Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Tue, 10 May 2011 01:02:00 -0700 [received:] => Array ( [0] => from omp1011.access.mail.mud.yahoo.com ([66.94.237.106])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1QJhtH-00069c-2Qfor submissions@scamdex.com; Tue, 10 May 2011 01:02:00 -0700 [1] => (qmail 49335 invoked by uid 1000); 10 May 2011 08:02:00 -0000 [2] => (qmail 14057 invoked by uid 60001); 10 May 2011 08:01:59 -0000 [3] => from [180.215.147.197] by web81708.mail.mud.yahoo.com via HTTP; Tue, 10 May 2011 01:01:58 PDT ) [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=sbcglobal.net; s=s1024; t=1305014518; bh=aZa6RJtpbk7so1Jh1dm6yj9TOcLQxcHD6Pc2XONxIn4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=pNuzks9pQUOM8J5M3SCf7ZqpJucVc0pCzVn3Z6dMUse+8YWwA/4TubsgH0OgHeIHWDH93T3Fjuja3WgIB3jlTLeuHg4fZ2/7arPGMDYTDKtUr280mnuTCmarcdiqeqFXjj9KmveZ69x4dfNSl1xUjDf4fvN2xZANfP3Nf2YsHmU= [domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=sbcglobal.net; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=AF2Q0rUvSb3szPF/wPhoQ8q9rH30d/gksxaGYNhUrkoXLw05iCRYEEwfyy3d7I17QqqTaR3HWsyiZVh484KHnK41jR5pnBsqCMszprcDzn4wczXw84EuH/nF/1rR72C8m5wLE/NY/anDQzQMR1T93mooJyfuHkzYT3fEVjvh4p0=; [message-id:] => <791043.81461.qm@web81708.mail.mud.yahoo.com> [x-ymail-osg:] => Yco0BDcVM1mvORC4PMlT53q_mgbLPnQFyw3m.Tp5Ef_UCqxaMiPfaA8iaZ7WEsDL.tGdP.FE2Z9mAW59bTb0sA9la1vG43H8dXusv6ViTBo2PacqOJmgd8RIJ24ORR7E9J0nx6KrUle4V6twlQnm_dGyLgNyH4lAZY1hldU0flATymPsGvpAGCy7T4pggruvJ8Q73voFMVjmZ3ex_shyrDdDIYk9cwDTwPY_gYPSblYMmb6XPfgA6AD2y5.vTQDeXQNkYf6MZCt4CtSPDraEE2iPDgaxZLRe1h8ENTrd2iPka6.70HUpSaT.7LHTX0Xh3TTbZwMyjSIv3hSTjTcItIKUChIUozmP0YN03coITv9AU0lVFRS4jLVZ3VbxmI.CgsZwOu2pmdIDACK5qfy2dG9iJ.TLG7U6ZvY3kvWmMrcHULWyuF4VwBhzMxypt0kBXNGFmlevKyfr.6og33bhM5INmpn33LbPxmxjImnZq7xs6sEvOoqY9FVNYdibMwtzMy.ScFQcQXLK0tY3oG50yfVwJs9iFa_.HONneym2gkPECQiQtbqQJiMnAdNluyHjPf7q.W86gruobXGgCh08M7yalG4.1Twcv_nteWfD1n4UTZsaYER2hNyb16uI8_qm9F9LexotLdX..waBYRDOpcQMTP8aogr5zIWLRzVouyzjsQ09UHiTkCwxtrHk6sNAv4ujuyu0s59l5NLT8uXndV66nAZdkIjBmktcJzJgF6SgJag8Viv5zjTipx3PIvk93i_QfB_ifSyrOmZp6NPGRS2GLg-- [x-mailer:] => YahooMailClassic/12.0.2 YahooMailWebService/0.8.110.299900 [date:] => Tue, 10 May 2011 01:01:58 -0700 (PDT) [from:] => "cocacola_claimsdeptt@live.co.uk" [reply-to:] => cocacola_claimsdeptt@live.co.uk [subject:] => CONGRATULATIONS!!! [to:] => undisclosed recipients: ; [mime-version:] => 1.0 [content-type:] => multipart/mixed; boundary="0-1309329967-1305014518=:81461" [x-spam-status:] => No, score=1.0 [x-spam-score:] => 10 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: THIS MESSAGE IS ORIGINALLY FROM THE COCA COLA ONLINE ANNUALPROMO 2011, UK. DEAR LUCKY WINNER, WE ARE PLEASED TO INFORM AND ANNOUNCETO YOU THAT YOUR E-MAIL ADDRESS HAVE BEEN SELECTED AS ONE OF THE 5 LUCKY WINNERSWHO THEIR EMAIL ID IS SELECTED AS A BENEFICIARY OF 400,000.00GBP, (FOUR HUNDREDTHOUSAND GREAT BRITISH POUNDS) ON OUR ONLINE WORLD LOTTERY DRAW 2011 EMAILPLOMOTION. YOU ARE ADVICE TO OPEN THE ATTACHMENT IN THIS MASSAGE FOR MOREINFORMATION/CLAIMS OF THIS PRIZE MONEY. WITH GOD ALL THINGS ARE POSSIBLE.BEST REGARDS. [...] Content analysis details: (1.0 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 DEAR_WINNER BODY: DEAR_WINNER0.0 T_LOTTO_AGENT_RPLY Claims Agent0.0 T_LOTTO_AGENT_FM Claims Agent-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, lowtrust[66.94.237.106 listed in list.dnswl.org]0.0 HTML_MESSAGE BODY: HTML included in message0.0 T_HK_SPAMMY_FILENAME T_HK_SPAMMY_FILENAME0.0 LOTS_OF_MONEY Huge... sums of money-1.0 UPPERCASE_75_100 message body is 75-100% uppercase1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.0 MONEY_LOTTERY Lots of money from a lottery0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.