fd
[x-mc-connected:] => smtp3-clo.telesat.com.co
[x-mc-filterskip:] => 0
[x-mc-filter(bodycnt):] => 1
[x-mc-filter-antivirus:] => Scanned for virus - Status 0
[x-mc-deliveryid:] => 69
[x-mc-ctfilter:] => CT RefID = str=0001.0A090207.4610401B.004A,ss=1,fgs=0 - Class:Unknown - Virus Threat:Unknown - Phishing Threat:Low
[x-mc-spamscore:] => 0 T 49
[message-id:] => <20070401183203.1nhmow5q04os00so@webmail.2600metros.com>
[x-scamdex-scores:] => S:67 P:50 A:52 L:55 E:54 G:46
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 67
[x-scamdex-totscore:] => 324
[x-scamdex-kw:] => agent,contact,die,diploma,diplomatic,dollars,fund,inc.,internet,job,lagos,million,numbers,partner,percent,resident,risk free,safe,smith,software,sold,trust,urgent,user
[x-scamdex-em:] => davidfitte001@sify.com,transcommerce007@2600metros.com
[x-scamdex-dir:] => S
[x-scamdex-id:] => S1175478512.M779683P24430V0805I000DDC8D
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
FROM: Sgt. Smith David Fitte, an American Soldier in Iraq
Important Message
Good day,
the military of the 1st Armored Division in Iraq, as you know we are
funds belonging to Saddam Hussein?s family in 2003. The total amount is
been kept somewhere outside Baghdad for sometime but with the proposed
be discovered hence we want to move this money to you for safe keeping
link to read about events that took place there:
strings attached, just for you to help us move it out of Iraq. Iraq is
out as military cargo, using diplomatic immunity. If you are interested
we can trust and that will assist us. Can I trust you? When you receive
including your most confidential telephone numbers for quick
CONTACT ME VIA EMAIL:davidfitte001@sify.com
This is risk free.
With regards from,
Sgt. David Smith Fitte
----------------------------------------------------------------
2600 metros, el portal de Bogotá - http://www.2600metros.com/
FROM: Sgt. Smith David Fitte, an American Soldier in Iraq
Important Message
Good day,
My name is David Smith Fitte, I am an American soldier, I am serving in
the military of the 1st Armored Division in Iraq, as you know we are
being attacked by insurgents everyday and car bombs. We managed to move
funds belonging to Saddam Hussein?s family in 2003. The total amount is
US$5 Million dollars in cash, mostly 100 dollar bills, this money has
been kept somewhere outside Baghdad for sometime but with the proposed
troop in increase by president Bush, we are afraid that the money will
be discovered hence we want to move this money to you for safe keeping
pending the completion of our assignment here. You can go to this web
link to read about events that took place there:
http://news.bbc.co.uk/2/hi/middle_east/2988455.stm
We are ready to compensate you with good percentage of the funds, No
strings attached, just for you to help us move it out of Iraq. Iraq is
a war zone, so we plan on using diplomatic means to shipping the money
out as military cargo, using diplomatic immunity. If you are interested
I will send you the full details, my job is to find a good partner that
we can trust and that will assist us. Can I trust you? When you receive
this letter, kindly send me an e-mail signifying your interest
including your most confidential telephone numbers for quick
communication also your contact details.
CONTACT ME VIA EMAIL:davidfitte001@sify.com
This is risk free.
With regards from,
Sgt. David Smith Fitte
----------------------------------------------------------------
2600 metros, el portal de Bogotá - http://www.2600metros.com/