Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => mc_mxw@o7e.net [delivery-date:] => Fri, 13 Jul 2012 00:09:45 -0700 [received:] => Array ( [0] => from c2mds.mailcentro.com ([208.67.179.143]:59581)by lester.newsblaze.com with esmtp (Exim 4.77)(envelope-from )id 1Spa0X-0002no-1Mfor mc_mxw@o7e.net; Fri, 13 Jul 2012 00:09:45 -0700 [1] => from rediffmail.com (f4mail-235-209.rediffmail.com [202.137.235.209])by c2mds.mailcentro.com (8.13.8(MC-AXH/MJD-001)/8.13.8.axh-mjd) with SMTP id q6D79dsL000538for ; Fri, 13 Jul 2012 00:09:40 -0700 [2] => (qmail 8842 invoked by uid 0); 13 Jul 2012 07:09:29 -0000 [3] => from unknown 49.138.181.17 by rediffmail.com via HTTP; 13 Jul 2012 07:09:28 -0000 ) [x-mc-sender:] => ukwdclmbty182011@rediffmail.com [x-mc-ipaddr:] => f4mail-235-209.rediffmail.com [202.137.235.209] [comment:] => DomainKeys? See http://antispam.yahoo.com/domainkeys [domainkey-signature:] => a=rsa-sha1; q=dns; c=nofws; s=redf; d=rediffmail.com; b=dSHKj3WN0Br2d3oEHr8ungYaVB84FIGIaXFyebntx7NLmtKuwTbgtxxFEC16XhiGRZ9bdPuIBsjaS56l17Eb+W9fBkWvmEO5zGZqoITec4psx8Hg6M3mbiPtqMFIqEyz13LK/QGq5alAwVJXtZF0QaX9nKiaibJ+rcjlxi3yu2g= ; [x-m-msg:] => asd54ad564ad7aa6sd5as6d5; a6da7d6asas6dasd77; 5dad65ad5sd; [x-ctch-spam:] => Suspect [x-ctch-vod:] => Unknown [x-ctch-flags:] => : 0 [x-ctch-refid:] => str=0001.0A150204.4FFFC9A8.03BD,ss=2,re=1.599,fgs=0 [x-redf-osen:] => ukwdclmbty182011@rediffmail.com [date:] => 13 Jul 2012 07:09:28 -0000 [message-id:] => <20120713070928.8784.qmail@f4mail-235-209.rediffmail.com> [mime-version:] => 1.0 [reply-to:] => bttelecomlondonprizeuk@live.co.uk [to:] => "bttelecomlondonprizeuk@live.co.uk" [sender:] => ukwdclmbty182011@rediffmail.com [subject:] => =?utf-8?B?Q09OR1JBVFVMQVRJT04hISEgWU9VUiBFLU1BSUwgSUQgSEFWRSBXT04gMzUwLDAwMEdCUE9VTkRT?= [from:] => bttelecomlondonprizeuk@live.co.uk [content-type:] => multipart/alternative;boundary="=_8a791edcec32e1e755bfaa1dfc62333e" [x-mc-filter:] => 7.6.9 [x-mc-filter-antivirus:] => Scanned for virus - Status 0 [x-mc-deliveryid:] => 144 [x-mc-ctfilter:] => CT RefID = str=0001.0A010208.4FFFC9B8.005C,ss=2,pt=X-NDR-001_57205,fgs=0 - Class:Suspect - Virus Threat:Unknown - Phishing Threat:Low [x-mc-filterskip:] => 0 [x-mc-spamscore:] => 20 T 49 [x-spam-status:] => No, score=2.6 [x-spam-score:] => 26 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: BRITISH TELECOMMUNICATIONS PLC (BT-UK)81 NEW GATE STREET LONDON EC1A 7AJ WINNING NOTIFICATION FROM BRITISH TELECOMMUNICATIONS PLC LONDON ATTN: DEAR WINNER WE THE (BT-UK) STAFF MEMBERS IS PROUD TO CONGRATULATE YOU FOR BEING ONE AMONG THE(7 EMAIL) SUCCESS DIFFERENT PEOPLES FROM DIFFERENT COUNTRIES [...] Content analysis details: (2.6 points, 4.0 required) pts rule name description---- ---------------------- ---------------------------------------------------3.0 DEAR_WINNER BODY: DEAR_WINNER 0.0 LOTTO_AGENT BODY: Claims Agent 0.6 HK_RANDOM_ENVFROM Envelope sender username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ukwdclmbty182011[at]rediffmail.com) 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)-2.0 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (ukwdclmbty182011[at]rediffmail.com) 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 LOTS_OF_MONEY Huge... sums of money-1.0 UPPERCASE_75_100 message body is 75-100% uppercase 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.3 LOTTERY_PH_004470 LOTTERY_PH_004470 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 0.0 T_REMOTE_IMAGE Message contains an external image 0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) 0.0 FILL_THIS_FORM Fill in a form with personal information 3.5 FILL_THIS_FORM_LONG Fill in a form with personal information 0.0 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money 0.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form 0.0 MONEY_FORM Lots of money if you fill out a form [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.