Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => tom@scamdex.com [delivery-date:] => Thu, 03 Oct 2013 01:46:34 -0700 [received:] => Array ( [0] => from [64.202.126.81] (port=52602 helo=vami.victoriousarmyministries.org)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1VReYL-000238-Rufor tom@scamdex.com; Thu, 03 Oct 2013 01:46:34 -0700 [1] => from [41.138.177.211] (port=50151 helo=[41.138.187.27])by vami.victoriousarmyministries.org with esmtpa (Exim 4.80)(envelope-from )id 1VRd8Y-0005SY-Kafor tom@scamdex.com; Thu, 03 Oct 2013 02:15:51 -0500 ) [message-id:] => [mime-version:] => 1.0 [from:] => Tajj Hussein [to:] => "tom" [reply-to:] => tajjhu@yahoo.com [subject:] => Re [date:] => Thu, 3 Oct 2013 00:15:48 -0700 [x-bounce-tracking-info:] => [content-type:] => text/plain; charset=iso-8859-1; format=flowed [content-transfer-encoding:] => quoted-printable [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - vami.victoriousarmyministries.org [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [47 12] / [47 12] [4] => Sender Address Domain - email.com ) [x-get-message-sender-via:] => vami.victoriousarmyministries.org: authenticated_id: mail@zmailer.biz [x-source:] => [x-source-args:] => [x-source-dir:] => [x-spam-status:] => No, score=1.9 [x-spam-score:] => 19 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: HOW ARE YOU AND YOUR FAMILY? HOPE ALL IS WELL. MY NAME IS TAJJ HUSSEIN; I AM AN ARAB BY BIRTH, CURRENTLY IN NIGER. WITH A VERY DESPERATE NEED FOR ASSISTANCE, I HAVE SUMMED UP COURAGE TO CONTACT YOU. I AM SEEKING YOUR KIND ASSISTANCE TO MOVE THE SUM OF ($50 MILLION U.S.DOLLARS) FIFTY MILLION UNITED STATES DOLLARS OUT OF DUBAI, AS FAR AS I CAN BE ASSURED THAT MY SHARE WILL BE SAFE IN YOUR CARE UNTIL THE TIME BEING. SOURCE OF MONEY: SOME MONEY IN VARIOUS CURRENCIES WAS MOVED BY ME FOR SAADI GADDAFI WHEN THINGS WERE ROUGH IN LIBYA. WE ESCAPED TO NIGER THEREAFTER. YOU WILL FIND THE STORY OF THIS MONEY ON THE WEB ADDRESS BELOW; the-ontario-man-who-helped-muammar-gaddafis-son-flee-libya. PLEASE LET ME KNOW WHAT PERCENTAGE OF THE TOTAL MONEY YOU WILL TAKE FOR HELPING ME TO COLLECT IT FROM THE WAREHOUSE i KEPT THE MONEY AS I WILL BE TRAVELLING ABOUT. ONE PASSIONATE APPEAL I WILL MAKE TO YOU IS NOT TO DISCUSS THIS MATTER WITH ANYBODY, SHOULD YOU HAVE REASONS TO REJECT THIS OFFER, PLEASE DESTROY THIS MESSAGE AS ANY LEAKAGE OF THIS INFORMATION WILL BE TOO BAD FOR US ALL. I DO NOT KNOW HOW LONG WE WILL REMAIN HERE, AND I HAVE BEEN SHOT, WOUNDED AND SURVIVED TWO ATTACKS BY THE SPECIAL GRACE OF GOD, THIS AND OTHER REASONS I HAVE MENTIONED EARLIER PROMPTED ME TO REACH OUT FOR HELP, I HONESTLY WANT THIS MATTER TO BE RESOLVED IMMEDIATELY, PLEASE CONTACT ME AS SOON AS POSSIBLE. GOD BLESSES YOU AND YOUR FAMILY. HUSSEIN tajjhu@email.com [...] Content analysis details: (1.9 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: email.com]-3.0 MILLION_USD BODY: Talks about millions of dollars 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (tajjhu[at]email.com) 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [64.202.126.81 listed in bb.barracudacentral.org] 0.0 LOTS_OF_MONEY Huge... sums of money-1.0 UPPERCASE_75_100 message body is 75-100% uppercase 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MONEY_FROM_41 Lots of money from Africa [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.