Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mc_mxw@o7e.net [delivery-date:] => Tue, 06 Dec 2011 19:48:48 -0800 [received:] => Array ( [0] => from c2mds.mailcentro.com ([208.67.179.143])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RY8Ux-0002TU-W4for mc_mxw@o7e.net; Tue, 06 Dec 2011 19:48:48 -0800 [1] => from li.psico.edu.uy (li.psico.edu.uy [164.73.236.112])by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with SMTP id pB73mi0l006645for ; Tue, 6 Dec 2011 19:48:45 -0800 [2] => (qmail 3309 invoked by uid 50386); 7 Dec 2011 03:09:42 -0000 [3] => from 164.73.236.115 by li.psico.edu.uy (envelope-from , uid 50378) with qmail-scanner-2.04st (clamdscan: 0.92.1/7753. perlscan: 2.04st. Clear:RC:1(164.73.236.115):. Processed in 0.020486 secs); 07 Dec 2011 03:09:42 -0000 [4] => from unknown (HELO webmail.psico.edu.uy) (164.73.236.115) by li.psico.edu.uy with SMTP; 7 Dec 2011 03:09:42 -0000 [5] => from 41.203.64.128 (SquirrelMail authenticated user eangeriz) by webmail.psico.edu.uy with HTTP; Wed, 7 Dec 2011 01:11:04 -0200 ) [x-mc-sender:] => allenv@sympatico.ca [x-mc-ipaddr:] => li.psico.edu.uy [164.73.236.112] [message-id:] => [date:] => Wed, 7 Dec 2011 01:11:04 -0200 [subject:] => [Bulk?]Personal [from:] => "Allen & Violet Large" [reply-to:] => allenviolet2010@live.com [user-agent:] => SquirrelMail/1.4.21 [mime-version:] => 1.0 [content-type:] => text/plain;charset=iso-8859-1 [content-transfer-encoding:] => 8bit [x-priority:] => 3 (Normal) [importance:] => Normal [x-mc-filter:] => 7.6.9 [x-mc-filter-antivirus:] => Scanned for virus - Status 0 [x-mc-deliveryid:] => 130 [x-mc-ctfilter:] => CT RefID = str=0001.0A010201.4EDEE21F.003D,ss=3,fgs=0 - Class:Bulk - Virus Threat:Unknown - Phishing Threat:Low [x-mc-filterskip:] => 0 [x-mc-spamscore:] => 40 T 49 [x-spam-status:] => No, score=3.2 [x-spam-score:] => 32 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dear Friend This is a personal email directed to you. Letme formally introduce myself to you, my name is Mr. Allen Large. I and mydear wife Violet won a Jackpot Lottery of $11.3 million in July 2010 and havevoluntarily decided to donate the sum of $950,000.00 USD to you as part ofour own charity project to improve the lot of 5 lucky individuals all overthe continents of the world. If you have received this email today then youare one of the lucky recipients and all you have to do is get back to usso that we can send your details to the payout bank. Please provide us yourfull name, Date of birth, telephone, address, country. You can verify thisby visiting the web pages below. [...] Content analysis details: (3.2 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at http://www.dnswl.org/, hightrust[208.67.179.143 listed in list.dnswl.org]1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit(allenviolet2010[at]live.com)1.2 MISSING_HEADERS Missing To: header-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear!0.0 LOTS_OF_MONEY Huge... sums of money1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From0.0 FILL_THIS_FORM Fill in a form with personal information3.5 FILL_THIS_FORM_LONG Fill in a form with personal information0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases0.1 FORM_FRAUD_3 Fill a form and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.