Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Wed, 01 Aug 2012 14:06:44 -0700 [received:] => Array ( [0] => from mail-ob0-f193.google.com ([209.85.214.193]:34498)by lester.newsblaze.com with esmtps (TLSv1:RC4-SHA:128)(Exim 4.77)(envelope-from )id 1Swg7v-0001kO-Uffor scam@scamdex.com; Wed, 01 Aug 2012 14:06:44 -0700 [1] => by obbeh20 with SMTP id eh20so1934684obb.4 for ; Wed, 01 Aug 2012 14:06:44 -0700 (PDT) [2] => by 10.182.232.101 with SMTP id tn5mr31465847obc.49.1343855204032;Wed, 01 Aug 2012 14:06:44 -0700 (PDT) [3] => by 10.182.19.197 with HTTP; Wed, 1 Aug 2012 14:06:43 -0700 (PDT) ) [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=ZfWDooqZUCVz3hrAAlXZokHuEMR73Qns0+3DMeWm5Uk=; b=EykDq/yZeVIbx9aPDMjsp9aJsZ/tGgR0P/8x6Jw3F4aFUwVlZtQSP5idUQwr3nKEIK fhlO4PpwJ/R3hKHHbteiDNHmmtgvs9y3Hx+k86nhzU4yBAQfmgbYriNXYLMiDbE0cxPM I99nRfHSxhfXR7AzMBDmBXiQyLDTkEMrSJZ7A/6QiNuRlunIjReLoTQXMLafIO6KSqz9 NWI4Hs1DEIdTFjgkSABRJMIloNEZ9if4SbB3jja4qsUUMgbS+V3jDsQkNZoL6jwEzHhh uy1V/y9rUrKLljSg/rGMAMmbsu2ZEfybL3K1cdIoNW9WzQLBb1ZKdHs3vZxUtIYMvWRN XTnA== [mime-version:] => 1.0 [date:] => Wed, 1 Aug 2012 14:06:43 -0700 [message-id:] => [subject:] => INVESTMENT PARTNERSHIP [from:] => ossey williams [to:] => undisclosed-recipients:; [content-type:] => multipart/alternative; boundary=f46d0445174310e97904c63aac9a [bcc:] => scam@scamdex.com [x-spam-status:] => No, score=-1.2 [x-spam-score:] => -11 [x-spam-bar:] => - [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: *Dear Friend, * * * *I know that this mail will come to you as a surprise as we have never met before, but need not to worry as I am using the only secured and confidential medium available to seek for your foreign assistance in a business. I am contacting you because of my Late brother fund that i need to invest, You can understand the present situation in Ivory Coast. My name is OSSEY WILLIAMS from Ivory coast.I am searching for a reliable business partner, in country like (U.A.E)..(KUWAIT)..(OMAN)..(SAUDI ARABIA)..(QATAR) I have some amount of money I want to invest there in your country,am only soliciting for your assistance to help me invest .if you are willing to HELP ME invest send me your confidential/secret following informations so that we can discuss more about the investment details.* * * *1) Your full name* *2) Your mobile number* *3) Your country origin* *4) You r company address* *5) Your real age* * * *Thank you once again for your intrest. * * * *Waiting for your reply,* * * * * *Ossey Williams* [...] Content analysis details: (-1.2 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (osseywilliamsmen2001[at]gmail.com)-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (osseywilliamsmen2001[at]gmail.com) 1.0 HK_SCAM_S3 BODY: HK_SCAM_S3-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419) 2.1 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.5 FORM_FRAUD_5 Fill a form and many fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.