Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => support@scamdex.com [delivery-date:] => Sun, 15 Dec 2013 16:58:01 -0800 [received:] => Array ( [0] => from nagasari.menlh.go.id ([27.50.25.168]:43077)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1VsMVS-0007UU-A6for support@scamdex.com; Sun, 15 Dec 2013 16:58:01 -0800 [1] => by nagasari.menlh.go.id (Postfix, from userid 820)id BE9927A07E7; Mon, 16 Dec 2013 07:48:28 +0700 (WIT) [2] => from 192.168.136.12 ([192.168.136.12]) by webmail.menlh.go.id(Horde Framework) with HTTP; Mon, 16 Dec 2013 07:48:28 +0700 ) [message-id:] => <20131216074828.21491yceyebp7y70@webmail.menlh.go.id> [date:] => Mon, 16 Dec 2013 07:48:28 +0700 [from:] => Dr Azeeza Ikraam [reply-to:] => drazeezaikraam@gmail.com [to:] => undisclosed-recipients:; [subject:] => INVESTMENT PROPOSAL! [mime-version:] => 1.0 [content-type:] => text/plain;charset=ISO-8859-1;DelSp="Yes";format="flowed" [content-disposition:] => inline [content-transfer-encoding:] => 7bit [user-agent:] => Internet Messaging Program (IMP) H3 (4.3.10) [x-spam-status:] => No, score=2.3 [x-spam-score:] => 23 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Greeting To You! My name is Miss.Azeeza Ikraam a medical doctor working with NATO currently in Syria.I got your esteemed contact during my comprehensive research for a reliable and trustworthy individual in your country. I will need your help to invest in your country, I have some money I made in the president of Syrian compound Bashar al-Assads during our search in rescue team NATO.I have kept it as secret for a little while,all i need is someone I can trust to work and help me invest this fund. I am ready to give you 35 percent of this fund when you must have received it for investment proper in your country. [...] Content analysis details: (2.3 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [27.50.25.168 listed in bb.barracudacentral.org]-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record-0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.0 T_HK_NAME_DR T_HK_NAME_DR 2.7 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.