Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mc_mxw@o7e.net [delivery-date:] => Mon, 07 Nov 2011 02:17:08 -0800 [received:] => Array ( [0] => from c2mds.mailcentro.com ([208.67.179.143])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RNMGH-0005uu-RVfor mc_mxw@o7e.net; Mon, 07 Nov 2011 02:17:08 -0800 [1] => from atmail2.memy.name (mail.citec.us [210.1.61.65])by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with ESMTP id pA7AGxPR009509for ; Mon, 7 Nov 2011 02:17:00 -0800 [2] => from localhost ([127.0.0.1])by atmail2.memy.name with esmtp (Exim 4.69)(envelope-from )id 1RNMma-0001yD-Ul; Mon, 07 Nov 2011 17:50:28 +0700 ) [x-mc-sender:] => kwezsi2@yahoo.co.jp [x-mc-ipaddr:] => mail.citec.us [210.1.61.65] [mime-version:] => 1.0 [x-mailer:] => AtMail PHP 5.6 [message-id:] => <63972.1320663028@memy.name> [to:] => [reply-to:] => kwezsi2@yahoo.co.jp [content-type:] => multipart/alternative;boundary="=_c8f3fd9ada667d6bed9a3cf5533b93c7" [x-origin:] => 41.223.251.47 [x-atmail-account:] => sdeokpoghw@memy.name [date:] => Mon, 07 Nov 2011 17:50:28 +0700 [subject:] => [Bulk?]Fund Transfer, [from:] => "Dr.Wilson Okp" [x-mc-filter:] => 7.6.9 [x-mc-filter-antivirus:] => Scanned for virus - Status 0 [x-mc-deliveryid:] => 130 [x-mc-ctfilter:] => CT RefID = str=0001.0A010205.4EB7B020.0029,ss=3,fgs=16 - Class:Bulk - Virus Threat:Unknown - Phishing Threat:Low [x-mc-filterskip:] => 0 [x-mc-spamscore:] => 40 T 49 [x-spam-status:] => No, score=3.8 [x-spam-score:] => 38 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: My name is Dr.Wilson Okpogho, a close associate to Mrs SimoneGbagbo, the wife of Ex President Laurent Gbagbo of Cote d'Ivoire. Over theyears, I helped her move out funds for lodgement in so many countries waitingfor further instructions from her but due to the problem that arose becauseof the present political situation in Cote d'voire, the European Union hasthreatened to seize all funds belonging to Laurent Gbagbo and his alliesbecause he has refused to cede power so I was advised as a matter of urgencyto look for a reliable partner to work with in receiving the funds for safekeeping. I want to transfer the sum of 18,000.000.00 USD(Eighteen millionAmerican Dollars). You will be entitled to 30% for your assistance. If youcan handle this, reach me with your name, address and telephone so that Ican furnish you with the details. You have to reply back with your directphone number. Waiting to read from you quick. Dr.Wilson Okpogho http://memy.nameฟรี E-mail พื้นที่ไม่จำกัด ของคนไทยเพื่อคนไทย My name is Dr.Wilson Okpogho, a close associateto Mrs Simone Gbagbo, the wife of Ex President Laurent Gbagbo of Cote d'Ivoire.[...] Content analysis details: (3.8 points, 4.5 required)pts rule name description---- ---------------------- --------------------------------------------------0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(kwezsi2[at]yahoo.co.jp)0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit(kwezsi2[at]yahoo.co.jp)0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (kwezsi2[at]yahoo.co.jp)-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%[score: 0.3728]0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR0.0 T_MONEY_PERCENT X% of a lot of money for you0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.