Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => fdgas@scamdex.com [delivery-date:] => Fri, 06 Apr 2012 03:22:42 -0700 [received:] => Array ( [0] => from imr-db02.mx.aol.com ([205.188.91.96])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1SG6JV-00022V-JFfor fdgas@scamdex.com; Fri, 06 Apr 2012 03:22:42 -0700 [1] => from mtaomg-db01.r1000.mx.aol.com (mtaomg-db01.r1000.mx.aol.com [172.29.51.199])by imr-db02.mx.aol.com (8.14.1/8.14.1) with ESMTP id q36AHKq9008445;Fri, 6 Apr 2012 06:17:20 -0400 [2] => from core-mqb002b.r1000.mail.aol.com (core-mqb002.r1000.mail.aol.com [172.29.192.133])by mtaomg-db01.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 4B7EBE000081;Fri, 6 Apr 2012 06:17:18 -0400 (EDT) [3] => from 209.73.132.28 by webmail-m053.sysops.aol.com (64.12.140.163) with HTTP (WebMailUI); Fri, 06 Apr 2012 06:17:18 -0400 ) [x-mb-message-source:] => WebUI [content-transfer-encoding:] => quoted-printable [subject:] => Dear Beneficiary, [x-mb-message-type:] => User [mime-version:] => 1.0 [from:] => "Dear Beneficiary," [content-type:] => text/plain; charset="utf-8"; format=flowed [x-mailer:] => AOL Webmail 35834-BASIC [message-id:] => <8CEE1F5948082F7-FA0-13043@webmail-m053.sysops.aol.com> [x-originating-ip:] => [209.73.132.28] [date:] => Fri, 6 Apr 2012 06:17:18 -0400 (EDT) [x-aol-global-disposition:] => G [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;s=20110426; t=1333707440;bh=u50hXhtxu1XOnA2veTIIdx0iJ942FZtwjOikZq4yBoU=;h=From:Subject:Message-Id:Date:MIME-Version:Content-Type;b=qDo4HXupyBFk3moSBt66QaXtNXaaZgMmBjqcZIILGNivw+6gZHYhKF3bD971hunAz lD8UpeiKuwN1Y/deFf8JD3qYvDZ3LgX73c1/TxCtvlC3fJ2d1lBcd/wou4NjbYCBuQ k6wgaayw1Zp2vkk7Se0+uSwG0r3hzS5G8sqqMXT8= [x-aol-scoll-score:] => 0:2:103536656:93952408 [x-aol-scoll-url_count:] => 0 [x-aol-sid:] => 3039ac1d33c74f7ec2ae0ac3 [x-spam-status:] => No, score=3.6 [x-spam-score:] => 36 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Beneficiary, Series of meetings have been held over thepast 7 months with the secretary general of the United Nations Organization.Thisended 3 days ago. Please indicate if you have received or not your compensatoryfund which amount to the turn of ($10.7 Million USD) because of your uglyexperience in all your dealing and unfinished transaction in EUROPE, AMERICA,ASIA AND AFRICA. [...] Content analysis details: (3.6 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, notrust[205.188.91.96 listed in list.dnswl.org]3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:-3.0 MILLION_USD BODY: Talks about millions of dollars0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(infomail30[at]aol.com)0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relaydomain0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (infomail30[at]aol.com)1.2 MISSING_HEADERS Missing To: header0.0 LOTS_OF_MONEY Huge... sums of money1.0 FREEMAIL_REPLY From and body contain different freemails [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.