Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mc_mxw@o7e.net [delivery-date:] => Thu, 15 Mar 2012 04:39:41 -0700 [received:] => Array ( [0] => from c2mds.mailcentro.com ([208.67.179.143])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1S891m-0002f9-UBfor mc_mxw@o7e.net; Thu, 15 Mar 2012 04:39:41 -0700 [1] => from mail.chartercom.com (mail.chartercom.com [24.217.29.16])by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with ESMTP id q2FBdUnE026798for ; Thu, 15 Mar 2012 04:39:30 -0700 [2] => from unknown (HELO kstlmccap04) ([192.168.119.151]) by mail.chartercom.com with ESMTP; 15 Mar 2012 06:39:26 -0500 ) [x-mc-sender:] => support@chartercom.com [x-mc-ipaddr:] => mail.chartercom.com [24.217.29.16] [message-id:] => [x-ironport-av:] => E=Sophos;i="4.73,590,1325484000"; d="scan'208";a="223248189" [mime-version:] => 1.0 [from:] => support@chartercom.com [to:] => mxveleza@paccd.cc.ca.us, mxviper@aol.com, mxvirdago@yahoo.com.mx, mxvni@ddns.us, mxvug@microdata.co.uk, mxvzkytva@lsb.state.ok.us, mxw00u@cs.nott.ac.uk, mxw@uniplex.com, mxwantn@aol.com, mxwelluv@aol.com, mxwllbrwn@yahoo.com, mxwriter@live.com, mxx1073547460d@divl.us, mxx1718732@aol.com, mxx244@hotmail.com, mxx5341250@aol.com, mxx6692908@yahoo.com, mxxmarga@yahoo.com, mxxrhlt@yahoo.com, mxxxroberts@bop.gov, mxxxxm@gmail.com, mxxxxx@gmail.com, mxyara2000@yahoo.com, mxyiis@lsb.state.ok.us, mxyzpytlk6731087@aol.com, mxz440l@hotmail.com, mxz700@bluefrog.com, mxz9705@aol.com, mxz97@hotmail.com, mxzcu9o@6gfyf.mil, mxzks02@yahoo.com, mxzzr2@yahoo.com, my--west@hotmail.com, my-2222@hotmail.com, my-3-sonz@hotmail.com, my-boo-101@hotmail.com, my-chemical-romance@live.de, my-chicks@hotmail.com, my-dream2009@live.co.uk, my-gr@yahoo.co.uk, my-ha@fpt.vn, my-ihost.co.ukmailbox@my-ihost.co.uk, my-journey@att.net, my-jyworld@hanmail.net, my-letter@37.com, my-mail@wanadoo.fr, my-maya@googlegroups.com, my-melody-123@hotmail.com, my-minione@hotmail.com, my-name@studiomaps.co.uk, my-orthopedic-shoes.com@sos.state.oh.us, my-phan@uiowa.edu, my-prinz@web.de, my-reese@hotmail.com, my-rorie@att.net, my-valued-customers@parkers.co.uk, my.argument@gmail.com, my.armax@gmail.com, my.bell@hotmail.com, my.butterfly0@gmail.com, my.cop.ka@gmail.com, my.darwin@gmail.com, my.destroyer@gmail.com, my.email.address@hotmail.co.uk, my.email.emma@gmail.com, my.ericson@viasat.co.uk, my.fortuna@gmail.com, my.fun.ecards@lookfreshforthings.info, my.generation@limpbizkit-fan.co.uk, my.gleason@coachusa.us, my.heartbeats4u@rediffmail.com, my.hump@gmail.com, my.junk@hotmail.co.uk, my.kingdom@chelsea.fcmail.co.uk, my.life.sago@hotmail.com, my.lolo61475@gmail.com, my.mail.2003@gmail.com, my.name.is.ktk@hotmail.com, my.nelson@oshkosh.k12.wi.us, my.nguyen@conexant.com, my.olander@gmail.com, my.swanney@blueyonder.co.uk, my.swinger@hotmail.com, my001j4910@blueyonder.co.uk, my0078.degegfdsv@yahoo.com.my, my0nghye@hotmail.com, my1200customhog@aol.com, my12brandon@yahoo.com, my187420@hotmail.com, my1980@gmail.com, my1angel2002@aol.com, my1bluebutterfly@aol.com, my1bonbon@yahoo.com, my1chemicallove@aol.com, my1foxy@aol.com, my1hammer@aol.com, my1happyplace@yahoo.com, my1kee@yahoo.com, my1life505@yahoo.com [date:] => 15 Mar 2012 06:39:28 -0500 [subject:] => [Bulk?]YOUR FIRST PAYMENT HAS BEEN SENT TODAY [content-type:] => text/html; charset="us-ascii" [content-transfer-encoding:] => quoted-printable [x-mc-filter:] => 7.6.9 [x-mc-filter-antivirus:] => Scanned for virus - Status 0 [x-mc-deliveryid:] => 130 [x-mc-ctfilter:] => CT RefID = str=0001.0A010205.4F61D4F2.001A,ss=3,fgs=0 - Class:Bulk - Virus Threat:Unknown - Phishing Threat:Low [x-mc-filterskip:] => 0 [x-mc-spamscore:] => 40 T 49 [x-spam-status:] => No, score=3.4 [x-spam-score:] => 34 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: From: western_uniontransfer77@yahoo.com Hello, I have contactedyou because I've sent you the first payment of $5,000 today from your winningfunds total amount of $1.5Million USD,Therefore you need to contact westernunion agent Mr. Terry Mosko, for him to give you the transfer payment informationand MTCN. Agent: Mr.Terry Mosko Email: western_union205@yahoo.com Phone:+229 985 700 76 Please try to contact him today for him to forward the paymentinformation to you, Remember to Indicate the registration code of EB-2520to him when e-mailing or calling him, Also he will be sending you $5,000.00daily as per my discussion with him. Do get in touch with me once you haveReceived the transfer. Sincerely, Mr. James Williams IMF Compensation officerIMF Managing Director Benin Rep. www.imf.org E-MAIL CONFIDENTIALITY NOTICE:The contents of this e-mail message and any attachments are intended solelyfor the addressee(s) and may contain confidential and/or legally privilegedinformation. If you are not the intended recipient of this message or ifthis message has been addressed to you in error, please immediately alertthe sender by reply e-mail and then delete this message and any attachments.If you are not the intended recipient, you are notified that any use, dissemination,distribution, copying, or storage of this message or any attachment is strictlyprohibited. [...] Content analysis details: (3.4 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars0.0 SINGLE_HEADER_2K A single header contains 2K-3K characters2.5 SORTED_RECIPS Recipient list is sorted by address0.0 HTML_MESSAGE BODY: HTML included in message1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag0.0 LOTS_OF_MONEY Huge... sums of money0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay0.8 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.4 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.