Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Sun, 28 Apr 2013 17:25:34 -0700 [received:] => Array ( [0] => from ares.v-host.hu ([77.221.39.222]:44630)by lester.newsblaze.com with esmtp (Exim 4.80)(envelope-from )id 1UWbuP-0002W4-QYfor scam@scamdex.com; Sun, 28 Apr 2013 17:25:34 -0700 [1] => from localhost (localhost.localdomain [127.0.0.1])by ares.v-host.hu (Postfix) with ESMTP id D245B120DB3;Mon, 29 Apr 2013 02:25:27 +0200 (CEST) [2] => from ares.v-host.hu ([127.0.0.1])by localhost (ares.v-host.hu [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id qJq5R1HN1lRL; Mon, 29 Apr 2013 02:25:26 +0200 (CEST) [3] => from gmail.com (localhost.localdomain [127.0.0.1])(Authenticated sender: farkas.andras@v-host.hu)by ares.v-host.hu (Postfix) with ESMTPA id 6A410120C05;Mon, 29 Apr 2013 02:25:07 +0200 (CEST) ) [x-virus-scanned:] => Debian amavisd-new at ares.v-host.hu [mime-version:] => 1.0 [x-mailer:] => AfterLogic WebMail PHP [x-originating-ip:] => 197.220.160.83 [x-priority:] => 3 (Normal) [message-id:] => [from:] => "Mrs Stella Armando" [subject:] => Re: PLEASE HELP ME INVEST $35M USD [date:] => Mon, 29 Apr 2013 02:25:07 +0200 (CEST) [content-type:] => multipart/alternative;boundary="--=_NextPart_a97394a00a284c03bb8c6c74f6a44fed" [to:] => undisclosed-recipients:; [x-spam-status:] => No, score=3.1 [x-spam-score:] => 31 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Hello Friend My Name is Stella from Argentina the wife of Late Mr carlos Armando, One of The financial advisers to Late President Muammar Gaddafi, President of the oil riched country called Libya and the Richest President in the world ,Please I am writing from Libya. I have business proposal worth S35M USD.please could you write me at my private email ( mrsstellarmando2013@hotmail.com) so that i can tell you more about myself and also confidential things that will favour the both of us, thank you for your understanding and hope to hear from you soon. Do not fail to reply at my private email because you will benefit on what i have to tell you, God bless you. [...] Content analysis details: (3.1 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mrsvickyarmando2002[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (mrsvickyarmando2002[at]gmail.com) 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLY From and body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases 0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.