Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => hdmm@scamdex.com [delivery-date:] => Fri, 04 Mar 2011 05:28:08 -0800 [received:] => Array ( [0] => from 61-219-82-146.hinet-ip.hinet.net ([61.219.82.146] helo=step.sinfon.com.tw)by chester.loopbiz.com with esmtp (Exim 4.69)(envelope-from )id 1PvV39-0001sf-Ecfor hdmm@scamdex.com; Fri, 04 Mar 2011 05:28:08 -0800 [1] => from step.sinfon.com.tw (localhost [127.0.0.1])by step.sinfon.com.tw (Postfix) with ESMTP id EE0A585477A;Fri, 4 Mar 2011 21:07:56 +0800 (CST) [2] => from step.sinfon.com.tw (localhost [127.0.0.1])by step.sinfon.com.tw (Postfix) with ESMTP id C7A6185476A;Fri, 4 Mar 2011 21:07:52 +0800 (CST) ) [from:] => "Microsoft Cooperation" [reply-to:] => notice-board@qatar.io [subject:] => Dear Winner [date:] => Fri, 4 Mar 2011 21:07:52 +0800 [message-id:] => <20110304130756.M60256@microsoft.com> [x-mailer:] => OpenWebMail 2.52 20060502 [x-originatingip:] => 82.128.16.151 (chang) [mime-version:] => 1.0 [content-type:] => text/plain;charset=big5 [to:] => undisclosed-recipients:; [x-netstation-status:] => PASS [x-spam-status:] => No, score=2.3 [x-spam-score:] => 23 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "chester.loopbiz.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Congratulation!!!Your Email Has Won 420,000.00,Your emailaddress as indicated was drawn and attached to ticket number 008795727498with serial numbers BTD/9080648302/06 and drew the lucky numbers 14-21-25-39-40-47(20)Tofile for your claim Contact(MR.Garrick Oxford)EMAIL: notice-board@qatar.ioTEL:+44-703 5936 703 [...] Content analysis details: (2.3 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------3.0 DEAR_WINNER BODY: DEAR_WINNER0.1 TVD_RCVD_IP TVD_RCVD_IP1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)1.7 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist[URIs: qatar.io]0.4 RDNS_DYNAMIC Delivered to internal network by host withdynamic-looking rDNS0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain-3.0 KAM_LOTTO1 Likely to be a e-Lotto Scam Email3.3 LOTTERY_PH_004470 LOTTERY_PH_0044701.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.