Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Sun, 15 Sep 2013 00:07:29 -0700 [received:] => Array ( [0] => from f5mail-224-102.rediffmail.com ([114.31.224.102]:3556 helo=rediffmail.com)by lester.newsblaze.com with smtp (Exim 4.80.1)(envelope-from )id 1VL6Qa-0006mV-E9for submitted@scamdex.com; Sun, 15 Sep 2013 00:07:29 -0700 [1] => (qmail 6701 invoked by uid 510); 15 Sep 2013 07:07:25 -0000 [2] => from unknown 101.63.216.82 by rediffmail.com via HTTP; 15 Sep 2013 07:07:24 -0000 ) [comment:] => DomainKeys? See http://antispam.yahoo.com/domainkeys [domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=redf; d=rediffmail.com; b=D3aXDUd1laR2BxpQ7fGzIHyBaylpsejN0SLijaICSb+KN1vf5n+s3Z0gBK78D5NkrY0GbHveSnqieSv2lotJCgAr7qnY8KbjhlKg/w7QQ8/hF1BVxv6X6WdSKCG2DNg4MXUiWW0N6kdPIHvb36Q7vl988/gYQz1LhTWbSu1lGcc= ; [x-m-msg:] => asd54ad564ad7aa6sd5as6d5; a6da7d6asas6dasd77; 5dad65ad5sd; [x-ctch-spam:] => Unknown [x-ctch-vod:] => Unknown [x-ctch-flags:] => : 0 [x-ctch-refid:] => str=0001.0A150201.52355CAC.016E,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0 [x-redf-osen:] => carolinedevison4@rediffmail.com [date:] => 15 Sep 2013 07:07:24 -0000 [message-id:] => <20130915070724.6674.qmail@f5mail-224-102.rediffmail.com> [mime-version:] => 1.0 [reply-to:] => mariaphilip60@hotmail.com [to:] => "info@live.com" [sender:] => carolinedevison4@rediffmail.com [subject:] => =?utf-8?B?SSBORUVEIFlPVVIgSEVMUA==?= [from:] => mariaphilip60@hotmail.com [content-type:] => multipart/alternative;boundary="=_ed202f32c092d7c1d5f7ec6ddfe272ec" [x-spam-status:] => No, score=3.4 [x-spam-score:] => 34 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: FROM maria Philip . Dearest, With Due Respect And Humanity, I was compelled to write to you under a humanitarian ground. My name is maria Philip I was born in new York united state of America, I am married to Bishop Philip Bishop of st, Josephs Anglican church United Kingdom. We were married for 40 years without a child. and my husband  died after a Cardiac Arteries Operation. And Recently, My Doctor told me that I would not last for the next Five months due to my cancer problem (cancer of the lever and stroke). Before my husband died last year there is this sum of $3.5 Million Dollars that he deposited with the royal bank of Scotland here In United Kingdom. Presently this money is still in the Vault of the Bank. Having known my condition I decided to donate this fund to any good God fearing brother or sister that will utilize this fund the way I am going to instruct here in. I want somebody that will use this fund according to the desire of my late. Husband to help underprivileged people, orphanages, widows and propagating the word of God. I took this decision because I don't have any child that will inherit this fund, And I don't want in away where this money will be used in an Ungodly way. This is why I am taking this decision to hand you over this Fund. I am not afraid of death hence I know where I am going. I want you to always remember me in your daily prayers because of my upcoming Cancer Surgery. Write back as soon as possible any delay in your reply will give me room in sourcing another person for this same purpose, Hoping to read from you asap. God bless you as you listing to the voice of reasoning, May God met you at any point of your needs. [...] Content analysis details: (3.4 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mariaphilip60[at]hotmail.com)-0.0 SPF_HELO_PASS SPF: HELO matches SPF record-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (mariaphilip60[at]hotmail.com)-2.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (carolinedevison4[at]rediffmail.com) 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: rediffmail.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 T_REMOTE_IMAGE Message contains an external image 1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 3.7 MONEY_FRAUD_5 Lots of money and many fraud phrases 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.