Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com,submissions@scamdex.com [delivery-date:] => Sun, 04 Nov 2012 01:11:37 -0700 [received:] => Array ( [0] => from mx1.sainet.co.za ([197.221.165.50]:44987)by lester.newsblaze.com with esmtps (TLSv1:AES256-SHA:256)(Exim 4.80)(envelope-from )id 1TUvIt-0006XZ-A2; Sun, 04 Nov 2012 01:11:37 -0700 [1] => from [197.221.160.2] (helo=sainet.co.za)by mx1.sainet.co.za with esmtp (Exim 4.76)(envelope-from )id 1TUvHT-00066G-OD; Sun, 04 Nov 2012 10:10:08 +0200 [2] => from 197.221.160.2 [197.221.160.2] by sainet.co.za with ESMTP (SMTPD-10.0) id A1B70618; Sun, 04 Nov 2012 10:05:11 +0200 ) [to:] => [cc:] => [date:] => Sun, 04 Nov 2012 08:05:11 GMT [mime-version:] => 1.0 [from:] => "Margaret Mavinbella" [subject:] => My Donation to help less privileged. [content-type:] => multipart/mixed; boundary="------------Boundary-00=_EORXY1AQBXQ8F85CIOHQ" [message-id:] => <20121104100574.SM08116@[197.221.160.2]> [x-spam-score:] => Array ( [0] => 0.4 (/) [1] => 9 ) [x-spam-report:] => Spam detection software, running on the system "mx1", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, see@@CONTACT_ADDRESS@@ for details.Content preview: Dearest Be-love One, My decision to contact you today is because I got a reference about you from a friend when I was sharing my opinion about my heart desire. I was recently diagnosed with Pancreatic Cancer and wish to liberally donate my entire savings USD$19.2Million Dollars to you for use in projects that will support development and humanitarian causes within your community to help the less privileged. If I am pleased with your response, I will gladly instruct the release of my donation to you. Accept my warm regards and remain blessed. Ms. Margaret Mavinbella margaretmavibella@yahoo.com My Donation to help less privileged. [...] Content analysis details: (0.4 points, 6.3 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 DOS_RCVD_IP_TWICE_B Received from the same IP twice in a row (only one external relay) 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (margaretmavibella[at]yahoo.com)-4.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 1.6 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 0.0 HTML_MESSAGE BODY: HTML included in message 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5048] 0.0 LOTS_OF_MONEY Huge... sums of money 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL 0.0 TO_NO_BRKTS_NORDNS To: misformatted and no rDNS [x-spam-status:] => No, score=0.9 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Dearest Be-love One, My decision to contact you today is because I got a reference about you from a friend when I was sharing my opinion about my heart desire. I was recently diagnosed with Pancreatic Cancer and wish to liberally donate my entire savings USD$19.2Million Dollars to you for use in projects that will support development and humanitarian causes within your community to help the less privileged. If I am pleased with your response, I will gladly instruct the release of my donation to you. Accept my warm regards and remain blessed. Ms. Margaret Mavinbella margaretmavibella@yahoo.com My Donation to help less privileged. [...] Content analysis details: (0.9 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (margaretmavibella[at]yahoo.com) 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 LOTS_OF_MONEY Huge... sums of money [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.