Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Mon, 26 Aug 2013 10:02:24 -0700 [received:] => Array ( [0] => from monsun.xpx.pl ([46.29.17.244]:53595)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1VE0BL-0007qy-4Lfor submissions@scamdex.com; Mon, 26 Aug 2013 10:02:24 -0700 [1] => from localhost ([127.0.0.1]:54826)by monsun.xpx.pl with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80.1)(envelope-from )id 1VDzwh-0000jt-Hk; Mon, 26 Aug 2013 18:47:15 +0200 [2] => from 41.71.177.114 ([41.71.177.114]) by monsun.xpx.pl (HordeFramework) with HTTP; Mon, 26 Aug 2013 18:44:51 +0200 ) [message-id:] => <20130826184451.16812c1faeryej2b@monsun.xpx.pl> [date:] => Mon, 26 Aug 2013 18:44:51 +0200 [from:] => Abu Bakr [reply-to:] => bbubakb@yahoo.co.jp [to:] => undisclosed-recipients:; [subject:] => ABU BAKR FROM SYRIA [mime-version:] => 1.0 [content-type:] => text/plain;charset=ISO-8859-1;DelSp="Yes";format="flowed" [content-disposition:] => inline [content-transfer-encoding:] => 7bit [user-agent:] => Internet Messaging Program (IMP) H3 (4.3.11) [x-outgoing-spam-status:] => No, score=4.1 [x-antiabuse:] => Array ( [0] => This header was added to track abuse, please include it with any abuse report [1] => Primary Hostname - monsun.xpx.pl [2] => Original Domain - scamdex.com [3] => Originator/Caller UID/GID - [47 12] / [47 12] [4] => Sender Address Domain - yahoo.com ) [x-get-message-sender-via:] => monsun.xpx.pl: authenticated_id: infoeken/only user confirmed/virtual account not confirmed [x-source:] => [x-source-args:] => [x-source-dir:] => [x-from-rewrite:] => rewritten was: [ab_bakr26@yahoo.com], actual sender is not the same system user [x-spam-status:] => No, score=0.3 [x-spam-score:] => 3 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: Good day, I am Abu Bakr, a rebel leader here in Aleppo Syria, I and my second in command came across some money that was parked in a trunk box and the money is worth over $ 13 million, in one of President Bashar al-Assad?s allies house and we have moved the money out of the war zone to a security office as a medical equipment, but we are looking for a trust worthy person that we can keep the above said money with him or her for safe keeping pending when we are going to finish the fight here in my country Syria. [...] Content analysis details: (0.3 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ab_bakr26[at]yahoo.com)-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (ab_bakr26[at]yahoo.com) 0.0 LOTS_OF_MONEY Huge... sums of money 2.0 MONEY_FROM_41 Lots of money from Africa [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.