Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Sun, 20 Mar 2011 13:50:08 -0700 [received:] => Array ( [0] => from nm21.bullet.mail.bf1.yahoo.com ([98.139.212.180])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1Q1PZg-0005K6-Ddfor submitted@scamdex.com; Sun, 20 Mar 2011 13:50:08 -0700 [1] => from [98.139.212.144] by nm21.bullet.mail.bf1.yahoo.com with NNFMP; 20 Mar 2011 20:50:11 -0000 [2] => from [98.139.212.251] by tm1.bullet.mail.bf1.yahoo.com with NNFMP; 20 Mar 2011 20:50:11 -0000 [3] => from [127.0.0.1] by omp1060.mail.bf1.yahoo.com with NNFMP; 20 Mar 2011 20:50:11 -0000 [4] => (qmail 69990 invoked from network); 20 Mar 2011 20:50:11 -0000 [5] => from UserPC (spcjt02@124.13.161.158 with login) by smtp107.sbc.mail.bf1.yahoo.com with SMTP; 20 Mar 2011 13:50:10 -0700 PDT ) [x-yahoo-newman-id:] => 241722.94310.bm@omp1060.mail.bf1.yahoo.com [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=att.net; s=s1024; t=1300654211; bh=+aUU3u/HYGptzHugHfr2235OWnHpvsV+mm74vT+8YCo=; h=Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:From:To:Reply-To:Date:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=HWBSd/D/zzs/pJn9FQGMc6Btrljp2Fwe8hws2PZqw5I134lASlFPXKdaeWLLREKKNcNbI+iGMvv5CUrYGPU3oIf3IDfA3cyTD2CJKcb53FJhpuE1UPMGBciLvfcrKL5FjGypflQIRSKvOADM6WQHh2zKX/7rd4oygHachfh+h6U= [x-yahoo-smtp:] => NHjgW9uswBCu8L.MX44Ml865sEldvD.TZ8nLhw-- [x-ymail-osg:] => ergNRa4VM1lK9xnBRPNxLeIBX8V.affQKrJQoBgzFA50H1QQB.85fjTngGOjywSB.f4WHYPQNVBZn6J95ALcJGQHn02n7g264Jc8Kg6beYMQNFMyTHZ8J9IkwwmGjxPiFkWG1ynMDup1457neSXjWrQYKap8Z.JcRIXdhmjIy4N5p04MoMtb_aD95N2ZgVkiLEV8kQUjtSlYmCMkAnNUeX2pw_a9PxqHdcGhHA-- [x-yahoo-newman-property:] => ymail-3 [from:] => "Stephane Johnson" [to:] => "submitted@scamdex.com" [reply-to:] => stephanejohnson24@yahoo.com [date:] => Mon, 21 Mar 2011 01:24:52 +0800 [subject:] => Investment Co-operation [mime-version:] => 1.0 [content-type:] => text/plain; charset=iso-8859-1 [content-transfer-encoding:] => quoted-printable [message-id:] => [x-spam-status:] => No, score=2.1 [x-spam-score:] => 21 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Mutual aid, I write to request your co-operation in my desireto find a foreign partner who will assist me in the relocation and Transferof US$14,000,000.00 (Fourteen Million United State Dollars) which is presentlyavailable for investment purpose. [...] Content analysis details: (2.1 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars0.0 FREEMAIL_FROM Sender email is freemail (spcjt02[at]att.net)1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit(stephanejohnson24[at]yahoo.com)2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (spcjt02[at]att.net)0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 LOTS_OF_MONEY Huge... sums of money2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.