Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scamdex@scamdex.com [delivery-date:] => Tue, 07 Jun 2011 16:05:26 -0700 [received:] => Array ( [0] => from gateway12.websitewelcome.com ([67.18.82.6])by chester.loopbiz.com with smtp (Exim 4.69)(envelope-from )id 1QU5Kv-00022I-3afor scamdex@scamdex.com; Tue, 07 Jun 2011 16:05:26 -0700 [1] => (qmail 13237 invoked from network); 7 Jun 2011 23:03:09 -0000 [2] => from ham.websitewelcome.com (HELO ham01.websitewelcome.com) (173.192.111.52) by gateway12.websitewelcome.com with SMTP; 7 Jun 2011 23:03:09 -0000 [3] => by ham01.websitewelcome.com (Postfix, from userid 666)id 3AC623F7A94; Tue, 7 Jun 2011 18:05:31 -0500 (CDT) [4] => from routan.websitewelcome.com (routan.websitewelcome.com [174.120.2.162])by ham01.websitewelcome.com (Postfix) with ESMTP id 14DCE3F7937for ; Tue, 7 Jun 2011 18:05:31 -0500 (CDT) [5] => from [127.0.0.1] (port=47005 helo=www.fairviewhotelsng.com)by routan.websitewelcome.com with esmtpa (Exim 4.69)(envelope-from )id 1QU5Kn-0000rR-Eb; Tue, 07 Jun 2011 18:05:17 -0500 ) [x-spam-checker-version:] => SpamAssassin 3.3.1 (2010-03-16) onham01.websitewelcome.com [x-spam-flag2999:] => NO [x-spam-level2999:] => & [x-spam-status2999:] => "No, score=1.5 required=5.0 tests=BAYES_40,FILL_THIS_FORM,FREEMAIL_FROM,LOTS_OF_MONEY,MONEY_FORM,SUBJ_ALL_CAPS,T_TO_NO_BRKTS_FREEMAILautolearn=no version=3.3.1 [mime-version:] => 1.0 [content-type:] => text/plain;charset=UTF-8;format=flowed [content-transfer-encoding:] => 7bit [date:] => Tue, 07 Jun 2011 18:05:17 -0500 [from:] => FHP LOAN SERVICE [to:] => undisclosed-recipients:; [subject:] => DO YOU NEED A LOAN AT 2% INTEREST RATE.........APPLY NOW!! [reply-to:] => fhp.capital.service@mail.com [message-id:] => [x-sender:] => fhp.capital.service@mail.com [user-agent:] => Roundcube Webmail/0.4.2 [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - routan.websitewelcome.com [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [47 12] / [47 12] [4] => Sender Address Domain - mail.com ) [x-bwhitelist:] => no [x-source:] => [x-source-args:] => [x-source-dir:] => [x-source-sender:] => (www.fairviewhotelsng.com) [127.0.0.1]:47005 [x-source-auth:] => udoji@fairviewhotelsng.com [x-email-count:] => 0 [x-source-cap:] => ZmFpcnZpZXc7c2ltcGJpejtyb3V0YW4ud2Vic2l0ZXdlbGNvbWUuY29t [x-spam-status:] => No, score=-2.0 [x-spam-score:] => -19 [x-spam-bar:] => -- [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Do you need funds to start up your own business? Do you needloan to settle your debt or pay off your bills or start a nice business?@ 2% interest rate. From 10,000.00 To 100,000,000.00 Dollars If you are interested,contact us via E-mail with the following details to proceed [...] Content analysis details: (-2.0 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------0.0 FREEMAIL_FROM Sender email is freemail(fhp.capital.service[at]mail.com)-2.0 SUBJ_ALL_CAPS Subject is all capitals0.0 LOTS_OF_MONEY Huge... sums of money0.0 FILL_THIS_FORM Fill in a form with personal information0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL0.0 MONEY_FORM Lots of money if you fill out a form [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.