Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => phpbbs@o7e.net [delivery-date:] => Mon, 25 Jan 2016 09:33:25 -0800 [received:] => Array ( [0] => from web101808.mail.ssk.yahoo.co.jp ([182.22.66.31]:48687)by bigcat.newsblaze.com with smtp (Exim 4.86)(envelope-from )id 1aNl0j-0001Ws-4vfor phpbbs@o7e.net; Mon, 25 Jan 2016 09:33:25 -0800 [1] => (qmail 41065 invoked by uid 60001); 25 Jan 2016 17:05:42 -0000 [2] => from [41.138.166.5] by web101808.mail.ssk.yahoo.co.jp via HTTP; Tue, 26 Jan 2016 02:05:41 JST ) [domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=yj20050223; d=yahoo.co.jp; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:X-YMail-JAS:Sender:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=LgxV5caVv6dieALq9+26Rtvlb7W3sIwtT1hKooyE3rq5dIjrRSR8LydtRmgvN1sDcUIJF44LmSquKapw3AZl/KM51HJzcN88/cWTk//ex6bd1/vvlMMjzXnL0iUq/SGt ; [message-id:] => <424704.23661.qm@web101808.mail.ssk.yahoo.co.jp> [x-ymail-osg:] => DZqN45MVM1lcj9HattpnV892YxoTHh.bKdhzP.6YyOz1nqGjdzpcL480RD1aD0bYxOKdHisekDSHUlEV2XPBBW4HoE7gJBmxUrRObivbUE_zLYSFjSUKrwy2HR_nhNIzVInxG2nw7Vc1iTXz6PxM_SxM8fJ2WZO6mkJOaufZCiuGkqP.mXoGKAZlw6bsm.fLKOHnAXTEhrJ147rkFTMNaWpN4C5x1c25565QC4OaD.LgMx7LFPPuCIHxVlo1Oq6dlgSt0XYnJ_jO7OgBklxIi5UZSkSTVf3RY8ONEXfbVV7cWqzxMG5MLoe9S9Yk.7BATgMA.ALi07rm904Qz7luBhWYtx99iL2qRNB_frTtOrmG_mAYf4JAJKkz_FHAGT0BE43Nx_JaGbFA11fl9iNkCzeSwMi2oaOzt.9SFfC3NUtHKTKaqKGV4YC57VQtoe9JAqRtPJewa67ZDLU0577_zacWqQ7zQw1nY_tG3T71Or8ZZWZp5D0ECpDgVTjH_ksvec4e57NGDbc2z2rIjJIN2zSB3mEJWhwImJE1uHusAZe54C1ouNz9SBAMdpeXn_9sZrtYUaTHRZHXn7QeGGUICkHUm.MBTGsxirieecYjxWwZy4gNCOPDT70jPWBg7RQR70JW_F.3FGRh8B0U1vOJHLIZrL.Na8lIjOSLLdwfGLQU7XDJlxsQeNRpzUugfGe2_NVlVDGifiXIjePDDkZWq1vkT.akuan1VgV8NE7KvNpTaLUO.jO04qsq8zCmlwev4ELwYdURq1mFvZWgjkl2ELOvDp5pfAYfv49X4kUOjGjDJnUepYO.W1lqlI03PkKJtyB0Fws- [x-rocketymmf:] => aaajorzjaaa [x-mailer:] => YahooMailWebService/0.8.111_67 [x-ymail-jas:] => b6r39aoVM1l4G99g1MupnzYgS72SBb7DxC4Mpfsvr5UA.2Md7wFNRcZ.HmQi.WMltUeXZ3WPOu9j7I.4kQk.e9MDZD5a7RlYFEExo7It0QSl9bK._f8deBH275NOJaJ3q58k [sender:] => aaajorzjaaa@yahoo.co.jp [date:] => Tue, 26 Jan 2016 02:05:41 +0900 (JST) [from:] => Lincoln Bah Bah [reply-to:] => Lincoln Bah Bah [subject:] => WITH ALL DUE RESPECT TO YOUR PERSON [to:] => undisclosed recipients: ; [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="2005136224-1827581052-1453741541=:23661" [x-spam-status:] => No, score=-3.7 [x-spam-score:] => -36 [x-spam-bar:] => --- [x-ham-report:] => Spam detection software, running on the system "bigcat.newsblaze.com",has NOT identified this incoming email as spam. The originalmessage has been attached to this so you can view it or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Dear Friend, With due respect to your person and much sincerity of purpose. I have a business proposal which I will like to handle with you. $35 million USD is involves. But be rest assured that everything is legal and risk free as I have concluded all the arrangements and the legal papers that will back the transaction up. Kindly indicate your interest as to enable me tell you more detail of the proposal. [...] Content analysis details: (-3.7 points, 4.5 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars-3.0 URG_BIZ BODY: Contains urgent matter 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (officeinformation12[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (linccbah125[at]gmail.com) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (officeinformation12[at]gmail.com)-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.138.166.5 listed in zen.spamhaus.org] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MONEY_FROM_41 Lots of money from Africa [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.