Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => <> [envelope-to:] => mxw@scamdex.com [delivery-date:] => Tue, 24 Sep 2013 07:03:46 -0700 [received:] => Array ( [0] => from emea01-db3-ndr.ptr.protection.outlook.com ([157.56.120.106]:37194 helo=emea01-am1-obe.outbound.protection.outlook.com)by lester.newsblaze.com with esmtps (TLSv1:AES128-SHA:128)(Exim 4.80.1)id 1VOTDO-0005So-D3for mxw@scamdex.com; Tue, 24 Sep 2013 07:03:46 -0700 [1] => from [10.210.19.84] (123.63.112.171) byDB3PR06MB057.eurprd06.prod.outlook.com (10.141.7.143) with Microsoft SMTPServer (TLS) id 15.0.775.9; Tue, 24 Sep 2013 14:03:41 +0000 ) [content-type:] => text/plain; charset="iso-8859-1" [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-description:] => Mail message body [subject:] => GET BACK TO ME IMMEDIATELY [to:] => Recipients <009@evecarr.onmicrosoft.com> [from:] => Dr Sonita Green <009@evecarr.onmicrosoft.com> [date:] => Tue, 24 Sep 2013 19:33:15 +0530 [reply-to:] => [message-id:] => <5a549645-2aec-4092-a8b6-350849bc9a3a@DB3PR06MB057.eurprd06.prod.outlook.com> [x-originating-ip:] => [123.63.112.171] [x-clientproxiedby:] => SINPR02CA016.apcprd02.prod.outlook.com (10.141.109.11) ToDB3PR06MB057.eurprd06.prod.outlook.com (10.141.7.143) [x-forefront-prvs:] => 09796A1B83 [x-forefront-antispam-report:] => SFV:SPM;SFS:(199002)(189002)(76176001)(76576001)(77982001)(76786001)(80022001)(53256004)(59766001)(50466002)(47776003)(76796001)(74316001)(79102001)(47446002)(51856001)(65816001)(63696002)(66066001)(76482001)(325944006)(42186004)(83072001)(81342001)(74366001)(81816001)(77096001)(83322001)(49866001)(50986001)(19580405001)(46102001)(43066001)(81542001)(74662001)(54316002)(74502001)(4396001)(31686002)(47976001)(47736001)(81686001)(23756003)(80976001)(74706001)(54356001)(19580395003)(69226001)(74876001)(56776001)(56816003)(33646001)(216653001)(216663001)(166313001)(14773001);DIR:OUT;SFP:1501;SCL:5;SRVR:DB3PR06MB057;H:[10.210.19.84];CLIP:123.63.112.171;FPR:;RD:InfoNoRecords;A:0;MX:1;LANG:en; [x-originatororg:] => evecarr.onmicrosoft.com [x-spam-status:] => No, score=2.1 [x-spam-score:] => 21 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Hello I will need your help in this situation I find my self . Am really afraid and don't know who to confide in. Am a medical doctor working with NATO currently in SYRIA. I have some money I made in Bashar al-Assads compound. I have kept it as secret for a little while and I need someone I can trust to work and transfer this money out of SYRIA as a medical documents.Please I will need your help on this for I can forfeit 25 percent of this money to make sure is safely used for me in any lucrative business that will yeild good profit until I will be living the army next year. Please I will need to work with you in getting this money out of SYRIA. I have in mind to invest this money into real estate and will want you to consider the same,get back to me on this Email:sonitagreen@hotmail.com as soon as you anticipate your willingness to work with me and I will make the arrangement on how to get this done. I have no one to confide in I joined the army as Medical Doctor and don't have someone to confide in I believe you will be of good help to me. I will be reviling the said amount immediately you give me your word of confidence to go ahead for this is a very huge amount of money. I have all logistics in place to carry out this transfer. Expecting your reply soonest for time is not on my side. [...] Content analysis details: (2.1 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------2.0 SUBJ_ALL_CAPS Subject is all capitals 1.0 HK_NAME_DR HK_NAME_DR 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.6 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.