Scam TagCloud

Scam Email Headers

EEEEEstdClass Object ( [return-path:] => [envelope-to:] => submitted@scamdex.com [delivery-date:] => Sat, 12 Nov 2011 11:28:40 -0800 [received:] => Array ( [0] => from letter.comui.edu.ng ([41.184.122.29])by lester.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1RPJFn-0007Za-JRfor submitted@scamdex.com; Sat, 12 Nov 2011 11:28:40 -0800 [1] => from localhost (letter1.comui.edu.ng [127.0.0.1])by letter.comui.edu.ng (Postfix) with ESMTP id 3A291617922;Sat, 12 Nov 2011 18:12:23 +0100 (WAT) [2] => from letter.comui.edu.ng ([127.0.0.1])by localhost (letter.comui.edu.ng [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id nn+erRleVcg6; Sat, 12 Nov 2011 18:12:22 +0100 (WAT) [3] => from localhost (letter1.comui.edu.ng [127.0.0.1])by letter.comui.edu.ng (Postfix) with ESMTP id C1C36617911;Sat, 12 Nov 2011 18:08:53 +0100 (WAT) [4] => from 182.63.102.166 ([182.63.102.166]) by webmail.comui.edu.ng(Horde Framework) with HTTP; Sat, 12 Nov 2011 18:08:52 +0100 ) [x-virus-scanned:] => amavisd-new at comui.edu.ng [message-id:] => <20111112180852.19876qzztmham38c@webmail.comui.edu.ng> [date:] => Sat, 12 Nov 2011 18:08:52 +0100 [from:] => "Mrs.Yvonne Zwanette" [reply-to:] => dutchprom1@blumail.org [to:] => undisclosed-recipients:; [subject:] => winner [mime-version:] => 1.0 [content-type:] => text/plain;charset=ISO-8859-1;DelSp="Yes";format="flowed" [content-disposition:] => inline [content-transfer-encoding:] => 7bit [user-agent:] => Internet Messaging Program (IMP) H3 (4.3.4) [x-spam-status:] => No, score=2.3 [x-spam-score:] => 23 [x-spam-bar:] => ++ [x-ham-report:] => Spam detection software, running on the system "lester.newsblaze.com", hasidentified this incoming email as possible spam. The original messagehas been attached to this so you can view it (if it isn't spam) or labelsimilar future email. If you have any questions, seethe administrator of that system for details.Content preview: Ref No.17/324/113 {Batch No.448/1803734} {Ticket/Series No.RJ975489}Amount won:$1,000,000.00 USD Attn:winner Following the results of our periodicAward/Grant draws concluded this month, we are pleased to inform you thatyour email address emerged as one of the lucky winners in the 2011 onlinecyber lotto. You have been approved of a lump sum of $1,000,000.00 USD withcoupon/number Ref No.17/324/113. We strongly recommend your attention tothis message by contacting certified accredited claims agent and verificationdepartment with claim information and procedure of claim below. Mr.NicholasMaarten Email:dutchprom1@blumail.org Tel: +31-644-021-091 Fax: +31-847-375-060You are required to fulfill as follows; 1. Your full name and address 2.Your telephone number 3. Winning reference number 4. Occupation Best Regards,Mrs.Yvonne Zwanette Lottery Coordinator [...] Content analysis details: (2.3 points, 4.0 required)pts rule name description---- ---------------------- --------------------------------------------------2.9 LOTTO_AGENT BODY: Claims Agent-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain-2.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)0.0 LOTS_OF_MONEY Huge... sums of money0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS0.0 MONEY_LOTTERY Lots of money from a lottery0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information0.0 FORM_FRAUD_3 Fill a form and several fraud phrases [x-spam-flag:] => NO )

Community Action - SPAM/non-Scam Report

Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.

Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not be in our database.
Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or SPAM, via unpublished 'Honeypot' email addresses.