Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Sun, 26 May 2013 12:54:46 -0700 [received:] => Array ( [0] => from smtp301.alice.it ([82.57.200.117]:51611)by lester.newsblaze.com with esmtp (Exim 4.80)(envelope-from )id 1Ugh1h-0000C7-C4for scam@scamdex.com; Sun, 26 May 2013 12:54:46 -0700 [1] => from feu14-alice (82.57.204.69) by smtp301.alice.it (8.6.058.01) id 50AA53640E47043A; Sun, 26 May 2013 21:49:07 +0200 [2] => from (50.201.57.183) by wmlight.rossoalice.alice.it; Sun, 26 May 2013 21:49:06 +0200 ) [message-id:] => <13ee2631f0b.zorzi-andrea@alice.it> [date:] => Sun, 26 May 2013 21:49:06 +0200 (CEST) [from:] => "Mr James Obumu." [reply-to:] => wesuneyamne33@yahoo.com.hk [mime-version:] => 1.0 [content-type:] => text/plain;charset="UTF-8" [content-transfer-encoding:] => 7bit [x-originating-ip:] => 50.201.57.183 [x-spam-status:] => Yes, score=4.9 [x-spam-score:] => 49 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Hello dear how are doing today am here to inform you that we have deposited your 1.5M usd to the Western Union Office to them to transfer your $5,000 usd to you by daily until you receive your 1.5M USD of the fund [...] Content analysis details: (4.9 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (zorzi-andrea[at]alice.it) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (wesuneyamne33[at]yahoo.com.hk)-1.1 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.com.hk] 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) 1.2 MONEY_FORM_SHORT Lots of money if you fill out a short form [x-spam-flag:] => YES [subject:] => ***SPAM*** Very Urgent )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.