Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Thu, 05 Dec 2013 06:33:25 -0800 [received:] => Array ( [0] => from nm41.bullet.mail.ne1.yahoo.com ([98.138.120.48]:23403)by lester.newsblaze.com with smtp (Exim 4.80.1)(envelope-from )id 1VoZzY-0007rD-8Kfor scam@scamdex.com; Thu, 05 Dec 2013 06:33:24 -0800 [1] => from [127.0.0.1] by nm41.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2013 14:33:24 -0000 [2] => from [98.138.100.112] by nm41.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2013 14:30:42 -0000 [3] => from [106.10.166.61] by tm103.bullet.mail.ne1.yahoo.com with NNFMP; 05 Dec 2013 14:30:42 -0000 [4] => from [106.10.151.235] by tm18.bullet.mail.sg3.yahoo.com with NNFMP; 05 Dec 2013 14:30:41 -0000 [5] => from [127.0.0.1] by omp1019.mail.sg3.yahoo.com with NNFMP; 05 Dec 2013 14:30:41 -0000 [6] => (qmail 29575 invoked by uid 60001); 5 Dec 2013 14:30:41 -0000 [7] => from [41.138.169.126] by web190804.mail.sg3.yahoo.com via HTTP; Thu, 05 Dec 2013 22:30:41 SGT ) [x-yahoo-newman-property:] => ymail-4 [x-yahoo-newman-id:] => 795185.40022.bm@omp1019.mail.sg3.yahoo.com [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com.ph; s=s1024; t=1386253841; bh=b4R9XfONcLfCffwvUx7DyIYf/og2eKS/Ksd038JAlmg=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=UooOtC3XScfASAXb1/4/q9LIJy1EI0NePXOVOKFWqeULT7ovDpqeT4gUYMUuy3zGSWxrKtDZ7PPlbc1CY97MzRwr66jcvE4vBTo6YPS0D2WovEMEz3w+ALeVnAF4Q4FrIX3MNx8xczFLrNbNut8Lc8I+D5qkEOyeDf1zCh75KZA= [domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com.ph; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:Message-ID:Date:From:Reply-To:To:MIME-Version:Content-Type; b=erRxE1fp5bggX+d5JjS9GuYckO8/MNZeH53A8nATQRAp1HJZQcxkl0UTT9TyUhcwkQXcf6Nx5x7qLAfw5zB0lw+bSjejXu+jQ59mC2MeZDZIT4ne2uVfrCMbJz+EXY6LIN0PN5AsSb8igTF+J62uG5kY2zIYf1qXMpuoy3l5yC4=; [x-ymail-osg:] => I1GpsEcVM1kRXempUYb7WqUAfXS12_hEWNIjK6SfpqB_VSh9G_eG7mP3Nvbtsf530OSgBg.TCEZOoseiWlnHr9ImjUIrAZ6i_cMHcpqguE3Zp4Y96oDT7Y0NxfkU1Ix.NGLGSi.5rJMZliDbNwj_nx065JNEhRDVScHeNKsrvpXrvct8.GbgTwOXll4uBef7RRUrq.Y1Qa2sK2rckP9xtn.qxDPoYGroDS77bP6MZfnhIv9IB5fMqvrzetUHI0Si.wD5mlwq9jGyUjRD1P89Zy7aEkLg8z1XwhInja5WubpiWNJvoKBEWjaFTfprInVX89WG.un0OYANVS7VoZAvHZmurHw3UFrcV2eyJ0dm5TSiSmLoEIPXPc85rlemNBec8Hrboo1lDio8qmnjmTDlx3rDO6oJCIDgjELvgrAnHNLDfQR2QmZyw0w6zQ_PRU8b.brpRFUzIwyEl4hj6QDToyoHC6ubxglhisgv3QT_NbrHYWq4XU8Kb.ob8YRIjdUb_qytUyVt_H.RfPE- [x-rocket-mimeinfo:] => 002.001,CgrCoApQbGVhc2UgYXNzaXN0IG1lIHNvIEkgY291bGQgZnVsZmlsbCBteSB3aXNoZXMKCsKgQU0gTVJTIEpPWSBXSUxGT1JEIEZST00gTkFUSEVSTEFORCBJIEFNIE1BUlJJRUQgVE8gRFIgRlJBTktMWU4gV0lMRk9SRCBXSE8gV09SS0VEIFdJVEggTkVUSEVSIExBTkQgRU1CQVNTWSBJTiBVU0EgLCBGT1IgTklORSBZRUFSUyBCRUZPUkUgSElTIERFQVRIIFdFIFdFUkUgTUFSUklFRCBGT1IgRUxFVkVOIFlFQVJTIFdJVEhPVVQgQSBDSElMRCBIRSBESUVEIEFGVEVSIEEgQlJJRUYgSUxMTkVTUyBUSEFUIExBU1QBMAEBAQE- [x-mailer:] => YahooMailWebService/0.8.167.602 [message-id:] => <1386253841.86529.YahooMailNeo@web190804.mail.sg3.yahoo.com> [date:] => Thu, 5 Dec 2013 22:30:41 +0800 (SGT) [from:] => "MRS J. WILFORD" [reply-to:] => "MRS J. WILFORD" [to:] => undisclosed recipients: ; [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="1490027246-195948868-1386253841=:86529" [x-spam-status:] => Yes, score=4.4 [x-spam-score:] => 44 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Please assist me so I could fulfill my wishes AM MRS JOY WILFORD FROM NATHERLAND I AM MARRIED TO DR FRANKLYN WILFORD WHO WORKED WITH NETHER LAND EMBASSY IN USA , FOR NINE YEARS BEFORE HIS DEATH WE WERE MARRIED FOR ELEVEN YEARS WITHOUT A CHILD HE DIED AFTER A BRIEF ILLNESS THAT LASTED FOR ONLY FOUR DAYS I AM NOW A NEW CHRISTIAN CONVERT SUFFERING FROM LONG TIME CANCER OF THE BREAST FROM ALL INDICATION MY CONDITIONS IS REALLY DETERIORATING [...] Content analysis details: (4.4 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (qtero[at]yahoo.com.ph) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ("mrs j. wilford" ) 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.com.ph] 0.0 HTML_MESSAGE BODY: HTML included in message-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this 1.8 MISSING_SUBJECT Missing Subject: header 0.0 LOTS_OF_MONEY Huge... sums of money-1.0 UPPERCASE_75_100 message body is 75-100% uppercase 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MONEY_FROM_41 Lots of money from Africa [x-spam-flag:] => YES [subject:] => ***SPAM*** )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.