Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Fri, 09 Sep 2011 00:41:07 -0700 [received:] => Array ( [0] => from f5mail-224-153.rediffmail.com ([114.31.224.153] helo=rediffmail.com)by lester.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1R1vhy-0005nD-E1for submissions@scamdex.com; Fri, 09 Sep 2011 00:41:07 -0700 [1] => (qmail 28748 invoked by uid 510); 9 Sep 2011 07:41:01 -0000 [2] => from unknown 116.203.42.176 by rediffmail.com via HTTP; 09 Sep 2011 07:41:01 -0000 ) [comment:] => DomainKeys? See http://antispam.yahoo.com/domainkeys [domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=redf; d=rediffmail.com; b=omIys7zAExWpQzrFELF4FLvGlfBGkHjJ5K9fWG61zDANTlPEIZ9f+P1/1EAbzxIuBmFrs0NdROC8edrjbIsy3gwgYU2KUznmaC8iHU0esD+ixgrrOoOEDURjfdjZI8AcRVXQlRX5DX9aHcrqNZzwrGhu8chegfYNyBB75oRsWQ0= ; [x-m-msg:] => asd54ad564ad7aa6sd5as6d5; a6da7d6asas6dasd77; 5dad65ad5sd; [x-ctch-spam:] => Unknown [x-ctch-vod:] => Unknown [x-ctch-flags:] => : 0 [x-ctch-refid:] => str=0001.0A150201.4E69C30D.00DB,ss=1,re=0.000,fgs=0 [x-redf-osen:] => sgtdouglas@rediffmail.com [date:] => 9 Sep 2011 07:41:01 -0000 [message-id:] => <20110909074101.28732.qmail@f5mail-224-153.rediffmail.com> [mime-version:] => 1.0 [reply-to:] => sgt.douglasjoe@w.cn [to:] => "info " [sender:] => sgtdouglas@rediffmail.com [subject:] => =?utf-8?B?aSBhbSBTZ3QuIERvdWdsYXMgSm9lM1JEIElORkFOVFJZIERJVklTSU9O?= [from:] => sgt.douglasjoe@w.cn [content-type:] => multipart/alternative;boundary="=_abeb3dc760252f43e758ec5e751e8666" [x-spam-status:] => No, score=0.5 [x-spam-score:] => 5 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: i am Sgt. Douglas Joe(3RD INFANTRY DIVISION). I am an Americansoldier serving in military with the army’s 3rd infantry division. am desperateneeded of assistance, I have summed up courage to contact you. I found yourcontact particulars in an address journal of a career builders database.I am seeking your kind assistance to move the sum of (Four million five hundredthousand pounds ) out of the total sum of ten million pounds if I can beassured that my share will be safe in your care until I and my partner cometo you ,in person .no risk involved. My partner and i' we need a good andreliable person, who we can trust to actualize this dream. The money is fromoil process and its legent . We intend moving it by diplomatic means to youon to a safe and secured location of your choice. [...] Content analysis details: (0.5 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(sgt.douglasjoe[at]w.cn)-0.0 SPF_HELO_PASS SPF: HELO matches SPF record-0.0 SPF_PASS SPF: sender matches SPF record-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words0.0 HTML_MESSAGE BODY: HTML included in message0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image0.0 LOTS_OF_MONEY Huge... sums of money0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay0.0 T_REMOTE_IMAGE Message contains an external image0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.