Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => jerry@scamdex.com [delivery-date:] => Thu, 13 Jan 2011 21:15:50 -0800 [received:] => Array ( [0] => from [84.20.68.226] (helo=abmc.org.al)by chester.loopbiz.com with esmtp (Exim 4.69)(envelope-from )id 1Pdc0r-00046b-Dmfor jerry@scamdex.com; Thu, 13 Jan 2011 21:15:50 -0800 [1] => from WorldClient by kash.org.al(MDaemon.PRO.v8.0.3.R)with ESMTP id md50000271084.msgfor ; Fri, 14 Jan 2011 05:13:43 +0100 [2] => from [41.190.2.66] via WorldClient with HTTP;Fri, 14 Jan 2011 05:13:40 +0100 ) [date:] => Fri, 14 Jan 2011 05:13:40 +0100 [from:] => "Enver Ferizaj" [to:] => [reply-to:] => mr.markrollinsoffice@yahoo.com.hk [subject:] => CONGRATULATION,YOU HAVE WON US$ 1,000,000 MILLION DOLLARS ATM CARD [mime-version:] => 1.0 [content-type:] => text/plain [message-id:] => [x-mailer:] => WorldClient 8.0.3 [x-authenticated-sender:] => EFerizaj@kash.org.al [x-spam-processed:] => abmc.org.al, Fri, 14 Jan 2011 05:13:43 +0100(not processed: message from valid local sender) [x-return-path:] => EFerizaj@kash.org.al [x-mdaemon-deliver-to:] => jerry@scamdex.com [x-mdav-processed:] => abmc.org.al, Fri, 14 Jan 2011 05:13:44 +0100 [x-spam-subject:] => ***SPAM*** CONGRATULATION,YOU HAVE WON US$ 1,000,000 MILLION DOLLARS ATM CARD [x-spam-status:] => Yes, score=4.4 [x-spam-score:] => 44 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Free Internet Lottery 5Th Floor Estate avenue, Abuja, NigeriaTickets No. lotto/2011/8707-01/ATM Dear Winner, Your e-mail address has subsequentlywon you the sum of US$ 1,000,000 Million Dollars ATM Card From the Free internetlottery, To free lotto Tickets Number#. lotto/2011/8707-01/ATM. You can visitour website on http://www.freeinternetlottery.com/terms.php Please contactour Release Agent Mr. Mark Rollins with your following details for for claimsprocedure Email;mr.markrollinsoffice@yahoo.com.hk Cell Phone: +234-813-565-3650[...] Content analysis details: (4.4 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 BILLION_DOLLARS BODY: Talks about lots of money-3.0 DEAR_WINNER BODY: DEAR_WINNER-2.0 SUBJ_ALL_CAPS Subject is all capitals0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 LOTS_OF_MONEY Huge... sums of money1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC1.3 RDNS_NONE Delivered to internal network by a host with no rDNS3.5 FILL_THIS_FORM_LONG Fill in a form with personal information0.0 FILL_THIS_FORM Fill in a form with personal information2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From0.0 MONEY_LOTTERY Lots of money from a lottery0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form0.0 MONEY_FORM Lots of money if you fill out a form1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases0.5 FORM_FRAUD_3 Fill a form and several fraud phrases [x-spam-flag:] => YES )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.