Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Tue, 31 Jan 2012 08:27:20 -0800 [received:] => Array ( [0] => from snt0-omc3-s36.snt0.hotmail.com ([65.55.90.175])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RsGYB-0002tj-Ixfor scam@scamdex.com; Tue, 31 Jan 2012 08:27:20 -0800 [1] => from SNT139-W25 ([65.55.90.135]) by snt0-omc3-s36.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 31 Jan 2012 08:27:17 -0800 ) [message-id:] => [content-type:] => multipart/alternative;boundary="_a5214c2b-9b30-427b-9eaa-037cda11c042_" [x-originating-ip:] => [65.49.14.72] [reply-to:] => [from:] => Pak Whang [subject:] => Memo: Portfolio Investment [date:] => Tue, 31 Jan 2012 16:27:17 +0000 [importance:] => Normal [mime-version:] => 1.0 [bcc:] => [x-originalarrivaltime:] => 31 Jan 2012 16:27:17.0844 (UTC) FILETIME=[32E1A940:01CCE035] [x-spam-subject:] => ***SPAM*** Memo: Portfolio Investment [x-spam-status:] => Yes, score=4.4 [x-spam-score:] => 44 [x-spam-bar:] => ++++ [x-spam-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: -- Dear friend,I am the foreign operations director of theBank of Korea.My name is Pak Whang. I have a sensitive and private offerfromthe top executive to seek your partnership in re-profilingsome offshore investmentfunds worth 11.5M U.S.D (Eleven Millionfive hundred thousand United StatesDollars) I am constrained howeverto withhold most of the details for now.This is a legitimate transaction.If we agree on the terms you will be given15% of the total funds, Ifyou are interested please write back via emailProviding me your personaldetails and phone number for further directives.Ifyou are interested and willing to render your assistance please respond.Ilook forward to your response.Best regards,Pak Whang [...] Content analysis details: (4.4 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------0.6 HK_RANDOM_ENVFROM Envelope sender username looks random0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(fbgvdf5[at]msn.com)-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, notrust[65.55.90.175 listed in list.dnswl.org]-0.0 SPF_PASS SPF: sender matches SPF record0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (fbgvdf5[at]msn.com)1.2 MISSING_HEADERS Missing To: header-3.0 DEAR_FRIEND BODY: Dear Friend? That's not very dear!0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain differentfreemails0.0 T_MONEY_PERCENT X% of a lot of money for you2.4 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => YES )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.