Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => tom@scamdex.com [delivery-date:] => Wed, 09 Apr 2014 20:42:42 -0700 [received:] => Array ( [0] => from 208-47-241-39.dia.static.qwest.net ([208.47.241.39]:3899 helo=jekelleher.net)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1WY5su-0002Qr-VPfor tom@scamdex.com; Wed, 09 Apr 2014 20:42:42 -0700 [1] => from [192.168.1.162] by jekelleher.us (MDaemon PRO v11.0.3)with ESMTP id md50001126869.msgfor ; Wed, 09 Apr 2014 13:46:13 -0400 ) [x-mdav-processed:] => jekelleher.net, Wed, 09 Apr 2014 23:45:29 -0400 [x-spam-processed:] => jekelleher.net, Wed, 09 Apr 2014 23:45:19 -0400 [x-spam-checker-version:] => SpamAssassin 3.2.5 (2008-06-10) onwwwt.jekelleher.local [x-spam-level:] => [x-spam-status:] => Array ( [0] => No, score=-4.7 required=5.0 tests=BAYES_00,MISSING_MIDshortcircuit=no autolearn=ham version=3.2.5 [1] => No, score=3.8 ) [x-mdhelolookup-result:] => hardfail smtp.helo=[192.168.1.162] (does not match 213.205.241.144) (jekelleher.net) [x-authenticated-sender:] => PerugiN@greasymachines.com [x-mdremoteip:] => 213.205.241.144 [x-return-path:] => roots@hiz.cz [x-envelope-from:] => roots@hiz.cz [x-mdaemon-deliver-to:] => tom@scamdex.com [content-type:] => text/plain; charset="iso-8859-1" [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-description:] => Mail message body [subject:] => Dear Beloved [to:] => Recipients [from:] => "Lewis Smith" [date:] => Wed, 09 Apr 2014 18:34:57 +0100 [reply-to:] => smithlewis66@aol.com [x-spam-score:] => 38 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: There is an urgent issue, I will like to discuss with you about donation to your country because I have been diagnosed with Prostate and Esophageal cancer and my family are after my money not my health. [...] Content analysis details: (3.8 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP Message was received from an IP address 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (smithlewis66[at]aol.com) 0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=roots%40hiz.cz;ip=208.47.241.39;r=lester.newsblaze.com] 0.1 MISSING_MID Missing Message-Id: header 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF failed 0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.

There is an urgent issue, I will like to discuss with you about donation to your country because I 
have been diagnosed with Prostate and Esophageal cancer and my family are after my money not my 
health.

Lewis Smith
smithlewis66@aol.com