Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Tue, 09 Jul 2013 04:51:59 -0700 [received:] => Array ( [0] => from smtp303.alice.it ([82.57.200.119]:37308)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1UwWSc-0005Hn-DDfor submissions@scamdex.com; Tue, 09 Jul 2013 04:51:59 -0700 [1] => from feu18-alice (82.57.204.73) by smtp303.alice.it (8.6.060.26) id 51DBCDB4000FBB14; Tue, 9 Jul 2013 13:51:04 +0200 [2] => from (159.253.145.183) by wmlight.rossoalice.alice.it; Tue, 9 Jul 2013 13:51:04 +0200 ) [message-id:] => <13fc34546f8.marziamazzone@alice.it> [date:] => Tue, 9 Jul 2013 13:51:04 +0200 (CEST) [from:] => MR Frank Ben [reply-to:] => union_wetern@yahoo.com.hk [subject:] => IMPORTANT TRANSFER NOTICE [mime-version:] => 1.0 [content-type:] => text/plain;charset="UTF-8" [content-transfer-encoding:] => 7bit [x-originating-ip:] => 159.253.145.183 [x-spam-status:] => No, score=1.0 [x-spam-score:] => 10 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: How are doing today? We have started transferring your $4.500,000usd through this Western Union Office today according to the instruction to be transferring $5000Usd to your name daily until you receive your $4.500,000.00USD [...] Content analysis details: (1.0 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (marziamazzone[at]alice.it)-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.3 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.com.hk]-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.1 MONEY_FORM_SHORT Lots of money if you fill out a short form [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.