Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submissions@scamdex.com [delivery-date:] => Tue, 06 Dec 2011 06:14:07 -0800 [received:] => Array ( [0] => from mail-qw0-f48.google.com ([209.85.216.48])by lester.newsblaze.com with esmtps (TLSv1:RC4-SHA:128)(Exim 4.69)(envelope-from )id 1RXvmU-0001Mq-NCfor submissions@scamdex.com; Tue, 06 Dec 2011 06:14:06 -0800 [1] => by qao25 with SMTP id 25so3087685qao.7 for ; Tue, 06 Dec 2011 06:14:00 -0800 (PST) [2] => by 10.224.210.130 with SMTP id gk2mr12223602qab.23.1323180838834;Tue, 06 Dec 2011 06:13:58 -0800 (PST) [3] => by 10.229.95.147 with HTTP; Tue, 6 Dec 2011 06:13:58 -0800 (PST) ) [dkim-signature:] => v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=4ftHhCmRRuXvahRDYcAmwkI00arN1JLMdYoZS5Kthd4=; b=jH3h8JHh1Av8GPU9eIPDm2iRig1FhVC/3MXmJvVXN132C6IrNx2lIWdL31aHZEvE8D /vNAM54Vaa/WwG8BkUU9PfKbvMsxhPccu9a0DQ9Zuja0dUC4HQHppuO4u6y8lu3A4zi+ g2bfvj6qNzn1NCSEcLWU7buXxaGyhTn5ou3pQ= [mime-version:] => 1.0 [in-reply-to:] => [references:] => [date:] => Tue, 6 Dec 2011 06:13:58 -0800 [message-id:] => [subject:] => AFRICA UNION (AU) NOTIFICATION LETTER FOR COMPENSATION FROM THEHEADQUARTERS ADDIS ABABA. [from:] => RED DOT AWARD [to:] => undisclosed-recipients:; [bcc:] => submissions@scamdex.com [content-type:] => multipart/alternative; boundary=20cf300fad4ddf5e6304b36d0b73 [x-spam-status:] => No, score=-9.1 [x-spam-score:] => -90 [x-spam-bar:] => --------- [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: * Addis Ababa, 5 Decemeber 2011* * AFRICA UNION (AU) NOTIFICATIONLETTER FOR COMPENSATION FROM THE HEADQUARTERS ADDIS ABABA.* *Attention:Beneficiary**.* * * *This is to officially inform you that after a three days conferencemeeting of the Africa Leaders with representatives drown from various worksof live the IMF, World Bank, United Nation High Commission and Presidentof various country of the continent.* * * *That you are among the 40 foreignbeneficiaries who are to be compensated with the sum of $3 million unitedstate dollars.* * * *Selection was made at random from list of foreign beneficiariessubmitted by the various commissions, united nation and the Africa union.** * *Payment centers for the compensation are sheared among four countriesof the continent there are South Africa, Ghana, Bennie republic, and Egypt,FranceU.k and Malaysia. Below is you information for you to claim you fund (ballotNo AU02635), (Winning No XF44527)provide** the following details [...] Content analysis details: (-9.1 points, 4.0 required)pts rule name description---- ---------------------- ---------------------------------------------------5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at http://www.dnswl.org/, hightrust[209.85.216.48 listed in list.dnswl.org]-3.0 MILLION_USD BODY: Talks about millions of dollars0.3 HK_LOTTO_NAME HK_LOTTO_NAME0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider(reddotdeptng01[at]gmail.com)-2.0 SUBJ_ALL_CAPS Subject is all capitals-0.0 SPF_PASS SPF: sender matches SPF record0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends indigit (reddotdeptng01[at]gmail.com)0.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:0.0 HTML_MESSAGE BODY: HTML included in message0.0 LOTS_OF_MONEY Huge... sums of money0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.