Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => webmaster@scamdex.com [delivery-date:] => Fri, 21 Mar 2014 13:01:20 -0700 [received:] => from [72.26.108.41] (port=43761 helo=rahila.info)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1WR5d0-0000PD-HWfor webmaster@scamdex.com; Fri, 21 Mar 2014 13:01:20 -0700 [to:] => webmaster@scamdex.com [subject:] => Regarding Investment...... [x-php-script:] => rahila.info/reach/static/widgets/stats.php for 108.62.113.61 [from:] => Domnic Hazard [reply-to:] => domnichazard@gmail.com [mime-version:] => 1.0 [content-type:] => text/plain [content-transfer-encoding:] => 8bit [message-id:] => [date:] => Fri, 21 Mar 2014 13:01:15 -0700 [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - node18.hitdirector.com [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [611 609] / [47 12] [4] => Sender Address Domain - node18.hitdirector.com ) [x-get-message-sender-via:] => node18.hitdirector.com: authenticated_id: emailma2/only user confirmed/virtual account not confirmed [precedence:] => bulk [x-spam-status:] => No, score=1.3 [x-spam-score:] => 13 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: I am financial consultant , am contacting you in regards a request from my client wishes to Invest in Your Country. I am sorry if this is not in line with your business. I need an experienced person like you to assist me to set up ,develop the project and assume responsibility of ownership as chairman but will be bringing in profit/distribute profit monthly or annually. However, I got your email information on Internet contact list. Your immediate reply will be highly appreciated and I shall give you more information on this project. [...] Content analysis details: (1.3 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (domnichazard[at]gmail.com)-0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.