Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Sat, 18 Oct 2014 09:35:55 -0700 [received:] => Array ( [0] => from smtp.easynet.es ([213.139.0.17]:43896)by bigcat.newsblaze.com with esmtp (Exim 4.82)(envelope-from )id 1XfWyx-0001jX-Ckfor scam@scamdex.com; Sat, 18 Oct 2014 09:35:55 -0700 [1] => from [62.93.189.55] (helo=webmail.saidi.es)by smtp.easynet.es with esmtp (Exim 4.72)(envelope-from )id 1XfWxj-0002X4-EI; Sat, 18 Oct 2014 18:34:41 +0200 ) [mime-version:] => 1.0 [content-type:] => text/plain;charset=UTF-8;format=flowed [content-transfer-encoding:] => 7bit [date:] => Sat, 18 Oct 2014 17:24:18 +0100 [from:] => Payment Board [to:] => undisclosed-recipients:; [subject:] => Contact (ATM Card Center Director) [reply-to:] => [mail-reply-to:] => [message-id:] => <13bab9cd4c862cc6a58be31dba0a5822@saidi.es> [x-sender:] => james.aiden@yandex.com [user-agent:] => Roundcube Webmail/0.7.1 [x-easynet-es-outgoing-spam-score:] => 15.4 (+++++++++++++++) [x-outgoing-spam-report:] => Spam detection software, running on the system "aspam2.nsa.es.easynet.net", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, see@@CONTACT_ADDRESS@@ for details.Content preview: -- United States Government, World Bank Group, United Nations Organization, European Union {EU} REF: LETTER OF AWARD COMPENSATION. Records show that you are among one of the individuals and organizations who are yet to receive their overdue payment from overseas which includes those of Lottery / Winning, Contract and Inheritance funds. Through our Fraud Monitory Unit, we have noticed that you have been transacting with some impostors and fraudsters who have been impersonating, and some impostors claiming to be The Federal Bureau of Investigation. The Cyber Crime Division of the FBI gathered information from the Internet Fraud Complaint Center (IFCC) on how some people have lost outrageous sums of money to these impostors. As a result of this, we hereby advise you to stop communication with any one not referred to you by us. We have negotiated with the Federal Ministry of Finance that your payment totaling $10,500,000.00 (Ten Million Five Hundred Thousand Dollars) will be released to you via a custom pin based ATM Card with a maximum withdrawal limit of $100,000 a day which is powered by Visa Card and can be used anywhere in the world where you see a Visa Card Logo on the Automatic Teller Machine (ATM). [...] Content analysis details: (15.4 points, 5.0 required) pts rule name description---- ---------------------- ---------------------------------------------------1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (james.aiden[at]yandex.com) 3.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 MONEY_ATM_CARD Lots of money on an ATM card 2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL 1.4 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) 1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 0.6 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases 1.2 MONEY_FRAUD_3 Lots of money and several fraud phrases 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.5 FORM_FRAUD_5 Fill a form and many fraud phrases 0.5 FORM_FRAUD_3 Fill a form and several fraud phrases [x-outgoing-spamscan-signature:] => ea06a9951bfb56bdddedfcdd92a4f13d [x-easynet-bounce-key:] => easynet.es;james.aiden@yandex.com;1413650152;252ccb9d; )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.