Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => paypal@o7e.net [delivery-date:] => Tue, 08 Jan 2013 05:50:07 -0800 [received:] => Array ( [0] => from [61.219.181.175] (port=57585 helo=ns.sdec.com.tw)by lester.newsblaze.com with esmtp (Exim 4.80)(envelope-from )id 1TsZZ8-00021c-7lfor paypal@o7e.net; Tue, 08 Jan 2013 05:50:06 -0800 [1] => from BM-HOST.sunyit.edu (unknown [149.15.161.137])(Authenticated sender: root@mail.sdec.com.tw)by ns.sdec.com.tw (Postfix) with ESMTP id F349D159017;Tue, 8 Jan 2013 21:27:39 +0800 (CST) ) [content-type:] => text/plain; charset="iso-8859-1" [mime-version:] => 1.0 [content-transfer-encoding:] => quoted-printable [content-description:] => Mail message body [subject:] => Re:Partnership Request [to:] => Recipients [from:] => "Mr. Nelson Fundi" [date:] => Tue, 08 Jan 2013 08:30:29 -0500 [reply-to:] => nelfundi101@gmail.com [message-id:] => <20130108132739.F349D159017@ns.sdec.com.tw> [x-spam-status:] => No, score=3.4 [x-spam-score:] => 34 [x-spam-bar:] => +++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Hello, We are Independent Financial Planning organization with over 40 years combined experience. We have a client that wishes to invest her finance in your country. Can You be of assistance as a foreign Partner? We will furnish you with details upon your response. According to her, this project will demand understanding and co-operation from you due to her recent persecution as a former top Government official. Mr. Nelson Fundi For:Fundi & Co Financial Advisors [...] Content analysis details: (3.4 points, 4.0 required) pts rule name description---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (nelfundi101[at]mail.com) 0.9 SPF_FAIL SPF: sender does not match SPF record (fail)[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=nelfundi101%40mail.com;ip=61.219.181.175;r=lester.newsblaze.com] 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (nelfundi101[at]mail.com) 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF failed 0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.