Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mxw@o7e.net [delivery-date:] => Fri, 01 May 2015 22:27:18 -0700 [received:] => Array ( [0] => from mails.iconnect.zm ([196.12.12.75]:36588 helo=mail.iconnect.zm)by bigcat.newsblaze.com with esmtp (Exim 4.85)(envelope-from )id 1YoPx9-0001xe-0rfor mxw@o7e.net; Fri, 01 May 2015 22:27:18 -0700 [1] => from zcs-cluster2.iconnect.zm (zcs2.iconnect.zm [196.12.12.91])by mail.iconnect.zm (Postfix) with ESMTP id 6F901119F42;Sat, 2 May 2015 07:13:31 +0200 (CAT) [2] => from localhost (localhost [127.0.0.1])by zcs-cluster2.iconnect.zm (Postfix) with ESMTP id 522A31884056;Sat, 2 May 2015 07:13:31 +0200 (CAT) [3] => from zcs-cluster2.iconnect.zm ([127.0.0.1])by localhost (zcs-cluster2.iconnect.zm [127.0.0.1]) (amavisd-new, port 10032)with ESMTP id VkKDFfrfOxxF; Sat, 2 May 2015 07:13:31 +0200 (CAT) [4] => from localhost (localhost [127.0.0.1])by zcs-cluster2.iconnect.zm (Postfix) with ESMTP id 18EBA1884028;Sat, 2 May 2015 07:13:30 +0200 (CAT) [5] => from zcs-cluster2.iconnect.zm ([127.0.0.1])by localhost (zcs-cluster2.iconnect.zm [127.0.0.1]) (amavisd-new, port 10026)with ESMTP id RuOl9HXtR7W3; Sat, 2 May 2015 07:13:30 +0200 (CAT) [6] => from [10.11.100.61] (unknown [41.203.67.166])by zcs-cluster2.iconnect.zm (Postfix) with ESMTPSA id 1EE5F18840AE;Sat, 2 May 2015 07:13:19 +0200 (CAT) ) [x-virus-scanned:] => amavisd-new at zcs-cluster2.iconnect.zm [content-type:] => text/plain; charset="iso-8859-1" [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-description:] => Mail message body [subject:] => DR OGBODU [to:] => Recipients [from:] => "OGBODU TEMPLE" [date:] => Fri, 01 May 2015 22:13:03 -0700 [reply-to:] => dr.ogbodu77@gmail.com [x-antivirus:] => avast! (VPS 130228-0, 02/27/2013), Outbound message [x-antivirus-status:] => Clean [message-id:] => <20150502051320.1EE5F18840AE@zcs-cluster2.iconnect.zm> [x-spam-status:] => No, score=3.7 [x-spam-score:] => 37 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "bigcat.newsblaze.com",has NOT identified this incoming email as spam. The originalmessage has been attached to this so you can view it or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: GET YOUR LOVED ONCE BACK(ex). lost love spells, psychic, herbalist healer, I helped people to solve their marriages, relationships and love problems with my powerful love spell. I must humbly say that I have a very high success rate for the following circumstances: (1) Get your lost lover back(ex) (2) Capture the heart of the one you love (3) money spell (4) you want to no if your partner is cheating on you (5) see what your future holds for you. (6) To break a relationship and return to your lover (7) Make the bond of love between you and the one you love strong and unbreakable (8) Marry the love of your life (9) How to get scammer's and you want to recover you lost money. (10) Divorce spell (11) Make your business flourish 12)(Barrenness) if you are looking for a child 13) You want to be promoted in your office. DR OGBODU ======================================== EMAIL ogbodu1@blumail.org [...] Content analysis details: (3.7 points, 4.5 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ogbodu.spelltemple7[at]gmail.com) 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: blumail.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (dr.ogbodu77[at]gmail.com) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (ogbodu.spelltemple7[at]gmail.com) 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.