Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Sat, 25 Aug 2012 13:50:58 -0700 [received:] => Array ( [0] => from hermes.keris.or.kr ([210.102.121.33]:52338 helo=ephesus.keris.or.kr)by lester.newsblaze.com with esmtp (Exim 4.77)(envelope-from )id 1T5NJn-0005LZ-J0for submissions@scamdex.com; Sat, 25 Aug 2012 13:50:58 -0700 [1] => from [127.0.0.1] ([127.0.0.1]) by ephesus.keris.or.kr ([127.0.0.1]) with ESMTP id 2012082604:40:57:306816.22313.91098000 for ; Sun, 26 Aug 2012 04:40:57 +0900 (KST) ) [x-priority:] => 3 [message-id:] => <2277898.1345923645826.JavaMail.root@hermes> [date:] => Sun, 26 Aug 2012 04:40:45 +0900 (KST) [from:] => "MR.ALEX GOOD WILL" [reply-to:] => "MR.ALEX GOOD WILL" [to:] => postmaster@keris.or.kr [subject:] => PAYMENT [mime-version:] => 1.0 [content-type:] => multipart/alternative; boundary="----=_Part_200188_32595505.1345923645827" [x-terrace-spammark:] => WHITE (SR:16.99) (by Terrace) [x-spam-status:] => No, score=1.3 [x-spam-score:] => 13 [x-spam-bar:] => + [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Re: Bank Payment Notification/Wire Transfer Approvals We wish to inform you that you have been recommended by my Bank, to pay you the sum of US$2,500,000.00 which is based on the understanding and current proposed legislative payment agreement. [...] Content analysis details: (1.3 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain-0.0 SPF_PASS SPF: sender matches SPF record-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME 0.0 HTML_MESSAGE BODY: HTML included in message 0.7 MPART_ALT_DIFF BODY: HTML and text parts are different 2.6 HK_NAME_MR_MRS HK_NAME_MR_MRS 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.