Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Wed, 27 Mar 2013 13:58:19 -0700 [received:] => Array ( [0] => from sys02.mail.msu.edu ([35.9.75.102]:39317)by lester.newsblaze.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)(Exim 4.80)(envelope-from )id 1UKxQJ-0005Fd-E8for submissions@scamdex.com; Wed, 27 Mar 2013 13:58:19 -0700 [1] => from 199-255-210-176.anchorfree.com ([199.255.210.176] helo=[197.108.246.38]) Authenticated ID: peter970 by sys02.mail.msu.edu with esmtpsa (Exim 4.75 #3)(TLSv1:AES256-SHA:256)id 1UKxQ3-0007ol-PI; Wed, 27 Mar 2013 16:58:04 -0400 ) [dkim-signature:] => v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=msu.edu; s=mail;h=Reply-To:Date:From:To:Subject:Content-Description:Content-Transfer-Encoding:MIME-Version:Content-Type; bh=pf1f4ltuH9T7fQ+kuVmEDr++9uqlZ3OHjuEuCQS4GI0=;b=oXrgMkObbuRF25dDs5JQfHA3MMW9/d5fZpASDwV2nB9wzIEX37b4jYWFBqiXppW1L408NPXFyPPQxS0ragHicPSS7527YFeIMJMSrCRB8K5ko14L2V20npu8+piTdiYmT2Ft36/FF/VTwJ5e9zA2xu7PWQXpa20i3LLmElkFKOw=; [content-type:] => text/plain; charset="iso-8859-1" [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-description:] => Mail message body [subject:] => interesting business proposal [to:] => Recipients [from:] => tjoa@hotmail.com [date:] => Wed, 27 Mar 2013 21:57:41 +0100 [reply-to:] => ttjoa@hotmail.com [x-virus:] => None found by Clam AV [x-spam-status:] => No, score=2.2 [x-spam-score:] => 22 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Good day friend, this is a personal email directed to you for your consideration alone,I request that it remain and be treated as such only. Please bear with me for now Am a banker with HSBC here in Malaysia I have an interesting business proposal for you that will be of immense benefit to both of us. Although this may be hard for you to believe, we stand to gain 7.2 million USD between us in a matter of days. Please grant me the benefit of doubt and hear me out. I need you to signify your interest by replying to this email on my ID here ttjoa@hotmail.com most importantly; I will need you to promise to keep whatever you learn from me between us even if you decide not to go along with me. I will make more details available to you on receipt of a positive response from you. [...] Content analysis details: (2.2 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 3.1 HK_SCAM_S7 BODY: HK_SCAM_S7-3.0 MILLION_USD BODY: Talks about millions of dollars 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (tjoa[at]hotmail.com) 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: msu.edu] 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.