Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mc_mxw@o7e.net [delivery-date:] => Sat, 02 Apr 2011 12:25:57 -0700 [received:] => Array ( [0] => from c2mds.mailcentro.com ([208.67.179.143])by chester.loopbiz.com with esmtp (Exim 4.69)(envelope-from )id 1Q66SK-0001YE-Djfor mc_mxw@o7e.net; Sat, 02 Apr 2011 12:25:57 -0700 [1] => from asmtpout017.mac.com (asmtpout017.mac.com [17.148.16.92])by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with ESMTP id p32JPx1I014371for ; Sat, 2 Apr 2011 12:25:59 -0700 [2] => from spool002.mac.com ([10.150.69.52])by asmtp017.mac.com (Oracle Communications Messaging Exchange Server 7u4-20.0164bit (built Nov 21 2010)) with ESMTP id <0LJ100FJGHZ2OU10@asmtp017.mac.com>for mxw@uniplexmail.com; Sat, 02 Apr 2011 12:25:59 -0700 (PDT) [3] => from localhost ([10.150.79.234])by spool002.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01 (built Dec16 2008; 32bit)) with ESMTP id <0LJ100AWMHZ0FU10@spool002.mac.com>; Sat,02 Apr 2011 12:25:56 -0700 (PDT) ) [x-mc-sender:] => hhkk3@me.com [x-mc-ipaddr:] => asmtpout017.mac.com [17.148.16.92] [mime-version:] => 1.0 [content-type:] => multipart/alternative;boundary="Boundary_(ID_i2h6J05jY3rTqP42T4wgeg)" [x-proofpoint-virus-version:] => Array ( [0] => vendor=fsecureengine=2.50.10432:5.2.15,1.0.148,0.0.0000definitions=2011-04-02_07:2011-04-02,2011-04-02,1970-01-01 signatures=0 [1] => vendor=fsecureengine=2.50.10432:5.2.15,1.0.148,0.0.0000definitions=2011-04-02_07:2011-04-02,2011-04-02,1970-01-01 signatures=0 ) [x-proofpoint-spam-details:] => Array ( [0] => rule=notspam policy=default score=7 spamscore=7ipscore=0 suspectscore=0 phishscore=0 bulkscore=0 adultscore=0 classifier=spamadjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1104020073 [1] => rule=notspam policy=default score=35 spamscore=35ipscore=0 suspectscore=0 phishscore=0 bulkscore=0 adultscore=0 classifier=spamadjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1104020073 ) [from:] => Henry [subject:] => Thank You [date:] => Sat, 02 Apr 2011 19:25:42 +0000 (GMT) [x-mailer:] => MobileMe Mail (1C3224) [message-id:] => [to:] => Undisclosed recipients: ; [x-mc-filter:] => 7.6.9 [x-mc-filter-antivirus:] => Scanned for virus - Status 0 [x-mc-deliveryid:] => 144 [x-mc-ctfilter:] => CT RefID = str=0001.0A010208.4D977848.0002,ss=1,fgs=0 - Class:Unknown - Virus Threat:Unknown - Phishing Threat:Low [x-mc-filterskip:] => 0 [x-mc-spamscore:] => 0 T 49 [x-spam-status:] => No, score=2.2 [x-spam-score:] => 22 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: A research to locate someone with same surname with my lateclient got me into seeing your information. I seek your consent to presentyou as my client benefactor/heir to his funds amount $16.7m.If interestedto work with me; please forward your, address, cell/fax & profession formore details on how we can claim the funds Regards, Henry Makaba [...] Content analysis details: (2.2 points, 4.5 required)pts rule name description---- ---------------------- --------------------------------------------------0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)0.0 HTML_MESSAGE BODY: HTML included in message-0.5 BAYES_05 BODY: Bayes spam probability is 1 to 5%[score: 0.0131]0.0 LOTS_OF_MONEY Huge... sums of money0.0 DECEASED_NO_ML Dead not via mailing list0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.