Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => admin@scamdex.com [delivery-date:] => Thu, 07 Jul 2016 06:05:29 -0400 [received:] => Array ( [0] => from oms.grupocavalca.com.br ([200.195.164.145]:56546)by edie.newsblaze.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)(Exim 4.87)(envelope-from )id 1bL6BV-0003bs-3Nfor admin@scamdex.com; Thu, 07 Jul 2016 06:05:29 -0400 [1] => by oms.grupocavalca.com.br (Postfix, from userid 106)id 5B2E8B07F0; Thu, 7 Jul 2016 07:03:12 -0300 (BRT) [2] => from oms.grupocavalca.com.br (unknown [192.168.100.118])(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))(No client certificate requested)by oms.grupocavalca.com.br (Postfix) with ESMTPS id 0D4B7B07E2;Thu, 7 Jul 2016 07:02:59 -0300 (BRT) [3] => from User (176.61.142.192) by mail.grupocavalca.com.br(192.168.100.118) with Microsoft SMTP Server id 14.1.438.0; Thu, 7 Jul 201607:02:58 -0300 ) [x-spam-checker-version:] => OSTEC Anti-Spam on oms.grupocavalca.com.br [x-spam-level:] => [x-spam-status:] => No, score=-81.5 required=3.8 tests=ADVANCE_FEE_3_NEW_MONEY,AXB_XMAILER_MIMEOLE_OL_024C2,BAYES_00,FORGED_MUA_OUTLOOK,FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,FSL_CTYPE_WIN1251,FSL_HELO_NON_FQDN_1,FSL_NEW_HELO_USER,LOTS_OF_MONEY,NSL_RCVD_FROM_USER,RCVD_IN_SBL,RCVD_IN_XBL,USER_IN_WHITELIST,_REMETENTE_MEU_DOMINIO,_REMETENTE_MEU_DOMINIO_RP autolearn=no autolearn_force=no version=3.4.0 [x-spam-report:] => * -100 USER_IN_WHITELIST From: address is in the user's white-list* 0.0 FSL_HELO_NON_FQDN_1 No description available.* 2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam* 3.0 NSL_RCVD_FROM_USER Received from User* 0.0 _REMETENTE_MEU_DOMINIO_RP No description available.* 0.0 _REMETENTE_MEU_DOMINIO No description available.* 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit* (mohamed.abacha2016[at]yandex.com)* -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%* [score: 0.0000]* 0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL* [176.61.142.192 listed in zen.spamhaus.org]* 0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL* 0.0 LOTS_OF_MONEY Huge... sums of money* 2.0 FSL_NEW_HELO_USER Spam's using Helo and User* 4.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait* 2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From* 1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook* 3.5 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money [reply-to:] => [from:] => Mohamed Abacha [subject:] => Hello Dear, [date:] => Thu, 7 Jul 2016 03:02:03 -0700 [mime-version:] => 1.0 [content-type:] => text/plain; charset="Windows-1251" [content-transfer-encoding:] => 7bit [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Outlook Express 6.00.2600.0000 [x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2600.0000 [message-id:] => [to:] => Undisclosed recipients:; [x-originating-ip:] => [176.61.142.192] )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.