Scam TagCloud

Scam Email Headers

This a (redacted) view of the raw email headers of this scam email. Personally Identifiable Information (PII) has been suppressed, but can be supplied as received to appropriate investigating or law enforcement agencies on request.

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => scam@scamdex.com [delivery-date:] => Sun, 02 Feb 2014 04:34:49 -0800 [received:] => Array ( [0] => from mx.casafuentes.com.ar ([201.216.229.18]:19131 helo=mail.casafuentes.com.ar)by lester.newsblaze.com with esmtp (Exim 4.80.1)(envelope-from )id 1W9wG7-0004Yr-FXfor scam@scamdex.com; Sun, 02 Feb 2014 04:34:48 -0800 [1] => from mog-server ([173.162.105.182] RDNS failed) by mail.casafuentes.com.ar with Microsoft SMTPSVC(6.0.3790.4675); Sun, 2 Feb 2014 09:31:43 -0300 ) [from:] => "Peng Shek Mo" [subject:] => Associate Request! [to:] => scam@scamdex.com [content-type:] => multipart/alternative; boundary="P=_humnTf89YCrTNEPLzYvomSHSf6Tp0EQ0" [mime-version:] => 1.0 [reply-to:] => peng.shekmo@aol.com [date:] => Sun, 2 Feb 2014 07:34:31 -0500 [message-id:] => [x-originalarrivaltime:] => 02 Feb 2014 12:31:43.0572 (UTC) FILETIME=[BAFDA940:01CF2012] [x-spam-status:] => No, score=0.5 [x-spam-score:] => 5 [x-spam-bar:] => / [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seeroot\@localhost for details.Content preview: - This mail is in HTML. Some elements may be ommited in plain text. - Hello: I am Peng Shek Mo an underwriter with Pheim Unit Capital Trusts Bhd Malaysia Have contacted you with the hope of getting you to act as trustee in clearance of forty million USD fixed income deposit and to subsequently invest the funds. You earn commission for acting as my trustee in clearance of the fixed income deposit. [...] Content analysis details: (0.5 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 MILLION_USD BODY: Talks about millions of dollars-0.0 SPF_PASS SPF: sender matches SPF record-0.4 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.4 MONEY_FORM_SHORT Lots of money if you fill out a short form [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.