Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => Submissions@scamdex.com [delivery-date:] => Tue, 01 Nov 2011 09:33:49 -0700 [received:] => Array ( [0] => from f5mail-224-105.rediffmail.com ([114.31.224.105] helo=rediffmail.com)by lester.newsblaze.com with smtp (Exim 4.69)(envelope-from )id 1RLHHX-00041O-K1for Submissions@scamdex.com; Tue, 01 Nov 2011 09:33:49 -0700 [1] => (qmail 4087 invoked by uid 0); 29 Oct 2011 18:06:09 -0000 [2] => from unknown 115.242.80.105 by rediffmail.com via HTTP; 29 Oct 2011 18:06:08 -0000 ) [comment:] => DomainKeys? See http://antispam.yahoo.com/domainkeys [domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=redf; d=rediffmail.com; b=lvwxzFEpxJ+ETxo5cOUDeHnAeE6L1DmuCEfy4see7Pm0N9uf+ZQ56k9ycTQJ96cXd1L1yTO8dlGNz7q8d8yfSzVJdCQhOSVP9Kzh9g2wjGP+lN1Y+GrJBwDF1DNEqfDhRJKC6iyin18pYKsB9R5KcpIZkzckAm0bSlVdROiYhzw= ; [x-m-msg:] => asd54ad564ad7aa6sd5as6d5; a6da7d6asas6dasd77; 5dad65ad5sd; [x-ctch-spam:] => Unknown [x-ctch-vod:] => Unknown [x-ctch-flags:] => : 0 [x-ctch-refid:] => str=0001.0A150204.4EAC4091.004E,ss=1,re=2.599,fgs=0 [x-redf-osen:] => kelvinjeo4u@rediffmail.com [date:] => 29 Oct 2011 18:06:08 -0000 [message-id:] => <20111029180608.4032.qmail@f5mail-224-105.rediffmail.com> [mime-version:] => 1.0 [reply-to:] => nishasheetal4u@hotmail.com [to:] => "nishasheetal4u@hotmail.com" [sender:] => kelvinjeo4u@rediffmail.com [subject:] => =?utf-8?B?VEhBTktTIEZPUiBZT1VSIENPTkNFUk4=?= [from:] => nishasheetal4u@hotmail.com [content-type:] => multipart/alternative;boundary="=_ff089ff9661eec11884bc80d211e40e1" [x-spam-status:] => No, score=-4.6 [x-spam-score:] => -45 [x-spam-bar:] => ---- [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: My beloved Greetings to you, I know that you will receivethis message as a surprise but i want you to read carefully and get backto me as soon as possible. I am Mrs. Nisha Sheetal 37 year’s old woman fromIndia. I married to late Dr. Praveen Kumar who was a Cocoa Merchant and anOil Explorer in London for many years before he died in the year 2009.   Imarried to my husband for Fifteen years without a child and since the deathof my husband I have been battling with cancer and stroke. Before the deathof my husband he has a the sum of $5.000.000.00 (Five Million United StatesDollars).deposited with a trunk box in a security company here in London.However, due to my bad health situation occasioned by cancer of the lungs,I wish you to do me a favour to receive this fund into your destination anduse it according to my instructions and advice. According to my doctor,my medical report quotes a very short life due to some damages in my lungs.Being aware of this, I decided to contact you after going through your profileon internet to help me receive the total amount and donate it to the developmentof orphanages, widows, and any charity organization within you.  Kindlyget back to me immediately through the following email for more details;(nishasheetal4u@hotmail.com )  Yours sincerely Mrs. Nisha Sheetal.[...] Content analysis details: (-4.6 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, notrust[114.31.224.105 listed in list.dnswl.org]-3.0 MILLION_USD BODY: Talks about millions of dollars0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(nishasheetal4u[at]hotmail.com)-0.0 SPF_HELO_PASS SPF: HELO matches SPF record-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:'0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 T_REMOTE_IMAGE Message contains an external image0.4 MONEY_FRAUD_5 Lots of money and many fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.