Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Thu, 01 Oct 2015 01:46:40 -0700 [received:] => Array ( [0] => from pc165.renyi.hu ([193.224.79.165]:49282 helo=hemues.com)by bigcat.newsblaze.com with esmtp (Exim 4.85)(envelope-from )id 1ZhZVg-0008IW-Bxfor scam@scamdex.com; Thu, 01 Oct 2015 01:46:40 -0700 [1] => by hemues.com (Postfix, from userid 2222)id 3887A8E2C7F; Thu, 1 Oct 2015 09:58:14 +0200 (CEST) [2] => from User (unknown [167.88.9.87])by hemues.com (Postfix) with ESMTPA id 52E1985DFDF;Thu, 1 Oct 2015 09:45:14 +0200 (CEST) ) [x-spam-checker-version:] => SpamAssassin 3.4.0 (2014-02-07) on Hemues-server [x-spam-flag:] => YES [x-spam-level:] => ************ [x-spam-status:] => Yes, score=12.9 required=5.0 tests=ALL_TRUSTED,AXB_XMAILER_MIMEOLE_OL_024C2,DKIM_ADSP_CUSTOM_MED,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,FREEMAIL_FROM,FREEMAIL_REPLYTO,FROM_MISSPACED,FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT,FROM_MISSP_USER,FROM_MISSP_XPRIO,FSL_CTYPE_WIN1251,FSL_NEW_HELO_USER,HTML_MESSAGE,MALFORMED_FREEMAIL,MIME_HTML_ONLY,MISSING_HEADERS,MISSING_MID,NML_ADSP_CUSTOM_MED,NSL_RCVD_FROM_USER,REPLYTO_WITHOUT_TO_CC,TO_NO_BRKTS_FROM_MSSP,T_FROM_MISSP_DKIM autolearn=no autolearn_force=noversion=3.4.0 [x-spam-report:] => * -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP* 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam* 0.0 NSL_RCVD_FROM_USER Received from User* 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider* (sheikh101[at]gmail.com)* 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is* CUSTOM_MED* 1.2 MISSING_HEADERS Missing To: header* 0.0 HTML_MESSAGE BODY: HTML included in message* 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts* 0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format* 0.1 MISSING_MID Missing Message-Id: header* 0.0 MALFORMED_FREEMAIL Bad headers on message from free email service* 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority* 1.9 REPLYTO_WITHOUT_TO_CC No description available.* 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool* 1.4 FSL_NEW_HELO_USER Spam's using Helo and User* 0.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait* 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only* 0.0 FROM_MISSP_USER From misspaced, from "User"* 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different* freemails* 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems* 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list* 0.0 FROM_MISSPACED From: missing whitespace* 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable* 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook* 2.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider [reply-to:] => [from:] => "Executive Director, Sheikh Fahad Bin Hamad Bin Jabor Al Thani" [subject:] => Project Funding [date:] => Thu, 1 Oct 2015 00:45:27 -0700 [mime-version:] => 1.0 [content-type:] => text/html;charset="Windows-1251" [content-transfer-encoding:] => 7bit [x-priority:] => 3 [x-msmail-priority:] => Normal [x-mailer:] => Microsoft Outlook Express 6.00.2600.0000 [x-mimeole:] => Produced By Microsoft MimeOLE V6.00.2600.0000 [message-id:] => <20151001082956.3887A8E2C7F@hemues.com> )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.