Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => <008@buttler.onmicrosoft.com> [envelope-to:] => scam@scamdex.com [delivery-date:] => Mon, 11 Nov 2013 00:55:12 -0800 [received:] => Array ( [0] => from na01-by2-ndr.ptr.protection.outlook.com ([207.46.108.104]:5450 helo=na01-by2-obe.outbound.protection.outlook.com)by lester.newsblaze.com with esmtps (TLSv1:AES128-SHA:128)(Exim 4.80.1)(envelope-from <008@buttler.onmicrosoft.com>)id 1VfnH5-0005J6-59for scam@scamdex.com; Mon, 11 Nov 2013 00:55:12 -0800 [1] => from BL2PR05MB066.namprd05.prod.outlook.com (10.255.232.19) byBL2PR05MB050.namprd05.prod.outlook.com (10.255.228.146) with Microsoft SMTPServer (TLS) id 15.0.810.5; Mon, 11 Nov 2013 08:55:09 +0000 [2] => from [116.203.110.64] (116.203.110.64) byBL2PR05MB066.namprd05.prod.outlook.com (10.255.232.19) with Microsoft SMTPServer (TLS) id 15.0.810.5; Mon, 11 Nov 2013 08:55:08 +0000 ) [content-type:] => text/plain; charset="iso-8859-1" [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-description:] => Mail message body [subject:] => I DID NOT FORGET YOUR PAST EFFORTS [to:] => Recipients <008@buttler.onmicrosoft.com> [from:] => Barrister Benson <008@buttler.onmicrosoft.com> [date:] => Mon, 11 Nov 2013 09:54:44 +0100 [reply-to:] => [message-id:] => <57ff46e8-d296-43d2-8e31-9639a6e8700f@BL2PR05MB066.namprd05.prod.outlook.com> [x-originating-ip:] => [116.203.110.64] [x-clientproxiedby:] => BY2PR06CA001.namprd06.prod.outlook.com (10.255.247.11) ToBL2PR05MB066.namprd05.prod.outlook.com (10.255.232.19) [x-forefront-prvs:] => 0027ED21E7 [x-forefront-antispam-report:] => SFV:SPM;SFS:(189002)(199002)(66066001)(325944007)(85306002)(56776001)(54316002)(76482001)(59766001)(77982001)(23756003)(77096001)(42186004)(51856001)(56816003)(46102001)(76576001)(65816001)(83072001)(80022001)(64872004)(50466002)(87976001)(74876001)(31686002)(74366001)(81816001)(87266001)(63696002)(79102001)(53256004)(47776003)(81686001)(74706001)(81342001)(80976001)(551934002)(19580405001)(83322001)(19580395003)(47976001)(50986001)(49866001)(47736001)(74662001)(74316001)(33646001)(4396001)(76786001)(76796001)(54356001)(76176001)(81542001)(47446002)(43066001)(74502001)(69226001)(268104001);DIR:OUT;SFP:1501;SCL:9;SRVR:BL2PR05MB066;H:[116.203.110.64];CLIP:116.203.110.64;FPR:;RD:InfoNoRecords;MX:1;A:0;LANG:en; [x-originatororg:] => buttler.onmicrosoft.com [x-spam-status:] => No, score=3.0 [x-spam-score:] => 30 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: I NEVER FORGET YOU How are you with your family? I hope fine. I'm happy to inform you about my success in getting those funds from BOA ( Bank of Africa ) transferred under the cooperation of a new partner from Venezuela, Presently i'm in Venezuela for investment project, meanwhile I didn't forget your past efforts to assist me in transferring those funds despite that it failed us some how. Now contact my secretary in Benin Republic West Africa through his e-mail id ( mikelhorton1@live.com.mx ) ask him to send you the A.T.M VISA CARD worths sum of ($850,000.00 US Dollars) which I kept for your compensation for all the past efforts and attempts to assist me in this transaction. so feel free and get in touch with my secretary Mr.Mike Horton he will send the A.T.M to you. Regards, Barrister Benson [...] Content analysis details: (3.0 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 AXB_X_ORIG_OMNIMS outbound.protection.outlook.com forwarders-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: live.com.mx] 0.0 LOTS_OF_MONEY Huge... sums of money 2.0 MONEY_FRAUD_3 Lots of money and several fraud phrases 3.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.