Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [received:] => Array ( [0] => from rly-md02.mx.aol.com (rly-md02.mail.aol.com [172.20.29.140]) by air-md05.mail.aol.com (v121_r4.4) with ESMTP id MAILINMD051-8eb493a6da9128; Sat, 06 Dec 2008 07:18:58 -0500 [1] => from cornet.am (cornet.am [83.139.0.34]) by rly-md02.mx.aol.com (v121_r4.4) with ESMTP id MAILRELAYINMD023-8eb493a6da9128; Sat, 06 Dec 2008 07:18:50 -0500 [2] => from [83.139.22.236] (port=3016 helo=vallex.am)by cornet.am with esmtp (Exim 4.68 (FreeBSD))(envelope-from )id 1L8w7J-000J9B-Vh; Sat, 06 Dec 2008 16:18:42 +0400 [3] => from User ([82.13.136.218])(authenticated user webmaster@vallex.am)by vallex.am (Kerio MailServer 6.5.2);Sat, 6 Dec 2008 16:14:01 +0400 ) [from:] => "Joseph Abraham" [subject:] => WITH LOVE AND FAITH [date:] => Sat, 6 Dec 2008 13:18:16 +0100 [mime-version:] => 1.0 [content-type:] => text/plain;charset="Windows-1251" [content-transfer-encoding:] => 7bit [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Outlook Express 6.00.2600.0000 [x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2600.0000 [message-id:] => [x-spam_score:] => 18.8 [x-spam_score_int:] => 188 [x-spam_bar:] => ++++++++++++++++++ [x-spam_report:] => Spam detection software, running on the system "ns.cornet.am", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeThe administrator of that system for details.Content preview: Dear Friend, My name is Mr.Joseph Abraham I have been diagnosedwith Esophageal cancer. It has defiled all forms of medical treatment, andright now I have only about a few months to live, according to medical experts.I have not particularly lived my life so well, as I never really cared foranyone(not even myself) but my business. Though I am very rich, I was neverGenerous, I was always hostile to people and only focused on my businessas that was the only thing I cared for. But now I regret all this, as I nowknow that there is more to life than just wanting to have or make all themoney in the world. I want God to be merciful to me and accept my soul so,I have decided to give alms to charity organizations, as I want this to beone of the last good deeds I do on earth. So far, I have distributed moneyto some charity organizations in the Pakistan, United states Katrina,Algeriaand Malaysia. Now that my health has deteriorated so badly, I cannot do thismyself anymore.If you are interested in helping me kindly reach me on myprivate email address which is josephabraham1955@live.co.uk God Bless YouMr David Blair. Email Address:josephabraham1955@live.co.uk [...] Content analysis details: (18.8 points, 5.0 required)pts rule name description---- ---------------------- --------------------------------------------------3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%[score: 1.0000]0.6 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)2.1 SUBJ_ALL_CAPS Subject is all capitals1.3 MISSING_HEADERS Missing To: header2.0 DEAR_CUSTOMER_MV BODY: Dear blah-blah-blah2.7 DEAR_FRIEND BODY: Dear Friend? That's not very dear!0.0 NORMAL_HTTP_TO_IP URI: Uses a dotted-decimal IP address in URL0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS4.5 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook-0.0 AWL AWL: From: address is in the auto white-list [x-aol-ip:] => 83.139.0.34 [to:] => undisclosed-recipients:; [x-scamdex-scores:] => S:90 P:64 A:64 L:59 E:64 G:59 [x-scamdex-classtype:] => S [x-scamdex-classscore:] => 90 [x-scamdex-totscore:] => 400 [x-scamdex-kw:] => Bless,God,IP address,\%,bank,business,cancer,charity,customer,esophageal,inc.,nigeria,report,software,trust,user [x-scamdex-em:] => josephabraham1955@live.co.uk,webmaster@vallex.am [x-scamdex-dir:] => C [x-scamdex-id:] => C1229049130.M107024P32300V [x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.