Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scams@scamdex.com,scam@scamdex.com [delivery-date:] => Tue, 08 Mar 2011 03:42:32 -0800 [received:] => Array ( [0] => from canvasback.csun.edu ([130.166.5.142] helo=exchange.csun.edu)by chester.loopbiz.com with esmtps (TLSv1:RC4-MD5:128)(Exim 4.69)(envelope-from )id 1PwvJ9-0002Te-Bx; Tue, 08 Mar 2011 03:42:32 -0800 [1] => from CSUN-EX-V03.csun.edu ([130.166.5.52]) by canvasback.csun.edu([130.166.5.142]) with mapi; Tue, 8 Mar 2011 03:42:28 -0800 ) [from:] => "Holloway, Joseph E" [date:] => Tue, 8 Mar 2011 03:42:28 -0800 [subject:] => I am John Kufuor by name 16years of age. I am seeking yourassistance (johnkufuor@xnmsn.com) [thread-topic:] => I am John Kufuor by name 16years of age. I am seeking yourassistance (johnkufuor@xnmsn.com) [thread-index:] => AQHL3YXmTqN37DA9okyXSBiYhHcU8w== [message-id:] => [accept-language:] => en-US [content-language:] => en-US [x-ms-has-attach:] => [x-ms-tnef-correlator:] => [acceptlanguage:] => en-US [content-type:] => text/plain; charset="us-ascii" [content-transfer-encoding:] => quoted-printable [mime-version:] => 1.0 [x-spam-status:] => No, score=1.8 [x-spam-score:] => 18 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Belove, I am John Kufuor by name 16years of age. I amseeking your assistance in respect of my late father's consignment worthEight Million United State Dollars ($8Million USD) which is now currentlywith the diplomat in your country. My late father's partner Dr. Raymond Graywhom was suppose to receive this consignment and help me invest the fundshad an accident and lost his life. Please I want you to help me get in touchwith the Representative over there in your country and receive the consignmentso that the diplomat will not return the truck box back to Ghana that iswhy I contacting you. I am willing to give you 30% of the total funds andyou will help me invest the remaining funds over there in your country beforeI come over to meet you, so that i can continue my education over there.Please if you can help me reply back so that I can give you all necessarycontact to enable you meet with the diplomat in your country. [...] Content analysis details: (1.8 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, mediumtrust[130.166.5.142 listed in list.dnswl.org]-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relaydomain-0.0 SPF_PASS SPF: sender matches SPF record1.2 MISSING_HEADERS Missing To: header0.0 LOTS_OF_MONEY Huge... sums of money1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_MONEY_PERCENT X% of a lot of money for you0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.