Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scamdex_spamfree_contact_1@scamdex.com [delivery-date:] => Sat, 25 Jun 2011 06:07:07 -0700 [received:] => Array ( [0] => from blu0-omc4-s17.blu0.hotmail.com ([65.55.111.156])by chester.loopbiz.com with esmtp (Exim 4.69)(envelope-from )id 1QaSZg-0000fg-8Bfor scamdex_spamfree_contact_1@scamdex.com; Sat, 25 Jun 2011 06:07:06 -0700 [1] => from BLU0-SMTP35 ([65.55.111.135]) by blu0-omc4-s17.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sat, 25 Jun 2011 06:07:00 -0700 [2] => from DELL-PC ([212.52.152.113]) by BLU0-SMTP35.phx.gbl over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Sat, 25 Jun 2011 06:06:57 -0700 ) [x-originating-ip:] => [212.52.152.113] [x-originating-email:] => [karem77ahmed67@msn.com] [message-id:] => [from:] => karem ahmed [to:] => ".." <..> [x-mailer:] => Barca 2.8 (4400) - EXPIRED EVALUATION VERSION [x-url:] => http://www.pocomail.com/ [reply-to:] => mrkaremahmed@voila.fr [date:] => Sat, 25 Jun 2011 14:02:13 +0100 [subject:] => URGENT RESPOND......... [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="60223807-POCO-73026237" [x-originalarrivaltime:] => 25 Jun 2011 13:06:58.0436 (UTC) FILETIME=[C3E08C40:01CC3338] [sender:] => [x-spam-status:] => No, score=3.4 [x-spam-score:] => 34 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Greetings to you, For your kind attention, I need your urgentassistance in transferring the sum of $11.3million to your private account.This money has been dormant for years in our Bank without claim. I want torelease the money to you as the beneficiary to our deceased customer(theaccount owner) who died along with her family since 31 January 2000. By indicatingyour interest I will send you the full details on how the business will beexecuted. Please respond urgently and delete if you are not interested. Bestwishes to you and your family. [...] Content analysis details: (3.4 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net[Blocked - see ]-3.0 URG_BIZ BODY: Contains urgent matter1.2 TO_MALFORMED To: has a malformed address0.0 FREEMAIL_FROM Sender email is freemail (karem77ahmed67[at]msn.com)0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server[212.52.152.113 listed in dnsbl.sorbs.net]-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (karem77ahmed67[at]msn.com)0.0 HTML_MESSAGE BODY: HTML included in message0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars0.0 LOTS_OF_MONEY Huge... sums of money0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay1.5 TO_IN_SUBJ To address is in Subject0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.